similar to: swat and pam.d

The winbind now works...my getent passwd & groups returns the domain users/groups What should be the next step? my clients (Win2K & Win9x) are still prompting for a password and I cannot login to my linux box using DOMAIN*domainuser. Must I add each domain user as a user on the linux box? Regards Winston Nimchan -----Original Message----- From: Sean Trammell

Hello, I am have some interesting problems with the pam_winbind portion of samba 3.1. wbinfo -u and getent passwd works but when I login I get the following messages in /var/log/messages. Jan 5 11:09:36 hermes pam_winbind[9014]: write to socket failed! Jan 5 11:09:36 hermes pam_winbind[9014]: internal module error (retval = 3, user = `CSQ+shane' Jan 5 11:09:36 hermes PAM_pwdb[9014]: check

Hi all, I was wondering if someone could lend a little assistance. I recently setup SAMBA/Winbind to allow users to login to a Redhat 8 box using their Windows NT Domain credentials. All is working well in that regard. The issue I am having is getting regular UNIX based users to be able to login. The following is my PAM configuration. For example, if I try to login as root, it does not work.

Hi, i have a minor Problen with Samba 1.9.16p11 under RedHat 4.2 and samba 1.9.18 under RedHat 5.0. Getting the shares from NT or w95 are ok but in the messages log file i got tons of these messages: Feb 2 06:49:54 bell PAM_pwdb[3520]: get passwd; pwdb: structure is no longer valid Feb 2 06:49:59 bell last message repeated 93 times Feb 2 06:49:59 bell PAM_pwdb[3520]: 1 authentication

When I try to rejoin the domain I get the following: ------------------------------------------------------------------------ ---------- INFO: Debug class all level = 1 (pid 4788 from pid 4788) WARNING: The "alternate permissions"option is deprecated cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT cli_nt_setup_creds: auth2 challenge failed modify_trust_password: unable to setup the

This might have been covered before and I've missed it. If so, sorry in advance. The file sshd.pam.generic didn't work for me on Linux RH6, I guess it's a Solaris file. Instead I copied the file /etc/pam.d/rlogin to /etc/pam.d/sshd . I wonder if this isn't a good way to go about things anyway, have an install target that does just that? Perhaps the rsh file is more appropriate

Hello, Until yesterday (7 nov 03) I had a mostly working 2.27 samba running on my redhat 9 box that I configured via SWAT. Now I can not get back into SWAT & I also (in a useless attempt to make it work) upgraded to samba 3.0 I get the following when trying to start SWAT: An error occured while loading http://matrix1:901/: Could not connect to host matrix1 (port 901) here

I tried upgrading from samba 1.9 to 2.0 on two seperate RedHat servers, and after both upgrades nobody could get authenticated. The windows boxes had the registry hacks to turn off encrypted passwords, and I'm authenticating out of passwd+shadow. I found many similiar posts on DejaNews and in the samba mailing list archives. I broke out strace and found the problem. Samba 2.0 tries to

Hello, I'm trying to get a debian sid box to authenticate against an NT4 domain. I've followed the instructions in the winbindd man page and I think I'm on the right track. However, I'm having problems with PAM. As the winbindd man page suggests, I edited the /etc/nsswitch.conf and added some winbindd related stuff to my smb.conf file. I also edited the /etc/pam.d/* files.

Hello, I have gone through the howto provided but I am not yet able to logon to my linux box using NT4 domain accounts. I can however authenticate to restricted shares and I can obtain groups and users via "getent" and "wbinfo -u". All I really need now is a working /etc/pam.d/login. I've tried examples from the howto as with others from the mailing list but I can not

I just spent some time trying to figure out how to get OpenSSH to work correctly with NIS and PAM. It seems to work fine, apart from one minor worry I still have (see below). Feedback about grave security risks are welcome :) This is using RedHat 6.1 with updates and the OpenSSH 1.2.2p1-1 RPM's on the NIS server as well as the client. In short, my configuration is: /etc/nssswitch.conf:

Hi there I'm running a samba cvs server in a windows domain with a W2K PDC. I want to authenticate windows users through ssh. I'm able to login with a windows user to the server on the server himself but when I want to login via a windows client It doesn't work. The connection is refused. Could it be something mis configured in my ssh pam module. This is my pam ssh module PAM

Hi, my etc/pam.d/login file is given at the end. i am using winbind and single sign on is working now. on the fly directory creation also works. when i check the /var/log/messages i have this error in there 1.Jun 23 05:40:46 niit158VM pam_winbind[1696]: user 'linwin/zubair'granted acces 2.Jun 23 05:40:46 niit158VM pam_winbind[1696]: user 'linwin/zubair' granted acces

Howdy: Can anybody explain why /var/log/messages is filled with the following? Aug 18 09:37:53 rama PAM_pwdb[28483]: 1 authentication failure; (uid=0) -> arnold for samba service Aug 18 09:38:25 rama PAM_pwdb[28494]: (login) session opened for user arnold by arnold(uid=0) The first one happens every time I browse to rama from win95 Explorer; the second one is from a telnet login

Hello, I am trying to get winbind up and working for logins. Here is my error message from /var/messages: Aug 20 20:59:51 aslan pam_winbind[32713]: user 'lisa.snow' granted acces Aug 20 20:59:51 aslan pam_winbind[32713]: user 'lisa.snow' granted acces Aug 20 20:59:51 aslan login[32713]: initgroups: Operation not permitted Here is my pam.d/login file: #%PAM-1.0 # orginal before

Hi, I have recently upgraded from OpenSSH-3.5 to OpenSSH-3.8 on my Red Hat 6.2 servers. I use radius (pam_radius_auth) for ssh authentication. Since the upgrade ssh1 (putty 0.52) logins are failing. I've come to the conclusion that pam is skipping the radius section of the config file and is falling back to standard unix authentication. Is there any way of making ssh1 work with radius on

Hi i have a question concerning the acl supoprt of samba, i have a mandrake9 (2.4.19) with a xfs partition installed locally i can get and set acls on the xfs parition snip [root@aclsmb data]# getfacl samba/ # file: samba # owner: root # group: root user::rwx group::r-x other::r-x [root@aclsmb data]# setfacl -m u:smalchow:rwx samba/ [root@aclsmb data]# getfacl samba/ # file: samba # owner:

Hi, I have an auth module for PAM that I wrote a few years ago called pam_vsd.so. The idea is that a user must have a certain privilege before they can successfully authenticate. Without the privilege the PAM module will return PAM_PERM_DENIED. However I find that in OpenSSH 3.7.1p2, I can easily subvert this check simply by hitting return 3 times on connection i.e. [nick at localhost

Hello, I am running a RHEL5 server as a member in a NT4 domain. I am not using an AD. my nsswitch.conf and /etc/pam.d/{login,authconfig,samba} are configured accordingly. (auth-config in RHEL4 is now renamed to authconfig on RHEL5). My problem is that wbinfo -u & wbinfo -g work fine, but getent passwd only returns local linux users; Also smbclient -L localhost -Uusers will only work

I am appending some documentation by my colleague Bill Eldridge that was actually written for our dial-up service, but should work for you purposes as well. A couple notes. 1.)The user must exist in /etc/passwd on the Samba machine or login to the Samba box will fail. 2.)In the example, we don't set up home directories for the users, we are using it for dial in and they usually want to