I have set up the server (rule115.x.x.x.x) properly. except that I did not slappasswd my rootpw or any other password. The output of the finger command at the client(rule40.x.x.x.x) is
root@rule40# finger nabdulla
Login: nabdulla Name: TestUser
Directory: /home/test Shell: /bin/csh
Never logged in.
No Mail.
No Plan.
root@rule40# id nabdulla
uid=1000(nabdulla) gid=1000 groups=1000
So, that means the client is communicating with the server
then when I try to login
root@rule40# ssh nabdulla@rule115.x.x.x.x
Password:
Password:
Password:
Permission denied (publickey,keyboard-interactive).
The following are the contents of nss_ldap.conf
host rule115.x.x.x.x
uri ldap://rule115.x.x.x.x
ldap_version 3
binddn cn=admin,dc=rule115,dc=x,dc=x,dc=x,dc...
bindpw secret
port 389
pam_password clear
nss_base_passwd ou=people,dc=rule115,dc=x,dc=x,dc=x,dc=x...
nss_base_group ou=group,dc=rule115,dc=x,dc=x,dc=x,dc=x?...
In the pam.d/sshd ,I have added the following lines
auth sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass
password sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass
password required pam_unix.so no_warn try_first_pass
Why can't I login to the server if I can excecute id and finger succesfully?
root@rule40# finger nabdulla
Login: nabdulla Name: TestUser
Directory: /home/test Shell: /bin/csh
Never logged in.
No Mail.
No Plan.
root@rule40# id nabdulla
uid=1000(nabdulla) gid=1000 groups=1000
So, that means the client is communicating with the server
then when I try to login
root@rule40# ssh nabdulla@rule115.x.x.x.x
Password:
Password:
Password:
Permission denied (publickey,keyboard-interactive).
The following are the contents of nss_ldap.conf
host rule115.x.x.x.x
uri ldap://rule115.x.x.x.x
ldap_version 3
binddn cn=admin,dc=rule115,dc=x,dc=x,dc=x,dc...
bindpw secret
port 389
pam_password clear
nss_base_passwd ou=people,dc=rule115,dc=x,dc=x,dc=x,dc=x...
nss_base_group ou=group,dc=rule115,dc=x,dc=x,dc=x,dc=x?...
In the pam.d/sshd ,I have added the following lines
auth sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass
password sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass
password required pam_unix.so no_warn try_first_pass
Why can't I login to the server if I can excecute id and finger succesfully?