Also, fwiw, I finally got to go put a head on the machine I'm testing on right now. It's confirmed that ONLY gdm is ate up on the LDAP/PAM authentication. Here is the log output from my attempts: -=-=- Jul 10 09:55:53 srss-bismarck-alpha kernel: input: AT Translated Set 2 keyboard as /class/input/input3 Jul 10 09:56:04 srss-bismarck-alpha kernel: input: ImPS/2 Logitech Wheel Mouse as /class/input/input4 Jul 10 09:56:30 srss-bismarck-alpha gdm[2114]: pam_unix(gdm:auth): check pass; user unknown Jul 10 09:56:30 srss-bismarck-alpha gdm[2114]: pam_unix(gdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Jul 10 09:56:30 srss-bismarck-alpha gdm[2114]: pam_ldap: ldap_search_s No such object Jul 10 09:56:34 srss-bismarck-alpha gdm[2114]: WARNING: Couldn't authenticate user Jul 10 09:56:34 srss-bismarck-alpha gdm[2114]: sunray_get_user:pam_sm_auth: ut_getTokenByDisplay failed -1 for display :0 Jul 10 09:56:34 srss-bismarck-alpha gdm[2114]: pam_sunray_amgh::[DPY=0] Cannot get Session ID - possible console login Jul 10 09:56:34 srss-bismarck-alpha gdm[2114]: pam_kiosk: pam_sm_authenticate: Kiosk disabled for display ':0'. Jul 10 09:56:34 srss-bismarck-alpha gdm[2114]: sunray_get_user:pam_sm_auth: ut_getTokenByDisplay failed -1 for display :0 Jul 10 09:56:34 srss-bismarck-alpha gdm[2114]: pam_sunray_amgh::[DPY=0] Cannot get Session ID - possible console login Jul 10 09:56:36 srss-bismarck-alpha gdmgreeter[2507]: Gdk-WARNING: gdkdrawable-x11.c:878 drawable is not a pixmap or window Jul 10 09:56:36 srss-bismarck-alpha gdmgreeter[2507]: Gdk-WARNING: gdkdrawable-x11.c:878 drawable is not a pixmap or window Jul 10 09:56:42 srss-bismarck-alpha login[4310]: pam_unix(login:session): session opened for user dgetsman by LOGIN(uid=0) Jul 10 09:56:49 srss-bismarck-alpha login[4310]: pam_unix(login:session): session closed for user dgetsman -=-=- As you can see the head was put on when the kernel noticed the keyboard/mouse. I first tried gdm with no luck, then switched to a console and logged in just fine.
And 'getent' shows the ldap information as well without a problem, although I'm pretty sure that uses nss and not pam. Just thought I'd give that bit more information. Thank you much. -Damon Getsman --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.
