[K12OSN] Huge security issue

[Dan Young]

Daniel Kuecker wrote:
> OK. One more thing. now it asks for my password twice. any reason for
> that? 

The Samba HOWTO mentions that briefly:
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html

Back up your existing system-auth, and try re-ordering your system-auth
"auth" statements and using "use_first_pass" instead of "try_first_pass"
in pam_unix. Something like:

auth        required      pam_env.so
auth        sufficient    pam_winbind.so
auth        sufficient    pam_unix.so nullok use_first_pass
auth        optional      pam_mount.so
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        required      pam_deny.so

-- 
Dan Young <dyoung at mesd.k12.or.us>
Multnomah ESD - Technology Services
503-257-1562