Re: Authenticating via LDAP to Active Directory

Davis, Jared Scott wrote:
In /var/log/messages:
"sshd: pam_ldap: ldap_simple_bind Can't contact LDAP server"


So PAM can't talk to the LDAP server. Double check the values in /etc/ldap.conf. ldapsearch uses /etc/openldap/ldap.conf and PAM uses /etc/ldap.conf so check the sym-link.

Monitor the network traffic using wireshark/ethereal to see what is happening between your client and the LDAP server. Is it setup correctly to handle LDAPS? Since you mention certs. I presume you are required to use LDAPS, it makes diagnosing problems harder because all the requests are encrypted. How is your LDAP server specified in ldap.conf, host/port or uri?

--
Nigel Wade, System Administrator, Space Plasma Physics Group,
University of Leicester, Leicester, LE1 7RH, UK
E-mail : nmw@xxxxxxxxxxxx
Phone : +44 (0)116 2523548, Fax : +44 (0)116 2523555

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • RE: pam/sshd question: allowing a user to try logging in more than once
    ... I'm authenticating against an LDAP server ... > and thus require PAM. ... Are your users using PuTTY? ...
    (Debian-User)
  • ftpd & PAM
    ... Does stock ftpd know about PAM? ... I can't seem to log in via ftp with ... users that are on my LDAP server (but I can with a local user that's in ...
    (freebsd-stable)
  • Re: pam/sshd question: allowing a user to try logging in more than once
    ... >Please see this archived message: ... I'm authenticating against an LDAP server and ... I know this can be done with PAM. ...
    (Debian-User)
  • Re: ftpd & PAM
    ... > Does stock ftpd know about PAM? ... I can't seem to log in via ftp with ... > users that are on my LDAP server (but I can with a local user that's in ...
    (freebsd-stable)
  • RE: LDAP and pam_mkhomedir
    ... So the user will be created a mailbox even if he doesn't have a home ... I have my linux servers authenicating to my LDAP server and also ... University of Leicester, Leicester, LE1 7RH, UK ...
    (RedHat)