Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 6 Oct 2010 11:59:53 -0500
From:      Dan Nelson <dnelson@allantgroup.com>
To:        Kevin Mai <kma@mrecic.gov.ar>
Cc:        freebsd-questions <freebsd-questions@freebsd.org>
Subject:   Re: LDAP Authentication from console
Message-ID:  <20101006165953.GN40148@dan.emsphone.com>
In-Reply-To: <1258599465.73510.1286378314723.JavaMail.root@mrelmx10.mrec.ar>
References:  <1258599465.73510.1286378314723.JavaMail.root@mrelmx10.mrec.ar>

next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Oct 06), Kevin Mai said:
> Hey guys, 
> 
> I've already configured PAM to authenticate against ldap and it works
> wonderful using ssh/su/sudo/etc, but when I try to log in from console it
> prompts:
> 
> login: kma 
> Password: xxxxxxxx 
> LDAP Password: xxxxxxxx (same as the first one) 
> Login Incorrect 
> login: 

Compare /etc/pam.d/login against one of your other pam services that works. 
What I do on my servers is add pam_ldap to pam.d/system, then blow away most
of the lines in the other files and replace them with

auth            include         system
account         include         system
session         include         system
password        include         system

, so I know everything uses the same configuration.

-- 
	Dan Nelson
	dnelson@allantgroup.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20101006165953.GN40148>