similar to: intermittent pam_winbind authentication failure

On 11/27/24 11:10, Rowland Penny via samba wrote: > I am not having a good day, I now seem to have replied to the wrong > thread :-( > > Lets try again: > > If I remember correctly, this is on Gentoo, Debian sets up PAM for you, > so can we see your PAM config files. Putting winbindd (or is it winbind > ?) offline is supposed to be the same as pulling the ethernet cable or

On Wed, 27 Nov 2024 10:19:48 -0500 "John R. Graham via samba" <samba at lists.samba.org> wrote: > When I put winbindd in offline mode, > > ??? terra ~ # smbcontrol winbindd offline > ??? terra ~ # smbcontrol winbindd onlinestatus > ??? PID 20664: global:Offline BUILTIN:Online TERRA:Online > HOME:Offline > > I can successfully log in (with the test

When I put winbindd in offline mode, ??? terra ~ # smbcontrol winbindd offline ??? terra ~ # smbcontrol winbindd onlinestatus ??? PID 20664: global:Offline BUILTIN:Online TERRA:Online HOME:Offline I can successfully log in (with the test shown in the PAM Offline Authentication Wiki article): ??? terra ~ # ssh SAMDOM\\jgraham at localhost ??? (SAMDOM\jgraham at localhost) Password: ???

Hi I am trying to lock users after 3 attempts and then set the timeout before they can log in again. I thought i could achieve this with auth required pam_tally.so deny=3 unlock_time=600 in /etc/pam.d/system-auth but it seems to not be the case - I cant find a working config for this anywhere and i wonder if anyone has one they can share? thanks

Hello, I have configured a Nagios server to be part of a Windows 2003 domain. The Linux server is RedHat 5.3 with winbind version 3.0.22. The configuration is using kerberos and pam with winbind to support Windows user and local account. Everything is working fine until we test the active directory failover. The system is still accessible through domain account but it's very slow and the

Hello, I can't get Kerberos authentication works with my Linux clients. Server : samba 4.1.4 (compiled from source) Client : Debian Wheezy with sernet-samba 4.0.17-8 Without Kerberos authentication, everything works : -> the domain users can log with pam_winbind (with ssh, gdm ....). -> "kinit myuser at MYREALM" works fine. -> "wbinfo -K MYDOM\\myuser" works.

Hi, I'm currently using, CentOS release 4.8 (Final) and wanted to update the pam_tally module to support unlock_time. I understand this is only support on centos 5.x and up. What are my options for updating pam_tally to support unlock_time, can I simply download and update from a centos repo or should I compile pam. I would appreciate some suggestions. paul -------------- next part

Ive got a problem with pam_winbind not authenticating, were using an AD 2003 domain. wbinfo works with correct password # wbinfo -a=AD03+richard.batty%password plaintext password authentication succeeded challenge/response password authentication succeeded with wrong password # wbinfo -a=AD03+richard.batty%password1 plaintext password authentication failed error code was

On 11/25/24 11:26, Rowland Penny via samba wrote: > D, I must go to specsavers, I appear to be going blind ;-) > > you wrote 'smbcontrol winbind offline' and I missed it, the extra 'd' > that is, it should have been: > > smbcontrol winbindd offline > > Rowland Okay, thanks, but I'm going to start over as I appear to have related some incorrect

Greetings, I am trying to compile pam_winbind.so under Solaris 8. I have the source for samba 2.2.8 on the server. When I issue a make nsswitch/pam_winbind.so, I receive many compiler warnings, such as: Compiling nsswitch/pam_winbind.c with -fPIC nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:72: warning: passing arg 3 of `pam_get_item' from incompa tible

Samba is throwing this when trying to build version 3.5.15: =================================================== Compiling ../nsswitch/pam_winbind.c ../nsswitch/pam_winbind.c: In function ?_pam_parse?: ../nsswitch/pam_winbind.c:440:76: warning: comparison between pointer and integer ../nsswitch/pam_winbind.c:445:7: warning: comparison between pointer and integer ../nsswitch/pam_winbind.c:447:7:

Greetings, Still trying to get Samba 3.0.15pre2 built on a Solaris 9 box with PAM support. I am using gcc 3.3.2 and I have openldap-2.2.24, krb5-1.4, and Cyrus SASL 2.1.20 installed. I have found other posting by people with problems building on Solaris as well as asking about the "_pam_macros.h" file that seems to be missing on Solaris. Posting about problems, but not with

Sorry for the repost, but I've not gotten any response and the problem persists. Does anyone have any idea how to fix? =================================== I read a few posts in the archives about this problem and that it was to be fixed in 3.0.23c. Currently I'm running 3.0.23d-2+b1 on a debian system and am getting the following: $ ssh -l testuser fileserver Password: Your password

I read a few posts in the archives about this problem and that it was to be fixed in 3.0.23c. Currently I'm running 3.0.23d-2+b1 on a debian system and am getting the following: $ ssh -l testuser fileserver Password: Your password has expired Here's what auth.log shows: Jan 4 11:46:26 tmcsamba1 pam_winbind[14309]: user 'DOMAIN1+testuser' OK Jan 4 11:46:26 tmcsamba1

Pam.d/system-auth : auth required pam_env.so auth sufficient pam_winbind.so auth sufficient pam_unix.so nullok auth required pam_deny.so account sufficient pam_winbind.so account required pam_unix.so account required pam_permit.so password sufficient pam_winbind.so password sufficient pam_unix.so

Hi all, I am having a problem with pam_winbind.so. Is there any documentation that tells exactly what each module with pam_winbind.so does? In other words, what does the auth section do, what does the account section do??? When I try to authenticate, the auth section in login pam seems to pass successfully, but the account section seems to fail. Here is my login module auth required

Hello to all, I am trying to setup samba 2.2.2 with winbind and i have gone through all the documentation that i could find in regards to this. Everything has been going smoothly up until now. The html docs for setting up winbind states that i should copy "pam_winbind.so" from the /samba/source/nsswitch/ to /lib/security/, simple enough but i do not have "pam_winbind.so" in

Hi and happy New Year. I test the integration of samba 3.0.10 on a fedora core 3 box in a Microsoft Active Directory (Windows 2003) environment. I already configure samba for the integration in the AD domain and it works fine but I have a problem with the pam_winbind. I can authenticate my AD domain users on the fedora box but I can?t change their password with the passwd command. For example, I

Hi all, I have a PC joined to an AD domain that authenticate users using pam_winbind module. I have set the option mkhomedir and all seems to works except that in the domain home folders are created? even home folders of the PCs. There is a way to instruct pam_winbind to create only user's home folders and don't create PC's home folders? Piviul

hey all, after following the directions in the "FreeBSD Active Directory Domain Member Mini-HOWTO" http://web.irtnog.org/howtos/freebsd/winbind i am able to get my machine to the point where i can query users with 'wbinfo': $ wbinfo -u|grep galbrecht galbrecht i am unable, however, to login to my machine using any service, telnet for example: $ telnet -K localhost