Problem with user root
Javier Ferruz Rodriguez
jferruz at hotmail.com
Fri May 21 08:23:26 UTC 2004
Hi,
I've configured my RHEL 2.1 AS for authentication users in LDAP. My LDAP
server is SunOne Directory 5.2
My /etc/nsswitch.conf file is
password files ldap
group files ldap
shadow files ldap
My /etc/pam.d/login
auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_stack.so service=system-auth
auth required /lib/security/pam_nologin.so
account required /lib/security/pam_stack.so service=system-auth
password required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_mkhomedir.so skel=/etc/skel umask=0022
session optional /lib/security/pam_console.so
My /etc/pam.d/system-auth is
auth required /lib/security/pam_env.so
auth sufficient /lib/security/pam_unix.so likeauth nullok
auth sufficient /lib/security/pam_ldap.so use_first_pass
auth required /lib/security/pam_deny.so
account required /lib/security/pam_unix.so
account [default=bad success=ok user_unknown=ignore service_err=ignore
system_err=ignore] /lib/security/pam_ldap.so
password required /lib/security/pam_cracklib.so retry=3 type=
password sufficient /lib/security/pam_unix.so nullok use_authtok md5
shadow
password sufficient /lib/security/pam_ldap.so use_authtok
password required /lib/security/pam_deny.so
session required /lib/security/pam_limits.so
session required /lib/security/pam_unix.so
session optional /lib/security/pam_ldap.so
The configuration is OK when the LDAP server is running. All users are
validated in the LDAP server except root.
When the LDAP server is down, root can't validate in the system. Why?
Can anybody help me?
Thanks in advance,
_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*.
http://join.msn.com/?page=features/featuredemail
More information about the Pam-list
mailing list