LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 02-20-2004, 11:19 PM   #1
Micah
Member
 
Registered: Apr 2002
Location: OK, USA
Distribution: Slackware64 14
Posts: 180

Rep: Reputation: 31
PAM config for SAMBA


I have recently installed PAM 0.77 (I think) and SAMBA 3.0.2a

The only thing PAM is setup for is SAMBA (currently)

When I login to SWAT (the problem only lies here) I cannot login as ROOT or myUserAccount (both have no passwords)... I created another account called sample with a password of sample and it logs into SWAT perfectly!

What do I need to put in my smb.conf OR/AND /etc/pam.d/samba file?

Current /etc/pam.d/samba:
Code:
  auth     required    pam_unix.so
  account  required    pam_unix.so
Again: I can login as sample/sample but not root/[nopass] myUserAccount/[nopass]

I have been googling all day (Haven't checked the forms part yet...)
 
Old 02-21-2004, 04:50 PM   #2
Micah
Member
 
Registered: Apr 2002
Location: OK, USA
Distribution: Slackware64 14
Posts: 180

Original Poster
Rep: Reputation: 31
Arrow Update

Ok, I have messed with my file for hours now...

It seems, with my current config (will post in an hour or two as my Laptop hasn't arrived yet) will allow ANY valid username to login with ANY password (Has to have a password though)

Not what I was looking for but it does confirm it is a PAM setting...

Could I get people with Slack, Debian, and other Distros to post your /etc/pam.d/samba files?

And I can't get pam_smbpass to compile - the readme says to use like Samba 2.2.?alpha2 (or somthing like that) and it says to just run make but I have no configs in that directory so I don't know whats up...

Also, this seems to be either new or just not documented... (LOL, I have found more info in Japanese than I have n English!)
 
Old 02-21-2004, 08:54 PM   #3
Micah
Member
 
Registered: Apr 2002
Location: OK, USA
Distribution: Slackware64 14
Posts: 180

Original Poster
Rep: Reputation: 31
Code:
   auth       required    pam_permit.so  nullok shadow    ## Normal users 
   auth       required    pam_permit.so  service=system-auth  ## Normal users 
   auth       sufficient   pam_unix.so    nullok               ## Blank pass usrs 
   account    required    pam_permit.so  service=system-auth  ## Normal users 
   account    sufficient  pam_unix.so                         ## Blank pass usrs  
   session    required    pam_permit.so  service=system-auth  ## Normal users 
   password   required    pam_permit.so  nullok               ## Normal users
 
Old 02-22-2004, 01:59 AM   #4
Micah
Member
 
Registered: Apr 2002
Location: OK, USA
Distribution: Slackware64 14
Posts: 180

Original Poster
Rep: Reputation: 31
Lightbulb

Ok all... I believe I have it working as well as it will...

Now, root and myOtherAccount with blank passwords can login as long as I enter something in for the password AND my other accounts that have actual passwords require the correct password! (I'll give root a password eventually =)

Here is my /etc/pam.d/samba file:
Code:
auth     required     pam_nologin.so  #does nothin?
auth     required     pam_env.so
auth     required     pam_unix.so    nullok use_authtok shadow
account  required     pam_unix.so  
password required     pam_env.so     nullok use_authtok shadow
password required     pam_unix.so    nullok
password required     pam_permit.so  nullok use_authtok shadow #Doesn't seem to get here
Also note: on each line I also have debug at the end...

I'm not sure which lines work, I was trying everything and this seems to work well enough for me now =)

I hope this helps Others in the future!!!

Micah
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
pam.d/samba entries kcv Linux - Networking 0 10-19-2005 01:34 PM
pam config balajee Linux - Software 1 05-25-2005 12:07 PM
Simple Samba and PAM -> NT_STATUS_LOGON_FAILURE subspawn Linux - Software 1 01-17-2005 07:41 AM
bad Pam config => unable to login anymore nikoon Linux - Security 3 11-05-2004 08:45 AM
Samba, PAM and LDAP Linh Linux - Networking 0 05-09-2003 10:07 AM


All times are GMT -5. The time now is 08:31 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration