On Fri, 2009-06-05 at 08:09 -0700, Vadym Chepkov wrote: > --- On Fri, 6/5/09, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > > > Found this thread: > > http://www.mail-archive.com/samba@xxxxxxxxxxxxxxx/msg15640.html > > > > Can you configure winbind with use default domain=yes? > > > > I do have have such setup. Both type of users are affected: local and "winbind" Can you append "debug" to the arguments to the latter instance of pam_selinux.so, e.g.: session required pam_selinux.so open env_params debug And then login again via ssh and look in /var/log/secure? -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list