search for: setting_up_pam_authentication

...ssh with their AD credentials. Our DC1 and DC2 are running on Debian 64bit using Samba 4.1.12/Sernet. I'm kinda confused, what exactly I need therefore. Do I need to setup a PAM_authentication as explained on that tutorial here? (https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#Setting_up_PAM_authentication) I tried that. I didn't create the symlink as shown on the tutorial (ln -s /usr/local/samba/lib/security/pam_winbind.so /lib64/security/), because I realized that I have a file called "root at membersrv1:/lib/x86_64-linux-gnu/security/pam_winbind.so" which I think comes from the Serne...

...ur users to actually log into > it, but it is definitely needed on a 'domain member' (or as you call > it, a 'member server') > > There is a mention of setting up PAM on the page you referred to: > > https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#Setting_up_PAM_authentication > > > Though it is a bit unclear that it is required to make 'getent' work, > I will not update this page because there is a very good chance it > will get a massive overhaul soon, but I will look into whether any > other Pam info specifies that it is needed on a domai...

On 27.10.2015 13:54, Rowland Penny wrote: > [...] >> Yes, I meant the administrator. I did your suggested change on my >> member server and restarted it. 'getent passwd administrator' is >> still not returning anything, though. Or is that the wrong way to >> check if it worked? >> > > If you ran the same command on the DC, it will return something,

...but it is definitely needed on a 'domain member' (or as you >>> call it, a 'member server') >>> >>> There is a mention of setting up PAM on the page you referred to: >>> >>> https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#Setting_up_PAM_authentication >>> >>> >>> Though it is a bit unclear that it is required to make 'getent' >>> work, I will not update this page because there is a very good >>> chance it will get a massive overhaul soon, but I will look into >>> whether any other...

...og into it, but it is definitely needed on a 'domain member' (or as you call it, a 'member server') >>> >>> There is a mention of setting up PAM on the page you referred to: >>> >>> https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#Setting_up_PAM_authentication >>> >>> Though it is a bit unclear that it is required to make 'getent' work, I will not update this page because there is a very good chance it will get a massive overhaul soon, but I will look into whether any other Pam info specifies that it is needed on a domain memb...

...n a DC unless you require your users to actually log into it, but it is definitely needed on a 'domain member' (or as you call it, a 'member server') There is a mention of setting up PAM on the page you referred to: https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#Setting_up_PAM_authentication Though it is a bit unclear that it is required to make 'getent' work, I will not update this page because there is a very good chance it will get a massive overhaul soon, but I will look into whether any other Pam info specifies that it is needed on a domain member. Rowland >> If...

On 29.10.2015 17:54, Rowland Penny wrote: > On 29/10/15 16:21, Viktor Trojanovic wrote: >> >> >> On 27.10.2015 16:16, Rowland Penny wrote: >>> On 27/10/15 14:58, Viktor Trojanovic wrote: >>>> >>>> >>>> On 27.10.2015 13:54, Rowland Penny wrote: >>>>> [...] >>>>>> Yes, I meant the administrator. I did

...>> into it, but it is definitely needed on a 'domain member' (or as you >> call it, a 'member server') >> >> There is a mention of setting up PAM on the page you referred to: >> >> https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#Setting_up_PAM_authentication >> >> >> Though it is a bit unclear that it is required to make 'getent' work, >> I will not update this page because there is a very good chance it >> will get a massive overhaul soon, but I will look into whether any >> other Pam info specifies that...

...t it is definitely needed on a 'domain member' (or as you call it, a 'member server') >>>> >>>> There is a mention of setting up PAM on the page you referred to: >>>> >>>> https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server#Setting_up_PAM_authentication >>>> >>>> Though it is a bit unclear that it is required to make 'getent' work, I will not update this page because there is a very good chance it will get a massive overhaul soon, but I will look into whether any other Pam info specifies that it is needed on a domai...

I dont get al this hassle... ( again ) Sernet works fine, all my server (DCs/member) are useing sernet samba. Only not my proxy servers. these backported samba.. ( because of a modified squid im using) You just need to setup as the wiki says. nss/winbind does work, yes, there is 1 missing file, just created it. ( and this is not needed on a DC ! ) winbind does work, but on DC winbind a bit