| View previous topic :: View next topic |
| Author |
Message |
supermihi
Guru
Joined: 09 Feb 2005
Posts: 348
|
 Posted: Thu Oct 19, 2006 8:12 pm Post subject: nss_ldap: getent works, but can't login |
 |
|
I have some strange error with LDAP authentication: I already have the server (gentoo) running and migratet a bunch of clients (ubuntu) from NIS to ldap, which works fine.
Now I also do have a gentoo client. I installed pam_ldap and nss_ldap here and followed the various howtos to set up the relevant config files. getent, id etc. work perfectly, but I can't login:
| Code: |
$ ssh foobar@ldapclient
Password:
Connection to ldapclient closed by remote host.
Connection to ldapclient closed.
|
this is in /var/log/messages of the client:
| Code: |
Oct 19 21:53:29 ldapclient sshd[21766]: Accepted keyboard-interactive/pam for foobar from 123.123.123.123 port 41879 ssh2
Oct 19 21:53:29 ldapclient sshd(pam_unix)[22892]: session opened for user foobar by (uid=0)
Oct 19 21:53:29 ldapclient sshd[21766]: nss_ldap: could not search LDAP server - Server is unavailable
Oct 19 21:53:29 ldapclient sshd[21766]: fatal: login_get_lastlog: Cannot find account for uid 6047
Oct 19 21:53:29 ldapclient sshd[21766]: syslogin_perform_logout: logout() returned an error
Oct 19 21:53:29 ldapclient sshd(pam_unix)[22892]: session closed for user foobar
Oct 19 21:55:02 ldapclient sshd(pam_unix)[22897]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=bar.xyz user=foobar
|
Especially the "nss_ldap: could not search LDAP server" seems a bit silly, since it obviously finds the server (password authentication works, if I enter the wrong password I don't even get that far) and also ldapsearch etc. work flawless. Also, with the same ldap.conf all my ubuntu clients work.
_________________
"You may say I'm a dreamer, but I'm not the only one." |
|
| Back to top |
|
 |
supermihi
Guru
Joined: 09 Feb 2005
Posts: 348
|
| Posted: Thu Oct 19, 2006 8:13 pm Post subject: |
|
|
I solved this by emerging the ~ masked version of nss_ldap (253). The "stable" one that fails is 249. I'm gonna file a bug against this.
_________________
"You may say I'm a dreamer, but I'm not the only one." |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
