[CentOS] NSS ldap problems

[Trey Dockendorf]

One difference I ran into with samba authentication is in cent 5
/etc/pam.d/system-auth-ac is the file to change but in cent 6 its
/etc/pam.d/password-auth-ac.  I found that changes I made only to
system-auth-ac in 5 had to be made to both system-auth-ac and
password-auth-ac in 6.  This was to have authentication work for things
like ssh and sudo in centos 6.

- Trey
On Oct 31, 2011 8:16 PM, "Jack Bailey" <jack at internetguy.net> wrote:

> On 10/31/2011 4:46 PM, Craig White wrote:
> >> Here are the ldap related packaged installed on the 6.0 box:
> >> >  [root at vburntest02 ~]# rpm -qa | grep ldap
> >> >  openldap-2.4.19-15.el6_0.2.x86_64
> >> >  pam_ldap-185-5.el6.x86_64
> >> >  nss-pam-ldapd-0.7.5-3.el6.x86_64
> >> >  openldap-clients-2.4.19-15.el6_0.2.x86_64
> >> >  apr-util-ldap-1.3.9-3.el6.x86_64
> >> >
> >> >  Any idea what to check next?
> > ----
> > I'm not a perl person so I just check from shell with:
> > getent passwd
> > getent group
> >
> > to make sure that the LDAP Users/Groups are indeed listed...
> authentication clearly won't work until they do.
> >
> > The same /etc/ldap.conf from CentOS 5.x should work with CentOS 6.x
>
> On CentOS 6  getent passwd  does not return a list of users, presumably
> because the list can be quite large.  Try
>
> $ getent passwd <username>
>
> If your system is set up correctly you will see the entry.
>
> Jack
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>