Just to update on that :

I have received this RedHat update notification last night :

Synopsis openldap bug fix and enhancement update

updated : 06/12/11

Subject

Updated openldap packages that fix number of bugs and add various enhancements are now available for Red Hat Enterprise Linux 6.

Description ... https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Techn...

I updated and the loginShell variable is now properly used over authentication ( with no change on my initial configuration).

I also see that many TLS issues that I have faced in the passed seem to have been fixed : I'm going to check that.

Best,

--- olivier

On Thu, Dec 1, 2011 at 3:00 PM, Olivier ldap@guillard.nom.fr wrote:

Hello,

I have configured nss/pam on a REDHAT6 box to authenticate users against an ldap : it works but I have a problem with getting my favorite user shell when I log in.

The "loginShell" shell attribute sounds to not been used to provide users with their favorite shell when they log in : may be I misunderstood the usage of this "posixAccount" attribute ?

Thanks for your help, see below for additional indications :

$ ssh olivier@redhatbox.example.fr olivier@redhatbox.example.fr's password:  < MY LDAP PASSWORD>

RHN Satellite kickstart on 2011-06-16

#####################  #  redhatbox.example.fr #  #                                  #  #           Hello               #  #####################

sh-4.1$ grep olivier /etc/passwd            <returns nothing (no local entry for olivier)>

-sh-4.1$ pwd

/home/olivier  (my home directory found in ldap)

-sh-4.1$ env | grep -i shell SHELL=/bin/sh  ( my shell user environnment is not picked in ldap)

sh-4.1$  ldapsearch -D uid=olivier,ou=staff,ou=people,dc=example,dc=fr -W uid=olivier

Enter LDAP Password: < MY LDAP PASSWORD>

# olivier, staff, people, example.fr dn: uid=olivier,ou=staff,ou=people,dc=example,dc=fr cn: Olivier G gidNumber: 18000 homeDirectory: /home/olivier objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount sn: olivier uid: olivier uidNumber: 1000 shadowLastChange: 15282 loginShell: /bin/tcsh givenName: Olivier mail: olivier@example.fr userPassword:: xxxxxxxxxxxxxxxxxxxxxxx

-sh-4.1$ cat /etc/shells /bin/sh /bin/bash /sbin/nologin /bin/tcsh            (my favorite shell is allowed) /bin/csh

ANY HELP ???

Thanks

---

Olivier