Re: RHEL 3.8 LDAP Auth Failure

Turns out the problem is with the ACL on the ldap server.  For some 
reason RHEL 3.8 attempts to bind to the LDAP server to retrieve the 
password anonymously unlike the other Linux distros that we use 
configured the exact same way.

Anyone know why this might be?

Thanks,
--
Joshua M. Miller - RHCE,VCP


Joshua M. Miller wrote:
> Good morning,
> 
> I have a redhat 3.8 host that I am unable to authenticate to with an 
> LDAp account after upgrading OpenLDAP (2.0.27 -> 2.3.34).  All local 
> accounts authenticate, but directory accounts fail.  I am using the same 
> configuration on ~100 hosts, including RHEL2.1/CentOS 2/3/4 hosts and I 
> have 2 RHEL 3.8 hosts which do not work.  Configs are pushed via 
> cfengine to ensure correctness and homogeneity.
> 
> I think it may be a problem with pam not falling through from pam_unix 
> to pam_ldap but the config is the same on all hosts.
> 
> #cat /etc/pam.d/system-auth
> auth        required      /lib/security/$ISA/pam_env.so debug
> auth        sufficient    /lib/security/$ISA/pam_unix.so likeauth nullok 
> debug
> auth        sufficient    /lib/security/$ISA/pam_ldap.so use_first_pass 
> debug
> auth        required      /lib/security/$ISA/pam_deny.so debug
> 
> account     sufficient    /lib/security/$ISA/pam_unix.so debug
> account     sufficient    /lib/security/$ISA/pam_ldap.so debug
> 
> password    required      /lib/security/$ISA/pam_cracklib.so retry=3 
> type= debug
> password    sufficient    /lib/security/$ISA/pam_unix.so nullok 
> use_authtok md5 shadow debug
> password    sufficient    /lib/security/$ISA/pam_ldap.so use_authtok debug
> password    required      /lib/security/$ISA/pam_deny.so debug
> 
> session     required      /lib/security/$ISA/pam_limits.so debug
> session     required      /lib/security/$ISA/pam_unix.so debug
> session     optional      /lib/security/$ISA/pam_ldap.so debug
> 
> 
> Has anybody experienced this issue?  I've attached logs to this email.
> 
> TIA,
> 
> 
> ------------------------------------------------------------------------
> 
> --
> Taroon-list mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/taroon-list

--
Taroon-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/taroon-list