From 9c72dd78f25be4a7ffa5af5a242670ec76930d6f Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Sat, 12 Mar 2005 22:34:38 +0000 Subject: Use new definition of , fixes a bunch of validity errors. (This used to be commit 3eb5c35e47951f320f7c2f4cd478a95f6d48236e) --- docs/Samba-HOWTO-Collection/PAM.xml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'docs/Samba-HOWTO-Collection/PAM.xml') diff --git a/docs/Samba-HOWTO-Collection/PAM.xml b/docs/Samba-HOWTO-Collection/PAM.xml index 239d322ecf..e9983766bc 100644 --- a/docs/Samba-HOWTO-Collection/PAM.xml +++ b/docs/Samba-HOWTO-Collection/PAM.xml @@ -622,7 +622,7 @@ PAM documentation for further helpful information. &smb.conf; PAM Configuration - There is an option in &smb.conf; called obey pam restrictions. + There is an option in &smb.conf; called . The following is from the online help for this option in SWAT; @@ -630,12 +630,12 @@ The following is from the online help for this option in SWAT; When Samba is configured to enable PAM support (i.e., ), this parameter will control whether or not Samba should obey PAM's account and session management directives. The default behavior is to use PAM for clear-text authentication only and to ignore any account or session management. Samba always -ignores PAM for authentication in the case of encrypt passwordsyes. +ignores PAM for authentication in the case of yes. The reason is that PAM modules cannot support the challenge/response authentication mechanism needed in the presence of SMB password encryption. -Default: obey pam restrictionsno +Default: no @@ -666,7 +666,7 @@ lock directory and will be remembered. The astute administrator will realize from this that the combination of pam_smbpass.so, -winbindd and a distributed passdb backend, +winbindd and a distributed , such as ldap, will allow the establishment of a centrally managed, distributed user/password database that can also be used by all PAM-aware (e.g., Linux) programs and applications. This arrangement can have particularly potent advantages compared with the use of Microsoft Active Directory Service (ADS) in so far as @@ -891,8 +891,8 @@ password required /lib/security/pam_stack.so service=system-auth My &smb.conf; file is correctly configured. I have specified - idmap uid12000, - and idmap gid3000-3500 + 12000, + and 3000-3500 and winbind is running. When I do the following it all works fine. -- cgit