2
votes
0answers
12 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
0
votes
0answers
27 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
0
votes
0answers
53 views

OpenLDAP+pam_ldap+ppolicy does not notify user that they are blocked

We have an OpenLDAP server configured to use the password policy overlay in order to lock users when they reach a certain number of failed password attempts. This is working perfectly but when a ...
1
vote
1answer
385 views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
2
votes
0answers
113 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
2
votes
1answer
2k views

What is nsswitch compat mode?

Red Hat recommended me compat mode in /etc/nsswitch.conf as one of the options to enumerate LDAP users, but later said that it's not a much-used method. nsswitch.conf passwd: files compat ...
0
votes
1answer
85 views

What are disadvantages of using nsswitch compat?

In my current LDAP set-up "getent passwd" shows all 600+ users that exist in the LDAP, not enumerating only the 20 LDAP-users that have permission to access this netgroup/server. This can be solved ...
0
votes
1answer
53 views

Users seeing all other LDAP users on RHEL default behavior?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent ...
5
votes
3answers
3k views

How come all LDAP users are shown with getent passwd?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When I type "getent ...
0
votes
1answer
179 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
0
votes
1answer
211 views

restarting authconfig changes order of my /etc/nsswitch.conf

Here is my nsswitch.conf: passwd: files ldap sss shadow: files ldap sss group: files sss When I restart authconfig, it removes ldap from passwd, shadow, and group. Here's my ...
0
votes
1answer
653 views

getent and ldapsearch results are inconsistent concerning the loginShell

I have a test that creates a user in LDAP with /bin/bash and I then modify the ldap attributes to /bin/noshell but the results from getent and ldapsearch are inconsistent for the shell. This user does ...
2
votes
1answer
393 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
1
vote
1answer
254 views

RHEL 5.8 LDAP pam_groupdn customisation

I have a given LDAP-Server I want to use for User Authentication on my Red Hat Enterprise Linux 5.8 Server. I got the connection to the LDAP-Server working and I'm able to Login to the Linux Server by ...
5
votes
2answers
26k views

How to test a LDAP connection from a client

How to check the LDAP connection from a client to server. I'm working on the LDAP authentication and this client desktop needs to authenticate via a LDAP server. I can SSH to the LDAP server using ...
0
votes
1answer
373 views

centos 5.x and ldap failover

I am having trouble with LDAP authentication fail-over. We currently have two CentOS-DS directory servers working in a multi-master setup. One Server per site. Normally, logins process fine. ...
0
votes
1answer
704 views

Configured Linux Machine to Authenticate to LDAP But not working

I am Using Cent Os Operating System and i need to configure LDAP Authentication for this machine. I have configured the ldap client using using authconfig-tui command. And i have cross checked the ...
0
votes
1answer
492 views

PAM setup with pam_ldap

I am running ubuntu 10.10 and trying to setup pam with pam_ldap. The guide at: http://wiki.debian.org/LDAP/PAM says, among other things: In order to globally enable LDAP authentication through PAM, ...
0
votes
1answer
455 views

Do I need both nss_ldap and pam_ldap?

This seems like a dumb question, but... do I need both nss_ldap and pam_ldap to have my users in LDAP? It seems to me that pam_ldap would take care of pointing everything at the LDAP server as ...
2
votes
4answers
3k views

Managing LDAP logins to a machine without pam_groupdn: multiple groups allowed

I'm sure that some of you have dealt with this same problem. I'm hoping that someone has a better answer than what I'm doing now. So, you've got some users in an LDAP directory, and one day you say ...