LDAP Authentication from console

Jason jhelfman at e-e.com
Wed Oct 6 17:02:58 UTC 2010


On Wed, Oct 06, 2010 at 11:59:53AM -0500, Dan Nelson thus spake:
>In the last episode (Oct 06), Kevin Mai said:
>> Hey guys,
>>
>> I've already configured PAM to authenticate against ldap and it works
>> wonderful using ssh/su/sudo/etc, but when I try to log in from console it
>> prompts:
>>
>> login: kma
>> Password: xxxxxxxx
>> LDAP Password: xxxxxxxx (same as the first one)
>> Login Incorrect
>> login:
>
>Compare /etc/pam.d/login against one of your other pam services that works.
>What I do on my servers is add pam_ldap to pam.d/system, then blow away most
>of the lines in the other files and replace them with
>
>auth            include         system
>account         include         system
>session         include         system
>password        include         system
>
>, so I know everything uses the same configuration.

Back when I had used LDAP for authentication I also needed to edit
/etc/nsswitch.conf 

Not sure if this is still the case, or if I was doing it incorrectly,
however not having didn't give me the ability to login via ldap.

-jgh


More information about the freebsd-questions mailing list