If we set "config" option like:
auth sufficient pam_winbind.so config /etc/security/pam_winbind2.conf
Then pam_winbind.so failed and says:
May 5 10:27:46 samba32a login: pam_winbind(login): pam_parse: unknown opt
Created attachment 4113 [details]
briefly patch for Samba 3.3.4
This causes that "config_from_pam" section in _pam_parse does not recognize "config" option. Simply to skip "config" option (and the next argument) solves the problem.
All versions of Samba 3.0.23 or later has this problem.
At least Samba 3.0.34, pam_winbind does not work with unknown options (at least Samba 3.0.25 does).
Any volunteer to review this patch?
Why do you put in "config" into the pam line in the first place? Is this a standard feature of pam? Where can I read about what it means?
(In reply to comment #4)
> Why do you put in "config" into the pam line in the first place? Is this a
> standard feature of pam? Where can I read about what it means?
As far as I saw the source of pam_winbind, there is a option called "config".
So I checked and found the problem.
This option was added at Samba 3.0.23.
I think nobody of the samba team understands the need for this, the pam config should just be corrected eventually