ALT Linux sysadmins discussion
 help / color / mirror / Atom feed
From: "Малов Илья Александрович" <imalov@armd.ru>
To: ALT Linux sysadmins' discussion <sysadmins@lists.altlinux.org>
Subject: Re: [Sysadmins] Подключение AlrLinux 6.0 в лес AD на Win2k3
Date: Mon, 27 Jun 2011 12:08:56 +0400
Message-ID: <EE5061D32B5C3E46A2DA0C51AD22D4220123CDCB8829@EXMB-DON.hq.armd.ru> (raw)
In-Reply-To: <BANLkTimWh-fG+mtJXOG+zc3sjBgZe_DyGw@mail.gmail.com>

Вот:

cat /etc/pam.d/system-auth-winbind

#%PAM-1.0
auth        required    pam_securetty.so
auth        required    pam_nologin.so
#auth        sufficient    pam_winbind.so
auth        sufficient    pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login
auth        include        system-auth-use_first_pass
account        sufficient    pam_winbind.so
account        include        system-auth
password    sufficient    pam_winbind.so
password    include        system-auth-use_first_pass
# We use pam_mkhomedir to create home dirs for incoming domain users
# Note used umask, it will result in rwxr-x--x access rights
#session        required    pam_mkhomedir.so skel=/etc/skel/ umask=0026
session        required    pam_mkhomedir.so skel=/etc/skel/ umask=0077
session        include        system-auth


Тоже думаю что ошибка где-то в pam'ах. Но на вид вроде все как и должно быть.
Сижу. Копаю...


С уважением,
Системный администратор
Малов Илья Александрович
ARMADA | АРМАДА СОФТ
e-mail imalov@armd.ru
www.armd.ru


-----Original Message-----
From: sysadmins-bounces@lists.altlinux.org [mailto:sysadmins-bounces@lists.altlinux.org] On Behalf Of Boris Savelev
Sent: Monday, June 27, 2011 12:01 PM
To: ALT Linux sysadmins' discussion
Subject: Re: [Sysadmins] Подключение AlrLinux 6.0 в лес AD на Win2k3

> Jun 27 11:46:09 Alt2 gdm-session-worker[28514]: pam_winbind(gdm:auth): getting password (0x00000380)
> Jun 27 11:46:11 Alt2 gdm-session-worker[28514]: pam_winbind(gdm:auth): user 'CHE\armada' granted access

winbind сказал ОК!

> Jun 27 11:46:11 Alt2 gdm-session-worker[28524]: pam_tcb(gdm:auth): Credentials for user CHE\armada unknown
> Jun 27 11:46:11 Alt2 gdm-session-worker[28514]: pam_tcb(gdm:auth): Authentication failed for UNKNOWN USER from (uid=0)

tcb послал (что не удивительно)


показывайте system-auth-winbind. Сюдя по всему там ошибка

должно быть что-то типа:
auth [success=1 default=ignore] pam_tcb.so nullok_secure
auth required pam_winbind.so use_first_pass
но лучше подглядеть с рабочей машины

-- 
Boris
_______________________________________________
Sysadmins mailing list
Sysadmins@lists.altlinux.org
https://lists.altlinux.org/mailman/listinfo/sysadmins


      reply	other threads:[~2011-06-27  8:08 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-06-22 13:44 ` Anton Gorlov
2011-06-22 13:50   ` Малов Илья Александрович
2011-06-22 13:58 ` Boris Savelev
2011-06-22 14:02   ` Малов Илья Александрович
2011-06-24 13:24     ` Boris Savelev
2011-06-27  7:55       ` Малов Илья Александрович
2011-06-27  8:01         ` Boris Savelev
2011-06-27  8:08           ` Малов Илья Александрович [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=EE5061D32B5C3E46A2DA0C51AD22D4220123CDCB8829@EXMB-DON.hq.armd.ru \
    --to=imalov@armd.ru \
    --cc=sysadmins@lists.altlinux.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

ALT Linux sysadmins discussion

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \
		sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com
	public-inbox-index sysadmins

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.sysadmins


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git