Re: AW: PAM problems with login... Please Help

[Cliff Friedel <cliff@wrkcs.net>]

Ok, installed the new package and still having the same problem.  Not sure
why this is happening.  It authenticates ok, it just doesn't bring up the
shell.  It just recycles to the login: prompt.  No errors in syslog or
anywhere else.  Think the seesion part of pam is the one not working.  I
am using this line in my pam file:

session		required	/lib/security/pam_unix_session.so

NOTE:  I have tried to put a debug after the library to see if I could
glean some info that would aid me in fixing the problem.  Seems to not
work...

If somebody could send me a nsswitch.conf, /etc/pam.d/login, and a sample
LDIF from a known working machine, I could try them out and see if it a
config problem.  Thanks...	

Cliff

On Thu, 20 Jul 2000, Kintrup, Jens wrote:

> Hi Cliff,
> 
> there is a bug in the nss_ldap rpm of SuSE 6.4. You can find an at
> http://www.suse.de/en/support/download/updates/64_update.html. Al my
> problems where solved by installing this package. Do you have installed this
> package?
> 
> regards,
> 
> Jens
> 
> 
> -----Ursprüngliche Nachricht-----
> Von: Cliff Friedel [mailto:cliff@wrkcs.net]
> Gesendet am: Donnerstag, 20. Juli 2000 15:53
> An: openldap-software@OpenLDAP.org
> Betreff: PAM problems with login... Please Help
> 
> Hi all.  Having a problem when I try to use LDAP to authenticate logins to
> our SuSE 6.4 box.  Instead of a successful login going to the shell, it
> just sends me back to login, no errors, no problems recorded.  If I check
> my slapd logs, it shows the authentication request come in and a
> successful return of info.  Now, I have my LDAP user entries setup as
> posixAccounts and have all info required by theis object in the LDAP
> entry.  I also made sure to change my nnswitch.conf to look at the LDAP
> entries for passwd and group info.  I have tried about 20 different PAM
> setups to get this to work, but to no avail.  It authenticates then kicks
> me back to a login prompt.  If I try to authenticate with a user on the
> box (in other words with a passwd entry), I have no problems...
> 
> Can somebody please send me an example of what they have in their
> /etc/pam.d/login file or give me some advice on this one... This is really
> frustrating.  ANOTHER SIDE NOTE:  I also have proftpd running which uses
> posixAccount style entries.  Users can login just fine there, getting
> UID/GID info fro mthe LDAP database without a problem...
> 
> Any help you can give me would be appreciated.  TIA.
> 
> Cliff
> 
> 
>