[prev in list] [next in list] [prev in thread] [next in thread] 

List:       pamldap
Subject:    RE: [pamldap] Solaris 2.6 and ftp not authentication with pam_lda p
From:       Andreas Kaempf <akaempf () sccon ! com>
Date:       2001-10-16 18:35:08
[Download RAW message or body]

Thanks for the reply.  I do have a /etc/shells account and the shell path 
is listed in the file.  I did that a couple of days ago and still no 
success in using ftp.

cheers,
andreas

--On Tuesday, October 16, 2001 2:30 PM -0400 Justin Hahn 
<jeh@profitlogic.com> wrote:

> Check your /etc/shells. Is the login shell of the ftp user there?
> Solaris's FTP daemon is very picky about this. I had this happen to me on
> a couple machines and it drove me up a wall until I figured it out.
>
> --jeh
>
>> -----Original Message-----
>> From: Andreas Kaempf [mailto:akaempf@sccon.com]
>> Sent: Tuesday, October 16, 2001 12:50 PM
>> To: pamldap@padl.com
>> Subject: [pamldap] Solaris 2.6 and ftp not authentication
>> with pam_ldap
>>
>>
>> Hi,
>>
>> I have successfully compiled and installed pam_ldap-131 and
>> nss_ldap-172 on
>> a Solaris 2.6 machine.  I have been able to successfully use
>> the following
>> services: login, dtlogin, telnet, ssh authenticating with our
>> LDAP server.
>> I have however not been able to authenticate via a ftp
>> session into the
>> client workstation.  All user info is on the ldap server and nothing
>> resides on the client workstation.  We are using the stock
>> ftpd from SUN on
>> the client workstation.
>>
>> LDAP server is IPlanet 4.13, and am also using Netscape's SDK
>> ldapsdk-41-solaris.
>>
>> I suspect something is wrong with my pam.conf file but for
>> the life of me
>> cannont figure out what.  Below is the pam.conf file:
>>
>> # PAM configuration
>> #
>> # Authentication management
>> #
>> login   auth sufficient /usr/lib/security/pam_ldap.so.1
>> login   auth required   /usr/lib/security/pam_unix.so.1 usr_first_pass
>> # login auth required   /usr/lib/security/pam_dial_auth.so.1
>> #
>> rlogin  auth sufficient /usr/lib/security/pam_rhosts_auth.so.1
>> rlogin  auth sufficient /usr/lib/security/pam_ldap.so.1
>> rlogin  auth required   /usr/lib/security/pam_unix.so.1 usr_first_pass
>> #
>> dtlogin auth sufficient /usr/lib/security/pam_ldap.so.1
>> dtlogin auth required   /usr/lib/security/pam_unix.so.1 usr_first_pass
>> #
>> rsh     auth required   /usr/lib/security/pam_rhosts_auth.so.1
>>
>> sshd    auth required /usr/lib/security/pam_ldap.so.1
>> other   auth sufficient /usr/lib/security/pam_ldap.so.1
>> other   auth required   /usr/lib/security/pam_unix.so.1 usr_first_pass
>> #
>> # Account management
>> #
>> login   account sufficient      /usr/lib/security/pam_ldap.so.1
>> login   account required        /usr/lib/security/pam_unix.so.1
>>
>> dtlogin account sufficient      /usr/lib/security/pam_ldap.so.1
>> dtlogin account required        /usr/lib/security/pam_unix.so.1
>> #
>> sshd    account required     /usr/lib/security/pam_ldap.so.1
>> other   account sufficient      /usr/lib/security/pam_ldap.so.1
>> other   account required        /usr/lib/security/pam_unix.so.1
>> #
>> # Session management
>> #
>> sshd   session required        /usr/lib/security/pam_ldap.so.1
>> other   session required        /usr/lib/security/pam_unix.so.1
>> #
>> # Password management
>> #
>> sshd password required  /usr/lib/security/pam_ldap.so.1
>> other password required       /usr/lib/security/pam_ldap.so.1
>> # other   password required       /usr/lib/security/pam_unix.so.1
>>
>>
>> Any help would be greatly appreciated.
>>
>> cheers,
>> andreas
>>

[prev in list] [next in list] [prev in thread] [next in thread]