Re: Problems with LDAP Authentication

[Ger Hooton <g.hooton@ucc.ie>]

Thanks Petter for your response.
It looks like the authentication process looks for the user
in /etc/passwd first and if the user is not there it gives up, ie. dose
not go to the LDAP server.
However, if LDAP is first then everything works fine.
Also I note that if I do su - username  as root [authentication not
required] I get:
su: Authentication failure
(Ignored)

//Ger



On Thu, 2013-06-13 at 12:52 +0200, Petter Reinholdtsen wrote:
> [Ger Hooton]
> > Any ideas?
> 
> Not really.
> 
> But you seem to confuse authentication with user information.
> nsswitch.conf control which users are visible (and other related
> information), while the content of /etc/pam.d/ control password
> checking.
> 
> Did you consider using sssd instead?  If you are lucky,
> /usr/lib/sssd/generate-config would generate the sssd config you need
> automatically, and the default setup for NSS and PAM should work out of
> the box.
> 

-- 
Gerard Hooton.
Senior Technical Officer
Department of Electrical & Electronic Engineering
University College Cork.
College Road.
Cork.
Ireland.

Tel: +353 21 4902296
Mobile: 085 281 3491