Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #816981 > unrolled thread

Bug#859452: libpam-ldapd: mixing with libnss-ldap does not work

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#859452: libpam-ldapd: mixing with libnss-ldap does not work Laurent Bonnaud <L.Bonnaud@laposte.net> - 2017-04-03 20:00 +0200
    Bug#859452: libpam-ldapd: mixing with libnss-ldap does not work Arthur de Jong <adejong@debian.org> - 2017-04-06 23:40 +0200

#816981 — Bug#859452: libpam-ldapd: mixing with libnss-ldap does not work

Package: libpam-ldapd
Version: 0.9.7-2


Dear maintainer,

I started LDAP tests in a stretch system with libpam-ldap and libnss-ldap and LDAP was working as expected.

Then I switched from libpam-ldap to libpam-ldapd and could not get LDAP to work.

Then I switched from libnss-ldap to libnss-ldapd and now LDAP works again without any other changes.

As a summary:
 - libpam-ldap  + libnss-ldap  -> works
 - libpam-ldapd + libnss-ldap  -> fails
 - libpam-ldapd + libnss-ldapd -> works
(I did not test the remaining combination.)

So how about having libpam-ldapd depend on libnss-ldapd or conflict with libnss-ldap, or any other solution that would avoid the non working combination?

Thanks,

-- 
Laurent.

[toc] | [next] | [standalone]

#817575

[Multipart message — attachments visible in raw view] — view raw

On Mon, 2017-04-03 at 19:52 +0200, Laurent Bonnaud wrote:
>  - libpam-ldapd + libnss-ldap  -> fails

This works for me. Note that for this to work you have to include ldap
in the shadow map in nsswitch.conf because otherwise pam_unix rejects
the login. You should also be able to map the userPassword attribute to
"*" using the nss_override_attribute_value in /etc/libnss_ldap.conf but
I couldn't get that to work.

Can you post the relevant part of auth.log for the above configuration?

Thanks,

-- 
-- arthur - adejong@debian.org - https://people.debian.org/~adejong --

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web