Authentication

[Robert Harris <rharris@raindance.com>]

Ok, I nuked my config and server built the latest stable 2.0 server cleaned
up slapd.conf and imported a base company, makes more sense.

I tried to login again and get this on my clietns auth.log:
Sep  5 13:27:26 spirit login[3867]: pam_ldap: ldap_simple_bind_s
Insufficient access
Sep  5 13:27:26 spirit PAM_unix[3867]: check pass; user unknown
Sep  5 13:27:26 spirit PAM_unix[3867]: authentication failure; LOGIN(uid=0)
-> rharris for login service
Sep  5 13:27:29 spirit login[3867]: FAILED LOGIN (1) on `tty1' FOR
`UNKNOWN', Authentication service cannot retrieve authentication info.

in my debug log on my ldap server I see this:

Sep  5 13:30:10 ghost slapd[27683]: => access_allowed: auth access to
"uid=rharris,ou=people,dc=raindance,dc=com" "userPassword" requested 
Sep  5 13:30:10 ghost slapd[27683]: => acl_get: [1] check attr userPassword 
Sep  5 13:30:10 ghost slapd[27683]: <= acl_get: [1] acl
uid=rharris,ou=people,dc=raindance,dc=com attr: userPassword 
Sep  5 13:30:10 ghost slapd[27683]: => acl_mask: access to entry
"uid=rharris,ou=people,dc=raindance,dc=com", attr "userPassword" requested 
Sep  5 13:30:10 ghost slapd[27683]: => acl_mask: to all values by "", (=n)  
Sep  5 13:30:10 ghost slapd[27683]: <= check a_dn_pat:
cn=manager,dc=raindance,dc=com 
Sep  5 13:30:10 ghost slapd[27683]: <= acl_mask: no more <who> clauses,
returning =n (stop) 
Sep  5 13:30:10 ghost slapd[27683]: => access_allowed: auth access denied by
=n 

Of course denied.

Thoughts?