pam_ldap receives Invalid credentials

[Noah]

Hi,

I am not sure why this happens but out terminal servers, routers, and 
ancillary devices are able to authenticate with our LDAP server.  For 
some reason pam_ldap claims "Invalid credentials" with the same exact 
user and password.

What could be wrong?  I cant seem to figure out what is wrong with the 
current log messages.  Is there a way to receive verbose messages from 
pam and/or pam_ldap to figure out if it is sending the proper 
authentication information to the LDAP server.

We are on a FreeBSD-6.2 stable machine.

Clues please,

Noah




Aug  1 11:24:11 access1 sshd[6277]: pam_ldap: error trying to bind as 
user "cn=Test User,cn=people,dc=bogus,dc=domain,dc=net" (Invalid 
credentials)
Aug  1 11:24:11 access1 sshd[6277]: Failed password for invalid user 
tuser from 172.24.241.234 port 49317 ssh2
Aug  1 11:24:14 access1 sshd[6277]: pam_ldap: error trying to bind as 
user "cn=Test User,cn=people,dc=bogus,dc=domain,dc=net" (Invalid 
credentials)
Aug  1 11:24:14 access1 sshd[6277]: Failed password for invalid user 
tuser from 172.24.241.234 port 49317 ssh2
Aug  1 11:24:14 access1 sshd[6277]: Connection closed by 172.24.241.234


access1# pkg_info | grep pam
checkpassword-pam-0.99 Implementation of checkpassword authentication 
program
nagios-spamd-plugin-1.4 Nagios plugin for checking SpamAssassins spamd
p5-Mail-SpamAssassin-3.1.8_1 A highly efficient mail filter for 
identifying spam
pam_ldap-1.8.2      A pam module for authenticating with LDAP
pam_mkhomedir-0.1   Create HOME with a PAM module on demand
pamtester-0.1.2     A command line pam authentication tester
razor-agents-2.84   A distributed, collaborative, spam detection and 
filtering
access1# pkg_info | grep ldap
ldapsh-2.00_2,1     Interactive shell used to administer ldap directories
nss_ldap-1.255      RFC 2307 NSS module
openldap-client-2.3.37 Open source LDAP client implementation
openldap-server-2.3.37 Open source LDAP server implementation
p5-perl-ldap-0.34   A Client interface to LDAP servers
pam_ldap-1.8.2      A pam module for authenticating with LDAP
php5-ldap-5.2.3_1   The ldap shared extension for php
access1#