Re: [gentoo-dev] SSH, PAM, and LDAP

[Mark Bainter]

Ryan Henry [mailing list] [ryan.henry.ml@××××××.com] wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I am using ldap authentication with pam and ssh works fine.  I have not
> tested the password expiration stuff but I do have the create home
> directory working.  I also have priveledge separation turned off in my
> sshd_config.  To get this working I added this to /etc/pam.d/system-auth
>
> auth       sufficient   /lib/security/pam_ldap.so use_first_pass
> account    sufficient   /lib/security/pam_ldap.so
> password   sufficient   /lib/security/pam_ldap.so use_authtok
> session    required     /lib/security/pam_mkhomedir.so skel=/etc/skel/
> umask=0077
> session    optional      /lib/security/pam_ldap.so
>

I wish it did.  That's essentially what I have, and I also have
priveledge seperation turned off.  Are you using the shadowAccount
objectClass or just posixAccount?

--
gentoo-dev@g.o mailing list