hi'
Ive followed the steps from http://weblog.bignerdranch.com/?p=6 http://weblog.bignerdranch.com/?p=6&page=2 &page=2 and http://forums.fedoraforum.org/showthread.php?t=92804 I'm trying to login as a domain user in x (gdm)
If a boot the pc and try to login i get the following error in /var/log/messages:
Jan 9 13:10:35 zgltsp03 gdm(pam_unix)[2812]: check pass; user unknown Jan 9 13:10:35 zgltsp03 gdm(pam_unix)[2812]: authentication failure; logname= u id=0 euid=0 tty=ws001.domain.lan:0 ruser= rhost=ws001.domain.lan Jan 9 13:10:35 zgltsp03 pam_winbind[2812]: user 'domain+daniel' granted access Jan 9 13:10:35 zgltsp03 gdm(pam_unix)[2812]: could not identify user (from getpwnam(domain+daniel)) Jan 9 13:10:35 zgltsp03 gdm-binary[2812]: Couldn't set acct. mgmt for domain+daniel
now if i call in a shell de command "wbinfo -u -g" and then try to login everything works fine! almost as if the wbinfo would remind the server that those users could login..
after a few minutes (2 or 3) i try to login again with the same user and it doesnt work again!!
this line is quite strange, no? .... could not identify user (from getpwnam(domain+daniel))
my krb5 file:
[logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log
[libdefaults] ticket_lifetime = 24000 default_realm = domain.LAN # default_tgs_enctypes = des-cbc-crc des-cbc-md5 # default_tkt_enctypes = des-cbc-crc des-cbc-md5 forwardable = true proxiable = true dns_lookup_realm = true dns_lookup_kdc = true
[realms] domain.LAN = { kdc = 10.0.0.100:88 # admin_server = 10.0.0.100:749 default_domain = domain.lan }
[domain_realm] .domain.lan = DOMAIN.LAN domain.lan = DOMAIN.LAN
[kdc] profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults] pam = { debug = false ticket_lifetime = 36000 renew_lifetime = 36000 forwardable = true krb4_convert = false }
and my smb.conf file:
[global]
workgroup = DOMAIN netbios name = SERVIDORES server string = LTSP Server winbind separator = +
dns proxy = no
idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 winbind enum users = yes winbind enum groups = yes template shell = /bin/bash
winbind use default domain = no # username map = /etc/samba/smbusers
security = ads encrypt passwords = yes realm = DOMAIN.LAN password server = controller.domain.lan socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = no domain master = False preferred master = False
printcap name = /etc/printcap load printers = yes proxy = no
PS: i replaced the real domain name with "domain"
many thanks!