LDAP authentication … Log in fail on the LDAP client

Question

I can get the password and group from the LDAP client getent passwd getent group work sucessfully But when I try 'su USERNAME' the name from the LDAP server or 'ssh USERNAME@localhost' it prompt me a user password, I typed exactly the USERNAME password but it return "su : Authentication Failure" or "Permission denied, Please try again". I don't know why? it only work when I was at root at the client and "su USERNAME"

Answer 1

Check your pam settings for ssh and su.

For example for ssh:

auth    sufficient      pam_ldap.so
account sufficient      pam_permit.so

also make sure that you can login via password in *sshd_config*

PasswordAuthentication yes

Also check your logs: /var/log/auth.log