Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

After a week of struggling to find out why some of our machines are Authenticating off of our LDAP servers and some are not I noticed that after PAM binds to see if the uid exists it then sends the users password. At the packet level, I can see that when I auth on the machines that are working that I see my password come through. When I auth on a machine that is not authing I see the packet at the server with the password as "INCORRECT". What could possibly be changing that? I've searched the pam_ldap, nss_ldap and pam source but to no avail. Any advice would be greatly appreciated.


share|improve this question

migrated from Jul 20 '11 at 0:12

This question came from our site for professional and enthusiast programmers.

I believe you will have to change your nsswitch.conf file aswell:

method A:


passwd: files ldap



passwd: ldap files

Which would theoretically reverse the order

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.