Red Hat Bugzilla – Bug 231811
Incorrect File permissions on /var/cache/samba/winbind
Last modified: 2007-11-30 17:07:28 EST
Description of problem:
Came incorrect with samba-3.0.10-1.4E.11 packages
Error log showed
non-privileged access denied. ! winbindd_pam_auth_crap: Ensure permissions on
/var/cache/samba/winbindd_privileged are set correctly.
Version-Release number of selected component (if applicable):
User authenticating through Freeradius got denied
When they were authenticating with Freeradius + Samba setup that involved winbind
Steps to Reproduce:
1. Trying to authenticate
File permission on /var/cache/samba/winbind was 0750
Should have been 0755
This setup was pptp + freeradius + samba ( pptp vpn setup )
Ensure next time that user rights on samba work for varios samba deployments
( Cups + Point 'N'Print, Freeradius + Samba + AD, Freeradius + samba + Winbind etc.)
Users of other service need to have access to samba.
Sorry jonathan, but the winbindd_privileged pipe is not supposed to be readable
by everyone. To let a daemon use it you must add the user it runs with to the
group owner of the privileged pipe.
Winbindd will not let you use the pipe if it is readable by everyone.