[Samba] PAM_MOUNT

2003-06-23 Thread Brett Hales
Does anybody on the list use pam_mount to mount smb file systems.

I have been looking at the instructions on
http://www.flyn.org/projects/pam_mount/index.html however they do not
seem to work and I cannot see any information in messages.

Thanks.
-- 
Brett Hales <[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Mapping/mount smb file systems without using password

2003-06-19 Thread Brett Hales
I have been working on getting a Linux workstation to authenticate
against a W2K ADS. I have this working successfully using
WinBind/PAM/Samba.

I would now like to go one step further and mount/map the Windows
network drives for the logged in client.

I have looked at the man page for smbclient, is it possible to pass
through the winbind password that was used for gdm authentication
through to mount.smb so the user does not have to type the password more
than once?

Even better would be to get the automounter to mount the various
directories needed against scripted automount maps.

Just wondering if the Samba team have progressed this far.


-- 
Brett Hales <[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WinBind and gdm/login

2003-06-18 Thread Brett Hales
On Thu, 2003-06-19 at 09:02, Patrick Gunerud wrote:
> The only way I could get it to work was to have the following gdm pam 
> config:
> 
Excellent - I have successfully logged into GDM using W2K ADS.

Thanks for the assistance.

Brett Hales

> #%PAM-1.0
> auth   requiredpam_env.so
> auth   sufficient   pam_winbind.so
> auth   sufficient   pam_unix.so use_first_pass
> auth   requiredpam_stack.so service=system-auth
> auth   requiredpam_nologin.so
> accountsufficient   pam_winbind.so
> accountrequiredpam_stack.so service=system-auth
> password   requiredpam_stack.so service=system-auth
> sessionrequired pam_mkhomedir.so skel=/etc/skel/ umask=0022
> sessionrequiredpam_stack.so service=system-auth
> sessionoptional pam_console.so
> 
> That will allow gdm to authenticate the user, but it will not allow 
> usernames with a + or \ separator so the way around that is to set the 
> following option:
> 
> winbind use default domain = yes
> 
> that will allow loging in with just the username.  The only problem 
> occurs when you have a user from another domain that needs to login.
> 
> Patrick
> 
> 
> Brett Hales wrote:
> 
> >Hi,
> >
> >I am currently trying to set up a RedHat 9 Linux client to authenticate
> >against a Windows 2000 Active Directory server.
> >
> >Using the Winbind documentation I have successfully authenticated
> >however I now have a problem with gdm.
> >
> >Jun 18 12:18:48 jerry pam_winbind[1192]: user 'AU+Bhales' granted acces
> >Jun 18 12:18:48 jerry pam_winbind[1192]: user 'AU+Bhales' granted acces
> >Jun 18 12:18:49 jerry gdm(pam_unix)[1192]: session opened for user
> >AU+Bhales by (uid=0)
> >Jun 18 12:18:49 jerry gdm[1202]: gdm_slave_session_start: User not
> >allowed to log in
> >
> >Does anybody know why gdm_slave_session_start is not allowing me to
> >login when pam_winbind has already authenticated me?
> >
> >Thanks,
> >
> >  
> >
-- 
Brett Hales <[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] WinBind and gdm/login

2003-06-17 Thread Brett Hales
Hi,

I am currently trying to set up a RedHat 9 Linux client to authenticate
against a Windows 2000 Active Directory server.

Using the Winbind documentation I have successfully authenticated
however I now have a problem with gdm.

Jun 18 12:18:48 jerry pam_winbind[1192]: user 'AU+Bhales' granted acces
Jun 18 12:18:48 jerry pam_winbind[1192]: user 'AU+Bhales' granted acces
Jun 18 12:18:49 jerry gdm(pam_unix)[1192]: session opened for user
AU+Bhales by (uid=0)
Jun 18 12:18:49 jerry gdm[1202]: gdm_slave_session_start: User not
allowed to log in

Does anybody know why gdm_slave_session_start is not allowing me to
login when pam_winbind has already authenticated me?

Thanks,

-- 
Brett Hales <[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] WinBind - 3.0.0beta1

2003-06-15 Thread Brett Hales
I am trying to get WinBind working against Windows 2000 ADS.

I am following the document
http://de.samba.org/samba/devel/docs/html/winbind.html.

I have successfully joined the samba server to the PDC domain.

/usr/local/samba/bin/net join -S PDC -U Administrator

The winbindd starts successfully however when I try to use wbinfo -u it
returns.

[EMAIL PROTECTED] root]# /usr/local/samba/bin/wbinfo -u
Error looking up domain users

And the /usr/local/samba/var/log.winbindd log file contains the below.

[2003/06/16 14:57:03, 1]
nsswitch/winbindd_util.c:add_trusted_domain(138) Added domain
AU.MYDOMAIN.COM  
[2003/06/16 14:57:03, 1] nsswitch/winbindd_util.c:init_domain_list(214)
Could not fetch sid for our domain AU.MYDOMAIN.COM

My samba.conf is 
[EMAIL PROTECTED] lib]# cat smb.conf
[global]
winbind separator = +
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
workgroup = AU.MYDOMAIN.COM
security = domain
password server = myad01


Can anybody advise why this is not working.


-- 
Brett Hales <[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Locks Location

2003-06-05 Thread Brett Hales
I am trying to move the lock directory to another location. In my smb.conf I have the 
below line.

 lock directory = /usr/local/samba/machine_name/var/locks

However when I try to start samba I get the following error.

[2003/06/06 16:03:13, 2] lib/interface.c:add_interface(81)
  added interface ip=150.207.3.6 bcast=150.207.3.255 nmask=255.255.255.0
[2003/06/06 16:03:13, 0] lib/pidfile.c:pidfile_create(93)
  ERROR: can't open /usr/local/samba/var/locks/smbd.pid: Error was No such file or 
directory

Do I need another directive in the smb.conf to tell samba where the smbd.pid file is. 
Otherwise why is it not picking up the lock directory as specified.

Thanks,

Brett Hales
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] secrets.tdb location

2003-06-04 Thread Brett Hales

I would like to change the location of secrets.tdb from 
/usr/local/samba/private/secrets.tdb to another location. 

Can this be done in smb.conf? If so how?

Thanks,

Brett Hales

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba