Re: [Samba] samba pdc + winbind possible ?
Hmm, the problem is that my winbind ain't working on the same PDC server. it failt to authenticate users.. (think it's something with the secered key? although that might be strange, coz the PDC server is doing it's job fine..) and makeing the server join it's one domain, against it self ?? (net rpc join ..) doesn't sound good to me?! also, i don't need the usernames and groups to be resolved (coz it's the PDC, they are already in the posix passwd and group files) pam_smb_auth, might be old and un supported, but it's small and doesn't need an extra service running, winbind does.. i've got winbind running on the other servers (mail and http), and there it works like a charm.. so. at the end, it all work.. even with old un-supported software.. HAHAHA Thx, Collen Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Collen wrote: | Hmm, sorry tryed it, read the info. but pam_smbpass is only if you | use the samba (textfile) passwd backend. | so it's no good, if you have a mysql or other passdb backend.! | but i found a solution, without using winbind! | | pam_smb_auth.so !! that did the trick.. | only i downloaded the ftp://ftp.samba.org/pub/samba/pam_smb/ version. | but i saw there's an other version included with the samba source. | (../source/pam_smbpass) ?? but there's no readme on how to compile it..? That code is extremely old and unsupported. Run winbindd on the Samba PDC. That works fine. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCOZn9IR7qMdg1EfYRAuMiAKDMa4tsHnOfHB3kBeR8xgCeUTIbqgCgiUWO jZ9W+/ws8HvWtQGzZztjNWQ= =eCPa -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba pdc + winbind possible ?
Hmm, sorry tryed it, read the info. but pam_smbpass is only if you use the samba (textfile) passwd backend. so it's no good, if you have a mysql or other passdb backend.! but i found a solution, without using winbind! pam_smb_auth.so !! that did the trick.. only i downloaded the ftp://ftp.samba.org/pub/samba/pam_smb/ version. but i saw there's an other version included with the samba source. (../source/pam_smbpass) ?? but there's no readme on how to compile it..? a well, it did the trick for me.. Later Collen Michael Gasch wrote: the list mentions, that winbind should not run on a DC at all...why don't you use pam_ldap/pam_smbpass module? greez -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba pdc + winbind possible ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Collen wrote: | Hmm, sorry tryed it, read the info. but pam_smbpass is only if you | use the samba (textfile) passwd backend. | so it's no good, if you have a mysql or other passdb backend.! | but i found a solution, without using winbind! | | pam_smb_auth.so !! that did the trick.. | only i downloaded the ftp://ftp.samba.org/pub/samba/pam_smb/ version. | but i saw there's an other version included with the samba source. | (../source/pam_smbpass) ?? but there's no readme on how to compile it..? That code is extremely old and unsupported. Run winbindd on the Samba PDC. That works fine. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCOZn9IR7qMdg1EfYRAuMiAKDMa4tsHnOfHB3kBeR8xgCeUTIbqgCgiUWO jZ9W+/ws8HvWtQGzZztjNWQ= =eCPa -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba pdc + winbind possible ?
Erghmm.. i have a question... i got a samba 3.0.11 service running as pdc. now i need to run winbind aswell on the same server.! i'm gonna use winbind to auth users with true a pam-module for an ftp service, also on the same server.. just wanna know if that is possible, or does it get screwed up ?? L8r COllen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba pdc + winbind possible ?
Hmm strainge problem occured.. i fired up winbind, and adjusted the pam files and all. but now i get plain-text authentication for user DOCENT returned NT_STATUS_ACCESS_DENIED (PAM: 4) and ofcoz' the login is denied !! what worries me is that, i'd got an imap http server running (on an other machine) and the pam/winbind works as a charm there (auth agains this pdc server) but when used localy that error pop's up, also we don't use plain-text passwords and all.. so i need a differend smb.conf for the winbind, then for the pdc (still same computer) ?? does someone have a clue where it goes wrong ? Greetings Collen Robert Schetterer wrote: Collen schrieb: Erghmm.. i have a question... i got a samba 3.0.11 service running as pdc. now i need to run winbind aswell on the same server.! i'm gonna use winbind to auth users with true a pam-module for an ftp service, also on the same server.. just wanna know if that is possible, or does it get screwed up ?? L8r COllen Hi, yes it is possible to use winbind on a smb pdc on the same machine, the only failure i got with it is that it does not resolve group names by wbinfo so i use the sid id of the desired group in ntlm-auth of squid and pptpd Regards -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba pdc + winbind possible ?
the list mentions, that winbind should not run on a DC at all...why don't you use pam_ldap/pam_smbpass module? greez -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba pdc + winbind possible ?
Hmm, does pam_smbpass only uses the smbpasswd text file, or does it uses the configed passwd backend (mysql) i just need a good way to authenticate ftp users against the samba users DB.. i don't use the passwd and shadow files for passwords to keep them out of other services on the server.. Thx, i'll try the pam_smbpass tomorrow.. Collen Michael Gasch wrote: the list mentions, that winbind should not run on a DC at all...why don't you use pam_ldap/pam_smbpass module? greez -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
