Re: problem authenticating using pam

[Ben Collins <bcollins@debian.org>]

On Thu, May 27, 1999 at 04:46:54PM -0600, Schutz, John wrote:
> I'm playing with the same stuff. I had to create the user on the os
> first...which is kinda silly, as it *creates* more overhead when what i
> wanted was to eliminate the overhead of multiple accounts....
>
> -----Original Message-----
> From: jeremy@xxedgexx.com [mailto:jeremy@xxedgexx.com]
> 
> Basically I'm using the ldapns stuff trying to get my machine to
> authenticate only via ldap.  Is this possible yet?  This is the error 
> I get in messages:
> 
> May 27 18:16:12 rep login: FAILED LOGIN 1 FROM srv1.ecropolis.com FOR
> jeremy, User not known to the underlying authentication module
> May 27 18:16:34 rep login: FAILED LOGIN SESSION FROM srv1.ecropolis.com
> FOR p, Error in service module
> 
> I'm using a RH 6.0 system.

First off, are you using pam_ldap and nss_ldap? Note on RedHat 6.0
systems, the nss_ldap has to have a .so.2 extension and not .so.1
(glibc 2.0->2.1 difference), note that this is fixed in the latest
nss_ldap source on ftp.padl.com. You also need to have ldap listed in
/etc/nsswitch.conf.

Also the contents of your /etc/pam.d/login file would be helpful.