Page 1 of 1

Problem with om_om2authid

Posted: Thu Dec 28, 2006 12:48 pm
by Katagia
Hi

I want to setup Scalix 11 community edition on opensuse 10.1

I want to use the external winbind pam module to authenticate users.
Here is the result without om_om2authid:
Dec 28 17:42:12 linux pam_winbind[25869]: request failed: No such user, PAM error was User not known to the underlying authentication module (10), NT error was NT_STATUS_NO_SUCH_USER
Dec 28 17:42:29 linux pam_winbind[25870]: pam_winbind: pam_sm_authenticate
Dec 28 17:42:29 linux pam_winbind[25870]: Verify user `testlinuxtest'
Dec 28 17:42:29 linux pam_winbind[25870]: request failed: No such user, PAM error was User not known to the underlying authentication module (10), NT error was NT_STATUS_NO_SUCH_USER
Dec 28 17:42:29 linux pam_winbind[25870]: user `testlinuxtest' not found

As written in the manual the module om_om2authid is needed to change the format
of the username.

With om_om2authid enabled I get thi output:
Dec 28 17:39:42 linux pam_winbind[25861]: request failed: No such user, PAM error was User not known to the underlying authentication module (10), NT error was NT_STATUS_NO_SUCH_USER

For me it looks like om_om2authid doesn't change the username it just clears the string completly.

I also tested the pam_smbauth module:
Dec 28 17:53:41 linux PAM_smbpass[25897]: username [test@domain.de] obtained
Dec 28 17:53:41 linux PAM_smbpass[25897]: Failed to find entry for user test@domain.de.

The username is OK but why the domain has been added?

Cheers,

Posted: Thu Dec 28, 2006 7:11 pm
by dkelly
If you run the command

Code: Select all

omshowu -n "User Name"
where User Name is the correct user, and check the value of "Authentication ID". That's the value that om_om2authid puts into the username for PAM.

Cheers

Dave

Posted: Thu Dec 28, 2006 7:55 pm
by Katagia
You are right:
linux:/var/opt/scalix/lx/s/sys # omshowu -n "test"
Authentication ID: test@domain.de

I think winbind doesn't show the username because it doesn't
like a "@" in the username.

I was able to change Authentication ID with " ommodu -o test --authid test"
and it is working now.

Thank you for your help.