Re: samba / UNIX password sync

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Matthijs, thanks for the comments.

I failed to mention - this samba server is actually acting as a domain
controller, no windows servers involved.
Perhaps I did not get the whole concept right but I was under impression
that option

unix password sync = Yes

allows just that - keeping smb and Linux passwords in sync when smb password
is changed from windows client machine.

Regards, Vladimir

On 8/30/06, Matthijs.Sneijders@xxxxxxxxxxxxxx <
Matthijs.Sneijders@xxxxxxxxxxxxxx> wrote:

you might want to consider a slightly different approach to your setup,

-use pam_smb to authenticate users on your linux system using the windows
user database
-use nss  (/etc/nsswitch.conf)  to get userinformation from files/nis) You
still need the windows usernames available in passwd/nis
      for information like homefolder/shell/uid/gid

in smb.conf use server or domain security.  (domain is better but samba
must join the domain first)
this enables samba to authenticate incoming connections using the windows
user database

This way, all authentication is done using windows accounts,  no password
sync is needed anymore!



Matthijs Sneijders




     CORUS
     Research,
     Development
     &
     Technology

     Building
     3G16 room
     3-312

     P.O. Box
     10.000

     1970 CA
     IJMUIDEN

     phone       +31 (0)251-496400

     fax         +31 (0)251-470064

     mail        matthijs.sneijders@xxxxxxxxxxxxxx






|---------+------------------------------>
|         |           "Vladimir Kosovac" |
|         |           <vkosovac@xxxxxxxxx|
|         |           >                  |
|         |           Sent by:           |
|         |           redhat-list-bounces|
|         |           @redhat.com        |
|         |                              |
|         |                              |
|         |           30-08-2006 01:14   |
|         |           Please respond to  |
|         |           General Red Hat    |
|         |           Linux discussion   |
|         |           list               |
|         |                              |
|---------+------------------------------>

  >-------------------------------------------------------------------------------------------------------------------|
  |
|
  |       To:       redhat-list@xxxxxxxxxx
                                                                            |
  |
cc:
|
  |       Subject:  samba / UNIX password
sync                                                                        |

  >-------------------------------------------------------------------------------------------------------------------|




Hi all.

I am running very old version of samba (2.2.7) and cannot upgrade just
yet,
must make this work as it is (if possible).

After playing a bit with pam modules, I got first part of what I want to
do
going - windows user is able to change domain password from windows.
However, this change never gets synced to Linux password, although (I
think)
configuration is OK. Can someone give me some pointers to what else I need
to look at? Current relevant config is:

Server: Red Hat 7.1 / samba-2.2.7-2.7.2 (compiled from RH source with some
extra options, --with pam-smb_passwd included)
Client: Windows 2000 / some XP

#/etc/pam.d/samba
#%PAM-1.0
# The PAM configuration file for the `samba' service
#
auth       required     /lib/security/pam_smbpass.so nodelay
account    required     /lib/security/pam_pwdb.so audit nodelay
session    required     /lib/security/pam_pwdb.so nodelay
password   required     /lib/security/pam_smbpass.so nodelay
smbconf=/etc/samba/smb.conf

#/etc/samba/smb.conf
security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
pam password change = yes
obey pam restrictions = yes

What am I missing? Help appreciated,

Vladimir
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list



**********************************************************************
This transmission is confidential and must not be used or disclosed by
anyone other than the intended recipient. Neither Corus Group Plc nor
any of its subsidiaries can accept any responsibility for any use or
misuse of the transmission by anyone.
**********************************************************************

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

[Index of Archives]     [CentOS]     [Kernel Development]     [PAM]     [Fedora Users]     [Red Hat Development]     [Big List of Linux Books]     [Linux Admin]     [Gimp]     [Asterisk PBX]     [Yosemite News]     [Red Hat Crash Utility]


  Powered by Linux