Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Now I'v got a working setup using PAM+LDAP over SSL but I can only passwd users in the ldap tree, any idea about how to be able to passwd every users ?

Here are some conf files : /etc/pam.d/common-password : password optional pam_unix.so nullok obscure try_first_pass password sufficient pam_ldap.so ignore_unknown_user password required pam_deny.so

/etc/nsswitch.conf : passwd: compat ldap group: compat ldap shadow: compat ldap

hosts: files dns networks: files

protocols: db files services: db files ethers: db files rpc: db files

netgroup: nis

Any idea ?

Note : I'm running Debian Lenny on every system.

share|improve this question
add comment

1 Answer

up vote 3 down vote accepted

remove

password required pam_deny.so
share|improve this answer
    
Hey, thank you very very much, that's perfect now ! –  Henry-Nicolas Tourneur Dec 21 '09 at 12:27
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.