[K12OSN] LTSP 4.4.1 cannot authenicate to LDAP from GDM login

[Glenn Arnold]

A little more research on how to troubleshoot this problem here is
website I used there troubleshooting techniques.
http://www.ldapguru.org/modules/newbb/viewtopic.php?topic_id=2793&forum=
6&post_id=8373#forumpost8373 
I know ldap is working, because I can run the following command:
ldapsearch -x -LLL -h ldap1.example.com
And I can see all the LDAP users.  I know when I login as root I can
goto home and see all the user from the remote servers nfs share.  I
need to get this resolve tonight or my K12LTSP project at this school
might get the axe.

Thanks
-Glenn

-----Original Message-----
From: Glenn Arnold 
Sent: Sunday, January 29, 2006 5:32 PM
To: Support list for opensource software in schools.
Subject: RE: [K12OSN] LTSP 4.4.1 cannot authenicate to LDAP from GDM
login

Yes, I mean that I am able to connect to the remote home directory
through NFS and see the user folder contents with ldap, but I can not
login through GDM. Here is my system-auth contents.

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      /lib/security/$ISA/pam_env.so
auth        sufficient    /lib/security/$ISA/pam_unix.so likeauth nullok
auth        sufficient    /lib/security/$ISA/pam_ldap.so use_first_pass
auth        required      /lib/security/$ISA/pam_deny.so

account     required      /lib/security/$ISA/pam_unix.so broken_shadow
account     sufficient    /lib/security/$ISA/pam_succeed_if.so uid < 100
quiet
account     [default=bad success=ok user_unknown=ignore]
/lib/security/$ISA/pam_ldap.so
account     required      /lib/security/$ISA/pam_permit.so

password    requisite     /lib/security/$ISA/pam_cracklib.so retry=3
password    sufficient    /lib/security/$ISA/pam_unix.so nullok
use_authtok md5 shadow
password    sufficient    /lib/security/$ISA/pam_ldap.so use_authtok
password    required      /lib/security/$ISA/pam_deny.so

session     required      /lib/security/$ISA/pam_limits.so
session     required      /lib/security/$ISA/pam_unix.so
session     optional      /lib/security/$ISA/pam_ldap.so
"system-auth" 21L, 1120C

Thanks
-Glenn

-----Original Message-----
From: Julian Yap [mailto:julian_yap at yahoo.com] 
Sent: Sunday, January 29, 2006 3:31 PM
To: Support list for opensource software in schools.
Subject: Re: [K12OSN] LTSP 4.4.1 cannot authenicate to LDAP from GDM
login

On Sun, 2006-01-29 at 04:18 -0500, Glenn Arnold wrote:
> I just installed LTSP 4.4.1 I cannot login through GDM with LDAP
> account.  The home drive shared through NFS on another server.  I
> setup LDAP with the Authentication app in GNOME.  I can ssh in with no
> problems and access the home directory with no problems.  Any Ideas?
>  
> -Glenn

Do you mean you are able to SSH in perfectly fine as a user in your LDAP
directory?  The users home directory is then the correct home directory
(shared through NFS)?

Setting up Authentication through Gnome then writes the PAM rules to the
file /etc/pam.d/system-auth (someone correct me if I'm wrong).

Can you email to the list the contents of this file on your LTSP server?

- Julian


_______________________________________________
K12OSN mailing list
K12OSN at redhat.com
https://www.redhat.com/mailman/listinfo/k12osn
For more info see <http://www.k12os.org>

_______________________________________________
K12OSN mailing list
K12OSN at redhat.com
https://www.redhat.com/mailman/listinfo/k12osn
For more info see <http://www.k12os.org>