<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> Thanks for your help, Dan. As you can see from my first email, all of the configuration files are exactly the same, pushed from cfengine. The odd thing about this is that I was able to get the host to work by installing the CentOS version of nss_ldap a few days ago but it stopped working today. Also, the system config file for openldap is in /etc/ldap.conf. <pre class="moz-signature" cols="72">Joshua M. Miller - RHCE, VCP Ditree Consulting <a class="moz-txt-link-freetext" href="http://ditree.com/">http://ditree.com/</a></pre> Dan Yefimov wrote: <blockquote cite="mid:Pine.LNX.4.44.0705110130580.5326-100000@D00M.lightwave.net.ru" type="cite"> <pre wrap="">On Thu, 10 May 2007, Joshua M Miller wrote: </pre> <blockquote type="cite"> <pre wrap="">Dan, The client updates did not change anything, it's still broken... </pre> </blockquote> <pre wrap="">Then I'd suggest you comparing openldap configuration of failing hosts to that one of hosts that don't experience problems. The openldap configuration is normally found in /etc/openldap. I don't know for sure if pam_ldap.so also has some configuration files, but if it has, check them also. And if there will be no differences in the configuration found, make sure pam_ldap and openldap binary RPMs installed on hosts in question were compiled with the same options that ones installed on other hosts. </pre> </blockquote> </body> </html>