Re: Upgrade from 0.7 to 0.8 having auth problems

[Arthur de Jong <arthur [at] arthurdejong.org>]

On Fri, 2012-11-23 at 21:36 -0600, Andy Colson wrote:
> And I can login to it as well.  I'd say that shadow line is required.

That change was indeed in nss-pam-ldapd 0.8.4. It is required to fix a
problem with pam_unix. If passwd returns x as a password hash but the
user is not returned in the shadow map pam_unix will deny the login.

I'll see if nss-pam-ldapd can be made smarter to also return x if no
shadow line is present in /etc/nsswitch.conf (apparently libc falls back
to using the same mapping as for passwd).

> Thank you very much for going through that much work.  Is there any way 
> I can repay the favor?

Keep sending in useful bug reports ;) Also, any contribution in terms of
code or documentation is welcome.

-- 
-- arthur - arthur@arthurdejong.org - http://arthurdejong.org --

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/