[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [pamldap] pam_ldap not attempting authentication



passwd: ldap compact looks wrong -

shouldn't it be something like:
passwd: compat
passwd_compat: ldap

-Jake

Jacob Pszonowsky

jdp16@mac.com
(c) 415.225.2647
(f) 415.358.5918

On May 6, 2004, at 11:48 PM, Tim Jordan wrote:

 Debian Testing (in Vmware)
 Openldap 2.0.23-6.3
 libnss-ldap 211-4
 libpam-ldap 164-2

Still trying to get authentication working from Openldap server.  I have used the migration-tools to move local accounts up to Openldap server.

The auth.log only shows that pam_unix.so is being called for authentication.  I even tried commenting out all the pam_unix.so portions of the pam.d/login and it still uses pam_unix.so

 Any ideas anyone?

 /etc/nsswitch.conf
 passwd:    ldap    compact
 group:      ldap    compat
 shadow:     ldap    compat
 hosts:    files    dns
 networks:    files
 protocols:    db    files
 services:    db     files
 ethers:    db    files
 rpc:    db    files
 netgroup:    nis

 /etc/pam.d/login
 auth        requisite        pam_securetty.so
 auth        requisite        pam_nologin.so
 auth        requisite        pam_env.so
 auth        required        pam_ldap.so
 #auth        required        pam_unix.so    nullok    use_first_pass

 account    required        pam_ldap.so
 #account    required        pam_unix.so     try_first_pass

 session        required        pam_unix.so
 session        optional        pam_lastlog.so
 session        optional        pam_motd.so
 session        optional        pam_mail.so standard noenv

 password        required        pam_ldap.so
#password        required        pam_unix.so


Reply to: