similar to: Session Control ( Not using PAM )

Hi All, I would like to know if this is possible and if possible what is the complexity. Consider a CIFS client, SAMBA Server1 and Samba Server2. Say a session is established between a CIFS client and SAMBA server1. Is it possible for the SAMBA server1 to transfer/redirect/reestablish the connection to SAMBA server2 without the CIFS client knowing about this? The session between the CIFS

With OpenSSH 2.9.9p2 as the server, I'm not able to do scp or "ssh machinename command" in general to any of my Suns! I tracked this down a bit; the problem occurs only when PAM support is enabled. However, if I remove line 430 of session.c, "do_pam_session(s->pw->pw_name, NULL);" inside of do_exec_no_pty, the problem goes away. It looks like the following entry

Hi, I'm trying to set up a squid with ntlm authentification, and as I follow the instructions I read in the squid FAQ I run into this problem. When I try to do a ``wbinfo -a <domain>\\<user>%<passwd>'' the process tells me that the authentification did not succeded (both, plaintext passwords authentification and challenge/response password authentification). This

I am using PAM and pam_smbpass.so with Samba 2.999 (Debian sid package). If, in /etc/pam.d/samba, I set session required pam_smbpass.so then login fails, and the log says: [2002/08/04 15:43:26, 0] auth/pampass.c:smb_pam_error_handler(73) smb_pam_error_handler: PAM: session setup failed : Module is unknown [2002/08/04 15:43:26, 1] smbd/session.c:session_claim(103) pam_session

Hi all, I'm about to begin building a single-sign-on environment (hopefully). We just brought our first set of Windows-based PCs in, and would like to integrate them into our existing Linux/MacOS X environment. We are currently running MIT Kerberos, and would like to create a Samba PDC which authenticates against these KDCs. Another parallel project is to migrate to OpenLDAP. I

Hello, I am running Samba 2.2.5 (built from source) on a Linux 7.3 machine. I have samba setup to use domain authentication and everything is working fine. The security administrator did a scan on the Windows 2000 server being used for authentication. He found a vulnerability attributed to the fact that winbindd needs null sessions on the W2k machine to be enabled (since winbindd sends a null

Hi, I have been reading through the docs for Samba 3, and there is a lot of talk about how samba 3 can function in an AD domain as a member server and accept kerberos service tickets issued by an MS KDC. (net ads join, etc...) I have a slightly different twist on a similar situation. I have an MIT kerberos realm set up and my Windows2000 PCs get tickets from this realm on login just

Basically, this is going to be just a question to see if what I want to do can be done, since I have had no luck in doing it so far... I have set up a 2.2.3a domain controller, and I can join Windows XP clients to the domain, and log in as domain users. I want to use PAM to enforce account restrictions, such as login time using pam_time. I currently have the *stacked* version of the

All; I have a situation that I'm not sure can be done (I honestly don't know enough about Samba for this one). Here's what I have. The customer has a Windows ADS (note: It's the newer windows ADS, so there is no NT Domain as in the old NT format). There are also a number of *nix servers (AIX) that have data on them. They want to use Samba as basically, an NFS server to serve

Hi, I am running 2.2.5 and I would like to know if the "restrict anonymous" as been implemented correctly, as it was supposed to behave from the start, in order to deny ALL anonymous connections as stated in the man : "When restrict anonymous is yes, all anonymous connections are denied no matter what they are for." Ive been reading some dev mailing lists and someone said

I need to allow [read] access to a Samba server using both IP filtering & UserIDs . For a given list of IP subnets, any user should have access. Outside these 'trusted' subnets, I need to do User authentication. I can handle the User authentication OK in several ways. However, I don't see any way to do the 'short circuit' allow for some IPs, then use User authentication

At the samba lists, we have found several old questions about problems wit W2K-Terminal Services vs Samba (dated in December 2000). But we can?t get actual information about HOW TODAY (January 2004) the problem is fixed. We have this situacion and we need solve it. Thanks Luis

Howdy! the setup: RH-VALE 6.2.4 running samba2.2.2 cvs from 11/24/2001... user running NT 4.0 SP6a the problem: I have a user that cannot print - She can add the printer but can't print. log for that machine shows the following: ... normal looking connections to obtain drivers - all look OK - no complaints.. .. then this - libsmb/namequery.c:name_query(415) Got a positive name query

I am using samba-2.2.3a and samb-2.2.4 in my windows-2000 environment and have the my linux systems configured to use winbind in addition to standard unix for authentication. The problem I am seeing is that linux services and programs that prompt for a password will prompt first for unix authentication and then a second time for winbind authentication. Is there anyway to using winbind and unix

Hello everybody, I?m using Red Hat 7.3 with Samba setup as a PDC, and I?m having a doubt. I am studying the directive "obey pam restrictions" because I would like to limit the number of logins with the same id. The documentation provided by SWAT tells me that encrypted passwords (like used by Windows98SE) will NOT follow these restrictions. Anybody could tell me if this information is

What is the significance of having pam password change = yes in the smb.conf I have pam password change = yes and also passwd chat = ......... option set.... Do I need both or one.... Please advice!!! Thanks

I am using samba as a PDC on linux. It works fine with encrypted passwords. But now i need use a PAM authentication and PAM requires plain passwords. When i use "encrypt passwords = No" in smb.conf a PAM is out of game. Is there any way to use a PAM authentication with samba as PDC ? Thanks Daniel MERC

Hi all, I would like to grant access to other services (i.e. POP3) to the users already authenticated by SAMBA (trying to mimic a true NT Domain). The logical step would be to employ PAM but I don't have any clue. POP3 and SAMBA (PDC) are running on the same machine Could you point me to the right direction? Has anybody did this before? Thank you, Cristian Grigoriu

I'm just curious to see if I'm fighting an uphill battle that isn't really necessary. Is anyone out there NOT using PAM, running Samba and winbind on Solaris 8? Maybe my problems are related to my attempt to keep it simple and not use pam. -Dan Daniel J. Thomas Systems Administrator Johns Hopkins University Applied Physics Laboratory Laurel, MD Balt: (443) 778-7924 Wash: (240)

Hello, In the third party software that we bought, which runs on Solaris 2.8 Server, we use the pam_smb version 1.9.8 to authenticate our users against the NT Domain. Now, our company is migrating from NT Domain to Windows 2000 ADS Domain in native mode. I saw the documention on SAMBA 3.0 (alpha 1-15), and it states that SAMBA 3.0 is compatible with ldap/ADS of Windows 2000. Have you created