similar to: ldap without bind

I've configured dovecot to authenticate against a Fedora Directory Server. The mail server on which dovecot is installed has the nss_ldap and pam_ldap packages installed, and /etc/dovecot.conf has the following two lines: auth_userdb = ldap /etc/dovecot-ldap.conf auth_passdb = pam In other words, I want dovecot to use LDAP to access the user database, but PAM for authentication. This part is

Has there been any thought given to implementing authentication via an LDAP 'bind', rather than by a password lookup and hash comparison? doing a bind would obviate the need to make the passwords readable by the dovecot process and would lend itself to improved security. Phillip Needham Principal, iBright Consulting phillip at ibright.net 614-783-3301

Running two Fedora 6 systems with all the latest updates as of a week ago. One system is the mail server (sendmail, dovecot), the other is the master (open)LDAP server with the mail server running a slave LDAP instance. The problem I'm having is the client pop3 users are frequently being told their passwords aren't correct by their email clients (Outlook, Eudora). They try again, a

hello, can i authenticate samba to pam and then ldap? thank you. --David Weise OIT Rider University "The real race is not on the hot, paved road, the torturous off-road course or the smooth-surface velodrome. It is in the electrochemical pathways of your mind."--Alexi Grewal

I was wondering what the best practice is for setting up several SAMBA servers in a SAMBA domain all on the same LAN. Here is what I am looking at PDC: LDAP, Samba, nss_ldap, pam_ldap Member1: Samba, nss_ldap, pam_ldap Member2: Samba, nss_ldap, pam_ldap Member . . . . Should I set the member servers up with: Security = domain and join the severs with net rpc join or, whould it be better to set

Hello, I am new to Dovecot and trying to setup on my Fedora Core 1 mail servers (actually migrating from uw to dovecot ;-) ). In my setup I use pam to authenticate virtual users. All the usernames include @domainname in their usernames like 'jane at somevhost.com'. Now path to user's home and INBOX includes /home/vhosts/<domainname>/home/<username>. I have added following

Hi, I have searched all over and I am at a deep loss. I have Openldap setup and it works fine holding users and is searchable, etc. I have samba setup to auth via LDAP and it works. I can NOT for the life of me get system password stuff to work. The strange thing is, that my "testuser" can telnet to the computer and login and can login with samba fine. I can not ssh into the

Hi, I'm using Samba 2.2.4 with LDAP support (OpenLDAP 2.0.23), and with pam_ldap included in the rpm nss_ldap 1.86 from Redhat (I'm on Linux Redhat 7.2). All these things are working well (I use the same object SambaAcount under PosixAccount in order to authenticate all these things), but a problem appears when I'm trying to list all the accounts and groups from my Win2000

In an effort to install cfengine (which requires 0.96b + of ssl), we've had to recompile all sorts of related packages on our RedHat 6.2 boxes. In addition, we're trying to implement an LDAP directory. Basically the source RPMS for RedHat 7.3 were installed and compiled on a 6.2 box to get this all to work. We're running into the following problem on the 6.2 boxes after having

I am trying to configure NIS, PAM, & LDAP on a CentOS 6.2 host. I've previously installed a similar configuration on RHEL4, but CentOS now uses nss-pam-ldapd and nslcd instead of nss_ldap, so the configurations are a little different. Currently, local users and groups are showing up but not LDAP users. When I do a /getent passwd/ and/getent group/ I don't get LDAP users. When I do

Hello, I'm trying to configure Samba to work with SuSE 9.1. I followed The Linux Samba-OpenLDAP Howto (Revision: 1.6 ) from http://samba.idealx.org/smbldap-howto.en.html - but I'm stuck - in SuSE there is no /etc/pam.d/system-auth. Should I just add this file (I doubt it), or put these values into another files (which ones)? auth required /lib/security/pam_env.so auth

Hello, I am having a small issue with LDAP, and I hope someone here might be able to provide a few tips. I am unable to authenticate as user 'testuser' on server 'storage' and the following errors appear in /var/log/messages on server 'storage' Sep 19 16:56:17 storage sshd(pam_unix)[3124]: check pass; user unknown Sep 19 16:56:17 storage sshd(pam_unix)[3124]:

Rowland Penny via samba wrote 2018-09-06 14:50: > On Thu, 06 Sep 2018 12:47:02 +0700 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > >> Rowland Penny via samba писал 2018-09-05 16:10: >> > However, are you sure you cannot use kerberos ? >> > What are your existing services ? >> >> to name most important ones: >>

Rowland Penny via samba писал 2018-09-05 16:10: > On Wed, 05 Sep 2018 15:46:04 +0700 > Konstantin Boyandin via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> One of Samba 3 -> Samba 4 migration task I am solving is changing >> authentication against new Samba 4 AD domain. >> >> Existing services use LDAP directory of Samba 3 to

Hi, I go trough the SaMBa guide Making happy users secondly. I configure Debian Lenny on XEN. I have problem with PAM. When i try to change a user's password with smbldap-passwd it runs without error, but when i try to log in I get the "Login incorrect" message. When I try to change a user's password with passwd I get the "Authentication service cannot retrieve

hi, first of all, thanks to all the samba team for your great work and documentation. Well done! I have followed the 'By Example' guide, everything is working fine, except one thing. As indicated on chapter 5, point 14 of Configuration of smbldap-tools, when I try: # getent passwd | grep root I have 2 results, both id 0 root:x:0:0:root:/root:/bin/bash root:x:0:512:Netbios Domain

Hi all, I'm back with more data on a problem Iposted about one month ago. To sum it up, my Solaris 10 box has local accounts as well as LDAP ones via PAM. They work well as-is, with no special configuratio, for WU IMAP (using the ?other? entry in pam.conf. When I tried a self-built Dovecot, all accounts were authenticated without problem. Then I tried the Blastwave version, same release,

I would like to have sync'd Unix and Samba passwords. My Unix passwords are stored in OpenLDAP for uniformity across machines and services. I have some problems with the standard solutions to this problem though: * if I have Samba authenticate from OpenLDAP directly (using the smbPassword attribute), then I get sync'ing problems when the password is changed via normal Unix means. We

Hi, I have some Ubuntu LTS servers running openssh server authenticating to external openldap. I installed a new Ubuntu LTS server with Samba4 to create a domain and is working very well. I managed to make a pfsense firewall authenticate users in this Samba4 ldap. How to make openssh in Ubuntu authenticate users in Samba4 ldap?

Hi When I enable a box to do authentication using LDAP it breaks cron for users like jboss. I get the following in /var/log/secure Sep 14 15:25:01 exoipatest01 crond[7214]: pam_access(crond:account): access denied for user `jboss' from `cron' I have the following in /etc/ldap.conf nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,tomcat,radiusd,news,mailman,nscd,jboss