topic Re: Login to Linux CMS via pam_winbind in Server Management - Systems Insight Manager

Login to Linux CMS via pam_winbind

Sebastian.Koehler — Thu, 29 Jan 2009 11:09:01 GMT

Is there a way to make Active Directory logins via pam_winbind possible for a HP SIM 5.3 on RHEL5 U2? Usual logins via SSH work fine. I've tried to modify /etc/pam.d/mxpamauthrealm.

When I try to login using "DOMAIN\username" the following error is found in /var/opt/mx/logs/mxdomainmgr.0.log.

Authentication failed for user username - User not known to the underlying authentication module
Username/Password Authentication failed for user: username

Regards,
Sebastian

Re: Login to Linux CMS via pam_winbind

Sebastian.Koehler — Thu, 29 Jan 2009 21:32:53 GMT

Solved the issue. It seems that the Linux CMS login windows removes the DOMAIN\ form DOMAIN\username. So I had to add winbind use default domain = yes to smb.conf. This will cause pam_winbind to "suggest" the default domain.

/etc/samba/smb.conf
[global]
workgroup = DOMAIN
realm = DOMAIN.COM
netbios name = NODENAME
preferred master = no
server string = Samba file and print server
security = ADS
password server = *
encrypt passwords = yes
max log size = 50
printcap name = cups
printing = cups
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
#winbind separator = +
winbind nested groups = yes
winbind offline logon = true
winbind use default domain = yes
template homedir = /
template shell = /bin/bash
#log level = 10

comment = Home Directories
valid users = %S
read only = No
browseable = No

comment = All Printers
browseable = no
printable = yes
guest ok = yes

Re: Login to Linux CMS via pam_winbind

Sebastian.Koehler — Thu, 29 Jan 2009 21:34:14 GMT

Add "winbind use default domain = yes" to smb.conf to make pam_winbind to append DOMAIN to username.