[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
LDAP setup on LAN
Hello
I was so happy till this morning as my LDAP authentication using pam was working fine on same host, i-e server was runnning on same host and I was able to telnet ftp ssh to this host.
so I wiped out database i-e deleted all users, migrated users, shadow, and group info from a another machine on network , and populated my ldap sevre but I didn't change any stuff on server.
I setup nsswitch.con , ldap.conf , system-auth on the clietn machine, so that a user logsinto this machine, this machine will send info to ldap server and and user will be authenticated, but that was only my dream.
here are my config files.
nssswitch.conf
passwd: files ldap
shadow: files ldap
group: files ldap
system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required /lib/security/pam_env.so
auth sufficient /lib/security/pam_unix.so likeauth nullok
auth sufficient /lib/security/pam_ldap.so use_first_pass
auth required /lib/security/pam_deny.so
account required /lib/security/pam_unix.so
#account required /lib/security/pam_ldap.so
password required /lib/security/pam_cracklib.so retry=3 type=
password sufficient /lib/security/pam_unix.so nullok use_authtok md5 shadow
password sufficient /lib/security/pam_ldap.so use_authtok
password required /lib/security/pam_deny.so
session required /lib/security/pam_limits.so
session required /lib/security/pam_unix.so
session optional /lib/security/pam_ldap.so
All I was getting in slapd.log, on ldap server was as under and I was trying to loging as user jabbasi. while if I do search on ldap server or I directly loginto ldap server as jabbasi I get logged in whithout issues. If anyone can help me on this that why my authenticaiton fails from remote machine and works locally on ldap server.
Jul 18 02:51:07 pcnavykfsupp2 slapd[5691]: connection_get(9)
Jul 18 02:51:07 pcnavykfsupp2 slapd[5694]: ==> ldbm_back_bind: dn: cn=Manager,dc=navtechinc,dc=com
Jul 18 02:51:07 pcnavykfsupp2 slapd[5694]: send_ldap_result: 0::
Jul 18 02:51:07 pcnavykfsupp2 slapd[5691]: connection_get(9)
Jul 18 02:51:07 pcnavykfsupp2 slapd[5695]: SRCH "ou=ykfPeople,dc=navtechinc,dc=com" 1 0
Jul 18 02:51:07 pcnavykfsupp2 slapd[5695]: 1 30 0
Jul 18 02:51:07 pcnavykfsupp2 slapd[5695]: filter: (uid=jabbasi)
Jul 18 02:51:07 pcnavykfsupp2 slapd[5695]: attrs:
Jul 18 02:51:07 pcnavykfsupp2 slapd[5695]:
Jul 18 02:51:07 pcnavykfsupp2 slapd[5691]: connection_get(9)
Jul 18 02:51:07 pcnavykfsupp2 slapd[5694]: ==> ldbm_back_bind: dn: uid=jabbasi,ou=Ykfpeople,dc=navtechinc,dc=com
Jul 18 02:51:07 pcnavykfsupp2 slapd[5694]: send_ldap_result: 0::
Jul 18 02:51:07 pcnavykfsupp2 slapd[5691]:
connection_get(9)
Jul 18 02:51:07 pcnavykfsupp2 slapd[5695]: ==> ldbm_back_bind: dn: cn=Manager,dc=navtechinc,dc=com
Jul 18 02:51:07 pcnavykfsupp2 slapd[5695]: send_ldap_result: 0::
Jul 18 02:51:07 pcnavykfsupp2 slapd[5691]: connection_get(9)
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!