[gentoo-dev] SSH, PAM, and LDAP

[Mark Bainter <mark-gt@cymry.org>]

Ok, I have recently gotten LDAP working for most of the stuff I want it to do,
and proceeded to move authentication to it.  In doing so I have discovered that
OpenSSH does not play nice with PAM + LDAP.  

>From what I have gathered from preliminary google digging is that the
priviledge seperation rewrite broke PAM pretty severely.  None of the password
expiry stuff works anymore, and neither does the create home dirs option.

I've already tried simply disabling the PrivSep stuff, but the problem goes
deeper than that, so it doesn't help.  Everything else (telnet/ftp/etc) works
fine, it's only ssh that's giving me fits.

I'm sure I'm not the only one with a setup like this.  If someone else
on the list is running in a configuration of this nature and has gotten
ssh working, I'd appreciate a pointer to the information that got you past
this.

Thanks.

-- 
Treat root like a loaded gun. Don't pull it out unless you mean to use it.
If you mean to use it make sure you have a clear target and put it right
back in the holster as soon as you're done.

--
gentoo-dev@gentoo.org mailing list