And don't forget nsswitch. ldap should be first for group and passwd.
On Mar 23, 2010, at 8:25 PM, Tyler Gates tgates81@gmail.com wrote:
Sounds like it's a problem with your client side pam_ldap authentication. There's a whole buch of steps to get that working, just google it. If you have a redhat variant authconfig or setup will step you through it. It would help if you could post your system_auth file.
On Mar 23, 2010, at 11:40 AM, Lynn York lynn.york@mavenwire.com wrote:
Hello,
When I issue “getent passwd” I can see it query
the ldap server for all the information and the server is returnin g the correct information. However, “getent passwd” doesn’t actually show the users that are in ldap. I am not sure where my problem might be. Can anyone offer any suggestions on where to look?
Lynn York II
MavenWire Hosting Admin
www.mavenwire.com
(866) 343-4870 x717
MavenWire - We DELIVER
This e-mail and any attached files may contain confidential and/or privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive this e-mail for the recipient), you may not review, copy or distribute this message. Please contact the sender by reply e-mail and delete all copies of this message.
MavenWire - We DELIVER http://www.mavenwire.com
This e-mail and any attached files may contain confidential and/or privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive this e-mail for the recipient), you may not review, copy or distribute this message. Please contact the sender by reply e-mail and delete all copies of this message.
On Wednesday, 24 March 2010 01:30:25 Tyler Gates wrote:
And don't forget nsswitch. ldap should be first for group and passwd.
There is no requirement for ldap to be listed first, it works fine with "files ldap" or similar more complex setups (like "files ldap [NOTFOUND=return] db".
The order in which to list them would be up to site-specific requirements (but, I prefer to have 'files' first, it is one of the many things to consider if you have a requirement for local authentication to work in the case of LDAP being unavailable for whatever reason).
Regards, Buchan
openldap-technical@openldap.org