[prev in list] [next in list] [prev in thread] [next in thread] 

List:       pam-smb
Subject:    Re: [Pam_smb] pam_smb authentication
From:       tazervas () earthlink ! net
Date:       2004-12-07 15:01:32
Message-ID: 9004919.1102431692859.JavaMail.root () beaker ! psp ! pas ! earthlink ! net
[Download RAW message or body]

Yes, I use nolocal, similar to this:

auth        sufficient    /lib/security/$ISA/pam_unix.so
auth        sufficient    /lib/security/$ISA/pam_smb_auth.so use_first_pass nolocal

If I remember correctly you wanted to be able to use pam_smb with no unix accounts \
defined?  If I try to authenticate an account with pam_smb using nolocal that does \
not have a matching UNIX account I get a debug message similar to what you reported.  \
Could this be your problem?

I noticed from your previous message that you were running in "mixed" mode -- that \
should work.

Another think to check is to see if you are connecting to a different PDC then the \
one you think you are connecting to.  We know you are connecting to a PDC because \
you're debug shows a successful connection - but nothing says it is the PDC you think \
it is.  Verify that when you ping the PDC using nt-0000 as a hostname that you're \
getting the IP address of the right PDC.  It's a long shot, I know ...

Also, Phillip pointed out to me that the password needs to be less then (I think) 13 \
characters (he may have said 15).  Are you using shorter passwords?  That would fit \
with the problem you're having as well.

-----Original Message-----
From: Timothy Dinh <tdinh@broadcom.com>
Sent: Dec 6, 2004 6:49 PM
To: pam_smb@csn.ul.ie
Subject: [Pam_smb] pam_smb \
authentication	failure&In-Reply-To=41AF84FD.1010201@broadcom.com

Thank you all for your replies.
Yes, I checked everything you suggested.
It's frustating because based on what I heard it should work.
I even compiled a test program using Samba SMBauth library,
and successfully authenticated against the PDC, without PAM running.

Do you use "nolocal" on pam_smb_auth.so auth line in your pam.d config
file ?

Regards

_______________________________________________
Pam_smb mailing list
Pam_smb@csn.ul.ie
http://mailman.csn.ul.ie/mailman/listinfo.cgi/pam_smb

_______________________________________________
Pam_smb mailing list
Pam_smb@csn.ul.ie
http://mailman.csn.ul.ie/mailman/listinfo.cgi/pam_smb


[prev in list] [next in list] [prev in thread] [next in thread]