LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 08-18-2008, 04:27 PM   #1
dombrowsky
Member
 
Registered: Dec 2005
Location: New York
Distribution: Debian/GNU
Posts: 235

Rep: Reputation: 31
pure-ftpd with winbind, cannot authenticate


Its a shot in the dark, but I've wasted too much time to just go home empty handed today.

I've been trying all day to get pure-ftpd to work using winbind and active directory. I've set samba up and connected everything to the domain controler. These work fine:

* using "getent passwd" lists all the domain users along with the local
* using "wbinfo -a user%pass" authenticates with active directory

However, no matter what I do, if I try to log into the ftp site using a domain user, I get:

Code:
Aug 18 17:17:09 crm pure-ftpd(pam_unix)[14673]: could not identify user (from getpwnam(rjersey))
Aug 18 17:17:09 crm (IDLE)[14673]: (?@rome.com) [WARNING] Authentication  failed for user [rjersey]
Aug 18 17:17:12 crm (IDLE)[14673]: (?@rome.com) [INFO] Logout.
log of winbindd ->
Code:
[2008/08/18 17:17:09, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491)
  [14673]: request interface version
[2008/08/18 17:17:09, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524)
  [14673]: request location of privileged pipe
[2008/08/18 17:17:09, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth(751)
  [14673]: pam auth rjersey

(and then nothing...)
/etc/pam.d/pure-ftpd ->
Code:
auth       required     /lib/security/pam_securetty.so
auth       sufficient   /lib/security/pam_winbind.so
auth       required     /lib/security/pam_nologin.so
auth       sufficient   /lib/security/pam_pwdb.so use_first_pass shadow nullok
auth       required     /lib/security/pam_stack.so service=system-auth
account    required     /lib/security/pam_stack.so service=system-auth
password   required     /lib/security/pam_stack.so service=system-auth
session    required     /lib/security/pam_stack.so service=system-auth
session    optional     /lib/security/pam_console.so
/etc/pam.d/system-auth ->
Code:
auth       required pam_env.so
auth       sufficient pam_winbind.so
auth       sufficient   pam_unix.so likeauth nullok
auth       required pam_deny.so

account    required pam_unix.so

password   required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password   sufficient   pam_unix.so nullok md5 shadow use_authtok
password   required pam_deny.so

session    required pam_limits.so
session    required pam_unix.so
anyone have a clue? I'm not the first sysadmin who has hit this wall on configuring this server. In fact, the project has outlived 2 other administrators. Any help would be well appreciated.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
pure-ftpd-mysql activates pure-ftpd zvikamer Linux - Software 2 03-01-2008 12:11 PM
Winbind will not authenticate new 2003 domain users kaiser.jd Linux - Networking 2 04-09-2006 08:48 PM
cannot authenticate users in squid through winbind bahadur Linux - Networking 1 07-28-2004 06:51 PM
Authenticate to 2k3 PDC with winbind VertigoRay Linux - Networking 12 04-28-2004 10:00 AM
Authenticate to 2k3 PDC with winbind VertigoRay Linux - Software 0 09-27-2003 12:23 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 05:29 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration