<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:9pt" ><div dir="ltr" >There is the PAM module that would forward authentication requests to winbindd:</div>
<div dir="ltr" >/usr/lpp/mmfs/lib64/security/pam_gpfs-winbind.so</div>
<div dir="ltr" >In theory that can be added to the PAM configuration in /etc/pam.d/. On the other hand, we have never tested this nor claimed support, so there might be reasons why this won't work.</div>
<div dir="ltr" > </div>
<div dir="ltr" >Other customers have configured sssd manually in addition to the Scale authentication to allow user logon and authentication for sudo.</div>
<div dir="ltr" > </div>
<div dir="ltr" >If the request here is to configure AD authentication through mmuserauth and that should also provide user logon, that should probably be treated as a feature request through RFE.</div>
<div dir="ltr" > </div>
<div dir="ltr" >Regards,</div>
<div dir="ltr" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial;font-size:10.5pt" ><div dir="ltr" ><span style="font-size:0.857em;" > </span></div>
<div dir="ltr" ><span style="font-size:0.857em;" ><span style="font-family: Verdana,Geneva,sans-serif;" >Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ<br>christof.schmitt@us.ibm.com || +1-520-799-2469 (T/L: 321-2469)</span></span></div></div></div></div></div></div></div>
<div dir="ltr" > </div>
<div dir="ltr" > </div>
<blockquote data-history-content-modified="1" dir="ltr" style="border-left:solid #aaaaaa 2px; margin-left:5px; padding-left:5px; direction:ltr; margin-right:0px" >----- Original message -----<br>From: "Lyle Gayne" <lgayne@us.ibm.com><br>Sent by: gpfsug-discuss-bounces@spectrumscale.org<br>To: gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><br>Cc: Ingo Meents <MEENTS@de.ibm.com><br>Subject: Re: [gpfsug-discuss] User Login Active Directory authentication on CES nodes with SMB protocol<br>Date: Tue, Jan 8, 2019 2:54 PM<br>
<p><font size="2" >Adding Ingo Meents for response</font><br><br><img alt="Inactive hide details for "Rob Logie" ---01/08/2019 04:50:22 PM---Hi All Is there a way to enable User Login Active Directory a" src="cid:1__=8FBB09EFDFEBBB408f9e8a93df938690918c8FB@" width="16" height="16" border="0" ><font size="2" color="#424282" >"Rob Logie" ---01/08/2019 04:50:22 PM---Hi All Is there a way to enable User Login Active Directory authentication on CES</font><br><br><font size="2" color="#5F5F5F" >From: </font><font size="2" >"Rob Logie" <roblogie@au1.ibm.com></font><br><font size="2" color="#5F5F5F" >To: </font><font size="2" >gpfsug-discuss@spectrumscale.org</font><br><font size="2" color="#5F5F5F" >Date: </font><font size="2" >01/08/2019 04:50 PM</font><br><font size="2" color="#5F5F5F" >Subject: </font><font size="2" >[gpfsug-discuss] User Login Active Directory authentication on CES nodes with SMB protocol</font><br><font size="2" color="#5F5F5F" >Sent by: </font><font size="2" >gpfsug-discuss-bounces@spectrumscale.org</font></p>
<hr style="color:#8091A5; " width="100%" size="2" align="left" ><br><br><br><font face="Calibri" >Hi All</font><br><font face="Calibri" >Is there a way to enable User Login Active Directory authentication on CES nodes with SMB protocol that are joined to an AD domain. ? The AD authentication is working for access to the SMB shares, but not for user login authentication on the CES nodes.</font><br><br><br><font face="Calibri" >Thanks !</font>
<p> </p>
<table cellspacing="0" cellpadding="0" border="0" > <tbody> <tr valign="top" > <td width="724" valign="middle" ><font size="2" face="Arial" >Regards,</font><br> <b><font size="2" face="Arial" color="#813F62" >Rob Logie<br> IT Specialist</font></b><br> </td> </tr> </tbody></table><font face="Calibri" > </font>
<p><tt><font size="3" face="" >_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org</font></tt><br><tt><font size="3" face="" ><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss" target="_blank">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></font></tt></p>
<p> </p>
<p> </p>
<div><font size="2" face="Default Monospace,Courier New,Courier,monospace" >_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss" target="_blank">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></font></div></blockquote>
<div dir="ltr" > </div></div>
<BR>