solaris nsswitch.conf / cache help

[ac325ci]

hello.. i have a machine that has everything pointing to files in nsswitch.conf.. however users that are defined in an ldap environment that this machine used to belong to are still able to log in??? i restarted nscd and no luck.. any ideas?? thanks in advance

 

[ac325ci]

forgot to mention that the users cannot log in via telnet .. but they can get in via ssh.. there're no keys set up for them or anything like that.. and they do not exist locally in passwd or shadow files.. also when u do a getent passwd and search for their id.. nothing pops up.. and still they can get in??? weird.....

 

[coffeysm]

Try running /etc/init.d/ldap.client stop and restarting ssh.

 

[ac325ci]

hi coffee.. thanks but ldap_cachemgr isnt runnin ... and i did restart ssh many many times.. i wonder what is going on!!!!

 

[ac325ci]

does ssh have some sort of cache mechanism ???? everything else seems to fail except ssh.. meaning telnet/rsh/ftp doesnt allow user to get in..

 

[coffeysm]

Does your pam.conf file have entries for SSH or LDAP?

 

[ac325ci]

found nothing in pam.conf

$ grep -i ldap /etc/pam.conf
$ grep -i ssh /etc/pam.conf
$

 

[coffeysm]

I don't know that is really weird. Do you have only one pid of sshd runnning?

 

[ac325ci]

yes.. i only have one pid of sshd running ... super weird man.. and i dont wanna reboot.. im almost certain it'll work after rebooting..

 

[coffeysm]

Yea, I have to agree with you on that. It will probably start working after you reboot.