SSO (single sign on) to Win2003 AD via FC3

[phil1861]

I've been using Samba and RH distros for years in my network environment but only as file/print servers. I've recently found the Samba 3x by example book online but have run into a few issues.

I've got the use of winbind down and other smb.conf parameters to put a machine on the network and add it to the domain. What I'm having problems with are the various pam settings the Samba book is suggesting that need to be edited to allow a sign on via the gui of a windows account.

I'm wondering if anyone has ever played with this and gotten it to work. For instance, the book suggests the xdm and gdm pam files need to be edited but provided no examples as to what needed to be changed.

Currently I'm using NIS for my linux boxes with an nfs mount to /home on the NIS server. I'd like to take advantage of the capability to communicate with AD and only have to use one account.

[Jman]

There's a graphical config tool that may help you: system-config-authentication

[huw-l]

This may help..

http://www.redmondmag.com/columns/ar...itorialsID=858

[phil1861]

Originally Posted by Jman

There's a graphical config tool that may help you: system-config-authentication

Yeah, I've used both the gui and the auth-config from the setup wizard and each will allow me to choose my flavor of authentication and user account method, but none seem to affect logging on via the gui once it is all said and done.

I suppose most of it is that I understand very little on the PAM side of things, though through trail and error was able to find a Samba and an system-auth configuration that worked for my linux file and print servers and I've even gotten certain settings to work to allow a console login of an AD account.

[phil1861]

thanks for the link!