Re: User Authentication with nslcd 0.8.13

[Priya Seshaadri <priya.sesh [at] gmail.com>]

This looks a lot more like pam_ldap than nss-pam-ldap's PAM module. The
nss-pam-ldapd PAM module doesn't have any references to SSL libraries.

OK. That clears my confusion a little bit. It seems the pam_ldap's PAM module is present in /usr/lib/security and nss-pam-ldapd's PAM module is present in /lib/security. The nss-pam-ldapd's PAM module does not have any reference to SSL libraries. However using that also doesn't work for me. Here's the objectdump of the other pam_ldap.so:

-------------------------------------------------------------

lib/security/pam_ldap.so:     file format elf32-little

DYNAMIC SYMBOL TABLE:

00000a40 l    d  .init 00000000              .init

000107f8 l    d  .jcr 00000000              .jcr

00000000      DF *UND* 00000000  GLIBC_2.4   strerror

00000000      DF *UND* 00000000  GLIBC_2.4   connect

00000000      DF *UND* 00000000  LIBPAM_1.0  pam_get_user

00000000      DF *UND* 00000000  LIBPAM_1.0  pam_strerror

00000000      DF *UND* 00000000  GCC_3.5     __aeabi_unwind_cpp_pr0

00006b94 g    DF .text 00000048  EXPORTED    pam_sm_open_session

00000000      DF *UND* 00000000  LIBPAM_1.0  pam_get_data

00000000  w   D  *UND* 00000000              __gmon_start__

00000000  w   D  *UND* 00000000              _Jv_RegisterClasses

00000000      DF *UND* 00000000  GLIBC_2.4   strncpy

00000000      DF *UND* 00000000  LIBPAM_EXTENSION_1.0 pam_syslog

00000000      DF *UND* 00000000  GLIBC_2.4   calloc

00000000      DF *UND* 00000000  LIBPAM_EXTENSION_1.1 pam_get_authtok

00000000      DF *UND* 00000000  GLIBC_2.4   memset

00000000      DF *UND* 00000000  LIBPAM_1.0  pam_set_data

00000000      DF *UND* 00000000  LIBPAM_1.0  pam_set_item

00000000 g    DO *ABS* 00000000  EXPORTED    EXPORTED

00000000      DF *UND* 00000000  GLIBC_2.4   getuid

00000000      DF *UND* 00000000  GLIBC_2.4   free

00000000      DF *UND* 00000000  GLIBC_2.4   read

00000000      DF *UND* 00000000  GLIBC_2.4   gettimeofday

00000000      DF *UND* 00000000  GLIBC_2.4   socket

00006178 g    DF .text 000003e8  EXPORTED    pam_sm_authenticate

00000000      DF *UND* 00000000  GLIBC_2.4   strlen

00006590 g    DF .text 00000448  EXPORTED    pam_sm_acct_mgmt

00000000      DF *UND* 00000000  GLIBC_2.4   memcpy

00006560 g    DF .text 00000030  EXPORTED    pam_sm_setcred

00000000      DF *UND* 00000000  GLIBC_2.4   atoi

00000000      DF *UND* 00000000  GLIBC_2.4   close

00006bdc g    DF .text 00000048  EXPORTED    pam_sm_close_session

00000000      DF *UND* 00000000  GLIBC_2.4   strdup

00000000      DF *UND* 00000000  GLIBC_2.4   malloc

00000000      DF *UND* 00000000  GLIBC_2.4   poll

00000000      DF *UND* 00000000  GLIBC_2.4   send

00000000      DF *UND* 00000000  GLIBC_2.4   memmove

00000000      DF *UND* 00000000  LIBPAM_EXTENSION_1.0 pam_prompt

00000000      DF *UND* 00000000  GLIBC_2.4   fcntl

00000000      DF *UND* 00000000  GLIBC_2.4   strncmp

00000000      DF *UND* 00000000  GLIBC_2.4   realloc

00006c24 g    DF .text 00000664  EXPORTED    pam_sm_chauthtok

00000000      DF *UND* 00000000  GCC_3.5     __aeabi_unwind_cpp_pr1

00000000      DF *UND* 00000000  LIBPAM_1.0  pam_get_item

00000000      DF *UND* 00000000  GLIBC_2.4   strcmp

00000000      DF *UND* 00000000  GLIBC_2.4   __errno_location

00000000  w   DF *UND* 00000000  GLIBC_2.4   __cxa_finalize

00000000      DF *UND* 00000000  GLIBC_2.4   getpwnam

--------------------------------------------------------------

 

What platform is this on? How did you install nss-pam-ldapd? Was it from
source or a binary package?

The platform is arm-based. I used the source package (version 0.8.13).

 

nss-pam-ldapd does not require LDAPS or StartTLS to be used for the LDAP

connection. Any connection supported by the LDAP library is fine. The
nslcd output also indicates that lookups are working fine.

It is the PAM module that is failing somehow.

Do you have any suggestions on how to debug the PAM module to see where it is failing?

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/