From owner-freebsd-net@FreeBSD.ORG  Fri Jan 20 04:03:01 2006
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9ABAF16A41F
	for <freebsd-net@freebsd.org>; Fri, 20 Jan 2006 04:03:01 +0000 (GMT)
	(envelope-from amactaggart@hkis.edu.hk)
Received: from mail2.hkis.edu.hk (mail2.hkis.edu.hk [202.40.134.122])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0954643D45
	for <freebsd-net@freebsd.org>; Fri, 20 Jan 2006 04:03:00 +0000 (GMT)
	(envelope-from amactaggart@hkis.edu.hk)
Received: from localhost ([127.0.0.1]) by mail2.hkis.edu.hk
	for freebsd-net@freebsd.org; Fri, 20 Jan 2006 12:02:56 +0800
Received: from RBSMTPD1-MTA by rbsmtp1.hkis.edu.hk
	with Novell_GroupWise; Fri, 20 Jan 2006 12:02:56 +0800
Message-Id: <s3d0d170.021@rbsmtp1.hkis.edu.hk>
X-Mailer: Novell GroupWise Internet Agent 6.5.5 
Date: Fri, 20 Jan 2006 12:02:28 +0800
From: "Andrew MacTaggart" <amactaggart@hkis.edu.hk>
To: <freebsd-net@freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Subject: nss_ldap and pam_ldap troubles
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jan 2006 04:03:01 -0000

having trouble getting nss_ldap and Pam_ldap to work.

running freebsd 5.4
ldap - edirectory - remote server
ldapsearch works

installed nss_ldap
installed pam_ldap
change parameters in ldap.conf and nss_ldap.conf
host 10.x.x.x
base o=mybase
basspw = XXXXXXXXXXXX

nsswitch.conf

group: files ldap
passwd: files ldap

pam.d/sshd

auth  sufficient   /usr/local/lib/pam_ldap.so  no_warn try_first_pass

can't figure out how to enable logging

ssh fails but it takes longer like it is querry something.

need help on how to enable logging for pam_ldap and nss_ldap

need to know where I am making a mistake.

debug would be helpful.

TKS
A