Re: [Samba] Issue with pam_winbind for MS AD authentication and moduleoptions

2007-04-05 Thread Andre Fernando Goldacker
iles, Noal wrote: > I haven't tested but perhaps this pam entry in system-auth will help > (insert before winbind account entry) > > account sufficient/lib/security/$ISA/pam_succeed_if.so uid < 100 > quiet > > Noal > > -Original Message- > From: A

Re: [Samba] Issue with pam_winbind for MS AD authentication and moduleoptions

2007-04-05 Thread Andre Fernando Goldacker
Hi, Thanks for your reply! As you said that you have a similiar issue, I think you can achieve this with pam_winbind module as well, with the cached_login option set and with "winbind offline logon" enabled in your smb.conf file if I'm correct. In both cases, I can't think of how it could work w

Re: [Samba] Issue with pam_winbind for MS AD authentication and moduleoptions

2007-04-04 Thread Andre Fernando Goldacker
I made a mistake, group in nsswitch.conf looks like this: group:files winbind sorry about that!! Andre Andre Fernando Goldacker wrote: > Hello! > > passwd, shadow and group looks as follows in nsswitch.conf: > > passwd: files winbind > shadow: files > group:

Re: [Samba] Issue with pam_winbind for MS AD authentication and moduleoptions

2007-04-04 Thread Andre Fernando Goldacker
Anyway thank's so far for your help, if you or anyone has a light... Andre Miles, Noal wrote: > You have files before winbind in /etc/nsswitch.conf for passwd, shadow, > group? > > Noal > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED

[Samba] Issue with pam_winbind for MS AD authentication and module options

2007-04-04 Thread Andre Fernando Goldacker
Hello! I've configured samba with winbind and pam_winbind module to authenticate users that connect to my linux box against MS AD. Works like a charm. If a user exists both in AD and locally, login should assume local users. Again, it works pretty well (It seems at least with my current config).

Re: [Samba] wbinfo not looking up groups in mixed MS NT/2k AD

2005-10-17 Thread Andre Fernando Goldacker
group when I run getent group, the user appears only after a while, more or less 10 minutes. Is there a setting or something in which it updates quicker?? Thanks in advance, André On Sat, 2005-10-15 at 17:24 -0600, John H Terpstra wrote: > On Friday 14 October 2005 12:25, Andre Fernando Golda

Re: [Samba] wbinfo not looking up groups in mixed MS NT/2k AD

2005-10-15 Thread Andre Fernando Goldacker
he user only appears after a while, more or less 10 minutes. Is there a setting or something in which it updates quicker?? Thanks in advance, André On Fri, 2005-10-14 at 10:14 -0300, Felipe Augusto van de Wiel wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > A

[Samba] wbinfo not looking up groups in mixed MS NT/2k AD

2005-10-14 Thread Andre Fernando Goldacker
Hello, I'm having trouble when I try do get a group SID from my domain, the user lookup and authentication is working fine. Actually what I'm trying to do is to authenticate squid against MS AD using winbind. I need to restrict access by group, so I'm using wbinfo_group.pl to do it. The machine ha