 | | | Subject: RHEL 3.8 LDAP Auth Failure | Subject: RHEL 3.8 LDAP Auth Failure 2007-05-04 - By Joshua M. Miller
Back
Good morning,
I have a redhat 3.8 host that I am unable to authenticate to with an
LDAp account after upgrading OpenLDAP (2.0.27 -> 2.3.34). All local
accounts authenticate, but directory accounts fail. I am using the same
configuration on ~100 hosts, including RHEL2.1/CentOS 2/3/4 hosts and I
have 2 RHEL 3.8 hosts which do not work. Configs are pushed via
cfengine to ensure correctness and homogeneity.
I think it may be a problem with pam not falling through from pam_unix
to pam_ldap but the config is the same on all hosts.
#cat /etc/pam.d/system-auth
auth required /lib/security/$ISA/pam_env.so debug
auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok
debug
auth sufficient /lib/security/$ISA/pam_ldap.so use_first_pass
debug
auth required /lib/security/$ISA/pam_deny.so debug
account sufficient /lib/security/$ISA/pam_unix.so debug
account sufficient /lib/security/$ISA/pam_ldap.so debug
password required /lib/security/$ISA/pam_cracklib.so retry=3
type= debug
password sufficient /lib/security/$ISA/pam_unix.so nullok
use_authtok md5 shadow debug
password sufficient /lib/security/$ISA/pam_ldap.so use_authtok debug
password required /lib/security/$ISA/pam_deny.so debug
session required /lib/security/$ISA/pam_limits.so debug
session required /lib/security/$ISA/pam_unix.so debug
session optional /lib/security/$ISA/pam_ldap.so debug
Has anybody experienced this issue? I've attached logs to this email.
TIA,
--
Joshua M. Miller - RHCE,VCP
--
Taroon-list mailing list
Taroon-list@(protected)
https://www.redhat.com/mailman/listinfo/taroon-list
|
|
|