I think I've gotten a step closer. The entry in pam 'account sufficient pam_winbind.so' performs a getpwnam() on the username. For some reason, it doesn't seem to be going out the PDC to do this.
Is there a way to change this or get it to recognize the PDC? --- "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > Hi all, > > I am having a problem with pam_winbind.so. Is there > any documentation that tells exactly what each > module > with pam_winbind.so does? In other words, what does > the auth section do, what does the account section > do??? When I try to authenticate, the auth section > in > login pam seems to pass successfully, but the > account > section seems to fail. Here is my login module > > auth required pam_securetty.so > debug > auth required pam_winbind.so > debug > auth requisite pam_unix2.so > debug,nullok #set_secrpc > auth required pam_nologin.so debug > auth required pam_homecheck.so > debug > auth required pam_env.so debug > auth required pam_mail.so > debug > account sufficient pam_winbind.so > debug > account required pam_unix2.so > debug > password required pam_pwcheck.so > debug,nullok > password required pam_unix2.so > debug,nullok use_first_pass use\ > _authtok > session required pam_unix2.so > debug,none # debug or trace > session required pam_limits.so > debug > > -------------------and here is the log snippet------ > > Jul 18 16:29:24 pam_winbind[20827]: Verify user > `xxxx+xxxx' > Jul 18 16:29:25 pam_winbind[20827]: user 'xxxx+xxxx' > granted acces > Jul 18 16:15:36 pam_winbind[20781]: user `xxxx+xxxx' > not found > Jul 18 16:29:25 login[20827]: pam_unix2: > pam_sm_acct_mgmt() called > Jul 18 16:29:27 login[20827]: pam_unix2: pam_ldap > returned 10 > Jul 18 16:29:27 login[20827]: User not known to the > underlying authentication module > > I know the second pam_winbind.so error above is from > the account section because when I comment it out > and > retry, it disappears. > > Any ideas?? > > Thanks, > Aaron > > __________________________________ > Do you Yahoo!? > SBC Yahoo! DSL - Now only $29.95 per month! > http://sbc.yahoo.com > -- > To unsubscribe from this list go to the following > URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
