maybe chmod 0644 './pam.d/su'
maybe chmod 0644 './pam.d/sudo'
maybe chmod 0644 './pam.d/system-auth'
+maybe chmod 0644 './pam.d/system-auth-winbind'
maybe chmod 0644 './pam.d/system-local-login'
maybe chmod 0644 './pam.d/system-login'
maybe chmod 0644 './pam.d/system-remote-login'
maybe chmod 0755 './security/namespace.d'
maybe chmod 0755 './security/namespace.init'
maybe chmod 0644 './security/pam_env.conf'
+maybe chmod 0644 './security/pam_winbind.conf'
maybe chmod 0644 './security/time.conf'
maybe chmod 0644 './services'
maybe chmod 0755 './sgml'
maybe chmod 0644 './xinetd.d/kpropd'
maybe chmod 0644 './xinetd.d/rsyncd'
maybe chmod 0644 './xinetd.d/svnserve'
+maybe chmod 0644 './xinetd.d/swat'
maybe chmod 0644 './xinetd.d/tcpmux-server'
maybe chmod 0644 './xinetd.d/time-dgram'
maybe chmod 0644 './xinetd.d/time-stream'
--- /dev/null
+#%PAM-1.0
+# $Header: /var/cvsroot/gentoo-x86/net-fs/samba/files/3.5/system-auth-winbind.pam,v 1.1 2010/03/01 16:19:54 patrick Exp $
+
+auth required pam_env.so
+auth sufficient pam_winbind.so
+auth sufficient pam_unix.so likeauth nullok use_first_pass
+auth required pam_deny.so
+
+account sufficient pam_winbind.so
+account required pam_unix.so
+
+password required pam_cracklib.so retry=3
+password sufficient pam_unix.so nullok use_authtok md5 shadow
+password required pam_deny.so
+
+session required pam_mkhomedir.so skel=/etc/skel/ umask=0022
+session required pam_limits.so
+session required pam_unix.so
--- /dev/null
+#
+# pam_winbind configuration file
+#
+# /etc/security/pam_winbind.conf
+#
+
+[global]
+
+# turn on debugging
+;debug = no
+
+# turn on extended PAM state debugging
+;debug_state = no
+
+# request a cached login if possible
+# (needs "winbind offline logon = yes" in smb.conf)
+;cached_login = no
+
+# authenticate using kerberos
+;krb5_auth = no
+
+# when using kerberos, request a "FILE" krb5 credential cache type
+# (leave empty to just do krb5 authentication but not have a ticket
+# afterwards)
+;krb5_ccache_type =
+
+# make successful authentication dependend on membership of one SID
+# (can also take a name)
+;require_membership_of =
+
+# password expiry warning period in days
+;warn_pwd_expire = 14
+
+# omit pam conversations
+;silent = no
+
+# create homedirectory on the fly
+;mkhomedir = no
--- /dev/null
+# default: off
+# description: SWAT is the Samba Web Admin Tool. Use swat \
+# to configure your Samba server. To use SWAT, \
+# connect to port 901 with your favorite web browser.
+# $Header: /var/cvsroot/gentoo-x86/net-fs/samba/files/3.5/swat.xinetd,v 1.1 2010/03/01 16:19:54 patrick Exp $
+
+service swat
+{
+ port = 901
+ socket_type = stream
+ wait = no
+ only_from = localhost
+ user = root
+ server = /usr/sbin/swat
+ log_on_failure += USERID
+ disable = yes
+}