I was trying to avoid having users type the whole MY_DOMAIN_HERE+user thing, and have just the user be sufficient. It's been said recently on the list that winbind use default domain should not be used in the 2.x series, and it's appearance in the 2.x series was accidental.

without use default domain, is there any way to use pam_winbind to add the domain name to the front?

~ Daniel

[EMAIL PROTECTED] wrote:

On Wed, 2002-11-06 at 00:27, [EMAIL PROTECTED] wrote:

Samba 2.2.6. I've been looking for (without success) a doc that specifies what characters are valid in an NT login/password. A script will popen '/usr/bin/wbinfo -a MY_DOMAIN+"'+user+'"%"'+passw+'"' where user and passw are untrusted submitted values, so you can understand my concern. I want to keep things tight but not reject valid user/pass combinations.

Don't use it like that.  Instead use pam_winbind.  (Because this is a
standard interface that won't change).  If you are using perl for your
scripting language, then you can use Authen::PAM to hook in with it.

Andrew Bartlett



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to