OpenLdap, Pam & nss

Thread View: fj.net.ldap

5 messages

[T] Back to Threads [V] Tree View [G] Group Articles

5 total messages Started by Ze Mask Mon, 14 Feb 2005 15:40

#158

Author: Ze Mask
Date: Mon, 14 Feb 2005 15:40

36 lines
2103 bytes

Hello,
I'm working on Openldap for a few days and i'm trying to authenticate 
unix users via ldap, pam & nss.

After long research, I don't have really understood the exact function 
of these different tools and files (Of course, I know that they are used 
to authenticate via ldap...) :

pam_ldap : does it use pam_ldap.conf or /etc/ldap/ldap.conf ?

libnss_ldap : when it is used and for what ? does it use the 
libnss_ldap.conf or the ldap.conf ?

I ask these questions because of i've red a lot of tutorials and no one 
exactly answers to these questions.

Another problem :
I've used this tutorial : 
http://www.idealx.org/prj/samba/smbldap-howto.fr.html

With this, I succeed in creating users and i can log with them, even if 
their are only declared in the ldap directory (which is quiet normal).
But on localhost only.

While trying to log with ssh, i've got this error in auth.log :
Feb 14 16:35:15 www sshd[1160]: error: PAM: Authentication failure for 
illegal user timmy from www
Feb 14 16:35:15 www sshd[1160]: Failed keyboard-interactive/pam for 
illegal user timmy from 192.168.0.3 port 36995 ssh2


Someone can help me ?

Thx a lot

Max

Re: OpenLdap, Pam & nss

#159

Author: Tim Stegmann
Date: Mon, 14 Feb 2005 20:52

16 lines
1451 bytes

Ze Mask wrote:
> Hello,
> I'm working on Openldap for a few days and i'm trying to authenticate 
> unix users via ldap, pam & nss.
> 
<snip>
> Someone can help me ?
> 
> Thx a lot
> 
> Max

Which Distribution are you using? Which OpenLDAP version?


--

Re: OpenLdap, Pam & nss

#160

Author: Ze Mask
Date: Tue, 15 Feb 2005 11:10

1 lines
1101 bytes

I'm using OpenLDAP v2.2.23 on a Linux Debian with kernel 2.6.10.

Re: OpenLdap, Pam & nss

#162

Author: Dieu
Date: Tue, 15 Feb 2005 11:37

10 lines
1421 bytes

Wrong, I think Debian is not PAMized.

BTW you could read www.linuxchange.com it's all you want, site is most on
spanish.

D

Ze Mask wrote:

> I'm using OpenLDAP v2.2.23 on a Linux Debian with kernel 2.6.10.

Re: OpenLdap, Pam & nss

#161

Author: Tim Stegmann
Date: Tue, 15 Feb 2005 14:46

28 lines
1758 bytes

Ze Mask wrote:
> Hello,
> I'm working on Openldap for a few days and i'm trying to authenticate 
> unix users via ldap, pam & nss.
> 
<snip>
> 
> While trying to log with ssh, i've got this error in auth.log :
> Feb 14 16:35:15 www sshd[1160]: error: PAM: Authentication failure for 
> illegal user timmy from www
> Feb 14 16:35:15 www sshd[1160]: Failed keyboard-interactive/pam for 
> illegal user timmy from 192.168.0.3 port 36995 ssh2
> 
> 
> Someone can help me ?
> 
> Thx a lot
> 
> Max


What about users who are not stored in the DIT but in passwd file? Can 
they log in? Maybe you don't have a problem with your slapd 
configuration but with your sshd config.

Tim

--

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads