When logging in to RHEL6 workstations, with an AD password that is about to expire, gdm will fail to login and redirect you back to the login screen. SSH and "login" will display "erroneous converstation (5)" when logging in with the same account, but will proceed to the shell. pam_winbind uses the PAM_RADIO_TYPE message type to display a password change/expiration message in gdm. However, PAM 1.1.1-1.1.5 does not appear to completely implement this message type, or there is a problem with how pam_winbind implements it. For now, I have disabled this message type before compilation of pam_winbind, and it seems to have worked around the problem. However, I cannot change my password from a gdm or ssh login when this is done. I have done this by commenting out the following line in config.h ./source3/include/config.h #define HAVE_PAM_RADIO_TYPE 1
This bug was referenced in samba master: 20c85cc1da8d8c7f1932fbdd92128bb6dafad472
Created attachment 17143 [details] patch for 4.16 and 4.15
Comment on attachment 17143 [details] patch for 4.16 and 4.15 LGTM
Jule, please add the patch to 4.15 and 4.16, thanks!
Pushed to autobuild-v4-15-test. Patch is already in 4.16.
This bug was referenced in samba v4-15-test: 9d00a59761b6c209cb66dc79762a8e8f4fc979b5
Closing out bug report. Thanks!
This bug was referenced in samba v4-15-stable (Release samba-4.15.6): 9d00a59761b6c209cb66dc79762a8e8f4fc979b5