Windows Domain Authentication
Hi!
Is anybody using the Windows Domain Authentication for his Debian
Machine?
I had it once working, but since I reinstalled the system, I can't get
it work.
wbinfo -u
and
kinit <username>
works without errors, so I think krb5.conf and smb.conf are correct.
However, I cannot login with the windows domain accounts, so I guess
pam.d must be misconfigured.
But I chose the same configuration as the last time:
/etc/pam.d/common-account:
----
account required /lib/security/pam_winbind.so
----
/etc/pam.d/common-auth
----
auth sufficient pam_winbind.so
auth required pam_unix.so nullok_secure use_first_pass
----
/etc/pam.d/common-password
----
password required pam_unix.so nullok obscure min=4 max=50 md5
----
/etc/pam.d/common-session
----
session required pam_unix.so
session optional pam_mkhomedir.so umask=0077 skel=/etc/skel/
----
/etc/pam.d/login
----
auth requisite pam_securetty.so
auth requisite pam_nologin.so
auth required pam_env.so
@include common-auth
@include common-account
@include common-session
session required pam_limits.so
session optional pam_lastlog.so
session optional pam_motd.so
session optional pam_mail.so standard noenv
@include common-password
----
Has anybody an idea how I can trace the error?
Which log/command can I check?
Greetings,
Marcus
Reply to: