Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I am attempting to migrate from Ubuntu 12.04 to 13.10 and am having some issue being able to log into my samba domain from the 13.10 workstation when I use the same settings on the 12.04 workstation. This is most probably due to the depreciation of smbfs for cifs-utils

My working setup on Ubuntu 12.04 is as following:

  • Samba3 PDC running on Ubuntu with an LDAP backend
  • Workstations running Ubuntu 12.04 configured so that a user authenticates to the domain and mounts some shared at login. It also allows fallback to local accounts should they exist.

When I configure the 13.10 the same way, I run into errors which do not log me in, saying Invalid password.

My set up for 12.04 client is as follows

Relevant packages installed: winbind samba libpam-mount smbfs

/etc/hosts

127.0.0.1 localhost test-13 TEST-13.mydomain
127.0.1.1 test-13
10.1.0.2  dc dc.mydomain

/etc/nsswitch.conf

passwd: compat winbind
group: compat winbind
hosts: files dns wins mdns4_minimal mdns4

/etc/samba/smb.conf

[global]
;Workstation Settings
    workgroup = MYDOMAIN
    netbios name = TEST-13
    server string = %h
    security = domain
    idmap backend = tdb
    idmap uid = 15000-20000
    idmap gid = 15000-20000
    wins server = 10.1.0.2
    winbind use default domain = yes
    winbind enum groups = yes
    winbind enum users = yes
    password server = 10.1.0.2
    template shell = /bin/bash 
    template homedir = /home/%D/%U 
 ;Logging 
    log level = 2
    log file = /var/log/samba/log.%m
    max log size = 1000 
    syslog = 0 
    panic action = /usr/share/samba/panic-action %d 

I join the domain as follows

service smbd restart
service nmbd restart
service winbind restart

net join MYDOMAIN

Which joins the domain successfully

I then set up the authentication and mounting of shares

/etc/pam.d/common-account

account [success=2 default=ignore] pam_winbind.so 
account [success=1 default=ignore] pam_unix.so 
account requisite pam_deny.so
account required pam_permit.so

/etc/pam.d/common-auth

auth [success=2 default=ignore] pam_unix.so nullok_secure
auth [success=1 default=ignore] pam_winbind.so use_first_pass
auth requisite pam_deny.so
auth optional pam_mount.so
auth required pam_permit.so

/etc/pam.d/common-session

session required pam_unix.so nullok_secure
session required pam_mkhomedir.so skel=/etc/skel umask=0022
session optional pam_mount.so
session [default=1] pam_permit.so
session requisite pam_deny.so
session required pam_permit.so
session optional pam_ck_connector.so nox11

/etc/security/pam_mount.conf.xml

<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE pam_mount SYSTEM "pam_mount.conf.xml.dtd">
<pam_mount>
<debug enable="0" />
<volume options="user=%(DOMAIN_USER),domain=MYDOMAIN" fstype="cifs" server="dc" path="Shared" mountpoint="/home/MYDOMAIN/%(DOMAIN_USER)/Shared"></volume>
<volume options="user=%(DOMAIN_USER),domain=MYDOMAIN" fstype="cifs" server="dc" path="%(DOMAIN_USER)" mountpoint="/home/MYDOMAIN/%(DOMAIN_USER)/Personal"></volume>
<path>/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin</path>
<logout wait="0" hup="0" term="0" kill="0" />
<mkmountpoint enable="1" remove="true" />
</pam_mount>

The problems arise when I try the above on Ubuntu 13.10. To start with smbfs has been replaced with cifs-utils which at least in what I have seen so far requires me to also install libpam-winbind, though there might be an alternative package I should be installing.

Once those packages and files are added to Ubuntu 13.10, I reboot and then try to log in but it fails saying Invalid password and in auth.log for the workstatoin I see the following:

lightdm: pam_unix(lightdm:auth): check pass; user unknown
lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= 
lightdm: pam_winbind(lightdm:auth): getting password (0x00000010)
lightdm: pam_winbind(lightdm:auth): pam_get_item returned a password
lightdm: pam_winbind(lightdm:auth): user 'testusr' granted access
lightdm: gkr-pam: error looking up user information
lightdm: pam_unix(lightdm:account): could not identify user (from getpwnam(testusr))
lightdm: PAM unable to dlopen(pam_ck_connector.so): /lib/security/pam_ck_connector.so: cannot open shared object file: No such file or directory
lightdm: PAM adding faulty module: pam_ck_connector.so
share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.