Daniel Pérez del Campo wrote:
>
>
>
>> From: "Enda O'Connor ( Sun Micro Systems Ireland)" 
>> <[EMAIL PROTECTED]>
>> To: Daniel Pérez del Campo <[EMAIL PROTECTED]>
>> CC: zones-discuss@opensolaris.org
>> Subject: Re: [zones-discuss] trying to login with solaris Ldap client
>> Date: Tue, 21 Aug 2007 13:43:21 +0100
>>
>>
>>> <= bdb_equality_candidates: (uid) index_param failed (18)
>>> conn=76 op=98 SEARCH RESULT tag=101 err=0 nentries=1 text=
>>> conn=76 op=99 SRCH base="ou=users,dc=tel,dc=uva,dc=es" scope=1 
>>> deref=3 filter="(&(objectClass=posixAccount)(uid=dpercam))"
>>> conn=76 op=99 SRCH attr=cn uid uidnumber gidnumber gecos description 
>>> homedirectory loginshell
>>> <= bdb_equality_candidates: (uid) index_param failed (18)
>>> conn=76 op=99 SEARCH RESULT tag=101 err=0 nentries=1 text=
>>>
>>> Does anybody know what could be the problem??? I'm desesperate!
>>>
>>> Thank you very much.
>>>
>>> Daniel Pérez
>>>
>>>
>>> _______________________________________________
>>> zones-discuss mailing list
>>> zones-discuss@opensolaris.org
>>
>> Looks like a pam issue?
>>
>> the server is finding the entry (nentries=1)
>>
>> What have you configured in /etc/pam.conf
>> read man -s5 pam_ldap to get an idea
>>
>> so at a guess from your env above
>> change
>>
>> <service name> auth required pam_unix_auth.so.1
>> to
>>
>> <service name> auth binding pam_unix_auth.so.1 server_policy
>>
>> for all lines that match and add
>> <service name> auth required pam_ldap.so.1
>>
>> once for each srvice name that you changed.
>>
>>
>> Also add the line
>> other password required   pam_authtok_store.so.1 server_policy
>>
>>
>> other than that not too clear what is wrong.
>> Enda
>
> I have changed the pam.conf as you said, but the problem is the same. 
> It forces me to change the password again and again. The pam.conf is 
> this:
>
> login    auth requisite        pam_authtok_get.so.1
> login    auth required        pam_dhkeys.so.1
> login    auth required        pam_unix_cred.so.1
> login    auth binding            pam_unix_auth.so.1 server_policy
> login   auth required         pam_ldap.so.1
> login    auth required        pam_dial_auth.so.1
>
> rlogin    auth sufficient        pam_rhosts_auth.so.1
> rlogin    auth requisite        pam_authtok_get.so.1
> rlogin    auth required        pam_dhkeys.so.1
> rlogin    auth required        pam_unix_cred.so.1
> rlogin    auth binding            pam_unix_auth.so.1 server_policy
> rlogin  auth required           pam_ldap.so.1
>
> krlogin    auth required        pam_unix_cred.so.1
> krlogin    auth binding        pam_krb5.so.1
> krlogin    auth binding            pam_unix_auth.so.1 server_policy
> krlogin auth required           pam_ldap.so.1
>
> rsh    auth sufficient        pam_rhosts_auth.so.1
> rsh    auth required        pam_unix_cred.so.1
>
> krsh    auth required        pam_unix_cred.so.1
> krsh    auth binding        pam_krb5.so.1
> krsh    auth binding            pam_unix_auth.so.1 server_policy
> krsh    auth required           pam_ldap.so.1
>
> ktelnet    auth required        pam_unix_cred.so.1
> ktelnet    auth binding        pam_krb5.so.1
> ktelnet    auth binding            pam_unix_auth.so.1 server_policy
> ktelnet auth required           pam_ldap.so.1
>
> ppp    auth requisite        pam_authtok_get.so.1
> ppp    auth required        pam_dhkeys.so.1
> ppp    auth required        pam_unix_cred.so.1
> ppp    auth binding            pam_unix_auth.so.1 server_policy
> ppp     auth required           pam_ldap.so.1
> ppp    auth required        pam_dial_auth.so.1
>
> other    auth requisite        pam_authtok_get.so.1
> other    auth required        pam_dhkeys.so.1
> other    auth required        pam_unix_cred.so.1
> other    auth binding            pam_unix_auth.so.1 server_policy
> other   auth required           pam_ldap.so.1
>
> passwd    auth required        pam_passwd_auth.so.1
>
> cron    account required    pam_unix_account.so.1
>
> other    account requisite    pam_roles.so.1
> other    account required    pam_unix_account.so.1
>
> other    session required    pam_unix_session.so.1
>
> other    password required    pam_dhkeys.so.1
> other    password requisite    pam_authtok_get.so.1
> other    password requisite    pam_authtok_check.so.1
> #other    password required    pam_authtok_store.so.1
> other   password required       pam_authtok_store.so.1 server_policy
>
> I don't know what to do.
> Does anybody know what is the problem??
> Thank you very much.
>
> Daniel Perez
>
> _________________________________________________________________
> MSN Amor: busca tu ½ naranja http://latam.msn.com/amor/
>
I'm not familiar with openldap config as such but I did find the 
following link which might help you out
http://docs.lucidinteractive.ca/index.php/Solaris_LDAP_client_with_OpenLDAP_server

have a read through it, seems you might have some work to do on the ldap 
server side

regards
Enda
_______________________________________________
zones-discuss mailing list
zones-discuss@opensolaris.org

Reply via email to