[nssldap] su issue

[Jean-Christophe Valiere <jvaliere [at] safehost.ch>]

    Hi all,

    I'm using OpenLDAP with libnss-ldap and libpam-ldap for user authentication (running on debian etch).
    While everything is working find I get a strange 'Issue' when I use the su command.
    Everything is fine if they type the right password but I get the following error if I give a wrong password:

jyce@nagios:/$ su
Password:
su: User not known to the underlying authentication module
Sorry.

Here is my su configuration file in pam.d:

nagios:/etc/pam.d# cat su | grep -vE "^#|^$"
auth            sufficient      pam_rootok.so
auth            required        pam_wheel.so group=admin
session         required        pam_env.so readenv=1
session         required        pam_env.so readenv=1 envfile=/etc/default/locale
session         optional        pam_mail.so nopen
auth [success=1 default=ignore] pam_unix.so
auth required pam_ldap.so use_first_pass
auth required pam_permit.so
account [success=1 default=ignore] pam_unix.so
account required pam_ldap.so
account required pam_permit.so
session required        pam_unix.so

    Does somebody what is wrong in my configuration ?
    Thanks in advance.  

-- 
Jyce.