similar to: pam_winbind - losing domain membership

Configuration: Samba 3.0.14a-1 (on debian 3.1) + winbind 3.0.14a-1 + krb5-user 1.3.6-2 I need help debugging pam_winbind.so in /etc/pam.d/ssh on debian. Samba is a member of an AD domain, authenticating access to shares via winbind+nsswitch.conf. Authentication to shares works great. Now I want winbind to authenticate ssh users as a pam module and it's failing. Below I show the output of

Hello all, I've recently posted here for help with a Samba domain member system which seems to lose it's domain membership. I want to discuss it a little more. I have more information. I'm after comments and suggestions for troubleshooting. Also, i say "loses membership" but i don't really know if it has lost it. Just doesn't work anymore until i re-join the Samba

Greetings, I am trying to compile pam_winbind.so under Solaris 8. I have the source for samba 2.2.8 on the server. When I issue a make nsswitch/pam_winbind.so, I receive many compiler warnings, such as: Compiling nsswitch/pam_winbind.c with -fPIC nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:72: warning: passing arg 3 of `pam_get_item' from incompa tible

Samba is throwing this when trying to build version 3.5.15: =================================================== Compiling ../nsswitch/pam_winbind.c ../nsswitch/pam_winbind.c: In function ?_pam_parse?: ../nsswitch/pam_winbind.c:440:76: warning: comparison between pointer and integer ../nsswitch/pam_winbind.c:445:7: warning: comparison between pointer and integer ../nsswitch/pam_winbind.c:447:7:

Greetings, Still trying to get Samba 3.0.15pre2 built on a Solaris 9 box with PAM support. I am using gcc 3.3.2 and I have openldap-2.2.24, krb5-1.4, and Cyrus SASL 2.1.20 installed. I have found other posting by people with problems building on Solaris as well as asking about the "_pam_macros.h" file that seems to be missing on Solaris. Posting about problems, but not with

Sorry for the repost, but I've not gotten any response and the problem persists. Does anyone have any idea how to fix? =================================== I read a few posts in the archives about this problem and that it was to be fixed in 3.0.23c. Currently I'm running 3.0.23d-2+b1 on a debian system and am getting the following: $ ssh -l testuser fileserver Password: Your password

I read a few posts in the archives about this problem and that it was to be fixed in 3.0.23c. Currently I'm running 3.0.23d-2+b1 on a debian system and am getting the following: $ ssh -l testuser fileserver Password: Your password has expired Here's what auth.log shows: Jan 4 11:46:26 tmcsamba1 pam_winbind[14309]: user 'DOMAIN1+testuser' OK Jan 4 11:46:26 tmcsamba1

Pam.d/system-auth : auth required pam_env.so auth sufficient pam_winbind.so auth sufficient pam_unix.so nullok auth required pam_deny.so account sufficient pam_winbind.so account required pam_unix.so account required pam_permit.so password sufficient pam_winbind.so password sufficient pam_unix.so

Hi all, I am having a problem with pam_winbind.so. Is there any documentation that tells exactly what each module with pam_winbind.so does? In other words, what does the auth section do, what does the account section do??? When I try to authenticate, the auth section in login pam seems to pass successfully, but the account section seems to fail. Here is my login module auth required

Hello to all, I am trying to setup samba 2.2.2 with winbind and i have gone through all the documentation that i could find in regards to this. Everything has been going smoothly up until now. The html docs for setting up winbind states that i should copy "pam_winbind.so" from the /samba/source/nsswitch/ to /lib/security/, simple enough but i do not have "pam_winbind.so" in

Hi and happy New Year. I test the integration of samba 3.0.10 on a fedora core 3 box in a Microsoft Active Directory (Windows 2003) environment. I already configure samba for the integration in the AD domain and it works fine but I have a problem with the pam_winbind. I can authenticate my AD domain users on the fedora box but I can?t change their password with the passwd command. For example, I

Hi all, I have a PC joined to an AD domain that authenticate users using pam_winbind module. I have set the option mkhomedir and all seems to works except that in the domain home folders are created? even home folders of the PCs. There is a way to instruct pam_winbind to create only user's home folders and don't create PC's home folders? Piviul

hey all, after following the directions in the "FreeBSD Active Directory Domain Member Mini-HOWTO" http://web.irtnog.org/howtos/freebsd/winbind i am able to get my machine to the point where i can query users with 'wbinfo': $ wbinfo -u|grep galbrecht galbrecht i am unable, however, to login to my machine using any service, telnet for example: $ telnet -K localhost

I'm working on a PAM setup that will ignore winbind/AD completely for users listed in /etc/passwd, and do the samba thing for all other users. Mostly it seems to work, but there's one weird side-effect. For non-AD users (only), an AD group "BUILTIN+users" is being added as a secondary group. If I kill winbind, it still gets added, although only the gid is available (no name).

Hi, I get this warning when compiling 3.0.25rc1 on SLED 10: Compiling nsswitch/pam_winbind.c nsswitch/pam_winbind.c: In function `pam_sm_authenticate': nsswitch/pam_winbind.c:1623: warning: passing arg 1 of `free' discards qualifiers from pointer target type corresponds to : if ( real_username ) { free( real_username ); } This is the only warning and

Greets ... I am not getting it. I have samba (old one, 3.0.22-11-SUSE-CODE10) in an ADS-context, winbind works OK ... I am trying to connect vsftpd to winbind via PAM, this works TOO GOOD ;-) currently I am able to login to vsftpd with ANY password, that's bad. I am not understanding that PAM-stuff and I have some pressure to get that ftp-server up, so please would someone help me out? My

2.2.6 installed from rpm on rh 7.2 system... I'm trying to use pam_winbind and apache's basic authentication to restrict access to certain directories served by apache. It does work, but when I enter a wrong password I get this error in log.winbindd: Plain-text authentication for user jarboed returned NT_STATUS_WRONG_PASSWORD Is there a way that pam_winbind.so can encrypt the passwords

Greetings ... Have a question, was is the advantages of use pam_winbind verses pam_krb5 for Samba user authentaction? I mean, if I point my Linux box Kerberos to a Win2003 AD server, I am able to authenticate my users out of AD, but at the moment still having problems with winbind and nsswitch. Is there an advantage to using pam_winbind instead of pam_krb5? Mailed Lee

pam_winbind expects "DOAMIN\name" for authentication, but pam_kerberos expects just "name". Is there a trick to stack them such that the pam_winbind modules are used for account information, but the kerberos modules do the authentication (with the result being that the user has a tgt after login).

Hiya, I'm using Fedora Test 2 and Samba 3.0.0-15 packages from Redhat/Fedora rawhide with a Windows 2003 Server. wbinfo -u and wbinfo -g work without any errors, the entries to nsswitch.conf were made. I edited /etc/system-auth and added all necessary lines for pam_winbind as described in the samba documentation. Anyway, users that only exist within the Windows domain can't log on. Each