Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Client configs

Status
Not open for further replies.

nas783

Technical User
May 15, 2008
2
AU
I have set up the server (rule115.x.x.x.x) properly. except that I did not slappasswd my rootpw or any other password. The output of the finger command at the client(rule40.x.x.x.x) is

root@rule40# finger nabdulla
Login: nabdulla Name: TestUser
Directory: /home/test Shell: /bin/csh
Never logged in.
No Mail.
No Plan.

root@rule40# id nabdulla
uid=1000(nabdulla) gid=1000 groups=1000

So, that means the client is communicating with the server
then when I try to login

root@rule40# ssh nabdulla@rule115.x.x.x.x
Password:
Password:
Password:
Permission denied (publickey,keyboard-interactive).

The following are the contents of nss_ldap.conf
host rule115.x.x.x.x
uri ldap://rule115.x.x.x.x
ldap_version 3
binddn cn=admin,dc=rule115,dc=x,dc=x,dc=x,dc...
bindpw secret
port 389
pam_password clear
nss_base_passwd ou=people,dc=rule115,dc=x,dc=x,dc=x,dc=x...
nss_base_group ou=group,dc=rule115,dc=x,dc=x,dc=x,dc=x?...

In the pam.d/sshd ,I have added the following lines

auth sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass

password sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass
password required pam_unix.so no_warn try_first_pass


Why can't I login to the server if I can excecute id and finger succesfully?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top