obeypamrestrictions.xml   [plain text]

<samba:parameter name="obey pam restrictions"
                 context="G"
                 advanced="1" developer="1"
		 xmlns:samba="http://samba.org/common">
<listitem>
    <para>When Samba 3.0 is configured to enable PAM support
    (i.e. --with-pam), this parameter will control whether or not Samba
    should obey PAM's account and session management directives.  The 
    default behavior is to use PAM for clear text authentication only
    and to ignore any account or session management.  Note that Samba
    always ignores PAM for authentication in the case of <link linkend="ENCRYPTPASSWORDS">
    <parameter moreinfo="none">encrypt passwords = yes</parameter></link>.  The reason 
    is that PAM modules cannot support the challenge/response
    authentication mechanism needed in the presence of SMB password encryption.
    </para>

    <para>Default: <command moreinfo="none">obey pam restrictions = no</command></para>
</listitem>
</samba:parameter>