[Samba] pam_winbind fails with never expires password in v. 3.0.23c
Environment: Domain with NT4 PDC/BDCs; shares on Fedora Core 5 boxes with Samba 3.0.23c from Fedora. Access to shares through Windows clients and smbclient works perfectly. Users who try to login via ssh/telnet who have the password never expires flag set but also have old passwords (i.e., beyond the expiry days) get a your password has expired message and the login fails. If the password is reset, they can login with no problem. It appears as though everything works, but pam_winbind does not honor the never expires flag. This was previously listed as a bug. The release notes for 23c reference a fix, though it may only for AD based networks. Is this still an open problem for non AD domains, or have I missed something obvious (not that that ever happens to me...)? Thanks! -- bill Bill Greene Rubicon Group Ltd. Oak Brook Illinois USA -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] pam_winbind fails with never expires password
I'm helping a school district set up Samba for staff/student shares. The PDC/BDCs are running NT4. Samba is v 3.0.23a on Fedora Core 5 boxes. winbind is mapping the users. Access to shares through Windows clients or smbclient works perfectly. There is a desire to have some faculty access the server using, e.g., an ssh client (mostly for remote file access). When I try to log in using an account that has an old password but with password never expires set, I get the message Your password has expired and I can't log in. If I reset the password (and presumably reset the expiration date), I can log in with no problem. So everything works except when an account with an old password tries to log in, even though never expires is set. I've tried a number of alternatives in the pam and samba config files to no avail. Any direction would be appreciated. Thanks! -- bill Bill Greene Rubicon Group Ltd Oak Brook Illinois USA -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] pam_winbind fails with never expires password
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bill Greene wrote: So everything works except when an account with an old password tries to log in, even though never expires is set. I've tried a number of alternatives in the pam and samba config files to no avail. It's our bug. We're working on a fix. The work around is to set a long (but not infinite) expiry period. cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE2mO0IR7qMdg1EfYRAuINAKCwVIy+wglT7kwoAqayW5xZnKF/iACfdGIP n96NqFJVD3vjmpR/gNfHbbw= =CF0j -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
