I configured the system for LDAP authentication using the 'authconfig'
command, which sets up sssd for LDAP.  Afterward I found I could not log in
via GDM with any user whose info came from LDAP, but local users worked
fine. This was the case even though all other login methods would work for
LDAP users.

To fix this issue you need to install the 32-bit version of sssd-client,
sssd-client.i686.

Without the 32-bit version, errors are logged in /var/log/secure, and read
like this:

nscloginGUI: pam_succeed_if(utnsclogin:auth): error retrieving information
about user
nscloginGUI: pam_unix(utnsclogin:auth): check pass; user unknown
nscloginGUI: pam_unix(utnsclogin:auth): authentication failure; logname=
uid=0 euid=0 tty= ruser= rhost=
nscloginGUI: PAM unable to dlopen(/lib/security/pam_sss.so):
/lib/security/pam_sss.so: cannot open shared object file: No such file or
directory
nscloginGUI: PAM adding faulty module: /lib/security/pam_sss.so

There are also similar errors about pam_gnome_keyring.so and
pam_fprintd.so.  The problem is the same as the sssd-client.  The 32-bit
versions, gnome-keyring-pam.i686 and fprintd-pam.i686, need to be installed.

-OW
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to