similar to: SAMBA + LDAP Single Signon Achieved

I would like to have sync'd Unix and Samba passwords. My Unix passwords are stored in OpenLDAP for uniformity across machines and services. I have some problems with the standard solutions to this problem though: * if I have Samba authenticate from OpenLDAP directly (using the smbPassword attribute), then I get sync'ing problems when the password is changed via normal Unix means. We

Hello all, I currently have the following setup working nicely: A Samba PDC, with LDAP-SAM, syncs passwords between LDAP and Samba (and /etc/shadow when appropriate) correctly - either when changing them through Samba (samba has PAM support enabled and working) or through normal Unix mechanisms (/usr/bin/passwd, using pam_smbpass, pam_ldap, etc.). Several other Linux machines, running Samba,

hi, i've setup a LDAP server with account information, and compiled samba with ldap support. everything works great, except for the password changes i still have to run two seprate commands ( passwd, smbpasswd ) to change a users password. i've tried to put the pam_smbpasswd.so module into system-auth, but that does work? any pointers? thanks adriaan putter

[I'm subscribed, but with mail deliverying turned off. I will read the thread on web archive, but please CC me... i'm subscribed to the italian samba list, but there's no answer there...] I manage some samba domain (samba3 as in debian stable), using LDAP as backend and smbldap-tools. The domains born as windows-only, and they are still windows-prevalent, but i'm inserting here

Is there a way to enable user to change password on first signon?

On Mon, 2017-02-13 at 10:00 +1100, Tom Robinson via samba wrote: > On 12/02/17 03:13, Rowland Penny via samba wrote: > > On Fri, 10 Feb 2017 12:34:23 +1100 > > Tom Robinson via samba <samba at lists.samba.org> wrote: > > > > > I've grabbed samba 4.5.4 and customised an existing rpm spec > > > file. > > > Still some issues there. > >

On Fri, 10 Feb 2017 12:34:23 +1100 Tom Robinson via samba <samba at lists.samba.org> wrote: > > I've grabbed samba 4.5.4 and customised an existing rpm spec file. > Still some issues there. > > What replaces '--with-aio-support' in the configuration step now? > As far as I can see, nothing, see the 4.4.0 release notes here:

O, try the following.   Test this first. ldd /usr/sbin/hfaxd  if you getting libpam.so..  something, then hylafax is compiled with pam support.   Next,   apt-get install libpam-ldap   ( just to be sure, i do believe you have installed it already )   create the file :  /etc/pam.d/hylafax Add :   auth         required       pam_ldap.so account   required       pam_ldap.so

The R signon banner includes this statement: Natural language support but running in an English locale Should that not say 'National' instead of 'Natural'? Meaning that LOCALE support is enabled, not that the interface understands human language? Please ignore this and forgive me if this is an inappropriate post. I am a N00B in R. [[alternative HTML version deleted]]

Hello, I am having a small issue with LDAP, and I hope someone here might be able to provide a few tips. I am unable to authenticate as user 'testuser' on server 'storage' and the following errors appear in /var/log/messages on server 'storage' Sep 19 16:56:17 storage sshd(pam_unix)[3124]: check pass; user unknown Sep 19 16:56:17 storage sshd(pam_unix)[3124]:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I posted this also on hylafax list - maybe here is someone with a hint. System: Debian Jessie, Hylafax-Server 6.0.6, pam 1.1.8, libpam-ldapd 0.9.4, nslcd 0.9.4 (all actual debian packets from stable), sernet-samba-*-4.2.7-8 After a switch from OpenLDAP to a Samba 4.2 based LDAP Server, I cannot auth users anymore in Hylafax, everything else

Greetings, All! I'm using Samba 3.6 and OpenLDAP currently. The core configuration has been done eons ago, and I'm not quite sure it is actual any more. I see a number of PAM-related errors every time the system boot up. One concerning me is Jan 28 02:31:21 daemon1 perl: pam_ldap: error trying to bind as user "uid=root,ou=Users,dc=darkdragon,dc=lan" (Invalid credentials) Is this

Hello, I am have some interesting problems with the pam_winbind portion of samba 3.1. wbinfo -u and getent passwd works but when I login I get the following messages in /var/log/messages. Jan 5 11:09:36 hermes pam_winbind[9014]: write to socket failed! Jan 5 11:09:36 hermes pam_winbind[9014]: internal module error (retval = 3, user = `CSQ+shane' Jan 5 11:09:36 hermes PAM_pwdb[9014]: check

Hi all, I've run into what I believe to be a funky bug in Samba 2.2.7. Here's the scenario description (all Linux, all Samba 2.2.7, all same versions of LDAP software, etc.): Environment: 1 Samba PDC w/LDAP backend 2 Samba Clients joined to the PDC w/valid mach. accounts, etc. Clients are configured as follows: - PAM auth and password changes are done using winbind

Hi all, I have a setup like this. Pls let me know if it's possible or not. SAMBA + Local LDAP ---> SASLAUTHD --> Global LDAP Desc: I'd like to do Samba authentication to LDAP, passthrough to another LDAP using SASL. The current situation is: SSH authentication from LDAP user to that Samba box works. However, smb authentication doesn't work (yet). This is what's shown in

Hey list, I'm wondering if there is any advantage to be gained by using kerberos with pam_winbind. I've configured pam_winbind and enabled krb5_auth though apart from being granted a ticket, I'm unsure as to any advantage that would be gained by enabling Kerberos. Thanks, Matt Delves -- --------------------------------------------- Matthew Delves System Administrator Information

Hi all, I am having a problem with pam_winbind.so. Is there any documentation that tells exactly what each module with pam_winbind.so does? In other words, what does the auth section do, what does the account section do??? When I try to authenticate, the auth section in login pam seems to pass successfully, but the account section seems to fail. Here is my login module auth required

>>>>> Paul McQuesten <mcquesten at gmail.com> >>>>> on Thu, 31 Aug 2017 18:48:12 -0500 writes: > Actually, I do agree with you about Microsoft. > But they have so many users that their terminology should not be ignored. > Here are a few more views: >

Hi All, I've the following in the logs and am wondering why they are there. I also keep getting emails from SAMBA log-deamon (or something like that). [2003/05/19 15:24:29, 0] passdb/pdb_smbpasswd.c:getsmbfilepwent(364) getsmbfilepwent: malformed password entry (uid not number) It's not really serious (at least to me) but it's a cause for concern. Below are the details LInux

On 10/06/16 12:47, Kaplan, Andrew H. wrote: > Hello -- > > I started a thread on the list that you suggested in your e-mail, and thank-you for the reference. > > Also, I checked the auth.log file on the server, and the following entries were present: > > I checked the auth.log file, and the following entries were present: > > Jun 10 07:10:50 <samba server>