Are you trying to authenticate with pam_smb, Kerberos, or LDAP?  Do your
usernames in /etc/passwd match those in your AD?  Are you not using
/etc/passwd and using LDAP or NIS instead?  Do you get an 'invalid
password' error when you attempt to login?

Pam_smb_auth.so is fairly straightforward to setup if you have local
usernames that match those in your Active Directory.  It looks like
you've already setup your login PAM file.  What does your
/etc/pam_smb.conf file look like?

Also /bin/login has some issues with pam_smb if you're logging in
remotely (via Telnet, SSH, etc.).  The remote workstation from which you
login must have a reverse-DNS entry (i.e. your hostname can be resolved
by your IP address).  If it is not, login will seg-fault and your
session dies.

Our Linux box here at work has all user accounts in the Active Directory
and we use pam_smb to successfully authenticate users via SMB to our
2000 DC's

Let me know if you have any specific questions about implementation
details.

Regards,
Andy.



-----Original Message-----
From: Brian Lucas [mailto:[EMAIL PROTECTED]] 
Sent: Monday, September 23, 2002 12:19 PM
To: '[EMAIL PROTECTED]'
Subject: Active Directory Authentication via Linux


All,

I am stumped.  I have tried to setup my RH 7.2 box to authenticate
against a
Win 2K Active Directory domain but have had no luck.

Can anyone forward to me any great articles that have helped them do
this?

I have done the following to-date:

Installed the PAM_SMB module

Ran authconfig and set SMB, LDAP, and Kerberos 5 all on with server
credentials (though I was unclear if I were using the right port numbers
for
Kerberos (88, 749)

Modified /etc/pam.d/login and added the following line as the second
entry

auth    sufficient      /lib/security/pam_smb_auth.so

Thanks,
Brian



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to