--- Giles Nunn wrote:

...

--- Chris Puttick wrote:

...

Ok, it would be easiest with an NIS server for the Linux clients

...

...

that server authenticating to the domain - you could create all the users initially using <newusers> on the NIS server, starting with a CSV dump of

NIS/YP? Heh, no thank you. I'd avoid that almost as much as authenticating over NFS, Chris. There was a discussion on this list about adding new users from an exported NT list at some lenth. I'd suggest you check

On Wed, 2003-09-24 at 11:16, Thomas Adam wrote: then the

...

archives -- there were some very innovative suggestions put forward <grin>.

I would be interested to find out your objections to NIS (on a firewalled network, of course). We are just about to investigate it as the obvious solution to the problem of maintaining (creating, modifying and deleting from) a user database on multiple systems.

That is indeed what it is designed for. It's just that I find it very cumbersome in doing it that way. Take for example [..snip..]

Adam, I suggest you try these commands.

Actually, my first name is Thomas, and furthermore, I hold out my hands and apologise for my mistake about the "man" pages. I wasn't thinking before I replied. I did make this correction off list :)

On my standard woody Debian systems they do not do the same thing. <man passwd> gives you the man page for the <passwd> command while give you the page for the format of the passwd file. Also <newusers> is a completely different command from <adduser>.

I agree. I have been using Debian for a long time now, and "addusers" is the bees-knees in terms of adding users, adding users to groups, etc. But as many on this list are running SuSE..... -- Thomas Adam ===== Thomas Adam "The Linux Weekend Mechanic" -- www.linuxgazette.com ________________________________________________________________________ Want to chat instantly with your online friends? Get the FREE Yahoo! Messenger http://mail.messenger.yahoo.co.uk

Hi all, The NT authentication saga continues... I've followed the route of putting the winbind authenication is system-auth... When an account attempts to log in this gets sent to the messages log... Sep 30 14:03:27 bart pam_winbind[16267]: user 'RMNETNT+rwl' granted acces Sep 30 14:03:27 bart gdm-binary[16267]: User RMNETNT+rwl not permitted to gain access at this time The gdm login says... "The system administrator has disabled access to the system temporarily" My system-auth file looks like this... ...................... #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required /lib/security/pam_env.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so likeauth nullok use_first_pass auth required /lib/security/pam_deny.so account sufficient /lib/security/pam_winbind.so #account required /lib/security/pam_unix.so password required /lib/security/pam_cracklib.so retry=3 type= password sufficient /lib/security/pam_unix.so nullok use_authtok md5 shadow password required /lib/security/pam_deny.so session required /lib/security/pam_mkhomedir.so skel=/etc/skel/ umask=0022 session required /lib/security/pam_limits.so session required /lib/security/pam_unix.so ................. and the gdm file like this... ............................... #%PAM-1.0 auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so account required /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_stack.so service=system-auth session required /lib/security/pam_stack.so service=system-auth session optional /lib/security/pam_console.so .................. Any help or suggestions would be greatly appreciated. ===== rgds, Richard Rothwell -------------------------------------------------------------------- Don't teach pigs to sing. It wastes your time and it annoys the pigs. Robert Kiyosaki ________________________________________________________________________ Want to chat instantly with your online friends? Get the FREE Yahoo! Messenger http://mail.messenger.yahoo.co.uk