Re: Holding Freeze for Shadow

[Steve Dunham <dunham@dunham.tcimet.net>]

Klee Dienes <klee@mit.edu> writes:

> Tim Sailer writes:
> 
> > This isn't good. I think (from a quick look at it) tha samba is 
> > reliant on shadow. Since I upgraded a box to the latest samba, passwords
> > don't authenticate. I may have missed something tho...
> 
> Actually, the problems with the most recent samba are due to a dumb
> mistake on my part.  When I added PAM support to samba, I forgot that
> I had added four necessary lines to my own version of /etc/pam.conf a
> while ago, but that these lines had not been added in the standard pam
> distribution.
> 
> Adding the following four lines to /etc/pam.conf should solve the
> problem:
> 
>   samba	auth	 required	/usr/lib/security/pam_unix_auth.so debug
>   samba	account  required	/usr/lib/security/pam_unix_acct.so
>   samba session	 required 	/usr/lib/security/pam_unix_session.so
>   samba	password required 	/usr/lib/security/pam_unix_passwd.so

> I'll be releasing a new version of libpam tonight that should fix the
> problem.

This might be more appropriate for the samba postinst script. (Add
these lines if they aren't there, don't change anything if they are.)

Steve
dunham@cps.msu.edu