From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1PDizt-0007sl-L2 for garchives@archives.gentoo.org; Wed, 03 Nov 2010 19:27:49 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id F12C9E0587; Wed, 3 Nov 2010 19:27:18 +0000 (UTC) Received: from mail-yx0-f181.google.com (mail-yx0-f181.google.com [209.85.213.181]) by pigeon.gentoo.org (Postfix) with ESMTP id CC46DE0587 for ; Wed, 3 Nov 2010 19:27:18 +0000 (UTC) Received: by yxn35 with SMTP id 35so986532yxn.40 for ; Wed, 03 Nov 2010 12:27:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:sender:received :in-reply-to:references:from:date:x-google-sender-auth:message-id :subject:to:content-type; bh=uGLR9I6HnT/f7ZxvG2YSpMCLM9vQO7MaRRj1SEu0t0Q=; b=irWIkRPYmenkl+pmMIaF1s1NJRnNFOLijt3pjqtkmGlSidWqK7itBnU3fCRn3TBEVR Bc22Iu5pNEh3tc/pf4NIKu7vsJKWfveMSQjmTTkM/Y1q2Nd9fxrmJJSRIqZRGJc1EXzu a5qPpvSEPZ2BcHuc/WjRyCqIWSTL1Tps0d5xc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:content-type; b=cJrVWAaLLUl0Ueo4hGd2/a/CgXlhZnrl5FALk7mpo6crCkNZhfTCaSpM/RyS7C/hSY oMlqLbybwl+p9HubQlkll/g9gtdPZc+FMbzdtfjuPIvcXxl27S3Jye8BPLd20At4W0NE aTo9VxNmzE3J1Vx7xZhIlQk+u8KOdfSCBk7g8= Received: by 10.42.180.200 with SMTP id bv8mr566934icb.294.1288812437546; Wed, 03 Nov 2010 12:27:17 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Sender: jz.penguin@gmail.com Received: by 10.220.100.16 with HTTP; Wed, 3 Nov 2010 12:26:57 -0700 (PDT) In-Reply-To: <640AF55A-91BB-4CA4-B63E-A23D34E9DA9F@stellar.eclipse.co.uk> References: <640AF55A-91BB-4CA4-B63E-A23D34E9DA9F@stellar.eclipse.co.uk> From: James Date: Wed, 3 Nov 2010 15:26:57 -0400 X-Google-Sender-Auth: O4XFYikD_xZFQP8ELUaZITpLS_I Message-ID: Subject: Re: [gentoo-user] ldap client authentication To: gentoo-user@lists.gentoo.org Content-Type: multipart/alternative; boundary=90e6ba6e8f9c85a7aa04942b0753 X-Archives-Salt: 30f31d40-3c08-40ff-957f-8570eaf261d6 X-Archives-Hash: d8a5091620b1460b19d1049b2024a64f --90e6ba6e8f9c85a7aa04942b0753 Content-Type: text/plain; charset=ISO-8859-1 Straight from the Gentoo + LDAP page. # pam ldap stuff auth sufficient pam_ldap.so use_first_pass account sufficient pam_ldap.so password sufficient pam_ldap.so use_authtok use_first_pass session optional pam_ldap.so -james On Wed, Nov 3, 2010 at 15:13, Stroller wrote: > > On 3/11/2010, at 4:25pm, James wrote: > > ... > I'm attempting to set up LDAP authentication against my OpenDS server on a > Gentoo box. I've been struggling with this for several days now with no > progress. > > Here's the rundown of how things are configured (fairly straight forward): > ... > > ==> auth.log <== > Nov 3 06:26:03 s_dgram@client.whatever.com sshd[2650]: error: PAM: > Authentication failure for tb from blah.whatever.com > > > You've shown us all about your LDAP configuration, but nothing about your > PAM configuration, or whether sshd or IMAP are configured to use PAM. > > Stroller. > > --90e6ba6e8f9c85a7aa04942b0753 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Straight from the Gentoo + LDAP page.

# pam ldap stuff
auth=A0=A0= =A0=A0=A0=A0=A0=A0=A0=A0=A0 sufficient=A0=A0=A0=A0=A0 pam_ldap.so use_first= _pass
account=A0=A0=A0=A0=A0=A0=A0=A0 sufficient=A0=A0=A0=A0=A0 pam_ldap= .so
password=A0=A0=A0=A0=A0=A0=A0 sufficient=A0=A0=A0=A0=A0 pam_ldap.so = use_authtok use_first_pass
session=A0=A0=A0=A0=A0=A0=A0=A0 optional=A0=A0=A0=A0=A0=A0=A0 pam_ldap.so
-james

On Wed, Nov 3, 2010 at 15:13= , Stroller <stroller@stellar.eclipse.co.uk> wrote:

On 3/11/2010, at 4:25pm, James wrote:
...
I'm attempting to set up LDAP authentication against my OpenDS = server on a Gentoo box. I've been struggling with this for several days= now with no progress.

Here's the rundown of how things are configured (fairly straight fo= rward):
...
=3D=3D> auth.log <=3D=3D
Nov=A0 3 06:26:03 s_dgram@client.whatever.com= sshd[2650]: error: PAM: Authentication failure for tb from blah.whatever.com

You've shown us all about your LDAP c= onfiguration, but nothing about your PAM configuration, or whether sshd or = IMAP are configured to use PAM.

Stroller.


--90e6ba6e8f9c85a7aa04942b0753--