[Fedora-directory-users] PAM authentication

[To Ngan]

Thomas Mathiesen wrote:

>Hi all!
>
>I am happy to see that the communty have got a good-looking directory server.
>Soon, I hope I can throw away our M$ active directory, and run fedora
>directory instead, but I am having some issue, authenticating linux desktops.
>
>So, here's what I have:
>Fedora Directory installed on CentOS 4.0 (redhat EL clone)
>Ran the typical install (after reading redhat directory install manual)
>
>I can successfully login to the web-admin interface, and add users (after
>binding as Directory Manager).
>
>Due to a java error, I cannot use the console, but I rather use GQ (a gnome
>LDAP tool). I can bind (as Directory Manager), and add/remove stuff.
>
>So, here's what I continued doing:
>Added a user (using the webinterface).
>Added objectclass posixAccount to this user (using GQ)
>
>Turning to my desktop, running Ubuntu Hoary and Openldap, I set it up using
>this ldap config:
>host ldap.mydomain.com
>base dc=mydomain,dc=com
>ldap_version 3
>timelimit 30
>pam_filter objectclass=posixAccount
>pam_login_attribute uid
>ssl no
>#ssl start_tls
>#tls_checkpeer no
>pam_password ssha
>
>I've tried to use ssl (and tls_checkpeer no), and no ssl.... nothing works.
>
>In my log on the fedora directory server, I see the connection, and it first
>tries to find the posixAccount, and returns no error. Then it looks for
>shadowAccount, and returns no error (after I added that objectclass as well).
>
>The client worked fine, authenticating with my previous openldap server... and
>I can't see why I doesn't authenticate with my new fedora server.
>  
>
Hi Thomas,

What ldap requests are your clients posting to the fedora directory 
server for authentication?  Could you cut and paste the corresponding 
access log entries from the fedora directory server?

Thanks,
--
toto

>Help would be highly appreciated :)
>
>/Thomas
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3166 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20050607/9d65895d/attachment.bin>