Hi,
I'm trying to get single-sign-on working with Kerberos/LDAP on Debian
Sarge. I want to ssh to other machines without having to supply the
password over and over again. Well, ssh login already works, but I have
a problem with libnss_ldap.conf: I want to apply a special pam_filter
pam_filter
objectclass=posixAccount)(|(trustmodel=fullaccess)(accessto=debian)
but - as I can see in my ldap logs - the filter doesn't get applied. The
log entry reads
(&(objectClass=shadowAccount)(uid=tester))
So my question is: How can I get my pam_filter to be applied?
Thanks in advance
Didi
/etc/nsswitch.conf:
<snip>
passwd: files ldap
shadow: files ldap
group: files ldap
</snip>
/etc/pam.d/ssh
<snip>
auth sufficient pam_krb5.so
@include common-auth
account optional pam_krb5.so
@include common-account
session optional pam_krb5.so
</snip>
---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the
SUBJECT of the message.
