On Mon, 27 Jan 2003 10:50:28 -0500
 "Brian Smith" <[EMAIL PROTECTED]> wrote:
On Fri, 24 Jan 2003 22:06:42 -0700
 Vincent Danen <[EMAIL PROTECTED]> wrote:

When you have "ssl start_tls" do the usual "getent passwd" or "getent
shadow" and such work?

getent passwd works, getent shadow does not (well, it lists the used in /etc/shadow, but not the ones in ldap).
Err, that's incorrect. I just got to looking... some of my users in ldap don't have an 'objectClass: shadowAccount' attribute. Other than that, getent shadow works fine with ssl start_tls; it's just ssh that can't deal with it. I've found that ssh is failing with 'ssl on' as well, seems that I have to use 'ssl off' to get it to work. Luckily my network is behind a firewall....

Reply via email to