Upgrade from 0.7 to 0.8 having auth problems

[Andy Colson <andy [at] squeakycode.net>]

I had 0.7.17 working ok but thought I'd better work on upgrading.  I 
compiled, installed, and restart nslcd.  I can see ldap queries running 
ok and returning results, but the password seems to fail.

I'll try to get you my system info, if I miss anything please let me know.

Both client and server are running Slackware 13.37.  Slackware does not 
use PAM.

The client box is named mapper, on it I ran:

root@mapper:~# nslcd -d
nslcd: DEBUG: add_uri(ldap://192.168.10.12/)
nslcd: version 0.8.12 starting
nslcd: DEBUG: initgroups("daemon",2) done
nslcd: DEBUG: setgid(2) done
nslcd: DEBUG: setuid(2) done
nslcd: accepting connections
nslcd: [8b4567] DEBUG: connection from pid=11380 uid=0 gid=0
nslcd: [8b4567] <group/member="root"> DEBUG: 
myldap_search(base="ou=users,dc=camavision,dc=com", 
filter="(&(memberOf=cn=mapper,ou=groups,dc=camavision,dc=com)(uid=root))")
nslcd: [8b4567] <group/member="root"> DEBUG: 
ldap_initialize(ldap://192.168.10.12/)
nslcd: [8b4567] <group/member="root"> DEBUG: ldap_set_rebind_proc()
nslcd: [8b4567] <group/member="root"> DEBUG: 
ldap_set_option(LDAP_OPT_PROTOCOL_VERSION,3)
nslcd: [8b4567] <group/member="root"> DEBUG: 
ldap_set_option(LDAP_OPT_DEREF,0)
nslcd: [8b4567] <group/member="root"> DEBUG: 
ldap_set_option(LDAP_OPT_TIMELIMIT,0)
nslcd: [8b4567] <group/member="root"> DEBUG: 
ldap_set_option(LDAP_OPT_TIMEOUT,0)
nslcd: [8b4567] <group/member="root"> DEBUG: 
ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT,0)
nslcd: [8b4567] <group/member="root"> DEBUG: 
ldap_set_option(LDAP_OPT_REFERRALS,LDAP_OPT_ON)
nslcd: [8b4567] <group/member="root"> DEBUG: 
ldap_set_option(LDAP_OPT_RESTART,LDAP_OPT_ON)
nslcd: [8b4567] <group/member="root"> DEBUG: 
ldap_simple_bind_s("cn=admin,dc=camavision,dc=com","***") 
(uri="ldap://192.168.10.12/";)
nslcd: [8b4567] <group/member="root"> DEBUG: ldap_result(): end of 
results (0 total)
nslcd: [8b4567] <group/member="root"> DEBUG: 
myldap_search(base="ou=groups,dc=camavision,dc=com", 
filter="(&(objectClass=posixGroup)(memberUid=root))")
nslcd: [8b4567] <group/member="root"> DEBUG: ldap_result(): end of 
results (0 total)
nslcd: [7b23c6] DEBUG: connection from pid=11384 uid=0 gid=100
nslcd: [7b23c6] <passwd=-1> DEBUG: 
myldap_search(base="ou=users,dc=camavision,dc=com", 
filter="(&(memberOf=cn=mapper,ou=groups,dc=camavision,dc=com)(uidNumber=-1))")
nslcd: [7b23c6] <passwd=-1> DEBUG: ldap_initialize(ldap://192.168.10.12/)
nslcd: [7b23c6] <passwd=-1> DEBUG: ldap_set_rebind_proc()
nslcd: [7b23c6] <passwd=-1> DEBUG: 
ldap_set_option(LDAP_OPT_PROTOCOL_VERSION,3)
nslcd: [7b23c6] <passwd=-1> DEBUG: ldap_set_option(LDAP_OPT_DEREF,0)
nslcd: [7b23c6] <passwd=-1> DEBUG: ldap_set_option(LDAP_OPT_TIMELIMIT,0)
nslcd: [7b23c6] <passwd=-1> DEBUG: ldap_set_option(LDAP_OPT_TIMEOUT,0)
nslcd: [7b23c6] <passwd=-1> DEBUG: 
ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT,0)
nslcd: [7b23c6] <passwd=-1> DEBUG: 
ldap_set_option(LDAP_OPT_REFERRALS,LDAP_OPT_ON)
nslcd: [7b23c6] <passwd=-1> DEBUG: 
ldap_set_option(LDAP_OPT_RESTART,LDAP_OPT_ON)
nslcd: [7b23c6] <passwd=-1> DEBUG: 
ldap_simple_bind_s("cn=admin,dc=camavision,dc=com","***") 
(uri="ldap://192.168.10.12/";)
nslcd: [7b23c6] <passwd=-1> DEBUG: ldap_result(): end of results (0 total)
nslcd: [3c9869] DEBUG: connection from pid=11384 uid=0 gid=100
nslcd: [3c9869] <passwd="andyc"> DEBUG: 
myldap_search(base="ou=users,dc=camavision,dc=com", 
filter="(&(memberOf=cn=mapper,ou=groups,dc=camavision,dc=com)(uid=andyc))")
nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
nslcd: [3c9869] <passwd="andyc"> DEBUG: ldap_result(): 
uid=andyc,ou=users,dc=camavision,dc=com
nslcd: [3c9869] <passwd="andyc"> (re)loading /etc/nsswitch.conf
nslcd: [3c9869] <passwd="andyc"> DEBUG: ldap_result(): end of results (1 
total)





also on mapper, I tried:

andy@mapper:~$ su andyc
Password:
su: Authentication failure

The server is 192.168.10.12.  This used to work ok on 0.7.  Is there 
something that might have changed in 0.8 that might cause this?

Thanks for your time,

-Andy
--
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/