Re: [Samba] Help with Winbind

Aaron Bennett Wed, 19 Feb 2003 14:01:22 -0800

For debugging purposes, put the machine in console mode (init 4 or whatever, just kill kdm/xdm/kdm), and modify /etc/pam.d/login as directed in the Howto. Login is much simpler then gdm, so you don't have to worry about multiple levels of pam stuf.

best luck,

Aaron Bennett
UNIX Administrator
Franklin W. Olin College of Engineering

Khanh Tran wrote:

OK, so I added the lines to /etc/pam.d/gdm file. It's not a big deal for me
to re-install RH on this box, so I didn't bother with the telnet test.

Anyway, I put in my username and password, and get this error:
Feb 19 14:33:31 Martyr gdm(pam_unix)[835]: authentication failure; logname=
uid=0 euid=0 tty=:0 ruser=gdm rhost=localhost

But RH doesn't return to the username prompt, it asks for the password
again, so I enter the same password again, and get: Feb 19 14:33:45 Martyr pam_winbind[835]: user 'ADMIN+khanh' granted acces
Feb 19 14:33:45 Martyr gdm(pam_unix)[835]: check pass; user unknown
Feb 19 14:33:48 Martyr gdm-binary[835]: Couldn't authenticate user
Feb 19 14:33:48 Martyr gdm(pam_unix)[835]: 1 more authentication failure;
logname= uid=0 euid=0 tty=:0 ruser=gdm rhost=localhost

I'm guessing from the error that the box is trying to authenticate the user
to the local passwd file? Anyway, thanks again for the help, but any more
ideas?

Khanh Tran
Network Operations
Sarah Lawrence College

-----Original Message-----
From: bin wen [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 19, 2003 2:24 PM
To: Khanh Tran; '[EMAIL PROTECTED]'
Subject: RE: [Samba] Help with Winbind

Looks like you are login through GDM, so you probably
have to change the /etc/pam/gdm file too. Before you
do that, you may want to just do a telnet to the RH
see what happens.
--- Khanh Tran <[EMAIL PROTECTED]> wrote:
I changed the pam conf per the 12.5.3.6 section. Here's what I've got:

pam.d/login:
#%PAM-1.0
auth required /lib/security/pam_securetty.so
auth sufficient /lib/security/pam_winbind.so
auth sufficient /lib/security/pam_unix.so
use_first_pass
auth required /lib/security/pam_stack.so
service=system-auth
auth required /lib/security/pam_nologin.so
account sufficient /lib/security/pam_winbind.so
account required /lib/security/pam_stack.so
service=system-auth
password required /lib/security/pam_stack.so
service=system-auth
session required /lib/security/pam_stack.so
service=system-auth
session optional /lib/security/pam_console.so

Khanh Tran
Network Operations
Sarah Lawrence College

-----Original Message-----
From: bin wen [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 19, 2003 1:58 PM
To: Khanh Tran; '[EMAIL PROTECTED]'
Subject: Re: [Samba] Help with Winbind

From your log file, it looks like the RH still uses
the pam_unix module to authenticate. Have you
changed
the pam configuration to use winbindd following the
isntruction in section 12.5.3.6 ?
--- Khanh Tran <[EMAIL PROTECTED]> wrote:
I've been trying for weeks to get winbind working
with RedHat Linux 8.0.
I've got everything setup per the winbind docs on
http://www.samba.org/samba/docs/Samba-HOWTO-Collection.html#WINBIND.
I've successfully joined my NT4 domain with
smbpasswd -j DOMAIN -r PDC -U
Administrator.  Running wbinfo -u returns my
domain
user list, as well as
wbinfo -g returning my domain groups.  getent
passwd
returns the domain user
list in the passwd format, and getent group does
the
same. I've then set up
my /etc/pam.d/login to match the one on the HOWTO.

The problem is that when I go to login (username:
DOMAIN+user), the
workstation won't log me in. My messages log
returns only:

Feb 19 13:20:46 Martyr gdm(pam_unix)[835]: check
pass; user unknown
Feb 19 13:20:46 Martyr gdm(pam_unix)[835]:
authentication failure; logname=
uid=0 euid=0 tty=:0 ruser=gdm rhost=localhost Feb 19 13:20:47 Martyr gdm-binary[835]: Couldn't
authenticate user

Any help is greatly appreciated, and thanks in
advance!

Khanh Tran
Network Operations
Sarah Lawrence College

--
To unsubscribe from this list go to the following
URL and read the
instructions:
http://lists.samba.org/mailman/listinfo/samba


__________________________________________________
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com
__________________________________________________
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Help with Winbind

Reply via email to