[Solved] Re: System user login fails if ldap goes down.

To: Buchan Milne <bgmilne@staff.telkomsa.net>

Subject: [Solved] Re: System user login fails if ldap goes down.

From: Meghanand Acharekar <vasco.debian@gmail.com>

Date: Fri, 4 Feb 2011 14:08:47 +0530

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=cfWLae73Voq6shWHxJso8KbqKUwqASy1yRNswenmANo=; b=v1Z3mcK7vnRFvWFeoMs2mSB7x7vPT+ceNCu1yTTfYb/ZGD70iOYzPufR1bu0iXYrmE /rK15rNS/FmnXbAmp3U4E45Ody6jlnMwFUQC9Mvi/5qoK0R9YiSjPfcRlBBEgo1KBDqe Yk0w5OqAr2xAFBp8x+NFpumq3NntSxZqMyhCI=

Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; b=Re3znV2ILyllbn4cjhXtWszYl3z7NiWyu2k7CR0BysH3ihjfb8ekP5d3pVja0vWzo8 VsVxMTnALLqSyQtCTlhQm4RJ7RvyIXeL9F6Wqnsfmpmzs15vWQbAEeWt+4+9LuYf6tXX 9oaOkamIfN3QqWPSfISAhbSPNGLPWYS4nn0SM=

In-reply-to: <201102041028.09646.bgmilne@staff.telkomsa.net>

References: <AANLkTikV1nFUbWPbDAGdaddoVcY+2u7jT9hDLiU6gdKT@mail.gmail.com> <201102031636.35792.bgmilne@staff.telkomsa.net> <AANLkTinSjuMRaXCas16zjRmPagD=EncV8CmKkaQJHrzH@mail.gmail.com> <201102041028.09646.bgmilne@staff.telkomsa.net>

On Fri, Feb 4, 2011 at 1:58 PM, Buchan Milne <bgmilne@staff.telkomsa.net> wrote:

On Friday, 4 February 2011 09:57:36 Meghanand Acharekar wrote:
> Thanks for the information.
>
> But is not working for me.
>
> account required pam_unix.so broken_shadow
> account sufficient pam_localuser.so
> account sufficient pam_succeed_if.so uid < 500 quiet
> account [default=bad success=ok user_unknown=ignore] pam_ldap.so
> account required pam_permit.so
>
> In Syslog (/var/log/secure) its keep on printing.
>
> Accepted password for testuser from 1.2.3.4 port 46747 ssh2

So, PAM authentication seems to have succeeded.

> failed to bind to LDAP server ldap://10.0.119.36/: Can't contact LDAP
> server failed to bind to LDAP server ldap://10.0.119.36/: Can't contact
> LDAP server reconnecting to LDAP server (sleeping 4 seconds)...
> failed to bind to LDAP server ldap://10.0.119.36/: Can't contact LDAP
> server reconnecting to LDAP server (sleeping 8 seconds)...
> failed to bind to LDAP server ldap://10.0.119.36/: Can't contact LDAP
> server reconnecting to LDAP server (sleeping 16 seconds)...
>
> Yes, I'm using RHEL-5.4

This is a different part of the problem. The easiest (but not necessarily
best, depending on your nss_ldap configuration, which you did not supply) is:

echo "bind_policy soft" >> /etc/ldap.conf

Regards,
Buchan