CIFS & pam_ldap

[Schelstraete Bart_1]

Hello,

Does somebody knows if it's possible to use pam_ldap for Samba authentication. (on HP-UX 11.11)
For the moment I'm using pam_ldap, so that the user can use their ldap userid and password to login into the machine.
Now I want to accomplish the same for Samba.
Does somebody know if this is possible. (samba authentication with pam_ldap)

Please note that this is only for authentication.

tnx in advance,
Bart

[Steven E. Protter]

This document has some general information on how to do that.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B3920-90091/B3920-90091_top.html&con=/hpux/onlinedocs/B3920-90091/00/00/31-con.html&toc=/hpux/onlinedocs/B3920-90091/00/00/31-toc.html&searchterms=LDAP%7cauthentication%7cCIFS&queryid=20030505-095337

This thead has specfic information and more links
http://search.hp.com/redirect.html?url=http%3A//forums.itrc.hp.com/cm/QuestionAnswer/1,,0x76bc3a7b3682d611abdb0090277a778c,00.html&qt=CIFS+%2BLDAP+%2Bauthentication&hit=1

As does this thread.

http://search.hp.com/redirect.html?url=http%3A//forums.itrc.hp.com/cm/QuestionAnswer/1,,0x01369607df6ed711abdc0090277a778c,00.html&qt=CIFS+%2BLDAP+%2Bauthentication&hit=4

SEP

[Schelstraete Bart_1]

Hello,

I already checked those documents before, but that didn't help me.

they were talking about this:
'as ldap-ux provides hpux-user-validation against a directory server by editing the /etc/pam.conf to use the libpam-ldap.1 (I think) This follows strictly that if you choose "security = user" in smb.conf for cifs along with "encrypt passwords = no" that a password is send to the unix-passwd-mechanism. '

a) What entry needs to be added to smb.conf so that samba uses pam.conf instead of his own password file

b) currently I have - for example- the following entry in pam.conf
login account required .../../lib*

What do I need to enter for samba?



Bart

[Bob Neal-Joslin]

Unfortunately the currently available version of the Samba server on HP-UX does not support user session authentication through LDAP (nor through PAM.)

Bob Joslin

[Zeev Schultz]

samba can authenticate users in 2 ways basically - local (encrypted or not) files or
win nt dc/win 2k ad.so the only possible workaround here is to syncronize ldap with win2k ad.what are you using your samba with -
win2k or win nt and what is samba security method - user / server or domain member?