Here are all non-comment lines in the relevant PAM files:
/etc/pam.d/common-account: account required pam_ldap.so
/etc/pam.d/common-auth: auth required pam_ldap.so
/etc/pam.d/common-session: session required pam_ldap.so
/etc/pam.d/common-password: password required pam_ldap.so
My "/etc/pam_ldap.conf" file is unmodified from the Debian default, except that I've changed my base dn and login dn:
base dc=cadre5,dc=com
rootbinddn cn=manager,dc=cadre5,dc=com
After seeing several log messages about the nonexistence of "/etc/ldap.secret" in the logfile "/var/log/auth.log", I created it and added a manager password.
The LDAP database was imported from OpenLDAP on another machine (which I have authenticated against many times using RedHat and Fedora boxes). I added the ldiff file using slapadd, and have been able to bind against it using a simple graphical LDAP client, so I know the basic LDAP service is working as expected.
I've even been able to use RedHat "authconfig" to make a RedHat box authenticate against slapd running on this particular Debian box.
When I "tail -f /var/log/auth.log" and attempt to login, I see:
Oct 12 16:11:52 localhost sshd[15215]: Illegal user jeremy.brown from ::ffff:172.28.2.115
Oct 12 16:11:53 localhost sshd[15215]: Failed unknown for illegal user jeremy.brown from ::ffff:172.28.2.115 port 1814 ssh2
Can anyone help me? I have always relied on the RedHat "authconfig" application for setting up LDAP authentication and know very little about configuring pam or pam-ldap by hand.
Thanks in advance,
Jeremy Brown [EMAIL PROTECTED]
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]