Pam-list Digest, Vol 16, Issue 2

[Andreas Schindler]

pam-list-request at redhat.com wrote:
> Send Pam-list mailing list submissions to
> 	pam-list at redhat.com
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://www.redhat.com/mailman/listinfo/pam-list
> or, via email, send a message with subject or body 'help' to
> 	pam-list-request at redhat.com
> 
> You can reach the person managing the list at
> 	pam-list-owner at redhat.com
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Pam-list digest..."
> 
> 
> ------------------------------------------------------------------------
> 
> Today's Topics:
> 
>    1. mod_auth_pam + winbind question... (Jorge Dionisio)
> 
> 
> ------------------------------------------------------------------------
> 
> Subject:
> mod_auth_pam + winbind question...
> From:
> "Jorge Dionisio" <jorge.dionisio at advantis.pt>
> Date:
> Mon, 6 Jun 2005 14:34:00 +0100
> To:
> <pam-list at redhat.com>
> 
> To:
> <pam-list at redhat.com>
> 
> 
> Hi all.
>  
> I have apache 2.0 configured with mod_auth_pam and winbind plugin to 
> authenticate my users in an Active Directory but in /var/log/messeges i 
> get: user x granted access to resource y but apache later returns me an 
> error Access Denied, invalid credentials, can anybody tell me what can 
> be wrong? has anyone tried this?
>  
>  
> Thanks in advance.
> Jorge Dionisio
> 

Just try and replace the modules in 'account' ant 'session' with 
'pam_permit' and check fpor success again. May be hrer is the
cause of your problems. I guess the account module in question
expects a local user. Did you put 'pam_winbind' in these 2 sections
too ?

Regards, Andreas
-- 
Dr.-Ing. Andreas Schindler

Alpha Zero One Computersysteme GmbH
Frankfurter Str. 141
63303 Dreieich

Telefon 06103-57187-21
Telefax 06103-373245

schindler at az1.de
www.az1.de