Prev: [Samba] pam_smbpass.so passdb.tdb support
Next: [Samba] How to define an UID range for BUILTIN accounts
From: Gaiseric Vandal on 3 Jul 2010 07:20
You need to first make sure that samba is working correctly before trouble
shooting the ftp component.

Are you using samba for windows clients?

The "testparm -v" should show your current configuration, including which is
the password backend. I do not see any reason to change to the older
"smbpasswd" format.

To verify that the user accounts to exist:
The "pdbedit -Lv" command will list the existing accounts.
You can also use the "tdbdump" command to look at the contents of a
tdb file.


To verify that the passwords are valid:
You can try logging into samba with the "sambaclient" command from
linux - that will let you know if your password is correct.
You can also use the "net use \\yourserver " command from windows
to verify your password





-----Original Message-----
From: samba-bounces(a)lists.samba.org [mailto:samba-bounces(a)lists.samba.org]
On Behalf Of Kandukuru_Suresh(a)emc.com
Sent: Saturday, July 03, 2010 6:30 AM
To: samba(a)lists.samba.org
Subject: [Samba] pam_smbpass.so passdb.tdb support

Hi,

Recently I have installed samba 3.4.8 on my device. Since then ftp
(vsftp,proftpd) which is taking users from samba database with
pam_smbpass.so is not working. After enabling detailed log I have
noticed it is looking for the passwords in smbpasswd
(/etc/samba/private) which is of zero size . I think all users passwd
are located in passwd.tdb.I could fix this by giving "passdb
backend=smbpasswd" .



somewhere I read smbpasswd is obsolete , and recommended to use tdbsam
...



and /etc/pam.d/ftp file is
---------------------
root(a)storage:/# cat /etc/pam.d/ftp
auth required /lib/security/pam_smbpass.so
account required /lib/security/pam_nologin.so
account required /lib/security/pam_smbpass.so
password required /lib/security/pam_smbpass.so
session required /lib/security/pam_unix.so

-------------------



How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?. Please
tell me I have been trying for last 2 days. Did not find anything.



Thanks

Suresh



--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: John H Terpstra on 3 Jul 2010 09:10
On 07/03/2010 05:29 AM, Kandukuru_Suresh(a)emc.com wrote:
> Hi,
>
> Recently I have installed samba 3.4.8 on my device. Since then ftp
> (vsftp,proftpd) which is taking users from samba database with
> pam_smbpass.so is not working. After enabling detailed log I have
> noticed it is looking for the passwords in smbpasswd
> (/etc/samba/private) which is of zero size . I think all users passwd
> are located in passwd.tdb.I could fix this by giving "passdb
> backend=smbpasswd" .
>
>
>
> somewhere I read smbpasswd is obsolete , and recommended to use tdbsam
> ..
>
>
>
> and /etc/pam.d/ftp file is
> ---------------------
> root(a)storage:/# cat /etc/pam.d/ftp
> auth required /lib/security/pam_smbpass.so
> account required /lib/security/pam_nologin.so
> account required /lib/security/pam_smbpass.so
> password required /lib/security/pam_smbpass.so
> session required /lib/security/pam_unix.so
>
> -------------------
>
>
>
> How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?. Please
> tell me I have been trying for last 2 days. Did not find anything.

You can not do that without changing the pam_smbpasswd code. This module
specifically operates against the smbpasswd file.

-John T.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Kandukuru_Suresh on 3 Jul 2010 10:00
Dear JHT,
Thanks for the quick reply.in
http://www.samba.org/samba/history/samba-3.4.0.html .
Samba team is recommending to use tdbsam.just wanted to know one thing,
from samba 3.4 default backend has been changed to tdbsam , why for one
of the module "pam_smbpass" in samba code is still looking for passwords
in smbpasswd?.is there any patch for that?. will this be removed in
higher versions of samba than > 3.4?.
I find several people asking the question on net.did not find any
answer.anticipating your reply.

Configuration changes
=====================

!!! ATTENTION !!!
The default passdb backend has been changed to 'tdbsam'! That breaks
existing
setups using the 'smbpasswd' backend without explicit declaration!
Please use
'passdb backend = smbpasswd' if you would like to stick to the
'smbpasswd'
backend or convert your smbpasswd entries using e.g. 'pdbedit -i
smbpasswd -e
tdbsam'.

The 'tdbsam' backend is much more flexible concerning per user settings
like 'profile path' or 'home directory' and there are some commands
which do not
work with the 'smbpasswd' backend at all.
-------------------------

Thanks
Suresh



-----Original Message-----
From: samba-bounces(a)lists.samba.org
[mailto:samba-bounces(a)lists.samba.org] On Behalf Of John H Terpstra
Sent: Saturday, July 03, 2010 6:31 PM
To: samba(a)lists.samba.org
Subject: Re: [Samba] pam_smbpass.so passdb.tdb support

On 07/03/2010 05:29 AM, Kandukuru_Suresh(a)emc.com wrote:
> Hi,
>
> Recently I have installed samba 3.4.8 on my device. Since then ftp
> (vsftp,proftpd) which is taking users from samba database with
> pam_smbpass.so is not working. After enabling detailed log I have
> noticed it is looking for the passwords in smbpasswd
> (/etc/samba/private) which is of zero size . I think all users passwd
> are located in passwd.tdb.I could fix this by giving "passdb
> backend=smbpasswd" .
>
>
>
> somewhere I read smbpasswd is obsolete , and recommended to use tdbsam
> ..
>
>
>
> and /etc/pam.d/ftp file is
> ---------------------
> root(a)storage:/# cat /etc/pam.d/ftp
> auth required /lib/security/pam_smbpass.so
> account required /lib/security/pam_nologin.so
> account required /lib/security/pam_smbpass.so
> password required /lib/security/pam_smbpass.so
> session required /lib/security/pam_unix.so
>
> -------------------
>
>
>
> How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?.
Please
> tell me I have been trying for last 2 days. Did not find anything.

You can not do that without changing the pam_smbpasswd code. This module
specifically operates against the smbpasswd file.

-John T.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: John H Terpstra on 3 Jul 2010 10:30
On 07/03/2010 08:50 AM, Kandukuru_Suresh(a)emc.com wrote:
> Dear JHT,
> Thanks for the quick reply.in
> http://www.samba.org/samba/history/samba-3.4.0.html .
> Samba team is recommending to use tdbsam.

Not just recommending - it is the default now. The smbpasswd file can
not contain the information needed to fully support current MS Windows
clients. The result is the smbpasswd format storage of MS Windows
networking credentials has been obsoleted.

> just wanted to know one thing,
> from samba 3.4 default backend has been changed to tdbsam , why for one
> of the module "pam_smbpass" in samba code is still looking for passwords
> in smbpasswd?.is there any patch for that?.

The pam_smbpasswd module has not been updated because noone has
contributed the necessary patches. The tdbsam backend has been
available since September 2003, so my take on this is that VERY few
people use pam_smbpasswd. If more were using it, someone might by now
have done something about the lack of support for tsbsam (and ldapsam
for that matter) in the pam_smbpasswd module.

> will this be removed in higher versions of samba than > 3.4?

Probably. Why don't you file a bug report on https://bugzilla.samba.org
? - that is the only way you might get action on this.

> I find several people asking the question on net.did not find any
> answer.anticipating your reply.

Sorry to disappoint you.

cheers,
John T.

> Configuration changes
> =====================
>
> !!! ATTENTION !!!
> The default passdb backend has been changed to 'tdbsam'! That breaks
> existing
> setups using the 'smbpasswd' backend without explicit declaration!
> Please use
> 'passdb backend = smbpasswd' if you would like to stick to the
> 'smbpasswd'
> backend or convert your smbpasswd entries using e.g. 'pdbedit -i
> smbpasswd -e
> tdbsam'.
>
> The 'tdbsam' backend is much more flexible concerning per user settings
> like 'profile path' or 'home directory' and there are some commands
> which do not
> work with the 'smbpasswd' backend at all.
> -------------------------
>
> Thanks
> Suresh
>
>
>
> -----Original Message-----
> From: samba-bounces(a)lists.samba.org
> [mailto:samba-bounces(a)lists.samba.org] On Behalf Of John H Terpstra
> Sent: Saturday, July 03, 2010 6:31 PM
> To: samba(a)lists.samba.org
> Subject: Re: [Samba] pam_smbpass.so passdb.tdb support
>
> On 07/03/2010 05:29 AM, Kandukuru_Suresh(a)emc.com wrote:
>> Hi,
>>
>> Recently I have installed samba 3.4.8 on my device. Since then ftp
>> (vsftp,proftpd) which is taking users from samba database with
>> pam_smbpass.so is not working. After enabling detailed log I have
>> noticed it is looking for the passwords in smbpasswd
>> (/etc/samba/private) which is of zero size . I think all users passwd
>> are located in passwd.tdb.I could fix this by giving "passdb
>> backend=smbpasswd" .
>>
>>
>>
>> somewhere I read smbpasswd is obsolete , and recommended to use tdbsam
>> ..
>>
>>
>>
>> and /etc/pam.d/ftp file is
>> ---------------------
>> root(a)storage:/# cat /etc/pam.d/ftp
>> auth required /lib/security/pam_smbpass.so
>> account required /lib/security/pam_nologin.so
>> account required /lib/security/pam_smbpass.so
>> password required /lib/security/pam_smbpass.so
>> session required /lib/security/pam_unix.so
>>
>> -------------------
>>
>>
>>
>> How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?.
> Please
>> tell me I have been trying for last 2 days. Did not find anything.
>
> You can not do that without changing the pam_smbpasswd code. This module
> specifically operates against the smbpasswd file.
>
> -John T.

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Gaiseric Vandal on 3 Jul 2010 17:40
Maybe the solution is one of the following

- use winbind, which includes update /etc/nsswitch.conf. This will let
all basic "unix" services (including ftp) authenticate against your windows
account.
- enabled password sync in samba so that your windows and unix passwords
are in sync. Then effectively your Windows user and password is the same as
your ftp ones.

-----Original Message-----
From: samba-bounces(a)lists.samba.org [mailto:samba-bounces(a)lists.samba.org]
On Behalf Of John H Terpstra
Sent: Saturday, July 03, 2010 10:26 AM
To: Kandukuru_Suresh(a)emc.com
Cc: samba(a)lists.samba.org
Subject: Re: [Samba] pam_smbpass.so passdb.tdb support

On 07/03/2010 08:50 AM, Kandukuru_Suresh(a)emc.com wrote:
> Dear JHT,
> Thanks for the quick reply.in
> http://www.samba.org/samba/history/samba-3.4.0.html .
> Samba team is recommending to use tdbsam.

Not just recommending - it is the default now. The smbpasswd file can
not contain the information needed to fully support current MS Windows
clients. The result is the smbpasswd format storage of MS Windows
networking credentials has been obsoleted.

> just wanted to know one thing,
> from samba 3.4 default backend has been changed to tdbsam , why for one
> of the module "pam_smbpass" in samba code is still looking for passwords
> in smbpasswd?.is there any patch for that?.

The pam_smbpasswd module has not been updated because noone has
contributed the necessary patches. The tdbsam backend has been
available since September 2003, so my take on this is that VERY few
people use pam_smbpasswd. If more were using it, someone might by now
have done something about the lack of support for tsbsam (and ldapsam
for that matter) in the pam_smbpasswd module.

> will this be removed in higher versions of samba than > 3.4?

Probably. Why don't you file a bug report on https://bugzilla.samba.org
? - that is the only way you might get action on this.

> I find several people asking the question on net.did not find any
> answer.anticipating your reply.

Sorry to disappoint you.

cheers,
John T.

> Configuration changes
> =====================
>
> !!! ATTENTION !!!
> The default passdb backend has been changed to 'tdbsam'! That breaks
> existing
> setups using the 'smbpasswd' backend without explicit declaration!
> Please use
> 'passdb backend = smbpasswd' if you would like to stick to the
> 'smbpasswd'
> backend or convert your smbpasswd entries using e.g. 'pdbedit -i
> smbpasswd -e
> tdbsam'.
>
> The 'tdbsam' backend is much more flexible concerning per user settings
> like 'profile path' or 'home directory' and there are some commands
> which do not
> work with the 'smbpasswd' backend at all.
> -------------------------
>
> Thanks
> Suresh
>
>
>
> -----Original Message-----
> From: samba-bounces(a)lists.samba.org
> [mailto:samba-bounces(a)lists.samba.org] On Behalf Of John H Terpstra
> Sent: Saturday, July 03, 2010 6:31 PM
> To: samba(a)lists.samba.org
> Subject: Re: [Samba] pam_smbpass.so passdb.tdb support
>
> On 07/03/2010 05:29 AM, Kandukuru_Suresh(a)emc.com wrote:
>> Hi,
>>
>> Recently I have installed samba 3.4.8 on my device. Since then ftp
>> (vsftp,proftpd) which is taking users from samba database with
>> pam_smbpass.so is not working. After enabling detailed log I have
>> noticed it is looking for the passwords in smbpasswd
>> (/etc/samba/private) which is of zero size . I think all users passwd
>> are located in passwd.tdb.I could fix this by giving "passdb
>> backend=smbpasswd" .
>>
>>
>>
>> somewhere I read smbpasswd is obsolete , and recommended to use tdbsam
>> ..
>>
>>
>>
>> and /etc/pam.d/ftp file is
>> ---------------------
>> root(a)storage:/# cat /etc/pam.d/ftp
>> auth required /lib/security/pam_smbpass.so
>> account required /lib/security/pam_nologin.so
>> account required /lib/security/pam_smbpass.so
>> password required /lib/security/pam_smbpass.so
>> session required /lib/security/pam_unix.so
>>
>> -------------------
>>
>>
>>
>> How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?.
> Please
>> tell me I have been trying for last 2 days. Did not find anything.
>
> You can not do that without changing the pam_smbpasswd code. This module
> specifically operates against the smbpasswd file.
>
> -John T.

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
 |  Next  |  Last
Pages: 1 2
Prev: [Samba] pam_smbpass.so passdb.tdb support
Next: [Samba] How to define an UID range for BUILTIN accounts