I found a bug in nsswitch/pam_winbind.c which I reported to
https://bugzilla.samba.org/show_bug.cgi?id=3916
I submitted shortly a patch which solves the issue.
In _pam_parse (pam_winbind.c) there are two for statements which consume the
parameters argc and argv. The first loop decrements argc and increments argv
while trying to find out if a config file argument is given to pam_winbind.
The second for statement, which does the usual loop through argv, assumes that
argc and argv are at initial state so, in best case the loop is never entered
and parameters like use_first_pass are not recognized.
The patch can be found here:
https://bugzilla.samba.org/attachment.cgi?id=2030
Please report if this
Gerald (Jerry) Carter wrote:
>/ -----BEGIN PGP SIGNED MESSAGE-----
/>/ Hash: SHA1
/>/
/>/ Rex Dieter wrote:
/>/
/>>/ After upgrading to 3.0.23
/>>/ * I needed to add idmap options (I used idmap
/>>/ backend = rid), else winbind would only start in "netlogon
/>>/ proxy mode", and basically, didn't work. ):
/>/
/>/ What do you mean by wouldn't work? Wouldn't return
/>/ users? That is to be expected.
/
Nothing worked. In particular, authentication no longer functioned as
it did before the upgrade.
Like I said, no biggie. EASYFIX. Since, as you said, it probably
shouldn't have worked in that configuration before.
>>/ * login/authentication attempts now (most often)
/>>/ ask for a password *twice*. ??????
/>/
/>/ Known issue. We're workign on it.
/>/ https://bugzilla.samba.org/show_bug.cgi?id=3916
/
Thanks.
--
Mit freundlichen Grüßen
Dietrich Streifert
Visionet GmbH
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
