From owner-freebsd-current@FreeBSD.ORG Thu Nov 18 19:32:04 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2AE7916A4CE for ; Thu, 18 Nov 2004 19:32:04 +0000 (GMT) Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id C3D9C43D41 for ; Thu, 18 Nov 2004 19:32:03 +0000 (GMT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.13.1/8.13.1) id iAIJW1RF025175; Thu, 18 Nov 2004 13:32:01 -0600 (CST) (envelope-from dan) Date: Thu, 18 Nov 2004 13:32:01 -0600 From: Dan Nelson To: Ivan Voras Message-ID: <20041118193201.GD19265@dan.emsphone.com> References: <419CD314.80900@fer.hr> <20041118171012.GB19265@dan.emsphone.com> <419CD93B.8010906@fer.hr> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <419CD93B.8010906@fer.hr> X-OS: FreeBSD 5.3-STABLE X-message-flag: Outlook Error User-Agent: Mutt/1.5.6i cc: current@freebsd.org Subject: Re: Replacing passwd? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2004 19:32:04 -0000 In the last episode (Nov 18), Ivan Voras said: > Dan Nelson wrote: > >In the last episode (Nov 18), Ivan Voras said: > >passwd just uses PAM to set passwords, so the cleanest way would be to > > I see in the source that it calls some pam_* functions (I'm not an > expert...), so it should probably be documented in the man page. > > >have a pam_smb module that does the password changes, and add it to > >/etc/pam.d/passwd , or maybe tell have pam_ldap do it. > > The LDAP user entry contains both password used for unix (userPassword) > and NT passwords (sambaNTPassword, sambaLMPassword) - can PAM modules be > "stacked" to update all those fields? (if so, how? :) ) Sure. Just mark both as required, and it'll run them. > I still feel that installing pam_smb would not be a good idea since I'm > authenticating on the FreeBSD machine just fine using only pam_ldap. If you only configure the "password" service, it won't use pam_smb for authentication at all. -- Dan Nelson dnelson@allantgroup.com