Re: Active directory authenication via PAM in RedHat AS3

[Nalin Dahyabhai <nalin redhat com>]

On Tue, Oct 28, 2003 at 10:35:10PM -0800, shane stixrud org wrote:
> I was aware of this, I had only added winbind to passwd and group, but not 
> shadow. However I still am having problems logining in via ssh. wbinfo -u 
> and wbinfo -g reports what one would expect and I can login to a samba 
> share via my microsoft AD userid.  
[snip]
> /var/log/messages reports:
> 
> Oct 28 22:19:39 ns4 pam_winbind[13084]: request failed: Unexpected 
> information received, PAM error was 4, NT error was 
> NT_STATUS_INVALID_PARAMETER
> Oct 28 22:19:39 ns4 pam_winbind[13084]: internal module error (retval = 4, 
> user = `NOUSER'
> Oct 28 22:19:39 ns4 sshd(pam_unix)[13084]: check pass; user unknown
> Oct 28 22:19:39 ns4 sshd(pam_unix)[13084]: authentication failure; 
> logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=ns4.met-farm.vmmc.org 
> 
> and /var/log/secure
> 
> Oct 28 22:19:37 ns4 sshd[13084]: Illegal user AD+spgsrs from 127.0.0.1
> Oct 28 22:19:42 ns4 sshd[13084]: Failed password for illegal user 
> AD+spgsrs from 127.0.0.1 port 35594 ssh2

Did you restart sshd after modifying /etc/nsswitch.conf?  IIRC
applications don't usually read that configuration file except at
startup-time.

Nalin