swift 05/04/16 19:34:46 Modified: xml/htdocs/doc/en ldap-howto.xml Log: #87930 - Fix system-auth once and for all, hopefully. Thanks to Tom Murphy for reporting the solution
Revision Changes Path 1.25 +7 -6 xml/htdocs/doc/en/ldap-howto.xml file : http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/doc/en/ldap-howto.xml?rev=1.25&content-type=text/x-cvsweb-markup&cvsroot=gentoo plain: http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/doc/en/ldap-howto.xml?rev=1.25&content-type=text/plain&cvsroot=gentoo diff : http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/doc/en/ldap-howto.xml.diff?r1=1.24&r2=1.25&cvsroot=gentoo Index: ldap-howto.xml =================================================================== RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/en/ldap-howto.xml,v retrieving revision 1.24 retrieving revision 1.25 diff -u -r1.24 -r1.25 --- ldap-howto.xml 7 Apr 2005 16:39:29 -0000 1.24 +++ ldap-howto.xml 16 Apr 2005 19:34:46 -0000 1.25 @@ -1,5 +1,5 @@ <?xml version='1.0' encoding='UTF-8'?> -<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/ldap-howto.xml,v 1.24 2005/04/07 16:39:29 swift Exp $ --> +<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/ldap-howto.xml,v 1.25 2005/04/16 19:34:46 swift Exp $ --> <!DOCTYPE guide SYSTEM "/dtd/guide.dtd"> <guide link="/doc/en/ldap-howto.xml"> @@ -28,8 +28,8 @@ <license/> -<version>0.17</version> -<date>2005-04-07</date> +<version>0.18</version> +<date>2005-04-16</date> <chapter> <title>Getting Started with OpenLDAP</title> @@ -325,13 +325,12 @@ <pre caption="/etc/pam.d/system-auth"> auth required /lib/security/pam_env.so -auth sufficient /lib/security/pam_ldap.so use_first_pass auth sufficient /lib/security/pam_unix.so likeauth nullok shadow +auth sufficient /lib/security/pam_ldap.so use_first_pass auth required /lib/security/pam_deny.so -account sufficient /lib/security/pam_unix.so +account required /lib/security/pam_unix.so account sufficient /lib/security/pam_ldap.so -account required /lib/security/pam_deny.so password required /lib/security/pam_cracklib.so retry=3 password sufficient /lib/security/pam_unix.so nullok use_authtok shadow md5 @@ -344,11 +343,13 @@ session optional /lib/security/pam_ldap.so </pre> +<!-- Should work now, see #87930 <note> If you find that login on using ssh on these system fails, try interchanging the two <c>auth sufficient</c> lines. However, you might find that <c>su</c> and other tools refuse to function correctly if you do. </note> +--> <p> Now change <path>/etc/ldap.conf</path> to read: -- [email protected] mailing list
