[Date Prev][Date Next] [Chronological] [Thread] [Top]

openldap, pam_ldap, and solaris 8

I can't seem to get the solaris 8 to authenticate via openldap..

i have set up a user named testuser but i can't seem to get it to login...it just hangs..., ldapsearch binds with the user and i can do a search using testuser with commands like ldapmodify and ldapsearch...so i think its something wrong in the pam_ldap?

also...when i try to authenticate via ldap, my su - wont work from the other accounts, and my sudo hangs as well...
is there something wrong in the config?

any help in direction would be appreciated.

thanx,
m

==========================================
my nsswitch.conf

passwd:     files ldap 
group:      files ldap

# You must also set up the /etc/resolv.conf file for DNS name
# server lookup.  See resolv.conf(4).
hosts:      files dns
ipnodes:    files
# Uncomment the following line and comment out the above to resolve
# both IPv4 and IPv6 addresses from the ipnodes databases. Note that
# IPv4 addresses are searched in all of the ipnodes databases before
# searching the hosts databases. Before turning this option on, consult
# the Network Administration Guide for more details on using IPv6.
#ipnodes:   files dns

networks:   files
protocols:  files
rpc:        files
ethers:     files
netmasks:   files
bootparams: files
publickey:  files
# At present there isn't a 'files' backend for netgroup;  the system will
#   figure it out pretty quickly, and won't use netgroups at all.
netgroup:   files
automount:  files
aliases:    files
services:   files
sendmailvars:   files
printers:       user files

auth_attr:  files
prof_attr:  files
project:    files

========================================
my pam.conf


#
#ident  "@(#)pam.conf   1.16    01/01/24 SMI"
#
# Copyright (c) 1996-2000 by Sun Microsystems, Inc.
# All rights reserved.
#
# PAM configuration
#
# Authentication management
#
#login  auth required   /usr/lib/security/$ISA/pam_unix.so.1 
login   auth required   /usr/lib/security/$ISA/pam_dial_auth.so.1 


login   auth sufficient /usr/lib/security/$ISA/pam_unix.so.1 
login   auth required   /opt/pam_ldap/current/lib/security/pam_ldap.so.1 use_first_pass

#
#rlogin  auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1
rlogin  auth required   /usr/lib/security/$ISA/pam_unix.so.1
#
dtlogin auth required   /usr/lib/security/$ISA/pam_unix.so.1
#
#rsh    auth required   /usr/lib/security/$ISA/pam_rhosts_auth.so.1
#other  auth required   /usr/lib/security/$ISA/pam_unix.so.1

other   auth sufficient /usr/lib/security/$ISA/pam_unix.so.1
other   auth required   /opt/pam_ldap/current/lib/security/pam_ldap.so.1 use_first_pass


#
# Account management
#
login   account requisite       /usr/lib/security/$ISA/pam_roles.so.1 
login   account required        /usr/lib/security/$ISA/pam_projects.so.1
#login  account required        /usr/lib/security/$ISA/pam_unix.so.1 

login   account sufficient      /usr/lib/security/$ISA/pam_unix.so.1 
login   account required        /opt/pam_ldap/current/lib/security/pam_ldap.so.1 use_first_pass


#
dtlogin account requisite       /usr/lib/security/$ISA/pam_roles.so.1 
dtlogin account required        /usr/lib/security/$ISA/pam_projects.so.1
dtlogin account required        /usr/lib/security/$ISA/pam_unix.so.1 
#
other   account requisite       /usr/lib/security/$ISA/pam_roles.so.1 
#other  account required        /usr/lib/security/$ISA/pam_projects.so.1
#other  account required        /usr/lib/security/$ISA/pam_unix.so.1 


#other  account required        /usr/lib/security/$ISA/pam_projects.so.1
other   account sufficient      /usr/lib/security/$ISA/pam_unix.so.1 
other   account required        /opt/pam_ldap/current/lib/security/pam_ldap.so.1 use_first_pass




#
# Session management
#
other   session required        /usr/lib/security/$ISA/pam_unix.so.1 
#
# Password management
#
#other  password required       /usr/lib/security/$ISA/pam_unix.so.1 

other   password sufficient     /usr/lib/security/$ISA/pam_unix.so.1 
other   password required       /opt/pam_ldap/current/lib/security/pam_ldap.so try_first_pass




dtsession auth required /usr/lib/security/$ISA/pam_unix.so.1
#
# Support for Kerberos V5 authentication (uncomment to use Kerberos)
#
#rlogin auth optional   /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
#login  auth optional   /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
#dtlogin        auth optional   /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
#other  auth optional   /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
#dtlogin        account optional /usr/lib/security/$ISA/pam_krb5.so.1
#other  account optional /usr/lib/security/$ISA/pam_krb5.so.1
#other  session optional /usr/lib/security/$ISA/pam_krb5.so.1
#other  password optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
#
# Support for Solaris PPP (sppp)
ppp     auth    required        /usr/lib/security/$ISA/pam_unix.so.1 
ppp     auth    required        /usr/lib/security/$ISA/pam_dial_auth.so.1 
ppp     account requisite       /usr/lib/security/$ISA/pam_roles.so.1 
ppp     account required        /usr/lib/security/$ISA/pam_projects.so.1
ppp     account required        /usr/lib/security/$ISA/pam_unix.so.1 
ppp     session required        /usr/lib/security/$ISA/pam_unix.so.1