[24660] in Kerberos
Re: kerberos with kdap
daemon@ATHENA.MIT.EDU (Turbo Fredriksson)
Mon Sep 19 10:09:45 2005
To: kerberos@mit.edu
From: Turbo Fredriksson <turbo@bayour.com>
Date: Mon, 19 Sep 2005 09:21:50 +0200
In-Reply-To: <4329AA04.3060305@decaelo.co.uk> (Rowan Woodhouse's message of
"Thu, 15 Sep 2005 18:06:12 +0100")
Message-ID: <87irwxjze9.fsf@pumba.bayour.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Errors-To: kerberos-bounces@mit.edu
Quoting Rowan Woodhouse <rowan@decaelo.co.uk>:
> Kerberos auth works fine for local users (ie I can ssh in with a
> kerberos ticket) but if I try the same with a ldap user then it
> fails. If I su to the ldap defined user I get "su: Authentication
> service cannot retrieve authentication info".
Did you update the /etc/pam.d/su file? Should look like the /etc/pam.d/ssh
file...
> The strange thing is
> that if I finger the ldap user I get the normal information back and
> they are also listed when I do a getent passwd.
That's taken care of by the LibNSS/LDAP module so that's 'completely'
different...
> Does anyone have any ideas about what could be causing this?
Check you logs and maybe run su 'within' strace...
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
