I have been having a problem with Red Hat 7.2 configured for LDAP 
authentication.

The authentication works.  However, if the LDAP server is down, I cant even 
log in as root.

root and other users are listed in the /etc/passwd and /etc/shadow files, 
however these do not seem to be read if LDAP is down (even though the LDAP 
server does not even contain root or these other users).

Here is (part of) my nsswitch.conf file:

# The following is required to make the system
# check the local passwd files for netgroups then
# the LDAP server...
#
passwd:     files ldap
passwd_compat: ldap
shadow:     files ldap
group:      files ldap

and the pam stuff is:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        sufficient    /lib/security/pam_unix.so likeauth nullok md5 shadow
auth        sufficient    /lib/security/pam_ldap.so use_first_pass
auth        required      /lib/security/pam_deny.so

account     sufficient    /lib/security/pam_unix.so
account     sufficient    /lib/security/pam_ldap.so
account     required      /lib/security/pam_deny.so

password    required      /lib/security/pam_cracklib.so retry=3
password    sufficient    /lib/security/pam_unix.so nullok use_authtok md5 
shadow
password    sufficient    /lib/security/pam_ldap.so use_authtok
password    required      /lib/security/pam_deny.so

session     required      /lib/security/pam_limits.so
session     required      /lib/security/pam_unix.so
session     optional      /lib/security/pam_ldap.so

Anyone had any experience that can help.

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to