<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/3.0.9">
</HEAD>
<BODY>
On Mon, 2005-05-09 at 16:46, Michael Hamann wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE><FONT COLOR="#737373"><I>auth                required        pam_env.so
auth                required        pam_winbind.so
# auth                required        pam_unix.so try_first_pass
auth                required        pam_storepw.so
auth                required        pam_nologin.so

then I can login (only auth with winbind) and get the following logfile.
In this case it works exactly the way I want it to but I can´t login with
local user accounts...
</I></FONT></PRE>
</BLOCKQUOTE>
<BR>
Can you try with the following order ?<BR>
<BR>
auth                sufficient              pam_unix2.so   debug audit nullok #set_secrpc<BR>
auth                required         pam_winbind.so use_first_pass debug nullok<BR>
<FONT COLOR="#737373"><I>auth                required        pam_storepw.so</I></FONT><BR>
a<FONT COLOR="#737373"><I>uth                required        pam_nologin.so</I></FONT><BR>
<BR>
It should first try local unix authentication first and then pam_winbind. It worked for me in my setup where I combined pam_winbind, pam_unix and pam_mkhomedir modules. <BR>
<BR>
HTH,<BR>
Narayana
</BODY>
</HTML>