Bug 6323 - "config" option for pam_winbind does not work
Summary: "config" option for pam_winbind does not work
Status: RESOLVED WONTFIX
Alias: None
Product: Samba 3.3
Classification: Unclassified
Component: Winbind (show other bugs)
Version: 3.3.4
Hardware: x86 Linux
: P3 minor
Target Milestone: ---
Assignee: Guenther Deschner
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-05-04 20:45 UTC by TAKAHASHI Motonobu
Modified: 2020-12-22 00:07 UTC (History)
1 user (show)

See Also:


Attachments
briefly patch for Samba 3.3.4 (428 bytes, patch)
2009-05-04 20:52 UTC, TAKAHASHI Motonobu
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description TAKAHASHI Motonobu 2009-05-04 20:45:20 UTC
If we set "config" option like:

auth    sufficient      pam_winbind.so config /etc/security/pam_winbind2.conf

Then pam_winbind.so failed and says:

May  5 10:27:46 samba32a login[3282]: pam_winbind(login): pam_parse: unknown opt
ion: config/etc/security/pam_winbind2.conf
Comment 1 TAKAHASHI Motonobu 2009-05-04 20:52:11 UTC
Created attachment 4113 [details]
briefly patch for Samba 3.3.4

This causes that "config_from_pam" section in _pam_parse does not recognize "config" option. Simply to skip "config" option (and the next argument) solves the problem.
Comment 2 TAKAHASHI Motonobu 2009-05-04 21:19:55 UTC
All versions of Samba 3.0.23 or later has this problem.
At least Samba 3.0.34, pam_winbind does not work with unknown options (at least Samba 3.0.25 does).


Comment 3 Karolin Seeger 2009-09-29 03:19:48 UTC
Any volunteer to review this patch?
Comment 4 Volker Lendecke 2009-09-29 06:59:22 UTC
Why do you put in "config" into the pam line in the first place? Is this a standard feature of pam? Where can I read about what it means?

Volker
Comment 5 TAKAHASHI Motonobu 2010-03-06 09:24:25 UTC
(In reply to comment #4)
> Why do you put in "config" into the pam line in the first place? Is this a
> standard feature of pam? Where can I read about what it means?
> 
> Volker

As far as I saw the source of pam_winbind, there is a option called "config".
So I checked and found the problem.
This option was added at Samba 3.0.23. 
Comment 6 Björn Jacke 2020-12-22 00:07:52 UTC
I think nobody of the samba team understands the need for this, the pam config should just be corrected eventually