--- "Marcus Deluigi (intern)" <[EMAIL PROTECTED]> wrote: > > Hi! > > Is anybody using the Windows Domain Authentication > for his Debian > Machine? > > I had it once working, but since I reinstalled the > system, I can't get > it work. > wbinfo -u > and > kinit <username> > works without errors, so I think krb5.conf and > smb.conf are correct. > > However, I cannot login with the windows domain > accounts, so I guess > pam.d must be misconfigured. > But I chose the same configuration as the last time: > > /etc/pam.d/common-account: > ---- > account required /lib/security/pam_winbind.so > ---- > > /etc/pam.d/common-auth > ---- > auth sufficient pam_winbind.so > auth required pam_unix.so nullok_secure > use_first_pass > ---- > > /etc/pam.d/common-password > ---- > password required pam_unix.so nullok obscure > min=4 max=50 md5 > ---- > > /etc/pam.d/common-session > ---- > session required pam_unix.so > session optional pam_mkhomedir.so umask=0077 > skel=/etc/skel/ > ---- > > /etc/pam.d/login > ---- > auth requisite pam_securetty.so > > auth requisite pam_nologin.so > > auth required pam_env.so > > @include common-auth > @include common-account > @include common-session > > session required pam_limits.so > session optional pam_lastlog.so > session optional pam_motd.so > > session optional pam_mail.so standard noenv > @include common-password > ---- >
What server OS? NT4? 2000? 2003? I have a debian X terminal server authenticating from an NT domain. Do you have the default domain for winbind set in smb.conf (iuse default domain) or are you remembering to enter your username as domain\username...? -- Matt ___________________________________________________________ Yahoo! Model Search 2005 - Find the next catwalk superstars - http://uk.news.yahoo.com/hot/model-search/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]