Re: [ILUG] pam_ldap/nss_ldap/OpenLDAP

From: Ross Davis (ross at domain csn.ul.ie)
Date: Thu 27 Jul 2000 - 14:04:10 IST


I forgot to mention my setup works fine when I use the nss_ldap RPM
provided with Redhat6.2...only problem is the old pam_ldap.so asks for the
new password 4 times whilst the new when asks twice!

> I have compiled and intsalled pam_ldap/nss_ldap on a RedHat6.2 machine.
> When I try to change a user's password against OpenLDAP1.2.11 I get the
> following error. Could someone give me some ideas as to what's wrong!?
>
> passwd: User not known to the underlying authentication module
>
> In addition to this error I am getting the following errors with the
> chfn/chsh PERL scripts which are related!
>
> Lines 64 and 86 are the same method being called in the two scripts:
>
> $ldap->bind(%bindargs) or die "unable to bind to ldap server: $ at domain ";
>
>
>
> [root at domain ldapclnt1 pam_ldap-66]# ./chsh test
> Password:
> Can't call method "bind" on an undefined value at ./chsh line 64, <STDIN>
> chunk 1.
> [root at domain ldapclnt1 pam_ldap-66]# ./chfn test
> Password:
> Can't call method "bind" on an undefined value at ./chfn line 86, <STDIN>
> chunk 1.
> [root at domain ldapclnt1 pam_ldap-66]#
>
>
> Are these scripts necessary seeing as pam_ldap provides chfn/chsh files
> for the /etc/pam.d directory so the usual chfn/chsh commands work and if
> so how can I get them to work? I keep getting the following errors!
>
> chsh: can only change local entries; use ypchsh instead.
> chfn: can only change local entries; use ypchfn instead.
>
>
> Other commands like 'finger' work fine!
>
>
> Thanks,
> Ross
>
>
>
> --
> Irish Linux Users' Group: ilug at domain linux.ie
> http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
> List maintainer: listmaster at domain linux.ie
>



This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:07:00 GMT