We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and I'm pretty sure it's solved inside of /etc/pam.d/system-auth with UID ranges. I can't zero in on the specific lines needed. Here is the scenario:
- We deploy three local users via Puppet; they must be able to login when the DC is down. They need to be purely local users.
- The local usernames for these users is identical to their AD counterparts (e.g., jsmith is the name of the CentOS local user, and jsmith is also that same user's AD username)
- When jsmith logs in, it needs to look for that user locally first.
- Local users are typically > UID 500, and our AD/Winbind users are > UID 10000.