[Fedora-directory-users] Question re: {KERBEROS} syntax

[Richard Megginson]

Tom Ryan wrote:
>
> On 7/26/06 12:31 PM, "Richard Megginson" <rmeggins at redhat.com> wrote:
>
>
>     Hmm - Try restarting the server. If that doesn't fix it, post your pam
>     passthru config entry and your pam config (e.g.
>     /etc/pam.d/ldapserver).
>
>
> I have already restarted the server multiple times..
>
> Here’s the info..
>
> cat /etc/pam.d/ldapserver
>
> auth sufficient /lib/security/pam_krb5.so no_user_check
> account required /lib/security/pam_krb5.so no_user_check
>
> And in dse.ldif
>
> dn: cn=PAM Pass Through Auth,cn=plugins,cn=config
> objectClass: top
> objectClass: nsSlapdPlugin
> objectClass: extensibleObject
> objectClass: pamConfig
> cn: PAM Pass Through Auth
> nsslapd-pluginPath: /opt/fedora-ds/lib/pam-passthru-plugin.so
> nsslapd-pluginInitfunc: pam_passthruauth_init
> nsslapd-pluginType: preoperation
> nsslapd-pluginEnabled: on
> nsslapd-pluginloadglobal: true
> nsslapd-plugin-depends-on-type: database
> pamMissingSuffix: ALLOW
> pamExcludeSuffix: o=NetscapeRoot
> pamExcludeSuffix: cn=config
> pamMapMethod: ENTRY
This should be pamIDMapMethod. The reason it always uses the RDN value 
is because that is the default if none is specified.
> pamFallback: 0
> pamSecure: 1
> pamService: ldapserver
> nsslapd-pluginId: pam_passthruauth
> nsslapd-pluginVersion: 1.0.2
> nsslapd-pluginVendor: Fedora Project
> nsslapd-pluginDescription: PAM pass through authentication plugin
> pamIDAttr: aliasedObjectName
> modifiersName: 
> uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoo
> t
> modifyTimestamp: 20060726142549Z
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20060726/00e0dd73/attachment.bin>