[rhelv6-list] Problem with ldap

[Collins, Kevin [BEELINE]]

I have been using pam/nss_ldap with RHEL3 thru RHEL5. I am starting to
test on RHEL6 and have run into a problem.

 

I figured out that I need pam_ldap and nss-pam-ldapd, but I am having
some troubles getting things to work correctly. I think I have the
/etc/pam_ldap.conf and /etc/nslcd.conf files correct, but I am seeing
some strange behavior.

 

As an example, I have an "oracle" ID in LDAP:

 

# grep oracle /etc/passwd

 

# getent passwd | grep ^oracle:

oracle:No_Login*****:200:200:Oracle Owner:/oracle:/usr/bin/sh

 

# getent passwd oracle         

 

#  ldapsearch -LLL -x "(uid=oracle)"

dn: uid=oracle,ou=People,dc=afis,dc=sr

uid: oracle

cn: Oracle Owner

objectClass: account

objectClass: posixAccount

objectClass: top

userPassword:: e2NyeXB0fU5vX0xvZ2luKioqKio=

loginShell: /usr/bin/sh

uidNumber: 200

gidNumber: 200

homeDirectory: /oracle

gecos: Oracle Owner

 

I can't figure out why getent (or id, or groups, etc) can't resolve
specific IDs from LDAP, but I can get obviously read the data...

 

Any ideas?

 

Thanks,

 

Kevin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/rhelv6-list/attachments/20101202/d30e9d42/attachment.htm>