Re: [gentoo-user] ldap client authentication

2010-11-07 Thread James
I've enabled compile-time debug flags, to no avail. I did some troubleshooting for several hours last night and discovered something interesting -- the LDAP server is responding with a SUCCESS message to the bind request, but PAM (for whatever reason) is still denying my login request. Here's the

Re: [gentoo-user] ldap client authentication

2010-11-05 Thread Ward Poelmans
On Fri, Nov 5, 2010 at 20:46, James wrote: > The logdir is filled with empty files that, in the name of the file, > has the pid of the pam process. However, these files are empty and > they do not have anything in them. > > Thoughts? Try putting the compile time debugging options on? Ward

Re: [gentoo-user] ldap client authentication

2010-11-05 Thread James
Yes, I have both of these options enabled: logdir debug 256 The logdir is filled with empty files that, in the name of the file, has the pid of the pam process. However, these files are empty and they do not have anything in them. Thoughts? -james On Fri, Nov 5, 2010 at 12:49, Ward Poelmans

Re: [gentoo-user] ldap client authentication

2010-11-05 Thread Ward Poelmans
On Fri, Nov 5, 2010 at 17:41, James wrote: > It seems that the LDAP is failing to work, as well, in CentOS 5 -- > same ldap.conf file that (a) fails in Gentoo, and (b) works in Ubuntu. > > What's the best way to star troubleshooting this from a PAM perspective? > > I have a debug line set at the b

Re: [gentoo-user] ldap client authentication

2010-11-05 Thread James
It seems that the LDAP is failing to work, as well, in CentOS 5 -- same ldap.conf file that (a) fails in Gentoo, and (b) works in Ubuntu. What's the best way to star troubleshooting this from a PAM perspective? I have a debug line set at the bottom of the ldap.conf file, but that doesn't seem to

Re: [gentoo-user] ldap client authentication

2010-11-05 Thread Ward Poelmans
On Fri, Nov 5, 2010 at 05:44, James wrote: > Things just got more interesting. > > I just copied my /etc/ldap.conf file over from my Gentoo box to an > Ubuntu box -- it works without a single hitch. > > I'm about to rip my hair out here...any ideas on where I can start > troubleshooting this? Put

Re: [gentoo-user] ldap client authentication

2010-11-04 Thread James
Things just got more interesting. I just copied my /etc/ldap.conf file over from my Gentoo box to an Ubuntu box -- it works without a single hitch. I'm about to rip my hair out here...any ideas on where I can start troubleshooting this? - openssh versions are very similar - newer nss_ldap on gen

Re: [gentoo-user] ldap client authentication

2010-11-04 Thread James
LDAP and LDAPS work fine -- as I indicated, the ldapsearch queries work without any issues. Thus the issue is, more or less, related directly to PAM and LDAP together. At some point during troubleshooting I switched to LDAP simply so that I could sniff the packets going across the wire and see wha

Re: [gentoo-user] ldap client authentication

2010-11-04 Thread Adam Carter
On Fri, Nov 5, 2010 at 2:51 AM, James wrote: > Bump -- any ideas? > > In a tough spot right now trying to wrap this LDAP project up and I'm > stuck. :( > > -james > > You seem to be using ldap sometimes and ldaps other times in your configs. Suggest you try getting everything working with ldap fi

Re: [gentoo-user] ldap client authentication

2010-11-04 Thread James
Bump -- any ideas? In a tough spot right now trying to wrap this LDAP project up and I'm stuck. :( -james On Wed, Nov 3, 2010 at 15:26, James wrote: > Straight from the Gentoo + LDAP page. > > # pam ldap stuff > auth    sufficient  pam_ldap.so use_first_pass > account suffic

Re: [gentoo-user] ldap client authentication

2010-11-03 Thread James
Straight from the Gentoo + LDAP page. # pam ldap stuff authsufficient pam_ldap.so use_first_pass account sufficient pam_ldap.so passwordsufficient pam_ldap.so use_authtok use_first_pass session optionalpam_ldap.so -james On Wed, Nov 3, 2

Re: [gentoo-user] ldap client authentication

2010-11-03 Thread Stroller
On 3/11/2010, at 4:25pm, James wrote: > ... > I'm attempting to set up LDAP authentication against my OpenDS server on a > Gentoo box. I've been struggling with this for several days now with no > progress. > > Here's the rundown of how things are configured (fairly straight forward): > ... > =

[gentoo-user] ldap client authentication

2010-11-03 Thread James
Folks, I'm attempting to set up LDAP authentication against my OpenDS server on a Gentoo box. I've been struggling with this for several days now with no progress. Here's the rundown of how things are configured (fairly straight forward): - OpenDS server has the following entry (gathered directl