similar to: Samba 3.0.0 + ADS authentication and login

Hi everyone, I am having trouble mounting a share on my AD server upon login. I am using pam_mount. Here is log activity when user 'peter' logs in (with Ubuntu client) and is authenticated by AD server. There is a share called 'peter' on the server (netbios name WIN2003) and the mount point is /home/PRIVATE/peter (see later for pam_mount.conf file): ===================== Jul

Hi, I would like to do what I mentioned in the subject on an Ububtu 18.04. I tried it with the following steps: https://lists.samba.org/archive/samba/2011-March/161372.html My files on the client: smb.conf [global] ;Workstation Settings workgroup = PM netbios name = DS1223 server string = %h security = domain idmap backend = tdb idmap uid = 15000-20000 idmap gid = 15000-20000 wins server =

Hi all, Since September 2006, I've been using a samba PDC (3.0.20) with tdbsam, to authenticate the users of a school network (90 XP boxes). All the users are able to log in the network from XP boxes. Recently, I've installed a samba client (K12LTSP) in the domain, but, I' ve a problem getting linux client to authenticate against the Samba PDC. After setup all the config files

Hello I try to implement pam_mount and I have errors. When I login to ubuntu desktop client I have an error with "mounting read-only" but if later to logon on domain I go to the files application and map the resource shares manually, work fine. Attach the syslog trace: Sep 24 10:22:13 ubuntucliente lightdm[708]: (pam_mount.c:365): pam_mount 2.14: entering auth stage Sep 24 10:22:20

Hi, I have setup /etc/pam.d/system-auth as below. But when I login to the Linux Box from KDE3, I get a prompt saying I don't have write access to the HOME. Then got kicked out. In NT Domain, when I double click on the Samba machine, I get network path not found. What am I doing wrong? Please help. Regards, Norman #%PAM-1.0 auth required /lib/security/pam_env.so auth sufficient

Hi all, I am a bit confused about the usage of pam_mount. Here is my /etc/pam.d/system-auth: auth required pam_env.so auth required pam_mount.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth sufficient pam_krb5.so use_first_pass auth required pam_deny.so account

****** The problem ****** (Finally) I have my red hat 7.2 (LTSP) system authenticating users from an NT4.0 domain using winbind... BUT after it authenticates... the screen goes blank, where it would normally load the window manager and instead of having my desktop come up, the login dialogue comes back. ******What I THINK is happening...(?)****** PLEASE HELP! I'm trying to run ICEwm and/or

Hi. I'm trying to keep most of my data encrypted when possible, only keeping the decryption key in memory (and thus vulnerable to local attacks) when I'm actually using my data. In practice, this means using pam_mount to mount my home directory from an encrypted device. It almost looked like I could get this to work with mail as well, even when read via IMAP from a remote client: I

Hello Andrew, I'm a little stuck with my login authentication for my Samba 3 box. With the new features in Samba 3 - Should I be able to provide username@domain & password at login that would authenticate me against our W2K ADS PDC and obtain my kerberos ticket? Please advise on the suggested way to authenticate against our Active Directory domain at login if I'm way off base on

Hello, I use pam_winbind for users authentification and pam_mount for mounting homedirs stored on w2k3 fiel server. I still have two more problems to solve: 1. I?m not able to set proper access rights on homedir. I want to set them to 700 but after mounting the homedir access rights are set to 777. I used to use pam_mkhomedir umask=0077 attribute to set proper rights, but this have no effect

We're trying to set up linux based workstations that use a win2k AD/DC for authentication, and pam_mount to mount a share as the user's home directory. It looks like winbind isn't passing on the credentials (although it is getting us logged in). If anyone has made this work, I'd love the details. It looks like winbind isn't passing the auth information thanks jim

I might be asking this question the incorrect group but, here goes. I have successfully added a Debian 10 member (workstation) and made the /etc/pam.d files adjustments per the Debianwiki page https://wiki.debian.org/AuthenticatingLinuxWithActiveDirectory and Debian is allowing me to login with AD users and passwords except for one thing. I have to enter the password twice to login. Here are the

win2k AD/PDC, Linux 2.4.18 (rh 7.3), samba 2.2.7a I configure nsswitch and winbind to do authentication against either the local passwd file OR the win2k box. Works fine. My need is to mount the users share under their login directory. Pam_mount would seem to be the answer. It was failing so I turned on debugging, and only now and then does pam_mount seem to get the password from

Okay, so I have an Active Directory server running on Windows Server 2012 Standard I have configured Samba/Kerberos/Winbind on Ubuntu 13.04 to bind to the DC properly. I am able to login with my Active Directory users credentials. When I use the 'require_membership_of' option in pam.d/common-auth for winbind.so using the SID of the group I want to restrict access to, it works like a charm.

On 25.12.2024 13:14, Rowland Penny via samba wrote: > On Wed, 25 Dec 2024 12:25:01 +0100 > Peter Milesson via samba<samba at lists.samba.org> wrote: > >> >> >> On 23.12.2024 11:49, Rowland Penny via samba wrote: >>> On Mon, 16 Dec 2024 13:23:54 +0100 >>> Marco Gaiarin via samba<samba at lists.samba.org> wrote: >>> >>>>

On Wed, 25 Dec 2024 12:25:01 +0100 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > > On 23.12.2024 11:49, Rowland Penny via samba wrote: > > On Mon, 16 Dec 2024 13:23:54 +0100 > > Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > > >> Mandi! Rowland Penny via samba > >> In chel di` si favelave... >

The setup is a samba server with mixed clients (samba clients and windows clients). The problem, I want the linux client to mount there home to their home share on the server. The problem is, I have followed the guide mentioned below and everything works except that the linux usernames have the format domeinnaam+username as a result of which pam_mount wants to mount

Hi all, I have been trying to setup authentication of users on a Linux server against Windows server 2003 using winbind. I am at the point where an su - ADUSERNAME works, but sshing as that user still doesn't work. When I try to ssh as an AD user as follows: ssh -l "RILINUX+testuser" server.domain.com I get the following output in /var/log/messages: server pam_winbind[5906]:

Hello Samba list !! This is my original posting that I sent to the list about two months ago. The summary is below. ------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------ Hello !! Has anybody successfully implemented the similar setup ? 1. R.H. 7.2 (production kernel - 2.4.7-10)

Hi @all, I have some problems when using pam_mount.conf.xml to mount shares via kerberos (and also for ntlm) regarding reliability of the mount. I have tested the issue with 2 different environments. My environments are: 2 Microsoft Domain Controllers + a separate fileserver and Ubuntu 18.04 or 22.04 as clients. My other tested environment is one Microsoft Server 2019 (as domain controller and