Re: CVS with SMB/Winbind Authentication

[Steve McIntyre]

On Mon, Jan 26, 2004 at 01:07:33PM -0500, Dave Morrow wrote:
>
>Thanks for replying.....the only thing I am seeing in the logs (of
>relevance) is a line in the /var/log/secure
>
> cvs: password mismatch for adms_nt+morrowd: xxPHiHjG0rmeM vs. x 

Hmmm. That sounds like your auth config is pointing at the shadow
file. Which, in fact, is what your PAM config for cvs below says:

>>auth       required     /lib/security/$ISA/pam_unix.so
>>account    required     /lib/security/$ISA/pam_unix.so
>>auth       required     /lib/security/pam_winbind.so
>>account    required     /lib/security/pam_winbind.so 

If you change this to something like

auth       sufficient   /lib/security/pam_winbind.so
auth       required     /lib/security/$ISA/pam_unix.so
account    sufficient   /lib/security/pam_winbind.so 
account    required     /lib/security/$ISA/pam_unix.so

this may well do what you need. In PAM-speak, "required" on all lines
means that _all_ of the lines must succeed. Changing the order to the
new one here will allow an auth to succeed against winbind, or fall
back to pam_unix if it fails.

Let me know how you get on...

-- 
Steve McIntyre, Cambridge, UK.                                address@hidden
You lock the door
And throw away the key
There's someone in my head but it's not me

pgp8_V9lTdatp.pgp
Description: PGP signature