Re: User Authentication with nslcd 0.8.13

[Arthur de Jong <arthur [at] arthurdejong.org>]

On Wed, 2013-08-07 at 09:24 -0500, Priya Seshaadri wrote:
> This is the object dump of pam_ldap.so in /usr/lib/security:
[...]
> 00000000      D  *UND* 00000000              OpenSSL_add_all_digests
> 00000000      DF *UND* 00000000              BIO_free

This looks a lot more like pam_ldap than nss-pam-ldap's PAM module. The
nss-pam-ldapd PAM module doesn't have any references to SSL libraries.

What platform is this on? How did you install nss-pam-ldapd? Was it from
source or a binary package?

On Wed, 2013-08-07 at 14:15 -0500, Priya Seshaadri wrote:
> Does nss-pam-ldapd require the LDAP server to provide LDAPS (LDAP over
> SSL) API? Is it a hard requirement or is it just something that's good
> to have? My server doesn't provide LDAPS right now. I might have to
> modify that. 

nss-pam-ldapd does not require LDAPS or StartTLS to be used for the LDAP
connection. Any connection supported by the LDAP library is fine. The
nslcd output also indicates that lookups are working fine.

It is the PAM module that is failing somehow.

-- 
-- arthur - arthur@arthurdejong.org - http://arthurdejong.org --

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/