This is in continuation to another thread titled: "LDAP client configuration question". But since the question is a bit different than that I am opening another thread...

I have two machines one acting as LDAP server (k2) and another LDAP client (kusumanchi). When the network is present, I am able to login into both local and ldap accounts from "kusumanchi". But when the network is down (unplugging the ethernet cable), I am not able to login into the client at all ... Can anyone tell me what to do?

My configuration files are as follows

1) /etc/ldap/ldap.conf

host k2.mae.cornell.edu

base o=cttg,c=US

ssl no

pam_password md5


2) /etc/nsswitch.conf passwd: ldap compat group: ldap compat shadow: ldap compat

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup: nis


3) /etc/pam.d/common-account


account sufficient      pam_unix.so use_first_pass
account sufficient      pam_ldap.so

4) /etc/pam.d/common-auth

auth    sufficient      pam_unix.so use_first_pass
auth    sufficient      pam_ldap.so

5) /etc/pam.d/common-password

password        sufficient      pam_unix.so md5 use_first_pass
password        sufficient      pam_ldap.so

6) /etc/pam.d/common-session

session required pam_unix.so



I also tried (a) changing "sufficient" to "required" in both the line
(b) changing the order of the lines in these configuration files
(c) changing the "use_first_pass" to "try_first_pass"

but none of them work. I want the local accounts to be checked first so I kept the "pam_ldap.so" in the second line.




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Reply via email to