From owner-freebsd-questions@FreeBSD.ORG  Sat Mar 15 14:23:10 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 455AB106566B
	for <freebsd-questions@freebsd.org>;
	Sat, 15 Mar 2008 14:23:10 +0000 (UTC)
	(envelope-from dmehler26@woh.rr.com)
Received: from hrndva-omtalb.mail.rr.com (hrndva-omtalb.mail.rr.com
	[71.74.56.122]) by mx1.freebsd.org (Postfix) with ESMTP id 091AD8FC1F
	for <freebsd-questions@freebsd.org>;
	Sat, 15 Mar 2008 14:23:09 +0000 (UTC)
	(envelope-from dmehler26@woh.rr.com)
Received: from satellite ([71.79.250.82]) by hrndva-omta01.mail.rr.com
	with SMTP
	id <20080315142309.WOGD6098.hrndva-omta01.mail.rr.com@satellite>
	for <freebsd-questions@freebsd.org>; Sat, 15 Mar 2008 14:23:09 +0000
Message-ID: <000f01c886a7$f86de070$0200a8c0@satellite>
From: "Dave" <dmehler26@woh.rr.com>
To: <freebsd-questions@freebsd.org>
Date: Sat, 15 Mar 2008 10:22:16 -0400
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="Windows-1252";
	reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Subject: freebsd 7.0 sshd authenticating against ldap core dumping
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Dave <dmehler26@woh.rr.com>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 15 Mar 2008 14:23:10 -0000

Hello,
Is anyone using ldap authentication with 7.0? I've got a 7.0-release box 
that i'm trying to get ldap authentication working with. The 7.0 box is the 
client in this case. I'm encrypting connections with tls, which is working. 
On the box itself i can do an ldapsearch for a user and an id for a user 
plus ls -l information on users shows up correctly. I've added ldap to my 
/etc/nsswitch.conf file. So far nothing has blown up, i can still log in as 
normal. My issue comes when i add the line:

auth sufficient /usr/local/lib/pam_ldap.so try_first_pass

to /etc/pam.d/sshd and restart sshd. Now whenever i try to log in either as 
a local user, nonldap or as an ldap user sshd exits with a signal 11, this 
only occurs with that line in pam.d/sshd, remove it and restart and all is 
well. I've googled and seen others with this but with no solution. My logs 
show sshd exiting with the signal 11 then nothing. An ssh -v -v -v shows the 
connection is closed after the file ~/.ssh/identity is searched for.
    Any help appreciated.
Thanks.
Dave.