[Date Prev][Date Next]
RE: Help! using openldap to authenticate solaris clients
This doesn't sound like an OpenLDAP-specific problem, but a
problem with configuration of whatever software you are using
on 'cat' to manage logins. Your questions would be more
appropriate directed to a list support that software.
Note that PADL offers mailing lists for their PAM and NSS LDAP
modules at firstname.lastname@example.org and email@example.com, respectively.
At 12:10 PM 3/26/2004, Chuck Theobald wrote:
>I have authentication to the ldap server working. My ldap server, dog, is running ldap 2.1.25 with pam_ldap v. 1.65 and nss_ldap v. 2.11. The config files are reasonably standard (see http://lcni.uoregon.edu/~chuck/ldap-stuff/)
>When I ssh into dog using an account that exists only in the ldap directory, access is granted.
>Each LDAP account has an objectClass attribute of posixAccount. The problem is that with similar config files installed on other machines, but referencing dog as the ldap server, authentication fails, see the log files at the above location. That is, I try to login to, say cat, with ldap account credentials and it fails.
>Thanks for asking,
>At 09:45 AM 3/25/2004 -0700, you wrote:
>>I noticed you have gotten openldap to authenticate solaris 8 clients. I too
>>have tried this and found several issues. What was your versions of
>>software and procedures that worked for you?
>>From: Chuck Theobald [mailto:firstname.lastname@example.org]
>>Sent: Wednesday, March 24, 2004 6:00 PM
>>Subject: Help! using openldap to authenticate solaris clients
>>I've got openldap running on a Solaris 8 machine (dog), set up to use
>>nsswitch and pam. Authentication against the LDAP directory succeeds if I
>>log in directly to this machine, but when trying to log in to another
>>machine (cat) configured to reference dog's LDAP directory, authentication
>>fails. Observing dog's slapd log shows over a hundred lines being written
>>when logging into dog, but only some 10 or so when trying to log in to
>>cat. Both dog and cat have essentially similar pam.conf, ldap.conf, and
>>nsswitch.conf files. I am using PADL's pam_ldap and nss_ldap modules on
>>I've been referencing Carter's LDAP System Adminstration book and the Sun
>>blueprints book but neither deal with this kind of utter failure.
>>Information Technology Consultant
>>The Robert and Beverly Lewis Center for Neuroimaging
>>University of Oregon
>Information Technology Consultant
>The Robert and Beverly Lewis Center for Neuroimaging
>University of Oregon