"Cannot find name for user ID xxx"

From: Stephane OMNES (stephane.omnes_at_aql.fr)
Date: 05/28/04

  • Next message: md asghar: "accessing port in IP-layer(help)"
    Date: Fri, 28 May 2004 12:06:05 +0200
    To: redhat-list@redhat.com
    
    

    Hi,

    I'm in trouble with my linux box (kernel 2.4.21-4.EL) on which I use remote Ldap
    authentication : When I logging in with a user ID registered in the LDAP
    directory, I got the following message before getting a shell prompt : "Cannot
    find name for user ID 780".
    I'm well authenticated but it seems that the user ID cannot be retrieved in the
    LDAP tree...
    The "id" command on the machine says :
    "uid=780 gid=100(users) groups=100(users)"
    I have configured the system to use pam_ldap (in /etc/pam.d/system-auth) and I
    have also configured the nss_ldap (in /etc/nsswitch.conf).
    If I create a file system entry in my home directory, the system does not match
    my user ID as well :
    [ users]# touch foo
    [ users]# ll foo
    -rw-rw---- 1 780 users 0 May 28 15:20 foo

    But, if I become root, I retrieve the user ID correctly as shown hereafter:
    [ users]# su
    Password:
    [ users]# id
    uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),6(disk),10(wheel)
    [ users]# ll foo
    -rw-rw---- 1 user1 users 0 May 28 15:20 foo

    Does anybody have an idee to help me on this problem?

    I use the following ldap packages on my client box:
    openldap-2.0.27-11
    nss_ldap-207-2
    openldap-clients-2.0.27-11
    And I use the openldap-servers-2.0.27-11 package on the LDAP server.

    Thanks in advance.
    Regards.

    ************************************************************
    The contents of this email and any attachments are
    confidential. They are intended for the named recipient(s)
    only.
    If you have received this email in error please notify the
    system manager or the sender immediately and do not disclose
    the contents to anyone or make copies.

    * email scanned for viruses, vandals and malicious content *
    ************************************************************

    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list
    

  • Next message: md asghar: "accessing port in IP-layer(help)"

    Relevant Pages

    • Re: Directory Services, LDAP or similar
      ... In other projects, we managed the user authentication by creating tables that define all users and its allowed capacities, then the application queryies that data to verify if a user has access to some feature or not. ... The above ID and password are sent to the service at login time. ... They are using Novell eDirectory at the enterprise level; yes it's LDAP. ... We already do that for three different DB servers; ...
      (borland.public.delphi.non-technical)
    • Re: noob on slapd with sasl errors
      ... If I may share advice based on my own trials & tribulations with LDAP ... people who need network authentication and the current state of ... context of network authentication, LDAP really is just a protocol used ... I have no idea how sasl works and why it is needed here, or even more, ...
      (Ubuntu)
    • Re: Directory Services, LDAP or similar
      ... we managed the user authentication by creating tables ... The above ID and password are sent to the service at login ... Novell eDirectory at the enterprise level; yes it's LDAP. ... servers; ...
      (borland.public.delphi.non-technical)
    • No more logins after upgrade to deb 5.0
      ... After upgrading from Debian 4.x to 5.x without any further configuration attempts my LDAP Authentication configuration fails. ... If an LDAP Administrator resets that users password and/or as long their ldap password is not expired the user can login anywhere just fine. ...
      (Debian-User)
    • Re: Recommended strategy for providing access to web apps via Inte
      ... LDAP is an ugly solution on the public internet, ... These federated authentication protocols are designed to address these ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
      (microsoft.public.windows.server.active_directory)