similar to: Winbind Auth - prevent some users from logging on

First, my config: Solaris 8 PADL pam_ldap v165 and pam_nss v211 OpenSSH 3.7.1.p2 All compiled with gcc 2.95.3 that ships with the Sun companion CD LDAP PAM authentication is working well with OpenSSH, privsep is disabled, challenge-response authentication is enabled. I would like to turn on password aging, which seems to be well supported by pam_ldap. Logins going through /bin/login correctly

Hello I would like to use pam filters to authenticate users on LDAP 2.3 with Samba-3.0.26a on a Fedora Core 7 For information,samba is compiled with the --with-ldapsam option (2.0 LDAP schema) Basic LDAP authentication works well, when I type 'getent passwd', all my users are displayed. Now I want to use the pam_filter option in the /etc/ldap.conf file, but I can't make it work

I am installing Samba 3 with ldapsam and Unix accounts in ldap (pam_ldap/pam_nss), what is the best document to use for that -- Taymour A El Erian System Division Manager CNA, MCSE, CCNA, LPIC T.E. Data E-mail: taymour.elerian@tedata.net Web: www.tedata.net Tel: +(202)-4166600 Ext: 1101

O, try the following.   Test this first. ldd /usr/sbin/hfaxd  if you getting libpam.so..  something, then hylafax is compiled with pam support.   Next,   apt-get install libpam-ldap   ( just to be sure, i do believe you have installed it already )   create the file :  /etc/pam.d/hylafax Add :   auth         required       pam_ldap.so account   required       pam_ldap.so

Greetings list, I'm having a problem setting file permissions for users connecting to my samba file server. CentOS 5.4, samba-3.0.33-3.15.el5_4.1. I have authentication configured to use winbind, and name services configured to use LDAP. I've configured valid users in smb.conf to contain DOMAIN\username for the users I want to be able to connect. They can browse the share just fine,

Hey folks, I'm using winbind authentication against MS Active Directory, and it's working great. Because of template shell = /bin/bash in smb.conf, new users are getting assigned the bash shell, which is great in most cases. Some users, however, prefer a different shell (tcsh). How can I specify, on a user by user basis, the preferred shell? I'm guessing this is an attribute in

I am stuck with Samba -Active Directory communication. Trying to bring my SUSE 10.0 to speak with AD Domain. net rpc testjoin - brings a unable to find suitable server message net join - kerberos_kinit_password preauthentication failed and ads_connect preauthentication failed wbinfo -u works fine wbinfo -t works fine getent passwd/group works too smb is running nmb is running winbindd is

Hello, First, excuse me if this messages is not in the right mailing list: I have not found a samba-ldap forum. I try to use Samba-LDAP with my own object class but I cannot manage using an other attribute than 'uid' for the user ID. Here is my objectClass: --------------- myClass.schema ----------------------------------- attributeType ( 1.3.6.1.4.1.13460.1.18.1 NAME

I wonder if other people are seeing stability issues with Dovecot and imap-login against LDAP? I've changed from pam_nss to ldap without nss in Dovecot to see if that helps the issue. I realise Dovecot is version 1.0 in Centos 5, would it be more advisable to switch to Cyrus? I'm using mbox mail spool files would that work with Cyrus? Chris -------------- next part -------------- An HTML

Hi everybody, I have one SAMBA server (with PDC configuration) which is configure to use an OpenLDAP server (on the same local server) where users and computers account are store (I want to have the two Unix/Linux and Samba account attributes stored to use Name Service Switch and Pluggable Authentication Module). My problem is as follow : If I don't put the following line : ->

Hi, we are running Samba 2.2.5 using LDAP und pam_ldap (pam_unix2 with auth+account+password=use_ldap) as PDC out of the SuSE 8.1 distribution. It runs very well: Login f?r Unix&Samba ok, Passwort-Change for Samba via smbpasswd Ok and we are able to manipulate the Linux Password in LDAP using the GQ Client. The only thing that doesn't work is "passwd" itself: venezuela:/home/tdm

Hi guys, Can anyone comment on my setup steps? I follow instructions from many Howto's website,the below steps worked well until yesterday. It suddenly refused WindowsXp machine to join domain by giving the error "The following error occurs....Access denied" CENTOS 5.1 + fedora-ds-dsgw-1.1.1-1.fc6 + samba-client-3.0.25b-0.el5.4 fedora-idm-console-1.1.1-1.fc6

We have a couple Samba4 AD domains we've implemented and I've noticed a difference between how users look when created via ADUC versus samba-tool. Created via ADUC, the following extra attributes are added: msSFU30Name: bilbo msSFU30NisDomain: netdirect unixHomeDirectory: /home/bilbo unixUserPassword: ABCD!efgh12345$67890 Created via samba-tool, the following extra attributes are added:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, I posted this also on hylafax list - maybe here is someone with a hint. System: Debian Jessie, Hylafax-Server 6.0.6, pam 1.1.8, libpam-ldapd 0.9.4, nslcd 0.9.4 (all actual debian packets from stable), sernet-samba-*-4.2.7-8 After a switch from OpenLDAP to a Samba 4.2 based LDAP Server, I cannot auth users anymore in Hylafax, everything else

Hello I'm trying to update samba from 3.0.11 to 3.0.21 and I noticed that the 'ldap filter' paramater has been removed. After some search, I read that I have to configure nss_ldap. But I don't know how to configure it properly to operate with our LDAP database. Let me explain : We used the 'ldap filter' parameter like this : ldap filter =

Oops! Thought I'd CC'd this to the list. Sorry, Oliver! Chris -------- Original Message -------- Date: Wed, 13 Jul 2005 20:09:35 +0100 From: Chris Wakelin <c.d.wakelin at reading.ac.uk> To: Jeroen Scheerder <Jeroen.Scheerder at phil.uu.nl> CC: Chris Wakelin <c.d.wakelin at reading.ac.uk> Subject: Re: [Dovecot] Dovecot and ActiveDirectory Jeroen Scheerder wrote: >

Hi, I have a question about getting linux workstation to authenticate users against a Samba PDC when they log in and mount all the necessary shares. Current setup: Linux server with Samba as the PCD Windows 2k and XP workstations are on the Samba domain and authenticate all users with the Samba PDC. Wants: Linux server with Samba as the PCD Windows 2k and XP workstations are on the Samba

Hi!! I'm not able to change a user password on a workstation and with smbpasswd when I'm log. ex: [usertest@pc070 usertest]$ smbpasswd Old SMB password: New SMB password: Retype new SMB password: machine 127.0.0.1 rejected the password change: Error was : RAP86: The specified password is invalid. Failed to change password for usertest so when I'm root, that's work The log

Hi Friends, We are running some of the Centos 5 32 bit, 5.2 64-bit systems. These systems are ldap clients and the ldap server is Windows 2003 Server. Sometimes 1 or 2 services on these servers sucks 100% cpu and the load becomes high on the server. Below is an example where one the httpd process was eating 100% cpu and we took dump of this process gcore 17711 Core was generated by

Hi Guys! Samba suspiciously slow i have: CentOS 5.2 final Samba 3.0.28-0.e15.8 LDAP server placed on anoter (not Samba) Server In ldap container "ou=Users" about 5000 entries When Windows client's connect to samba - Authentification process S.L.O.W. (about 20-30 seconds). When number entries less - performance grow (when 10 users - authentification process go 1-2 seconds) How i