LDAP User can't login can su to with root account

To: openldap-technical@openldap.org

Subject: LDAP User can't login can su to with root account

From: Frank Yu <flyxiaoyu@gmail.com>

Date: Sun, 18 Dec 2016 18:40:15 +0800

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=tQBH2kZSHezOCz2qw7SuNL8cCfM/OsHdEYew8zyrIGE=; b=D9+H074PQft7t88QQbfbT/ve62Cr6mSrZVN9UZS4dyDyjbT5IZeU7vW/UPMX7lPQxG WlTEGyXZFb8m2xRhi91GXXuK17PFv2Y22yOBztYOtZn7mGXXKoJFtJnQFd2qxO1w57hR UJzdjLDGN4/5cHUUQLH/ZTV6CvN5XYSRMH9yXmmr4nGorJLVHCwVWbGDzZxXwAkEpIaR PrpWPPN657na+EHwyk4MWGCiZPuqVQflI99x8k/0VEVdXNFwakGIv0K4GMtjF7/qLNrn mjznhl93H8UxsTdNyYVwgAzfogkZ2ejNTuKapv0vaGM7atK665Vb3TKZWqRVLoGzI9cc 2erg==

Hi All,

I have setup a LDAP service on host A, and configure ldap client on host B. when I tried to login host B with user which already added in LDAP server, it report error even through I enter right passwd

shanzhi.yu@10.10.10.101's password:

debug3: send packet: type 50

debug2: we sent a password packet, wait for reply

debug3: receive packet: type 51

debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password

Permission denied, please try again.

shanzhi.yu@10.10.10.101's password:

debug3: send packet: type 50

debug2: we sent a password packet, wait for reply

debug3: receive packet: type 51

debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password

Permission denied, please try again.

shanzhi.yu@10.10.10.101's password:"

and, I can su to user shanzhi.yu on host B

[root@

host B

~]# su shanzhi.yu

[shanzhi.yu@

host B

root]$ cd

[shanzhi.yu@

host B

~]$

What's the problem? any config should I do?

Thanks

Regards
Frank Yu