[Samba] Samba CVS

[James Brechtel]

Ok, I've compiled samba from cvs and have it installed and running fine.  I'm 
trying to get winbindd setup so I can log in using windows login accounts.  
Now, my machine is joined to the domain properly (wbinfo can -a authenticate 
names and password...  secret check succeeded... wbinfo -u wbinfo -g 
works...getent passwd and getent group both work fine..).  /etc/nsswitch conf 
has lines

passwd: files winbind nisplus nis
shadow: files nisplus nis
group:  files winbind nisplus nis


/etc/pam.d/login has

auth   required /lib/security/pam_securetty.so
auth   required /lib/security/pam_winbind.so
auth   required /lib/security/pam_stack.so service=system-auth
auth   required /lib/security/pam_nologin.so
accountsufficient   /lib/security/pam_winbind.so
accountrequired /lib/security/pam_stack.so service=system-auth
password   required /lib/security/pam_stack.so service=system-auth
sessionrequired /lib/security/pam_stack.so service=system-auth
sessionoptional /lib/security/pam_console.so

.

Now when all the samba daemons (smbd, nmbd and winbindd) are running...login 
doesn't work at all.  I can su (to root or local accounts) from existing 
terminals but logging in from vty doesn't work at all (using local or windows 
accounts).  Su'ing to a windows account doesn't work however.

I ran winbindd in debug and watched it whenever I tried to su to a windows 
account...and it doesn't say the password was wrong...but it doesn't say it 
was successful either (like it does when I authenticate with wbinfo -a).

Anyone have any idea or is this just how the current cvs code acts?

Thanks in advance,


-- 
James Brechtel
Programmer, Harrison County Schools
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba CVS

[James Brechtel]

I tried that (the winbind lines were the same...do the others affect winbind?) 
and still didn't work.

Yes though, I compiled samba with --with-pam and copied the libnss_winbind.so 
to /lib and made the ln to .so.2  and the pam module to /lib/security.  I 
provided wbinfo with a login as well.  


On Friday 11 October 2002 9:30 am, you wrote:
>  Original Message -
> From: "James Brechtel" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Friday, October 11, 2002 10:25 AM
> Subject: [Samba] Samba CVS
>
> > Ok, I've compiled samba from cvs and have it installed and running fine.
>
> I'm
>
> > trying to get winbindd setup so I can log in using windows login
> > accounts. Now, my machine is joined to the domain properly (wbinfo can -a
>
> authenticate
>
> > names and password...  secret check succeeded... wbinfo -u wbinfo -g
> > works...getent passwd and getent group both work fine..).  /etc/nsswitch
>
> conf
>
> > has lines
>
> 
>
> Try it like this?
>
> Also I presume you have compiled -with-pam and copied the .so to the
> /lib/security directory and made the ln- s to so.2 and you've given winbind
> a password to use? wbinfo -A Administrator%password
>
> The /etc/pam.d/login
>
> auth   required /lib/security/pam_securetty.so
> auth   sufficient   /lib/security/pam_winbind.so
> auth   sufficient   /lib/security/pam_unix.so use_first_pass
> auth   required /lib/security/pam_stack.so service=system-auth
> auth   required /lib/security/pam_nologin.so
> accountsufficient   /lib/security/pam_winbind.so
> accountrequired /lib/security/pam_stack.so service=system-auth
> password   required /lib/security/pam_stack.so service=system-auth
> sessionrequired /lib/security/pam_stack.so service=system-auth
> sessionoptional /lib/security/pam_console.so
>
> HTH
>  Shaolin - IT Systems
>  WB Ltd.
>
> : http://www.security-forums.com :.

-- 
James Brechtel
Programmer, Harrison County Schools
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba