Hello, I think my typo may have been the problem after all. Doh!
It seems to be working properly now. A couple of additional things I've noticed: 'obey pam restrictions' must be set to yes to get the pam_mkhomedir module to do its job. The homes share must have /home/%D as the path. /home/%D/%U, and blank does not work. This connects the user to a share named after the login ID, but double-clicking that share shows all of the folders in the /home/%D path rather than just the contents of the user's folder. Which makes sense, but why doesn't /home/%D/%U or a blank entry work? Thanks to everyone for your assistance. More questions to come, I'm sure. :-) Sven -----Original Message----- From: John H. Reinhardt [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 09, 2002 7:25 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Please assist with Winbind issues! Sven, Being somewhat of a newbie, I cannot comment on everything that you've included here with authority, but I did notice a typographic error in the pam_winbind.so line for PAM account checking in your "/etc/pam.d/system-auth" file. It's pointed out below. Seems like that could be the problem since you can authenticate, but just not with the correct account. John Reinhardt >Message: 14 >From: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Date: Tue, 8 Oct 2002 17:29:23 -0400 >Subject: [Samba] Please assist with Winbind issues! > <<snip>> >Here is my /etc/pam.d/system-auth > >auth required /lib/security/pam_env.so >auth sufficient /lib/security/pam_winbind.so >auth sufficient /lib/security/pam_unix.so likeauth nullok >use_first_pa >ss >auth required /lib/security/pam_deny.so > >account sufficient /lib/secutiry/pam_winbind.so ^^^ <== Typo here... >account required /lib/security/pam_unix.so > >password required /lib/security/pam_cracklib.so retry=3 >password sufficient /lib/security/pam_unix.so nullok use_authtok md5 >shado >w >password required /lib/security/pam_deny.so > >session required /lib/security/pam_mkhomedir.so skel=/etc/skel/ >umask=0 >022 >session required /lib/security/pam_limits.so >session required /lib/security/pam_unix.so > >Here is my /etc/samba/smb.conf: > >[global] > workgroup = CHICAGO > netbios name = SILCHRS03 > server string = > security = DOMAIN > encrypt passwords = Yes > password server = * > log level = 3 > log file = /var/log/samba/log.%m > max log size = 50 > large readwrite = Yes > name resolve order = host wins bcast > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > load printers = No > preferred master = False > local master = No > domain master = False > dns proxy = No > wins server = 172.30.XXX.XXX > winbind uid = 10000-50000 > winbind gid = 10000-50000 > template shell = /bin/bash > guest account = ftp > invalid users = root bin daemon adm sync shutdown halt mail news > uucp operator gopher > printer admin = +PrinterAdmins > nt acl support = No > printing = cups > >[homes] > comment = Home Directories > read only = No > browseable = No > >[printers] > comment = All Printers > path = /var/spool/samba > printable = Yes > browseable = No > > >I really want this to work, so any help is appreciated. >Please include my e-mail address in any replies. > >Thank you! > > >Sven -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba