Samba/Winbind password problem
 

Hey all you nice Linux gurus (and all the others who think they can a poor newbie like me!)

I'm trying to login to an NT4 server with Winbind but i'm obviously doing something wrong. I've configured Samba, joined the domain and "wbinfo -t" gives me a nice secret. I can also see all the users and groups. Now the problem is that when i boot (i'm using Mandrake 9.2) the domain users are shown on the user list but the login doesn't simply accept a single password! Am i supposed to override the Mandrake login box or what? I am clueless.

Here's my smb.conf:

[global]
printing = cups
pam password change = yes
printer admin = @"Domain Admins"
winbind gid = 10000-20000
load printers = yes
idmap uid = 10000-20000
dns proxy = no
map to guest = bad user
workgroup = GROUP
max log size = 50
log file = /var/log/samba3/log.%m
netbios name = COMP1
smb passwd file = /etc/samba3/smbpasswd
security = domain
winbind uid = 10000-20000
encrypt passwords = yes
password server = SERVER
idmap gid = 10000-20000
printcap name = cups
template shell = /bin/bash
obey pam restrictions = yes
unix password sync = no
preferred master = no
winbind separator = +
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
template homedir = /home/%U
winbind use default domain = yes

What seems to be the problem?

-yp

Did you configure PAM? Sometimes that gets in the way of stuff. I don't have any specific advice, because I have not tried to get that functionality to work in Mandrake before, but I know for a fact that there are PAM settings that control this.

-P

How am i supposed to configure PAM? I compiled Samba with pam and added "auth sufficient /lib/security/pam_winbind.so" into /etc/pam.d/webmin but it still didn't work. I tried to configure it with webmin as well but didn't understand a thing about it and decided to leave it alone. Any bright ideas?

-yp

Hey, how did you join the domain? this is my very problem!

If anyone can say how they got to join a domain I would love a very short description of how.

devfreak

this thread was established by the first post. please don't start another thread within a thread. if you will post your question in a new thread, i will gladly answer you there.