SSHD doesn't start

[Jordi Espasa Clofent <jespasac@minibofh.org>]

Hi all,

I'm just learning about wonderful OpenLDAP.  I want to build a AAAA 
server (with OpenLDAP, of course) that allows SSH.

At present I've the next testing scenario:

	* OpenLDAP server (FreeBSD 7.0)
	* OpenLDAP client (FreeBSD 7.0 also)

When server it's running, I can always perform ssh logins on client. 
Perfect.

The problem is when I shutdown the server and after I reboot the client, 
the client systems completely hangs up when it tries to run up the sshd 
service.

?¿?¿?¿?

If I restart the server, the client runs fine again.
I'm not understand the real reason of that behavior, but one thing is 
clear: SSH deamon requires  OpenLDAP server runs. So I thing the problem 
is focused probably in pam.d module conf.

Useful info:

ldapclient# more /etc/pam.d/sshd

#
# $FreeBSD: src/etc/pam.d/sshd,v 1.16 2007/06/10 18:57:20 yar Exp $
#
# PAM configuration for the "sshd" service
#

# auth
auth            sufficient      pam_opie.so             no_warn 
no_fake_prompts
#auth           requisite       pam_opieaccess.so       no_warn allow_local
#auth           sufficient      pam_krb5.so             no_warn 
try_first_pass
auth            sufficient      /usr/local/lib/pam_ldap.so      no_warn 
try_first_pass
auth            sufficient      pam_ssh.so              no_warn 
try_first_pass
auth            required        pam_unix.so             no_warn 
try_first_pass

# account
account         required        pam_nologin.so
#account        required        pam_krb5.so
account         required        pam_login_access.so
account         sufficient      /usr/local/lib/pam_ldap.so
account         required        pam_unix.so

# session
#session        optional        pam_ssh.so
session         required       /usr/local/lib/pam_mkhomedir.so debug
#session                required        pam_permit.so

# password
#password       sufficient      pam_krb5.so             no_warn 
try_first_pass
password        sufficient      /usr/local/lib/pam_ldap.so      use_authok
password        required        pam_unix.so             no_warn 
try_first_pass

ldapclient# more /etc/nsswitch.conf
#
# nsswitch.conf(5) - name service switch configuration file
# $FreeBSD: src/etc/nsswitch.conf,v 1.1 2006/05/03 15:14:47 ume Exp $
#
group:  ldap files
passwd: ldap files
#group: compat
#group_compat: nis
hosts: files dns
#networks: files
#passwd: compat
#passwd_compat: nis
shells: files
#services: compat
#services_compat: nis
protocols: files
rpc: files

--
Thanks,
Jordi Espasa Clofent