Bug 6323 - "config" option for pam_winbind does not work
Summary: "config" option for pam_winbind does not work
Status: RESOLVED WONTFIX
Alias: None
Product: Samba 3.3
Classification: Unclassified
Component: Winbind (show other bugs)
Version: 3.3.4
Hardware: x86 Linux
: P3 minor
Target Milestone: ---
Assignee: Guenther Deschner
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-05-04 20:45 UTC by TAKAHASHI Motonobu
Modified: 2020-12-22 00:07 UTC (History)
1 user (show)

See Also:

Attachments
briefly patch for Samba 3.3.4 (428 bytes, patch)
2009-05-04 20:52 UTC, TAKAHASHI Motonobu 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description TAKAHASHI Motonobu 2009-05-04 20:45:20 UTC 
If we set "config" option like:

auth    sufficient      pam_winbind.so config /etc/security/pam_winbind2.conf

Then pam_winbind.so failed and says:

May  5 10:27:46 samba32a login[3282]: pam_winbind(login): pam_parse: unknown opt
ion: config/etc/security/pam_winbind2.conf
Comment 1 TAKAHASHI Motonobu 2009-05-04 20:52:11 UTC 
Created attachment 4113 [details]
briefly patch for Samba 3.3.4

This causes that "config_from_pam" section in _pam_parse does not recognize "config" option. Simply to skip "config" option (and the next argument) solves the problem.
Comment 2 TAKAHASHI Motonobu 2009-05-04 21:19:55 UTC 
All versions of Samba 3.0.23 or later has this problem.
At least Samba 3.0.34, pam_winbind does not work with unknown options (at least Samba 3.0.25 does).
Comment 3 Karolin Seeger 2009-09-29 03:19:48 UTC 
Any volunteer to review this patch?
Comment 4 Volker Lendecke 2009-09-29 06:59:22 UTC 
Why do you put in "config" into the pam line in the first place? Is this a standard feature of pam? Where can I read about what it means?

Volker
Comment 5 TAKAHASHI Motonobu 2010-03-06 09:24:25 UTC 
(In reply to comment #4)
> Why do you put in "config" into the pam line in the first place? Is this a
> standard feature of pam? Where can I read about what it means?
> 
> Volker

As far as I saw the source of pam_winbind, there is a option called "config".
So I checked and found the problem.
This option was added at Samba 3.0.23.
Comment 6 Björn Jacke 2020-12-22 00:07:52 UTC 
I think nobody of the samba team understands the need for this, the pam config should just be corrected eventually