PAM and SMB

[Kenrick Sy]

Hi,

I have a customer who has HP-UX 11i setup on their network and it authenticates users via their Active Directory. The HP-UX server has SSH service enabled.

They are using PAM and SMB. I'm trying to replicate their setup in my environment. I found out from their HP-UX machine that they have pam_smb.conf and pam_smb.usermap files. In my HP-UX machine, I dont have these files. What are the softwares that I have not yet setup? The problem is that I was able to login using Active Directory account to their HP-UX machine using telnet but I cannot login using Active Directory account to their machine using ssh.

Thanks.

Regards,

Kenrick

[RAC_1]

What is the error message that you get?? (ssh login error message)
Also have you set usePAM to yes in sshd_config file??

[Kenrick Sy]

Hi RAC,

I get an error:

Failed password for "username" from "client_ip_address" port 3080 ssh2

Here is the pam.conf file of the server.

Thanks.

Kenrick

[Kenrick Sy]

Hi RAC,

Attached also is the ssh_config file.

Thanks.

Kenrick

[RAC_1]

set usePAM to yes in sshd_config, restart sshd and check.

[Kenrick Sy]

Thanks RAC. I'm just wondering where these files pam_smb.conf and pam_smb.usermap come from. Is it from the Samba package?

[RAC_1]

pam_smb.usermap file wuold be file mapping AD users to SMB users. Do not know how other file is put in.

[Kenrick Sy]

Is there a PAM Samba depot software? The customer has these two files, however my Unix machine do not have these files.

[Thomas Bianco]

pam_smb.conf is the configuration file for the Samba Pam Module. it's probably not nessisary if your using AD (read "LDAP") authentication. the SMB pam module used NTLM authentication.

this is all from from memory, so don't poke me if i miss something.