Bug 10375 - Bash-User-Login over winbind fails in latest version.
Bash-User-Login over winbind fails in latest version.
Status: RESOLVED WORKSFORME
Product: Samba 4.1 and newer
Classification: Unclassified
Component: Winbind
4.1.4
x64 Linux
: P5 normal
: ---
Assigned To: Samba QA Contact
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-01-13 15:06 UTC by Andreas Gottardi
Modified: 2014-01-28 22:58 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Gottardi 2014-01-13 15:06:08 UTC
Hello

I used to login with a Active-Directory-User using modified common-* files under /etc/pam.d.

File: /etc/pam.d/common-account
Added: account sufficient pam_winbind.so
Position: Before line with "pam_unix.so".

File: /etc/pam.d/common-auth
Added: auth sufficient pam_winbind.so
Position: Before line with "pam_unix.so".

File: /etc/pam.d/common-auth
Added: use_first_pass
Position: After "pam_unix.so nullok_secure", but same line.

File: /etc/pam.d/common-session
Added: session required pam_mkhomedir.so umask=0022 skel=/etc/skel
Added: session required pam_winbind.so
Position: Before any other line.

Server is added to AD with "net ads join -U Administrator"
File "nsswitch.conf" is modified with winbind for user and group.

Samba-Install-Dir: /opt/samba

Symbolic links:
/lib/x86_64-linux-gnu/libnss_winbind.so -> /opt/samba/lib/libnss_winbind.so
/lib/x86_64-linux-gnu/libnss_winbind.so.2 -> /lib/x86_64-linux-gnu/libnss_winbind.so
/lib/x86_64-linux-gnu/security/pam_winbind.so -> /opt/samba/lib/security/pam_winbind.so

Login and sudo works in 4.1.3 but fails in 4.1.4.
Comment 1 Björn Jacke 2014-01-28 22:58:10 UTC
you updated the libwbinfo also? This bug report has too few information here to say anything unfortunately. I also saw 4.1 setups with nss/pam winbind working, so this is not a generic problem. Do you have the possibility to debug this on your system some more? If you find evidence where exactly winbind is failing here, please reopen and add that information here. I make this a worksforme so far.
Comment 2 Björn Jacke 2014-01-28 22:58:51 UTC
... s/libwbinfo/libsbclient/