On 03/08/12 19:13, David Disseldorp wrote:
On Fri, 03 Aug 2012 19:01:54 +0200 lynn
wrote: That's why there is the YaST module to join to a domain.
Does using the Yast module set up Pam winbind?
Yes, see the "Also Use SMB Information for Linux Authentication" check-box.
Cheers, David
Hi Yes. Thanks. Found it. The main problem with it is that it overwrites/adds deprecated values to whatever is in smb.conf, worse, it starts winbind with it's own settings. You then have to stop winbind, leave the domain, delete all the tdb files, put smb.conf back as you want it, rejoin using net ads join and then restart winbind. OK, now I've got my PAM settings but that was the only way I could get it to work. deprecated (which take only the gid range): idmap gid lownumber-high number idmap gid another lownumber-another high number current: idmap config ADOMAIN : backend = ad idmap config ADOMAIN : range = lownumber-high number Cheers, Steve -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org