FC2 authentication with Active Directory

From: fedora list (fedoralist_at_parkerhouse.homeunix.org)
Date: 10/31/04

  • Next message: Joe Dumais: "Re: [Fwd: MPlayer / xine]" 
    Date: Sat, 30 Oct 2004 23:44:14 -0500
To: <fedora-list@redhat.com>

    Setup:

    FC2 on a workstation will all updates.

    2 servers running Winblows server 2003 will all updates.

     

    Problem:

    I can't for the life of me figure out why I can't authenticate. I see
    Kerberos authenticates successfully, but nss_ldap cannot connect to the
    LDAP server. I guess it can't query LDAP to see what my UID is and
    fails on the uid < 100 for pam_unix.

     

    I modified the PAM files, ldap.conf, and krb5.conf files.

    Here are some excerpts from some log files.

    Secure:

    Oct 28 15:26:42 jparker-dfc2 login[3783]: pam_succeed_if: requirement
    "uid < 100" not met by user "jparker"

    Oct 28 15:27:06 jparker-dfc2 login[30256]: pam_succeed_if: requirement
    "uid < 100" not met by user "jparker"

     

    Messages:

    Oct 28 15:26:41 jparker-dfc2 login(pam_unix)[3783]: authentication
    failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost= user=jparker
    Oct 28 15:26:42 jparker-dfc2 login[3783]: pam_krb5[3783]: authentication
    succeeds for 'jparker' (jparker@KBM1.LOC) Oct 28 15:26:42 jparker-dfc2
    login[3783]: nss_ldap: could not search LDAP server - Operations error
    Oct 28 15:26:42 jparker-dfc2 login[3783]: nss_ldap: could not search
    LDAP server - Operations error Oct 28 15:26:42 jparker-dfc2 login[3783]:
    pam_ldap: ldap_search_s Operations error Oct 28 15:26:42 jparker-dfc2
    pam_winbind[3783]: user 'jparker' granted acces Oct 28 15:26:42
    jparker-dfc2 login[3783]: nss_ldap: could not search LDAP server -
    Operations error Oct 28 15:26:42 jparker-dfc2 login(pam_unix)[3783]:
    session opened for user jparker by LOGIN(uid=0) Oct 28 15:26:42
    jparker-dfc2 login[3783]: Permission denied

     

    I'm looking for any and all suggestions. Short of passwords and such,
    I'll post whatever you need.

      

    


    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Joe Dumais: "Re: [Fwd: MPlayer / xine]"

    Relevant Pages

    • Re: Strange Server Behaviour
      ... Thanks for updates. ... I am Charles the backup of Brandy, as the Brandy is currently sick at home. ... Microsoft CSS Online Newsgroup Support ... | Subject: Re: Strange Server Behaviour ...
      (microsoft.public.windows.server.sbs)
    • Re: WSUS Client not yet reported
      ... The client still fails to report. ... Check your server status ... Suggestion 2: Check the IIS settings: ... any updates in your thread. ...
      (microsoft.public.windows.server.sbs)
    • Re: SUS
      ... > I have setup a SUS Server on win2k. ... 0-2.reg will not configure your machine to automatically download updates from ... critical updates or service packs that your machine needs. ... It will also ask you if you want to install them, ...
      (microsoft.public.windows.server.general)
    • Re: FYI for eTrust AV 7.x Users
      ... When I just had my little incident with the redistribution settings on the SBS, my clients were logging successful checks for updates, and the logs indicated that no updates were found. ... That turned out to be because I had not gone back and checked the redistribution server box for 8.x after reinstalling the redistribution server. ... installed the new remote install utility which works the same as v7 did - just edited the .ICF file the way I wanted it and ran the client upgrades from the server. ... I can't remember if it's a separate install, or if you have to click a box when you do the Agent install, but redistribution server is not installed by default. ...
      (microsoft.public.windows.server.sbs)
    • RE: New Update for #70-299
      ... > Segment A contains a single server named TestKing1. ... > Segment B contains all other computers, ... > TestKing?s written security policy states that Segment B ... > Updates on all computers in Segment B to use ...
      (microsoft.public.cert.exam.mcse)