telnet from NT using pam_smb_auth

Thread View: csu.unix.linux

2 messages

[T] Back to Threads [V] Tree View [G] Group Articles

2 total messages Started by Adam Carheden Fri, 17 Mar 2000 00:00

#187

Author: Adam Carheden
Date: Fri, 17 Mar 2000 00:00

33 lines
1844 bytes

I finally got pam_smb_auth to authorize users from my NT domain, but I
can only telnet in from the NT server that's doing the authentication. 
Take a  look at this:

Connect from	Service used	Account On	Result
----------------------------------------------------------
<ALL>		<ALL>		Linux		Works Fine	
NT Server	<ALL>		NT Domain	Works Fine
Other M$ box	ftp		NT Domain	Works Fine
Other M$ box	telnet		NT Domain	****Failure****
Other M$ box	ssh		NT Domain	Works Fine
Remote Unix	<ALL>		NT Domain	Works Fine

Basically, trying to connect to from a windows machine other than the
password server fails.  If I type an incorrect password it prompts me
again, but as soon as I type the correct one, the telnet client says
Connection Closed.  And yes, I've tried multiple telnet clients.

In debug mode, the security log indicates that pam_smb succeeded in
authentication via the NT server.

The pam config files for both ftp and login have the following lines

auth       sufficient   /lib/security/pam_smb_auth.so debug
auth       required     /lib/security/pam_pwdb.so shadow nullok

FTP and SSH both work fine.  Since it appears to validate, I don't think
its a problem with PAM, but one with telnet or login.  Any ideas?  What
log files should I look at?

-- 
Adam
carheden@cnhp.colostate.edu

Re: telnet from NT using pam_smb_auth

#188

Author: Adam Carheden
Date: Fri, 17 Mar 2000 00:00

12 lines
1126 bytes

One more reason why Linux totally rocks.  I can ssh in as root, but I
enabled pam_smb_auth for ssh as sufficient BEFORE pam_pwdb.  I created
an account called root on my NT box with a different password than the
Linux root account.  Trying to ssh to the Linux box as root using the NT
root account password did NOT validate me.  I still had to use the Linux
root password.  They think of everything!  BTW, how do they do that?  Is
it compiled into the pam_smb_auth to disallow root?  Or maybe it's in
pam?

--
Adam
carheden@cnhp.colostate.edu

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads