> -----Original Message-----
> From: Javier Gostling
> Sent: Thursday, December 05, 2002 7:33 AM
> Subject: Re: NT Authentication With Pam
> 
> 
> On Wed, Dec 04, 2002 at 05:39:56PM -0600, Distribution Lists wrote:
> 
> > I want to configure my RH 8 box so that it authenticates 
> > users that log using telnet, ssh, etc... via a NT domain
> > controller. I suspect I have to use the a Pam module, but
> > I can't find any documentation to explain the setup.
> > 
> > Can someone point me in the right direction.
> 
> I just got this working a couple of weeks ago. Steps:
> 
> 1. Install the pam_smb package.
> 2. Run authconfig
> 3. Select SMB authentication, and specify your domain and servers
> 4. Create local accounts matching the domain logon accounts for your
> users.
> 5. Leave the password invalid (useradd does this as default in enigma
> and later).
> 6. Test and enjoy.

I'm not the OP, but I tried the above and... It worked!. Thanks! This is the
first time I have ever been able to get pam/smb auth to play together.
However, I am now getting the following message logged every time pam tries
to authenticate against my PDC. My login is successful though. The following
was an ssh connection (without using public key auth).

Dec  5 07:40:17 voyager sshd(pam_unix)[28594]: authentication failure;
logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=voyager.mydomain.com
user=scowles

Dec  5 07:40:17 voyager sshd(pam_unix)[28596]: session opened for user
scowles by (uid=500)

It's the first failure that bothers me. I always see this type of log entry
if I enter the wrong password (without using smb auth). 

Is this a normal side effect (shadow password failing), or am I missing some
other pam config setting?

Any pointers/links would be appreciated.

Thanks
Steve Cowles



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to