Re: GNOME Display Manger login problem using samba winbind

[George <jirka 5z com>]

On Fri, Jan 16, 2004 at 11:59:56AM +1100, Tom Pride wrote:
> Gday, I'm trying to set up a linux pc that can use a username and 
> password from a windows domain as the method of authentication when 
> someone logs in. I am doing this using samba winbind and have almost got 
> it, but the GNOME Display Manager (GDM) is giving me the following error 
> in /var/log/messages when I try to login:
> Jan 16 09:20:44 l8ip243 pam_winbind[6977]: user 'nttest2' granted acces
> Jan 16 09:20:44 l8ip243 gdm-binary[6977]: Couldn't set acct. mgmt for 
> nttest2
> 
> I really need to get this working as we are trying to setup a trial at 
> my work of the new SUN Java Desktop (suse runing GNOME). If the trial is 
> successful we can then work towards getting rid of Microsoft as the 
> common desktop OS. Can anyone help or suggest where I can go for help?

It seems like the pam_winbind is not implementing the account management
stuff correctly.  GDM just calls the account management function from that
module.  Try changing the 'account' line in the pam config file.  I would
consult the docs for pam_winbind about such problems.  Does this work with
something other then gdm?  In that case try to compare the PAM config file
for whatever works with gdm's pam config.  You could also try just commenting
out the account management function in verify-pam.c and use that, but that's
ultra evil, but it could at least 'sorta work'.

George

-- 
George <jirka 5z com>
   Then, when you have found the shrubbery, you must cut down the mightiest
   tree in the forest... with... a herring!
                       -- The Knights Who Say 'Ni'