Hello Folks,

I have loads of RHEL4U4/6 boxes. They authenticate to LDAP (Sun) just fine ! I don't manage the LDAP servers.

After kickstarting a RHEL5U2 box I have not been able to authenticate as a regular user via LDAP. After much pain and suffering I have tracked this down to Nalin's wonderful pam_succeed_if.so lib. We have users with uid starting at 101. So okay I reduce the uid >= 500 to uid >= 100 and I can log in. But I get some weird errors such as:

-bash: [: =: unary operator expected
-bash: [: =: unary operator expected
-bash: [: -le: unary operator expected

        How do I track these down and squash them ?

        Cheers,

        Aly.

My PAM system-auth config:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      pam_env.so
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        sufficient    pam_ldap.so use_first_pass
auth        required      pam_deny.so

account     required      pam_unix.so broken_shadow
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     [default=bad success=ok user_unknown=ignore] pam_ldap.so
account     required      pam_permit.so

--
Aly S.P Dharshi
[EMAIL PROTECTED]
Got TELUS TV ? http://www.telus.com/tv or 310-MYTV

_______________________________________________
rhelv5-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhelv5-list

Reply via email to