Hi,

yes, I know that's not a valid filter, but the comment in the file says:

<snip>
#Filter to AND with uid=%s
pam_filter ...
</snip>

Well, thanks though. It seems that I will have to dig into the source code to find out why the filter doesn't get applied.

Cheers
Didi

Quanah Gibson-Mount wrote:



--On Friday, April 21, 2006 11:12 AM +0200 Dieter Schicker <[EMAIL PROTECTED]> wrote:

Hi,

I'm trying to get single-sign-on working with Kerberos/LDAP on Debian
Sarge. I want to ssh to other machines without having to supply the
password over and over again. Well, ssh login already works, but I have a
problem with libnss_ldap.conf: I want to apply a special pam_filter

pam_filter
objectclass=posixAccount)(|(trustmodel=fullaccess)(accessto=debian)


This isn't a valid filter...

pam_filter (&(objectClass=posixAcount)(|(trustmodel=fullaccess)(accessto=debian)))

perhaps...

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITS/Shared Application Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.



---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the 
SUBJECT of the message.

Reply via email to