[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: LDAP, part 2




On Mon, May 29, 2000 at 12:02:47PM -0500, John Corey wrote:
[...]
> It does verify my password on login just fine, so I had my hopes up. 
> But once I log in, I am using my shell from /etc/passwd instead of
> ldap's loginshell attribute.
> 
> Here is the pam login file.
> #%PAM-1.0
> auth       required     /lib/security/pam_securetty.so
> auth       required     /lib/security/pam_nologin.so
> auth       sufficient   /lib/security/pam_ldap.so
> auth       required     /lib/security/pam_unix_auth.so try_first_pass
> account    sufficient   /lib/security/pam_ldap.so
> account    required     /lib/security/pam_unix_acct.so
> password   required     /lib/security/pam_cracklib.so
> password   required     /lib/security/pam_ldap.so
> password   required     /lib/security/pam_pwdb.so use_first_pass
> session    required    
> /lib/security/pam_unix_session.so                                    
[...]

Thinking maybe he was onto something, I tried the same file.  That has the
same problem that my old file does - namely that I get errors on trying to
login.  I've got some nullok's and use pam_limits, but like I said, I get this error with John's working file and with my version.

 login[225]: Cannot make/remove an entry for the specified session

Anyone know what the heck's going on here?  I've got plenty of space on
all the drives in the system, and /dev/pts appears to be mounted right...
I know I had LDAP working on another system here a while ago, but I don't
remember if I did anything differently... :(

--Danny, trying a re-install tonight because he may have botched the last one

--
To unsubscribe, send email to majordomo@luci.org with
"unsubscribe luci-discuss" in the body.