The work around That I have developed for this is diagramed as follows:

------------     -----------      -----------------------------------
| linux    |<--->| samba 2 |<---->| Samba 3   user info, passwords  |
| clients  |     | Server  |      | Server     File share           |
------------     | authN   |      -----------------------------------
                 -----------                  ^
                                              |
------------                                  |
| Windows  |<---------------------------------/
| Clients  |
------------

After countless configurations, rebuild and even OS reinstalls from square one I got the above to work. Samba 2 server acts as a domain member server and passes user auth to the samba 3 server.

I do not know how this relates but as I stated in previous posts, if I try to authenticate linus directly against Samba 3 using Pam module the following error shows in the samba log

 [2005/11/17 14:21:53, 3] smbd/connection.c:yield_connection(76)
     yield_connection: tdb_delete for name  failed with error Record
does not exist.

When I investigate user info with pdbedit I see the the NT username value is blank. I have seen posting that state it is an unused value. Maybe it is not related at all, but it makes me curious...

Thanks,


BTW, pam_winbindd is not an option.

--
Matt Finlayson
Information Technology Specialist
School of Engineering and Computer Science
Washington State University Vancouver
360-546-9481

It has been said, “A day that is without troubles is not fulfilling.
Rather, give me a day of troubles well handled so that I can be content
with my achievements.”



Andrew Bartlett wrote:
On Mon, 2005-11-28 at 10:46 -0800, Matt Finlayson wrote:

I am having trouble getting pam_smb_auth.so to work with the latest version of samba. It was working with the 2.* versions but when I tried to upgrade to Samba 3 authentication fails on the client.

I do not know if I need to reconfigure samba to work with pam_smb_auth.so, I have tried man options. Please also refer to:


You mention that you are thinking of using pam_winbindd.  I strongly
suggest that option.

Andrew Bartlett

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to