Problem with user root

Javier Ferruz Rodriguez jferruz at hotmail.com
Fri May 21 08:23:26 UTC 2004


Hi,

I've configured my RHEL 2.1 AS for authentication users in LDAP. My LDAP 
server is SunOne Directory 5.2

My /etc/nsswitch.conf file is

password files ldap
group files ldap
shadow files ldap

My /etc/pam.d/login

auth       required /lib/security/pam_securetty.so
auth       required /lib/security/pam_stack.so service=system-auth
auth       required /lib/security/pam_nologin.so
account    required /lib/security/pam_stack.so service=system-auth
password   required /lib/security/pam_stack.so service=system-auth
session    required /lib/security/pam_stack.so service=system-auth
session    required /lib/security/pam_mkhomedir.so skel=/etc/skel umask=0022
session    optional /lib/security/pam_console.so


My /etc/pam.d/system-auth is

auth        required      /lib/security/pam_env.so
auth        sufficient    /lib/security/pam_unix.so likeauth nullok
auth        sufficient    /lib/security/pam_ldap.so use_first_pass
auth        required      /lib/security/pam_deny.so
account     required      /lib/security/pam_unix.so
account     [default=bad success=ok user_unknown=ignore service_err=ignore 
system_err=ignore] /lib/security/pam_ldap.so
password    required      /lib/security/pam_cracklib.so retry=3 type=
password    sufficient    /lib/security/pam_unix.so nullok use_authtok md5 
shadow
password    sufficient    /lib/security/pam_ldap.so use_authtok
password    required      /lib/security/pam_deny.so
session     required      /lib/security/pam_limits.so
session     required      /lib/security/pam_unix.so
session     optional      /lib/security/pam_ldap.so

The configuration is OK when the LDAP server is running. All users are 
validated in the LDAP server except root.

When the LDAP server is down, root can't validate in the system. Why?

Can anybody help me?

Thanks in advance,

_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*. 
http://join.msn.com/?page=features/featuredemail





More information about the Pam-list mailing list