You are not logged in.

#1 2013-05-03 14:47:51

Registered: 2010-06-14
Posts: 4

PAM Authentication (winbind) and groups

I've followed the Arch wiki ( … ntegration) to integrate and use my domain login. Currently everything works as expected, I can login with my AD user (thanks to matone and combuster over this thread;

There is one small problem, annoyance if you will, however; my local user and my AD user (or any other new users I add) can't use networking, the volume mixer or video related when logged in to a KDE session. Maybe some other components, I haven't tested it yet. I'm just stuck on getting my network connections or sound working.

If I add my local (and AD user) to the related groups (for example; audio and network groups), I can manage system sounds and networks as expected.

I'm not sure where to look and I'm out of ideas. Any suggestions?


Last edited by queljin (2013-05-03 15:07:52)


#2 2013-05-14 13:36:29

Registered: 2010-06-14
Posts: 4

Re: PAM Authentication (winbind) and groups

Well, after a lot of tries and reading, I found out that system-login PAM configuration must include system-auth as the last option. Because of the changes made to system-auth configuration, when pam_winbind or pam_unix module returns success and exits (because they are "sufficient") other modules below them aren't working which in turn causes the pam_loginuid module not working. Below is my new system-login config in case someone needs it.

Please remember this is in no way a recommended configuration, it may be completely wrong and break your existing configuration. It just works for me. YMMV.

/etc/pam.d/system-login :


auth       required         onerr=succeed file=/var/log/faillog
auth       required
auth       requisite
auth       include    system-auth

account    required
account    required
account    include    system-auth

password   include    system-auth

session    optional
session    required
session    optional          motd=/etc/motd
session    optional          dir=/var/spool/mail standard quiet
-session   optional
session    include    system-auth

Last edited by queljin (2013-05-14 13:38:16)


Board footer

Powered by FluxBB