mod_auth_pam and winbind

Matt Alexander lowbassman at gmail.com
Tue Mar 1 21:02:21 UTC 2005


On Tue, 01 Mar 2005 21:52:39 +0100, Tomas Mraz <tmraz at redhat.com> wrote:
> On Tue, 2005-03-01 at 13:33 -0700, Matt Alexander wrote:
> > I'm trying to get Apache to authenticate users to an Active Directory server.
> >
> > In /var/log/messages, I get:
> >
> >      pam_winbind[31194]: user 'matt' granted access
> >
> > But, in the Apache error_log, I get:
> >
> >      GROUP: matt not in required group(s).
> ...
> > The user "matt" is in the AD "testgroup".  Any ideas where the problem may be?
> Do you have 'group: files winbind' in /etc/nsswitch.conf?
> What does 'getent group testgroup' prints?

Ah ha!  I didn't have winbind in /etc/nsswitch.conf...  Thanks!
~M




More information about the Pam-list mailing list