similar to: Using pam_smbpass.so module

Hi, I have problem with client password chat with Samba (3.0.24) PDC on Suse after updating OS to service pack 1. The problem prevents client from changing own password in Windows, plus other things to do with password, like adding user with Windows User manager. Samba password is to be synced with unix password in my configuration. Following errors are found in log.smbd when trying to add

I've added the pam changes that use winbind to authenticate users against the domain controller. I see all of the domain users in the graphical login, but when a user logs in who hasn't logged in before, the new home directory (/etc/DOMAIN/<userid>) isn't either being created or it's being created with permissions that don't allow files to be written under the user id.

hi @ll this is working smb.conf samba beta 3 cvs version 22 jun from ftp.suse.com suse 8.2 minimal inst with additional glib locale , client win2000 serv pack 3 german umlauts work in windows ( after all for ? you see on linux etc) the name of machine is linux.linux.org a bind 9 is on the linux machine too to make dns resolving login domain works roaming profile works netlogon script works

I read this on the list awhile back -- am I mistaken: I thought that "passwd" did not accept the migrate command without a patch to smbpasswd... I can't remember exactly where I read that... can someone confirm or deny this? Was the patch mainstreamed? ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$&| |__| | | |__/ | \| _|

Hi! I'm configuring Samba for Unix<->Samba account synchronization and have come across a situation which I like, but cannot explain with absolute certainty, and am therefore worried about security. I have set the following: (Debian uses a bit different structure, but I have expanded @includes in this email) 1) Samba -> Unix password sync /etc/samba/smb.conf: unix

We've got the 'ldap auth sync = yes' working perfectly, but we'd like to have the SMB's passwords updated via passwd an PAM aware apps. We tryed pam_smbpass.so but without any effects no matter of the different required, sufficient or optionnal keywords in the /etc.pam.d/passwd : passwd sufficient pam_ldap.so passwd optionnal pam_smbpass.so audit nullok use_authtok

Hi, we are running Samba 2.2.5 using LDAP und pam_ldap (pam_unix2 with auth+account+password=use_ldap) as PDC out of the SuSE 8.1 distribution. It runs very well: Login f?r Unix&Samba ok, Passwort-Change for Samba via smbpasswd Ok and we are able to manipulate the Linux Password in LDAP using the GQ Client. The only thing that doesn't work is "passwd" itself: venezuela:/home/tdm

Hello, I am trying to keep my samba accounts in sync with my unix accounts. I want to login ssh. Syncing passwords works. Scenario: I create a new user: useradd -m testuser passwd testuser When I log in with the user pam_smbpass should create a corresponding samba user. I modified system-auth which is included in sshd: #### /etc/pam.d/system-auth auth requisite pam_unix.so

Hi Simon, I never played with Samba in the way you are playing with. Anyway your issue seems to be very located to pam_smbpass.so or its usage. Bug from software or admin mistake? As said, I have no idea but perhaps if you post Samba version, pam version, smb.conf perhaps too... anything to be more specific about what is really your installation. This could help those who have played with that

Greets ... I am not getting it. I have samba (old one, 3.0.22-11-SUSE-CODE10) in an ADS-context, winbind works OK ... I am trying to connect vsftpd to winbind via PAM, this works TOO GOOD ;-) currently I am able to login to vsftpd with ANY password, that's bad. I am not understanding that PAM-stuff and I have some pressure to get that ftp-server up, so please would someone help me out? My

As Mathias suggested: samba 4.3.5-1 pam 1.2.1-3 linux-sun7i 3.4.90-4 openssh 7.2p1-1 #### /etc/samba/smb.conf [global] workgroup = WORKGROUP netbios name = NAS security = user # I also tried encrypt password = no encrypt passwords = yes [homes] path = /data/%u There is no complex configuration. > Am 03.03.2016 um 17:38 schrieb mathias dufresne <infractory at gmail.com>: > > Hi

Hello List, I have successfully integrated samba 3 to ADS Domain, and now i want to allow domain-users to access services on my linux box. For testing i chose /etc/pam.d/login and tried to allow ADS Users access to the console. But i always get the following errors: Mar 12 12:45:59 cuba90 pam_winbind[9011]: user 'r-ermer+mfeilner' granted acces Mar 12 12:45:59 cuba90 login[9011]: User

This is in the winbind documentation We divide the unified logon problem for UNIX machines into three smaller problems: 1. Obtaining Windows NT user and group information 2. Authenticating Windows NT users 3. Password changing for Windows NT users The winbind system provides a simple and elegant solution to all three components of the unified logon problem. First two things are explained,

Hi I have a Linux client running XFCE and authenticating against Samba 4. When trying to return to the session after xscreensaver has kicked in, authentication fails. /etc/pam.d/xscreensaver #%PAM-1.0 auth include common-auth account include common-account password include common-password session include common-session /etc/pam.d/common-password #%PAM-1.0

Okay - I've got samba working as a PDC with and ldap backend. I want to have some users not be in ldap (like the built in stuff like cyrus, mail, lp etc) I can get that to work with the pam_ldap and pam_unix but pam_smbpass doesn't seem to return user_unknown as i expect for users who are not in the ldap database does this make sense? --- pam_smb_passwd.c 12 Feb 2002 15:56:19

Okay, I started over from scratch with my samba server rebuild, but I am still getting some weird issues. Here are my config files of importance: --------------/etc/samba/smb.conf-------------------- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server =

Hi, I go trough the SaMBa guide Making happy users secondly. I configure Debian Lenny on XEN. I have problem with PAM. When i try to change a user's password with smbldap-passwd it runs without error, but when i try to log in I get the "Login incorrect" message. When I try to change a user's password with passwd I get the "Authentication service cannot retrieve

Hi all, I am having a problem with pam_winbind.so. Is there any documentation that tells exactly what each module with pam_winbind.so does? In other words, what does the auth section do, what does the account section do??? When I try to authenticate, the auth section in login pam seems to pass successfully, but the account section seems to fail. Here is my login module auth required

Hi, I am unable to login to a samba system that uses kerberos to authenticate to ADS if the users password has expired on the ADS system or if "User must change password at next login" is checked on the ADS.. I get a "login incorrect" message on the linux system and the log file gives the following error: pam_winbind[3647]: request failed: Must change password, PAM error

I'm trying to sync the local unix account passwords to the samba smbpass db using pam. When i run passwd, after it's done it seg faults and produces a core dump. The odd thing is that it works, the users local unix password gets synced to the smbpass db, but it seg faults. Below are my relevant config files. Is this a bug or am I doing something wrong? /usr/local/etc/smb.conf security =