From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1PE9Ym-0008F5-7R for garchives@archives.gentoo.org; Thu, 04 Nov 2010 23:49:36 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 38A79E09E2; Thu, 4 Nov 2010 23:49:03 +0000 (UTC) Received: from mail-qy0-f181.google.com (mail-qy0-f181.google.com [209.85.216.181]) by pigeon.gentoo.org (Postfix) with ESMTP id 1B06BE09E2 for ; Thu, 4 Nov 2010 23:49:03 +0000 (UTC) Received: by qyk10 with SMTP id 10so1990981qyk.19 for ; Thu, 04 Nov 2010 16:49:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:sender:received :in-reply-to:references:from:date:x-google-sender-auth:message-id :subject:to:content-type; bh=hAyJQqCdQrVfHAZwluTlmNnAEMRDd4JiuXud6bTsbKk=; b=glQ9hgpnDkPIs2km4CHgf2NUWzBkJRX5YaBFebOBR38p5cBJSQA8qUjWHwxeP9agDS l0q1ggtG+sV5uzrhapTUMJStmRTXbuRSTJAweEYkkdeB64vqf+8GGUl1pfiSCM6H4PkP 4Vng0CuKBd9w1DTlwCOsEjlJaH5aNiHDvgTLM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:content-type; b=qmgGKzPJR+6G9/OSsFhOnRPeLdekUZ2muClYhiz6jcbsGBHy1ircuTbL7D84AUxbTZ 7MJNXi3hQU4kZrQOO7czYCUD2v3pxd+pm2LAtmrVkddKy4JH9YdC4DqANYmgZ8oXF7xT 1F4eVlBdZF5y51kd/bt6WQe54uNBuYPQRbAL8= Received: by 10.224.173.147 with SMTP id p19mr380542qaz.261.1288914542741; Thu, 04 Nov 2010 16:49:02 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Sender: jz.penguin@gmail.com Received: by 10.220.100.16 with HTTP; Thu, 4 Nov 2010 16:48:42 -0700 (PDT) In-Reply-To: References: <640AF55A-91BB-4CA4-B63E-A23D34E9DA9F@stellar.eclipse.co.uk> From: James Date: Thu, 4 Nov 2010 19:48:42 -0400 X-Google-Sender-Auth: vEmPstFEjcuoqWNE2G_KiLpNYY8 Message-ID: Subject: Re: [gentoo-user] ldap client authentication To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 X-Archives-Salt: 5c6d3094-f5bd-4af1-89a7-74de02046ab8 X-Archives-Hash: 901f3efb2d9202c13c4d1c96146b4c13 LDAP and LDAPS work fine -- as I indicated, the ldapsearch queries work without any issues. Thus the issue is, more or less, related directly to PAM and LDAP together. At some point during troubleshooting I switched to LDAP simply so that I could sniff the packets going across the wire and see what was going on. This is purely a pam_ldap configuration problem as far as I can tell. Any thoughts on how to go about troubleshooting this would be greatly appreciated. -james On Thu, Nov 4, 2010 at 17:58, Adam Carter wrote: > You seem to be using ldap sometimes and ldaps other times in your configs. > Suggest you try getting everything working with ldap first, then convert > everything to ldaps (to get SSL working) once you have the application layer > sorted. >