Re: PAM troubleshooting assistance

[Joshua M Miller <joshua itsecureadmin com>]

Thanks for your help, Dan.  As you can see from my first email, all of the configuration files are exactly the same, pushed from cfengine.  The odd thing about this is that I was able to get the host to work by installing the CentOS version of nss_ldap a few days ago but it stopped working today.

Also, the system config file for openldap is in /etc/ldap.conf.

Joshua M. Miller - RHCE, VCP
Ditree Consulting
http://ditree.com/

Dan Yefimov wrote:

On Thu, 10 May 2007, Joshua M Miller wrote:

  

Dan,

The client updates did not change anything, it's still broken...

    

Then I'd suggest you comparing openldap configuration of failing hosts to that 
one of hosts that don't experience problems. The openldap configuration is 
normally found in /etc/openldap. I don't know for sure if pam_ldap.so also has 
some configuration files, but if it has, check them also. And if there will be 
no differences in the configuration found, make sure pam_ldap and openldap 
binary RPMs installed on hosts in question were compiled with the same options 
that ones installed on other hosts.