Thanks, I've been struggling with getting NSCM authentication working, and
this fixed it. For me, GDM login was working with LDAP accounts, but not
the NSCM greeter.


On Tue, Apr 2, 2013 at 11:12 AM, Oliver Wallace <[email protected]> wrote:

> I configured the system for LDAP authentication using the 'authconfig'
> command, which sets up sssd for LDAP.  Afterward I found I could not log in
> via GDM with any user whose info came from LDAP, but local users worked
> fine. This was the case even though all other login methods would work for
> LDAP users.
>
> To fix this issue you need to install the 32-bit version of sssd-client,
> sssd-client.i686.
>
> Without the 32-bit version, errors are logged in /var/log/secure, and read
> like this:
>
> nscloginGUI: pam_succeed_if(utnsclogin:auth): error retrieving information
> about user
> nscloginGUI: pam_unix(utnsclogin:auth): check pass; user unknown
> nscloginGUI: pam_unix(utnsclogin:auth): authentication failure; logname=
> uid=0 euid=0 tty= ruser= rhost=
> nscloginGUI: PAM unable to dlopen(/lib/security/pam_sss.so):
> /lib/security/pam_sss.so: cannot open shared object file: No such file or
> directory
> nscloginGUI: PAM adding faulty module: /lib/security/pam_sss.so
>
> There are also similar errors about pam_gnome_keyring.so and
> pam_fprintd.so.  The problem is the same as the sssd-client.  The 32-bit
> versions, gnome-keyring-pam.i686 and fprintd-pam.i686, need to be installed.
>
> -OW
>
> _______________________________________________
> SunRay-Users mailing list
> [email protected]
> http://www.filibeto.org/mailman/listinfo/sunray-users
>
>
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to