Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 09 Aug 2007 14:30:24 -0700
From:      Noah <admin2@enabled.com>
To:        Andy Harrison <aharrison@gmail.com>
Cc:        User Questions <freebsd-questions@freebsd.org>
Subject:   Re: Issues while authenticating a user over openLDAP using PAM_ldap [cured]
Message-ID:  <46BB8770.1020707@enabled.com>
In-Reply-To: <a22ff2940708091254h331500f3kf47aa5d645da1ed5@mail.gmail.com>
References:  <46BB69EF.9070400@enabled.com> <a22ff2940708091254h331500f3kf47aa5d645da1ed5@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
see below

Andy Harrison wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> 
> On 8/9/07, Noah  wrote:
>> running FreeBSD 6.2 Stable
>>
>> we have openLDAP installed on a server called access1.  Users on access1
>> appear to not be able to ssh to access1.  The ssh authentication method
>> uses PAM ldap.  PAM_ldap reports "Invalid credentials" in /var/log/messages
>>
>> We have another server called access2 that authenticates to the the ldap
>> server running on access1.  those users log in via ssh without issue on
>> access2.
>>
>> I am trying to track down what is broken.  I am not even sure how to
>> receive verbose logging from PAM and/or PAM_ldap.  Any assistance is
>> much appreciated.
>>
>>
> 
> What about your nsswitch.conf file?



thanks Andy - that was it!

I matched the lines of access1's nsswitch.conf to access2's 
nsswitch.conf file

and things are fine!



> 
> - --
> Andy Harrison
> public key: 0x67518262
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.4-svn0 (GNU/Linux)
> Comment: http://firegpg.tuxfamily.org
> 
> iD8DBQFGu3FBNTm8fWdRgmIRAoAQAJ4ocG7HEisT2k82NeoRzf1r0XKVawCg+Hrf
> l+t2S41Im4TNPEoE8HF3jDc=
> =aI1r
> -----END PGP SIGNATURE-----
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46BB8770.1020707>