PAM_WINBIND(8) 8 PAM_WINBIND(8) (NAME) pam_winbind - PAM Winbind (DESCRIPTION) samba(7) . pam_winbind PAM Winbind . (SYNOPSIS) PAM /etc/pam.d/service : ... auth required pam_env.so auth sufficient pam_unix2.so +++ auth required pam_winbind.so use_first_pass account requisite pam_unix2.so +++ account required pam_winbind.so use_first_pass +++ password sufficient pam_winbind.so password requisite pam_pwcheck.so cracklib password required pam_unix2.so use_authtok session required pam_unix2.so +++ session required pam_winbind.so ... pam_winbind (session) . kerberos . (OPTIONS) pam_winbind PAM pam_winbind /etc/security/pam_winbind.conf . PAM . pam_winbind.conf(5) . debug syslog . debug_state PAM syslog . require_membership_of=[SID or NAME] pam_winbind SID NAME . SID group-SID alias-SID user-SID . SID NAME . : MYDOMAIN\mygroup MYDOMAIN\myuser ( '\' winbind separator ). UPN user@REALM group@REALM . pam_winbind SID . NAME . SID . SID : wbinfo --user-sids=SID. auth . use_first_pass pam_winbind . . pam_winbind . try_first_pass use_first_pass ( ) PAM . use_authtok . pam_winbind . try_authtok use_authtok ( ) PAM . krb5_auth pam_winbind winbindd Active Directory Kerberos . Kerberos . Kerberos ( clock skew) winbindd samlogon MSRPC . winbind refresh tickets winbind Ticket Granting Ticket (TGT) . krb5_ccache_type=[type] pam_winbind krb5_auth kerberos Ticket Granting Ticket (TGT) (credential cache) . . : KCM KEYRING ( Kerberos ) FILE DIR ( DIR Kerberos ). FILE /tmp/krb5cc_UID - DIR UID . UID . Kerberos . KEYRING "KEYRING:persistent:UID" keyring UID . KEYRING . KCM "KCM:UID" Kerberos UID KEYRING . Kerberos Credential Manager . KEYRING . "%u" . : krb5_ccache_type = DIR:/run/user/%u/krb5cc . krb5_ccache_type = FILE:/tmp/krb5cc_%u . kerberos . . cached_login Winbind winbind offline logon . PAM . silent . mkhomedir PAM (session) . warn_pwd_expire pam_winbind . . PAM (PAM DATA EXPORTS) PAM PAM . PAM_WINBIND_HOMEDIR Active Directory . . PAM_WINBIND_LOGONSCRIPT . . PAM_WINBIND_LOGONSERVER Active Directory . . PAM_WINBIND_PROFILEPATH . . (SEE ALSO) pam_winbind.conf(5), wbinfo(1), winbindd(8), smb.conf(5) (VERSION) 4.24.6 Samba . (AUTHOR) Samba Andrew Tridgell . Samba Samba . Jelmer Vernooij Guenther Deschner . Samba 4.24.6 08/16/2026 PAM_WINBIND(8)