The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
86 views

how to use authconfig for ssh through LDAP connection

I'm newbies on Centos7. The ssh connection is working for all user which is the /etc/passwd. That's meaning I can connect to my server with this kind of users I added The other users which are ...
2
votes
0answers
275 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
0
votes
0answers
214 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
0
votes
0answers
190 views

Solaris LDAP client: nss Failure to load dynamic library

On Solaris 10 and 11, I have successfully set PAM_LDAP up. The Solaris host uses a remote LDAP for user authentication. However, I am unable to get TLS working. ldapclient setup I initiate my ...
0
votes
0answers
98 views

OpenLDAP+pam_ldap+ppolicy does not notify user that they are blocked

We have an OpenLDAP server configured to use the password policy overlay in order to lock users when they reach a certain number of failed password attempts. This is working perfectly but when a ...
1
vote
1answer
1k views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
0
votes
0answers
52 views

Ubuntu not refreshing LDAP group membership

I have an Ubuntu 12.04 client configured to authenticate users against an OpenLDAP server using libpam-ldapd. I've successfully configured group mapping, but the user's group membership does not ...
2
votes
0answers
186 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
3
votes
1answer
3k views

What is nsswitch compat mode?

Red Hat recommended me compat mode in /etc/nsswitch.conf as one of the options to enumerate LDAP users, but later said that it's not a much-used method. nsswitch.conf passwd: files compat ...
0
votes
1answer
161 views

What are disadvantages of using nsswitch compat?

In my current LDAP set-up "getent passwd" shows all 600+ users that exist in the LDAP, not enumerating only the 20 LDAP-users that have permission to access this netgroup/server. This can be solved ...
0
votes
1answer
60 views

Users seeing all other LDAP users on RHEL default behavior?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent ...
5
votes
3answers
5k views

How come all LDAP users are shown with getent passwd?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When I type "getent ...
0
votes
1answer
333 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
1
vote
2answers
505 views

CentOS 5.8 - NSCD can't caching the password

I try to configure NSCD to connect ldap users to my PC. I like, that users could login offline in this PCs (online ldap users works fine). Actually, i can use the user, but when i try to introduce ...
0
votes
1answer
313 views

restarting authconfig changes order of my /etc/nsswitch.conf

Here is my nsswitch.conf: passwd: files ldap sss shadow: files ldap sss group: files sss When I restart authconfig, it removes ldap from passwd, shadow, and group. Here's my ...
0
votes
1answer
977 views

getent and ldapsearch results are inconsistent concerning the loginShell

I have a test that creates a user in LDAP with /bin/bash and I then modify the ldap attributes to /bin/noshell but the results from getent and ldapsearch are inconsistent for the shell. This user does ...
5
votes
1answer
4k views

PAM_LDAP Authentication failure with correct credentials on freebsd

I need to get our freebsd servers to auth via AD, but it is giving me problems. Environment: AD backend (Win 2k8r2). This works with other linux hosts which auth via SSSD FreeBSD 9.1 for client ...
2
votes
1answer
526 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
1
vote
1answer
334 views

RHEL 5.8 LDAP pam_groupdn customisation

I have a given LDAP-Server I want to use for User Authentication on my Red Hat Enterprise Linux 5.8 Server. I got the connection to the LDAP-Server working and I'm able to Login to the Linux Server by ...
1
vote
1answer
311 views

CA root certificate in pam_ldap configuration will not work without tls_checkpeer no

Systems are Debian Squeeze and Ubuntu Precise with identical configurations. Version of libpam-ldap is 184-8.5 on both distros. Everything works fine with the following configuration in ...
8
votes
2answers
42k views

How to test a LDAP connection from a client

How to check the LDAP connection from a client to server. I'm working on the LDAP authentication and this client desktop needs to authenticate via a LDAP server. I can SSH to the LDAP server using ...
1
vote
1answer
502 views

Can't configure PAM + LDAP on Debian Lenny - Getting error=49 on server logs

I've been migrating some servers and desktops using Ubuntu 10.04 from getting the users from an old OpenLDAP implementation to a newer Centos Active Directory. I haven't had any problems so far, until ...
3
votes
2answers
1k views

openldap authentication ssh

I'm trying to set up on a openldap server running on debian 6 the ssh authentication on a ldap-client host named ldap_client. Here is what ldapsearch returns on server: dn: dc=localnet,dc=lan ...
0
votes
1answer
438 views

centos 5.x and ldap failover

I am having trouble with LDAP authentication fail-over. We currently have two CentOS-DS directory servers working in a multi-master setup. One Server per site. Normally, logins process fine. ...
0
votes
1answer
771 views

Configured Linux Machine to Authenticate to LDAP But not working

I am Using Cent Os Operating System and i need to configure LDAP Authentication for this machine. I have configured the ldap client using using authconfig-tui command. And i have cross checked the ...
0
votes
1answer
1k views

libpam_ldapd - pam_ldap(sshd:account): 'Could not identify user'

I'm attempting to test the install procedure for libpam_ldapd on an Ubuntu/Debian Virtual machine. I have the nscd / nslcd services off, and I'm watching the output from nslcd -d and ...
0
votes
1answer
514 views

PAM setup with pam_ldap

I am running ubuntu 10.10 and trying to setup pam with pam_ldap. The guide at: http://wiki.debian.org/LDAP/PAM says, among other things: In order to globally enable LDAP authentication through PAM, ...
0
votes
1answer
561 views

Do I need both nss_ldap and pam_ldap?

This seems like a dumb question, but... do I need both nss_ldap and pam_ldap to have my users in LDAP? It seems to me that pam_ldap would take care of pointing everything at the LDAP server as ...
2
votes
5answers
3k views

Managing LDAP logins to a machine without pam_groupdn: multiple groups allowed

I'm sure that some of you have dealt with this same problem. I'm hoping that someone has a better answer than what I'm doing now. So, you've got some users in an LDAP directory, and one day you say ...