RE: Authentication problems with ldap

[Dan Yefimov <dan nf15 lightwave net ru>]

On Mon, 22 Sep 2008, Lynn York wrote:

> Below are my config files:
> 
> /etc/pam.d/system-auth
> #%PAM-1.0
> # User changes will be destroyed the next time authconfig is run.
> auth        required      pam_env.so
> auth        sufficient    pam_unix.so nullok try_first_pass
> auth        requisite     pam_succeed_if.so uid >= 500 quiet
> auth        required      pam_deny.so
> 
> account     required      pam_unix.so
> account     sufficient    pam_succeed_if.so uid < 500 quiet
> account     required      pam_permit.so
> 
> password    requisite     pam_cracklib.so try_first_pass retry=3
> password    sufficient    pam_unix.so md5 shadow nullok try_first_pass
> use_authtok
> password    required      pam_deny.so
> 
> session     optional      pam_keyinit.so revoke
> session     required      pam_limits.so
> session     [success=1 default=ignore] pam_succeed_if.so service in crond
> quiet use_uid
> session     required      pam_unix.so
> -----------------------------------------------------------
> 
You must use pam_ldap.so module in order to be able to authenticate against 
LDAP servers since pam_unix.so doesn't use NSS.
-- 

    Sincerely Your, Dan.