similar to: pam_winbind and offline logon

On Thu, 28 Dec 2023 19:08:45 +0000 bd730c5053df9efb via samba <samba at lists.samba.org> wrote: > > > > > > # here are the per-package modules (the "Primary" block) > > > auth [success=2 default=ignore] pam_unix.so nullok > > > auth [success=1 default=ignore] pam_winbind.so cached_login > > > krb5_auth krb5_ccache_type=FILE

On 14.11.2024 16:51, bd730c5053df9efb wrote: > On Thursday, November 14th, 2024 at 07:48, Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 13.11.2024 21:14, Peter Milesson via samba wrote: >> >>> Hi folks, >>> >>> I'm figuring to setup a few Linux desktops with LXDM as display >>> manager, and with

Hi all! On Monday, January 8th, 2024 at 08:23, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sun, 7 Jan 2024 15:00:27 +0100 > Marco Gaiarin via samba samba at lists.samba.org wrote: > > > Mandi! bd730c5053df9efb via samba > > In chel di` si favelave... > > > > > idmap config smadom:schema_mode = rfc2307 > > > > Sorry but

On Thursday, November 14th, 2024 at 07:48, Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 13.11.2024 21:14, Peter Milesson via samba wrote: > > > Hi folks, > > > > I'm figuring to setup a few Linux desktops with LXDM as display > > manager, and with authentication against a Samba AD DC. After > > successful

On Thu, 10 Oct 2024 18:46:04 +0000 bd730c5053df9efb <bd730c5053df9efb at proton.me> wrote: > > Hi Rowland! > > Thank you for your reply but wouldn't operations like the one > described in > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Setting_Share_Permissions_and_ACLs > fail if the uid of the user that is performing said operations does

Hello everybody! I know this has been asked multiple times but I haven't found an answer yet so here I go again. I manage a domain, not too large but large enough to make it a complex task to recreate an entire domain and rejoin every computer, and the domain was created long ago without an ad subdomain so, is there any way to recreate an entire domain renaming the domain part of everything

On Thu, 28 Dec 2023 18:18:22 +0000 bd730c5053df9efb via samba <samba at lists.samba.org> wrote: > Hi all! > > As a die hard slackware user and as a part of my learning pam process > I installed debian bookworm (12.4.0) in a vm and setup a domain > member server per the instructions in the wiki trying to figure out > how debian does it so I can correct some issues I have

Hi everyone, I am having trouble mounting a share on my AD server upon login. I am using pam_mount. Here is log activity when user 'peter' logs in (with Ubuntu client) and is authenticated by AD server. There is a share called 'peter' on the server (netbios name WIN2003) and the mount point is /home/PRIVATE/peter (see later for pam_mount.conf file): ===================== Jul

We're trying to set up linux based workstations that use a win2k AD/DC for authentication, and pam_mount to mount a share as the user's home directory. It looks like winbind isn't passing on the credentials (although it is getting us logged in). If anyone has made this work, I'd love the details. It looks like winbind isn't passing the auth information thanks jim

The setup is a samba server with mixed clients (samba clients and windows clients). The problem, I want the linux client to mount there home to their home share on the server. The problem is, I have followed the guide mentioned below and everything works except that the linux usernames have the format domeinnaam+username as a result of which pam_mount wants to mount

Hi, i'm probably not the first but i have found no concrete information about my problem... lots of information, nothing helped.. :S so, here's the thing.. i'm running a samba-3.0.22-13.16 server on SLES 9 kernel 2.6.16.21-0.8-default as an nt domain controller, there was a migration to Linux for the workstations so i had to implement WINBIND + PAM_MOUNT. after searching for the

On Wed, 06 Dec 2023 15:06:25 +0000 bd730c5053df9efb via samba <samba at lists.samba.org> wrote: > Hi! > > Thank you botho for your answers! I ran into some problems with the > FSMO migration caused by the "kdc default domain supported enctypes" > and "kdc supported enctypes" so after correcting that and verifying > that DC2 was working again I shut

So finally here is the solution that works for me. If you have any questions, just ask. I use pam_mount with the following volume definition in the "/etc/security/pam_mount.conf.xml": <volume fstype="cifs" server="server" path="home/%(USER)" mountpoint="/home/%(USER)" sgrp="domain users"

Hi all, I am a bit confused about the usage of pam_mount. Here is my /etc/pam.d/system-auth: auth required pam_env.so auth required pam_mount.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth sufficient pam_krb5.so use_first_pass auth required pam_deny.so account

Have any of you folks actually managed to get pam_mount working? A quick google shows a ton of messages saying "you can use pam_mount" to automatically mount a user's home directory on log in, but no messages saying "I use pam_mount" etc -- I'm suspecting it might not actually work. Or at least I might not be smart enough to make it work. First -- pam_mount 0.5.11

Sent with Proton Mail secure email. On Thursday, December 28th, 2023 at 15:59, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Thu, 28 Dec 2023 18:18:22 +0000 > bd730c5053df9efb via samba samba at lists.samba.org wrote: > > > Hi all! > > > > As a die hard slackware user and as a part of my learning pam process > > I installed debian

I have some (for testing) Debian based client/workstation connected to my AD. Signing to the AD works as a domain/user should. These clients can, via Nautilus file manager, access shares on the file server manually that the *signed in domain user* is permitted to "see". I would prefer to connect these files and the domain user home directory automatically at sign in without manual

Hi ! Has anybody already managed to make pam_mount and winbind working together ? I'm running a linux 7.2 box with samba 2.2.4. I use winbind for user authentication from a win2k server (DEDALE in domain VALBONE). The following command works fine: $ smbmount //DEDALE/SHAREDIR \ /mnt/smb/dedale/sharedir/ -o \

Hello I try to implement pam_mount and I have errors. When I login to ubuntu desktop client I have an error with "mounting read-only" but if later to logon on domain I go to the files application and map the resource shares manually, work fine. Attach the syslog trace: Sep 24 10:22:13 ubuntucliente lightdm[708]: (pam_mount.c:365): pam_mount 2.14: entering auth stage Sep 24 10:22:20

I can confirm that on slackware too if I use rid as the backend for the ad domain winbind works offline and the system doesn't slow to a crawl for every process I try to start. Maybe if ad backend used to work, as stated previously in the thread, it could be fixed since the rid backend has some drawbacks and ad backend has some reasons to be the preferred option but at least for now it is