Issues while authenticating a user over openLDAP using PAM_ldap [cured]

Noah admin2 at enabled.com
Thu Aug 9 14:30:33 PDT 2007


see below

Andy Harrison wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> 
> On 8/9/07, Noah  wrote:
>> running FreeBSD 6.2 Stable
>>
>> we have openLDAP installed on a server called access1.  Users on access1
>> appear to not be able to ssh to access1.  The ssh authentication method
>> uses PAM ldap.  PAM_ldap reports "Invalid credentials" in /var/log/messages
>>
>> We have another server called access2 that authenticates to the the ldap
>> server running on access1.  those users log in via ssh without issue on
>> access2.
>>
>> I am trying to track down what is broken.  I am not even sure how to
>> receive verbose logging from PAM and/or PAM_ldap.  Any assistance is
>> much appreciated.
>>
>>
> 
> What about your nsswitch.conf file?



thanks Andy - that was it!

I matched the lines of access1's nsswitch.conf to access2's 
nsswitch.conf file

and things are fine!



> 
> - --
> Andy Harrison
> public key: 0x67518262
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.4-svn0 (GNU/Linux)
> Comment: http://firegpg.tuxfamily.org
> 
> iD8DBQFGu3FBNTm8fWdRgmIRAoAQAJ4ocG7HEisT2k82NeoRzf1r0XKVawCg+Hrf
> l+t2S41Im4TNPEoE8HF3jDc=
> =aI1r
> -----END PGP SIGNATURE-----
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"


More information about the freebsd-questions mailing list