[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Simple Authentication



Hi everyone,

I am using SuSE 8.2 to try and achieve simple authentication against
novell edirectory. getent passwd or getent group only displays
information from local files. ldapsearch -x 'uid=linux29' returns the
correct information stored in edirectory. Entering a edirectory username
but wrong password results in the following in /var/log/messages:-

Dec  8 10:04:31 linux29 login[2063]: pam_unix2: pam_sm_authenticate()
called
Dec  8 10:04:37 linux29 login[2063]: pam_ldap: error trying to bind as
user "cn=Linux29,ou=SER,ou=KLK,o=EK" (Invalid credenti
als)
Dec  8 10:04:37 linux29 login[2063]: pam_unix2: pam_ldap returned 7
Dec  8 10:04:37 linux29 login[2063]: pam_unix2: username=[linux29]
Dec  8 10:04:37 linux29 login[2063]: pam_unix2: pw == NULL, return
PAM_USER_UNKNOWN
Dec  8 10:04:43 linux29 login[2063]: pam_ldap: error trying to bind as
user "cn=Linux29,ou=SER,ou=KLK,o=EK" (Invalid credenti
als)
Dec  8 10:04:43 linux29 login[2063]: FAILED LOGIN 1 FROM /dev/tty4 FOR
UNKNOWN, Authentication failure
Dec  8 10:04:47 linux29 login[2063]: pam_unix2: pam_sm_authenticate()
called

A correct username and password returns:-

Dec  8 10:07:15 linux29 login[2115]: pam_unix2: pam_sm_authenticate()
called
Dec  8 10:07:18 linux29 login[2115]: pam_unix2: pam_ldap returned 0
Dec  8 10:07:18 linux29 login[2115]: pam_unix2: pam_sm_acct_mgmt()
called
Dec  8 10:07:18 linux29 login[2115]: pam_unix2: pam_ldap returned 0
Dec  8 10:07:18 linux29 login[2115]: Failed to look up user 'linux29'.

Only the root account resides on the local machines.  I am struggling
bad and do not know what is wrong, probably something stupid. My
pam.d/login file is:-

#%PAM-1.0
auth            required        /lib/security/pam_env.so debug
#auth           sufficient      /lib/security/pam_unix.so debug likeauth
nullok
nodelay
auth            sufficient      /lib/security/pam_unix.so debug nullok
auth            sufficient      /lib/security/pam_ldap.so debug
auth            required        /lib/security/pam_deny.so debug

account         sufficient      /lib/security/pam_unix.so debug
account         sufficient      /lib/security/pam_ldap.so debug

password        required        /lib/security/pam_cracklib.so debug
retry=3 minl
en=4 dcredit=0 ucredit=0
password        sufficient      /lib/security/pam_unix.so debug nullok
md5 shado
w use_authok
password        sufficient      /lib/security/pam_ldap.so debug
use_authok
password        required        /lib/security/pam_deny.so debug

session         required        /lib/security/pam_limits.so debug
session         optional        /lib/security/pam_unix.so debug
session         required        /lib/security/pam_mkhomedir.so
skel=/etc/skel/ u
mask=0022
session         optional        /lib/security/pam_ldap.so debug

Any help appreciated

Les Halliday
Eksjo kommun




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]