[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: pam-ldap headaches



I am so sorry, I just realised why I was not seeing my posts in the
archives. Helps if you change to most recent pages. I was posting without
being a member and thought maybe debial was dropping my posts for some
reason), my last post was being a member.

So to the entire list, I apoligise for my multiple posts.

Back to the problem I am having.

I am doing nothing especially difficult. All were done with simple
installing libpam-ldap following the prompts.

Of 5 machines I have tried this on only one is working. The others all
give the error ldap_simple_bind: cannot connect to server.

My config is simple
host ldap.vu.edu.au
base o=vu.edu.au
ldap_version 3
port 389
pam_password clear

No TLS or SSL is being used at this point. my /etc/pam.d/smtp is the
sample one.
auth       sufficient   pam_ldap.so
auth       required     pam_unix.so nullok try_first_pass

THis configuration is working on another machine. I have even gone over
one of the machines ensuring the package versions, and their dependencies
match.

Watching the network, I can see pam_ldap doing a lookup for ldap.vu.edu.au
- and getting a result, it looksup a AAAA record for ldap.vu.edu.au then
AAAA for ldap.vu.edu.au.its.vu.edu.au then finally looks up A for
ldap.vu.edu.au and gets an IP address. But it never attempts to connect.

For some reason, and I don;t know why ldap_simple_bind fails without
attempting to connect the host.

I will keep nuttering this out, thatnks for trying to help, and again
sorry for the multiposts.

Cheers,

Stewart


On Thu, 7 Nov 2002, nate wrote:

> Date: Thu, 7 Nov 2002 16:52:31 -0800 (PST)
> From: nate <debian-user@aphroland.org>
> To: debian-user@lists.debian.org
> Subject: Re: pam-ldap headaches
> Resent-Date: Thu,  7 Nov 2002 18:53:35 -0600 (CST)
> Resent-From: debian-user@lists.debian.org
>
> Stewart James said:
>
> > Has anyone else seen this.
>
>
> yes I have seen your post 3 times. At first I thought I was going
> crazy so I verified it in the archives. Posting multiple times is
> not the best way to get a response.
>
> I responsed to your original request, but did not notice any replies
> back. Your problem seems simple to solve.
>
> my reply:
> http://lists.debian.org/debian-user/2002/debian-user-200211/msg00995.html
>
> nate
>
>
>
>
>



Reply to: