Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Client configs

Status
Not open for further replies.

nas783

Technical User
Joined
May 15, 2008
Messages
2
Location
AU
I have set up the server (rule115.x.x.x.x) properly. except that I did not slappasswd my rootpw or any other password. The output of the finger command at the client(rule40.x.x.x.x) is

root@rule40# finger nabdulla
Login: nabdulla Name: TestUser
Directory: /home/test Shell: /bin/csh
Never logged in.
No Mail.
No Plan.

root@rule40# id nabdulla
uid=1000(nabdulla) gid=1000 groups=1000

So, that means the client is communicating with the server
then when I try to login

root@rule40# ssh nabdulla@rule115.x.x.x.x
Password:
Password:
Password:
Permission denied (publickey,keyboard-interactive).

The following are the contents of nss_ldap.conf
host rule115.x.x.x.x
uri ldap://rule115.x.x.x.x
ldap_version 3
binddn cn=admin,dc=rule115,dc=x,dc=x,dc=x,dc...
bindpw secret
port 389
pam_password clear
nss_base_passwd ou=people,dc=rule115,dc=x,dc=x,dc=x,dc=x...
nss_base_group ou=group,dc=rule115,dc=x,dc=x,dc=x,dc=x?...

In the pam.d/sshd ,I have added the following lines

auth sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass

password sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass
password required pam_unix.so no_warn try_first_pass


Why can't I login to the server if I can excecute id and finger succesfully?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top