> All this seems to suggest you still have the regular "login" binary > installed, rather than the one from "pam-apps". Install "pam-apps".
Yep, that is exactly what it was. Maybe libpam-ldap should suggest pam-apps. Now I have a different problem though. Pam is working correctly, and ldap is working correctly, but libnss-ldap is not. When I modify nsswitch.conf to have it reference ldap, I get this error when logging in: Debian GNU/Linux potato caesar tty8 caesar login: test Password: Last login: Fri Jun 11 21:40:19 1999 from - on tty8 /bin/login: error in loading shared libraries: /lib/libnss_ldap.so.2: undefined symbol: ldap_set_option I get similar errors when ssh is looking up a host. Unless you've got a better idea, I'm going to go grab the source and see if I can find the problem there. Thanks for your help! Bill