🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: fj.net.ldap
Article #158

OpenLdap, Pam & nss

#158
From: Ze Mask
Date: Mon, 14 Feb 2005 15:40
36 lines
2103 bytes
Hello,
I'm working on Openldap for a few days and i'm trying to authenticate 
unix users via ldap, pam & nss.

After long research, I don't have really understood the exact function 
of these different tools and files (Of course, I know that they are used 
to authenticate via ldap...) :

pam_ldap : does it use pam_ldap.conf or /etc/ldap/ldap.conf ?

libnss_ldap : when it is used and for what ? does it use the 
libnss_ldap.conf or the ldap.conf ?

I ask these questions because of i've red a lot of tutorials and no one 
exactly answers to these questions.

Another problem :
I've used this tutorial : 
http://www.idealx.org/prj/samba/smbldap-howto.fr.html

With this, I succeed in creating users and i can log with them, even if 
their are only declared in the ldap directory (which is quiet normal).
But on localhost only.

While trying to log with ssh, i've got this error in auth.log :
Feb 14 16:35:15 www sshd[1160]: error: PAM: Authentication failure for 
illegal user timmy from www
Feb 14 16:35:15 www sshd[1160]: Failed keyboard-interactive/pam for 
illegal user timmy from 192.168.0.3 port 36995 ssh2


Someone can help me ?

Thx a lot

Max
Technical Details
Message-ID: <4210c665$0$6836$626a14ce@news.free.fr>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!proxad.net!infeed-2.proxad.net!news11-e.free.fr!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Thread: 103627,2df40c8331a3332a,start
X-Google-Attributes: gid103627,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!proxad.net!infeed-2.proxad.net!news11-e.free.fr!not-for-mail
Date: Mon, 14 Feb 2005 16:40:21 +0100
From: Ze Mask <cryptopsyk@hotmail.com>
User-Agent: Debian Thunderbird 1.0 (X11/20050116)
X-Accept-Language: en-us, en
MIME-Version: 1.0
Newsgroups: fj.net.ldap
Subject: OpenLdap, Pam & nss
X-Enigmail-Version: 0.90.0.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 36
Message-ID: <4210c665$0$6836$626a14ce@news.free.fr>
Organization: Guest of ProXad - France
NNTP-Posting-Date: 14 Feb 2005 16:40:22 MET
NNTP-Posting-Host: 81.57.236.45
X-Trace: 1108395622 news11-e.free.fr 6836 81.57.236.45:33075
X-Complaints-To: abuse@proxad.net