Re: [Samba] Samba CVS

2002-10-11 Thread Gareth Davies
 Original Message -
From: James Brechtel [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, October 11, 2002 10:25 AM
Subject: [Samba] Samba CVS


 Ok, I've compiled samba from cvs and have it installed and running fine.
I'm
 trying to get winbindd setup so I can log in using windows login accounts.
 Now, my machine is joined to the domain properly (wbinfo can -a
authenticate
 names and password...  secret check succeeded... wbinfo -u wbinfo -g
 works...getent passwd and getent group both work fine..).  /etc/nsswitch
conf
 has lines

snip

Try it like this?

Also I presume you have compiled -with-pam and copied the .so to the
/lib/security directory and made the ln- s to so.2 and you've given winbind
a password to use? wbinfo -A Administrator%password

The /etc/pam.d/login

auth   required /lib/security/pam_securetty.so
auth   sufficient   /lib/security/pam_winbind.so
auth   sufficient   /lib/security/pam_unix.so use_first_pass
auth   required /lib/security/pam_stack.so service=system-auth
auth   required /lib/security/pam_nologin.so
accountsufficient   /lib/security/pam_winbind.so
accountrequired /lib/security/pam_stack.so service=system-auth
password   required /lib/security/pam_stack.so service=system-auth
sessionrequired /lib/security/pam_stack.so service=system-auth
sessionoptional /lib/security/pam_console.so

HTH
 Shaolin - IT Systems
 WB Ltd.
.: http://www.security-forums.com :.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba CVS

2002-10-11 Thread Andrew Bartlett
James Brechtel wrote:
 
 I tried that (the winbind lines were the same...do the others affect winbind?)
 and still didn't work.

The others do affect winbind.  Read the PAM docs.  Unless all the
winbind lines are 'sufficient', control will pass on to the next module,
which won't recognise the winbind username/password.  

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba CVS

2002-10-11 Thread James Brechtel

I tried that (the winbind lines were the same...do the others affect winbind?) 
and still didn't work.

Yes though, I compiled samba with --with-pam and copied the libnss_winbind.so 
to /lib and made the ln to .so.2  and the pam module to /lib/security.  I 
provided wbinfo with a login as well.  


On Friday 11 October 2002 9:30 am, you wrote:
  Original Message -
 From: James Brechtel [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, October 11, 2002 10:25 AM
 Subject: [Samba] Samba CVS

  Ok, I've compiled samba from cvs and have it installed and running fine.

 I'm

  trying to get winbindd setup so I can log in using windows login
  accounts. Now, my machine is joined to the domain properly (wbinfo can -a

 authenticate

  names and password...  secret check succeeded... wbinfo -u wbinfo -g
  works...getent passwd and getent group both work fine..).  /etc/nsswitch

 conf

  has lines

 snip

 Try it like this?

 Also I presume you have compiled -with-pam and copied the .so to the
 /lib/security directory and made the ln- s to so.2 and you've given winbind
 a password to use? wbinfo -A Administrator%password

 The /etc/pam.d/login

 auth   required /lib/security/pam_securetty.so
 auth   sufficient   /lib/security/pam_winbind.so
 auth   sufficient   /lib/security/pam_unix.so use_first_pass
 auth   required /lib/security/pam_stack.so service=system-auth
 auth   required /lib/security/pam_nologin.so
 accountsufficient   /lib/security/pam_winbind.so
 accountrequired /lib/security/pam_stack.so service=system-auth
 password   required /lib/security/pam_stack.so service=system-auth
 sessionrequired /lib/security/pam_stack.so service=system-auth
 sessionoptional /lib/security/pam_console.so

 HTH
  Shaolin - IT Systems
  WB Ltd.

 : http://www.security-forums.com :.

-- 
James Brechtel
Programmer, Harrison County Schools
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba