search for: pam_ldap

I tried to compile pam_ldap-184 but it gave lots of error msgs. BTW, I have successfully compiled nss_ldap-255. For pam_ldap, my configure looks like: ./configure --with-ldap-lib=openldap --with-ldap-dir=/usr/local --with-ldap-conf-file=/usr/local/etc/openldap/ldap.conf and the following is the configure output --- start of...

...ldd /usr/sbin/hfaxd  if you getting libpam.so..  something, then hylafax is compiled with pam support.   Next,   apt-get install libpam-ldap   ( just to be sure, i do believe you have installed it already )   create the file :  /etc/pam.d/hylafax Add :   auth         required       pam_ldap.so account   required       pam_ldap.so session    required       pam_ldap.so   and check the content of :   /etc/pam_ldap.conf And this as example adjust as needed.   base dc=domain,dc=local uri ldap://dc01.domain.local/ ldap://dc02.domain.local/ ldap_version 3 binddn auth_ldap_user...

...0.9.4 (all actual debian packets from stable), sernet-samba-*-4.2.7-8 After a switch from OpenLDAP to a Samba 4.2 based LDAP Server, I cannot auth users anymore in Hylafax, everything else works. All on Debian Jessie. Strace: 11:30:44.510380 send(2, "<83>Jan 9 11:30:44 HylaFAX[25657]: pam_ldap(hylafax:auth): conversation failed", 79, MSG_NOSIGNAL) = 79 <0.000066> 11:30:44.510592 send(2, "<83>Jan 9 11:30:44 HylaFAX[25657]: pam_ldap(hylafax:auth): conversation failed", 79, MSG_NOSIGNAL) = 79 <0.000041> 11:30:44.510875 send(2, "<83>Jan 9 11:30:4...

I'm trying to install "pam_ldap" on my fedora core 1 machine. It is asking for liblber.so and libldap.so dependencies even though I have them in /usr/lib. Should I just go install it with out a dependencies? what is wrong with this picture? [root@pdc rpms]# rpm -i pam_ldap*.rpm error: Failed dependencies: liblber.s...

Hi, I'm using Samba 2.2.4 with LDAP support (OpenLDAP 2.0.23), and with pam_ldap included in the rpm nss_ldap 1.86 from Redhat (I'm on Linux Redhat 7.2). All these things are working well (I use the same object SambaAcount under PosixAccount in order to authenticate all these things), but a problem appears when I'm trying to list all the accounts and groups from my...

Hello, I have a -maybe stupid question regardin pam_ldap and Samba,and I really hope that somebody can help me. I currently using pam_ldap so that users can login on the Unix machine with their LDAP userid/password. Now I want to configure Samba so that he also uses that pam_ldap for that authentication. But please note that I only want to authentica...

...o cause a probable overhead of work when they need to change their password. I have a LDAP server running, without the Samba schema. I don't want to add the samba schema to that directory, just for about 30 users. (total userbase is 40.000). The next best thing would be to use PAM together with pam_ldap.so. pam_ldap.so works fine, cause we use that only to authenticate unix users for ssh or tty access. (User accounts exist in /etc/passwd, only the password is not used in /etc/shadow) When a user logs in via ssh his password is checked in LDAP using pam_ldap.so. That all works like a charm. I thou...

Greetings, All! I'm using Samba 3.6 and OpenLDAP currently. The core configuration has been done eons ago, and I'm not quite sure it is actual any more. I see a number of PAM-related errors every time the system boot up. One concerning me is Jan 28 02:31:21 daemon1 perl: pam_ldap: error trying to bind as user "uid=root,ou=Users,dc=darkdragon,dc=lan" (Invalid credentials) Is this a broken PDC configuration (how can I fix it, if yes?) or I can just remove libpam-ldap since I'm using libpam-winbind anyway? -- WBR, Andrey Repin (anrdaemon at yandex.ru) 03.02.20...

First, my config: Solaris 8 PADL pam_ldap v165 and pam_nss v211 OpenSSH 3.7.1.p2 All compiled with gcc 2.95.3 that ships with the Sun companion CD LDAP PAM authentication is working well with OpenSSH, privsep is disabled, challenge-response authentication is enabled. I would like to turn on password aging, which seems to be well supporte...

Hi, We currently have a postfix/dovecot setup using nss_ldap with PAM for authentication. Everything is working fine, but there are excessive "error" messages in /var/log/messages that I'd like to prevent from happening. Since auth_userdb defaults to passwd and that our users are not in the passwd file, we get the following message everytime a user logs in: Jul 7 13:34:37

Hi dovecot, I am using the debian dovecot packages on a system running LDAP. My /etc/pam.d/common-* looks like this, which simply means try /etc/passwd first, and try LDAP using the same password if it is failed. account [success=1 default=ignore] pam_unix.so account required pam_ldap.so use_first_pass account required pam_permit.so auth [success=1 default=ignore] pam_unix.so auth required pam_ldap.so use_first_pass auth required pam_permit.so session [success=1 default=ignore] pam_unix.so session required pam_ldap.so use_first_pass session required pam_mkhomedir.so ske...

I was wondering what the best practice is for setting up several SAMBA servers in a SAMBA domain all on the same LAN. Here is what I am looking at PDC: LDAP, Samba, nss_ldap, pam_ldap Member1: Samba, nss_ldap, pam_ldap Member2: Samba, nss_ldap, pam_ldap Member . . . . Should I set the member servers up with: Security = domain and join the severs with net rpc join or, whould it be better to set them up with: passdb backend = ldapsam:ldap://pdc.domain.com security = server Do y...

...errors appear in /var/log/messages on server 'storage' Sep 19 16:56:17 storage sshd(pam_unix)[3124]: check pass; user unknown Sep 19 16:56:17 storage sshd(pam_unix)[3124]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=test-kja1 Sep 19 16:56:17 storage sshd[3124]: pam_ldap: error trying to bind as user "uid=testuser,ou=People,dc=example,dc=local" (Invalid credentials) I am also unable to issue this command: # passwd testuser passwd: Unknown user name 'testuser'. but this command works fine: # finger testuser Login: testuser...

http://bugzilla.mindrot.org/show_bug.cgi?id=740 ------- Additional Comments From dtucker at zip.com.au 2003-11-19 23:20 ------- According to the man page, pam_ldap doesn't support account management. $ man pam_ldap [snip] The pam_ldap.so.1 module supports two components: the Authentication component and the Password management com- ponent. ------- You are receiving this mail because: ------- You are the assignee for the bug, o...

...ion of email server. The setup involves sendmail, dovecot (imaps+pop3s) and webmail (squirrelmail) running on apache webserver. All was working fine until one day I found a lot of defunct processes on system related to dovecot. dovecot-auth, imap-login and imap were all defunct. The system is using pam_ldap and nss_ldap to authenticate users to a Windows 2003 Active Directory. Immediate restart of dovecot solved the problem for me that day, however since then it's been about 3 times that I've faced this problem. After visiting various forums I came to know one thing, that it has something to d...

Hello All, We have been successfully using PAM_LDAP authentication with OpenSSH-3.6 on our HP-UX 11.11. When OpenSSH-3.7.1p2 is installed [with Darrens' password expiry patch 26], and when Shadow password bundle is installed on the system, our ssh authentication failed. Even, when the source is compiled without Darren's patch, the same bahav...

Hello, I have a -maybe stupid question regardin pam_ldap and Samba,and I really hope that somebody can help me. I currently using pam_ldap so that users can login on the Unix machine with their LDAP userid/password. Now I want to configure Samba so that he also uses that pam_ldap for that authentication. But please note that I only want to authentica...

...ntOS 6.7 server. I was able to make some progress. I have edited /etc/pam.d/system-auth, and now it looks like: auth required pam_env.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth sufficient pam_ldap.so use_first_pass auth required pam_deny.so account required pam_unix.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 500 quiet account [default=bad success=ok user_unknown=ignore] pam_ldap.so account required pam...

...Oct 12 07:39 wins.tdb > > # cat /etc/nsswitch.conf root at pdc:~# cat /etc/nsswitch.conf ethers: db files group: compat ldap winbind hosts: files dns netgroup: nis networks: files passwd: compat ldap winbind protocols: db files rpc: db files services: db files shadow: compat > # cat /etc/pam_ldap.conf |egrep -v '^#|^$' root at pdc:~# cat /etc/pam_ldap.conf |egrep -v '^#|^$' cat: /etc/pam_ldap.conf: No such file or directory root at pdc:~# cat /etc/ldap.conf |egrep -v '^#|^$' host 127.0.0.1 base ou=arkhangelsk,dc=rugion,dc=ru ldap_versi...

...ous pam modules to consult our new LDAP services in order to do what it needs to do. I have setup my /etc/pam.d sudo file (for example) this way in the attempt to accomplish this via LDAP: [root at VIRCENT03:~]#cat /etc/pam.d/sudo #%PAM-1.0 auth include system-auth auth required pam_ldap.so account include system-auth account required pam_ldap.so password include system-auth password required pam_ldap.so session optional pam_keyinit.so revoke session required pam_limits.so session required pam_ldap.so but even tho the user is part of the %wheel grou...