LDAP user authentication problem

[21sam]

hi,
i am trying to add AIX5.2ML07 client to our ldap server which is running in solaris environment..(sun one directory server).

i run mksecldap from aix client with proxyagent DN and it did setup the client with out any problem.

client talks with our ldap server and i checked the config file /etc/security/ldap/ldap.cfg.. it looks ok.

when i run finger command with ldap user name (logged in as root), it identifies the user...that seems ok.

now the problem is "it does not authenticate the user i.e. ldap defined user is not able to login to this server".

i checked the netgroup and i did update on ldap server.

can you guide me the next step???

advance thanks for your reply..

 

[ogniemi]

did you set in default: stanza in /etc/security/user

SYSTEM = "LDAP or compat"

 

[21sam]

i just modified this attribute under default catagory of /et/security/user.

but it does not help to solve the issue.

any further tuning to fix this problem ???

thanks

 

[ogniemi]

lsuser -R LDAP -a rlogin your_user
lsuser -R LDAP -a hostsallowedlogin your_user
lsuser -R LDAP -a hostsdeniedlogin your_user


# grep LDAP /usr/lib/security/methods.cfg
LDAP:
program = /usr/lib/security/LDAP
program_64 = /usr/lib/security/LDAP_64

(the above should be set when you configured client with command mksecldap)


and clear LDAP cache when you are using ITDS LDAP client:

/usr/sbin/flush-secldapclntd


I am using IBM's ITDS 6.0 and it works ok with above setting. The only difference is that I was not using mksecldap command but configured AIX ldap client manually.

So, what I did was:

1. Installed AIX native LDAP client + GSKit (32bit mode):

http://tinyurl.com/h8h4q

http://tinyurl.com/kcrnm

if above links will not work you should follow following link:

http://tinyurl.com/o23ml

2. After successful installation I had modified files:

/etc/security/ldap/ldap.cfg (to set my suffix, ldap server, ssl, keydb password, ldap server password, max threads decreased to 5, cache to 300 secs)
/etc/security/user (adjusted mentioned SYSTEM in default: stanza)
/usr/lib/security/methods.cfg (added to lines):
LDAP:
program = /usr/lib/security/LDAP
program_64 = /usr/lib/security/LDAP_64

3. Started ldap client with command:

/usr/sbin/start-secldapclntd

When all configured threads where established the LDAP started works. Authentication works properly.

 

[21sam]

thank you so much for your help

samy