Article View: fj.net.ldap
Article #158OpenLdap, Pam & nss
From: Ze Mask
Date: Mon, 14 Feb 2005 15:40
Date: Mon, 14 Feb 2005 15:40
36 lines
2103 bytes
2103 bytes
Hello, I'm working on Openldap for a few days and i'm trying to authenticate unix users via ldap, pam & nss. After long research, I don't have really understood the exact function of these different tools and files (Of course, I know that they are used to authenticate via ldap...) : pam_ldap : does it use pam_ldap.conf or /etc/ldap/ldap.conf ? libnss_ldap : when it is used and for what ? does it use the libnss_ldap.conf or the ldap.conf ? I ask these questions because of i've red a lot of tutorials and no one exactly answers to these questions. Another problem : I've used this tutorial : http://www.idealx.org/prj/samba/smbldap-howto.fr.html With this, I succeed in creating users and i can log with them, even if their are only declared in the ldap directory (which is quiet normal). But on localhost only. While trying to log with ssh, i've got this error in auth.log : Feb 14 16:35:15 www sshd[1160]: error: PAM: Authentication failure for illegal user timmy from www Feb 14 16:35:15 www sshd[1160]: Failed keyboard-interactive/pam for illegal user timmy from 192.168.0.3 port 36995 ssh2 Someone can help me ? Thx a lot Max
Technical Details
Message-ID:
<4210c665$0$6836$626a14ce@news.free.fr>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!proxad.net!infeed-2.proxad.net!news11-e.free.fr!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: 103627,2df40c8331a3332a,start X-Google-Attributes: gid103627,public X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!proxad.net!infeed-2.proxad.net!news11-e.free.fr!not-for-mail Date: Mon, 14 Feb 2005 16:40:21 +0100 From: Ze Mask <cryptopsyk@hotmail.com> User-Agent: Debian Thunderbird 1.0 (X11/20050116) X-Accept-Language: en-us, en MIME-Version: 1.0 Newsgroups: fj.net.ldap Subject: OpenLdap, Pam & nss X-Enigmail-Version: 0.90.0.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Lines: 36 Message-ID: <4210c665$0$6836$626a14ce@news.free.fr> Organization: Guest of ProXad - France NNTP-Posting-Date: 14 Feb 2005 16:40:22 MET NNTP-Posting-Host: 81.57.236.45 X-Trace: 1108395622 news11-e.free.fr 6836 81.57.236.45:33075 X-Complaints-To: abuse@proxad.net