Hi,
I am not sure why this happens but out terminal servers, routers, and
ancillary devices are able to authenticate with our LDAP server. For
some reason pam_ldap claims "Invalid credentials" with the same exact
user and password.
What could be wrong? I cant seem to figure out what is wrong with the
current log messages. Is there a way to receive verbose messages from
pam and/or pam_ldap to figure out if it is sending the proper
authentication information to the LDAP server.
We are on a FreeBSD-6.2 stable machine.
Clues please,
Noah
Aug 1 11:24:11 access1 sshd[6277]: pam_ldap: error trying to bind as
user "cn=Test User,cn=people,dc=bogus,dc=domain,dc=net" (Invalid
credentials)
Aug 1 11:24:11 access1 sshd[6277]: Failed password for invalid user
tuser from 172.24.241.234 port 49317 ssh2
Aug 1 11:24:14 access1 sshd[6277]: pam_ldap: error trying to bind as
user "cn=Test User,cn=people,dc=bogus,dc=domain,dc=net" (Invalid
credentials)
Aug 1 11:24:14 access1 sshd[6277]: Failed password for invalid user
tuser from 172.24.241.234 port 49317 ssh2
Aug 1 11:24:14 access1 sshd[6277]: Connection closed by 172.24.241.234
access1# pkg_info | grep pam
checkpassword-pam-0.99 Implementation of checkpassword authentication
program
nagios-spamd-plugin-1.4 Nagios plugin for checking SpamAssassins spamd
p5-Mail-SpamAssassin-3.1.8_1 A highly efficient mail filter for
identifying spam
pam_ldap-1.8.2 A pam module for authenticating with LDAP
pam_mkhomedir-0.1 Create HOME with a PAM module on demand
pamtester-0.1.2 A command line pam authentication tester
razor-agents-2.84 A distributed, collaborative, spam detection and
filtering
access1# pkg_info | grep ldap
ldapsh-2.00_2,1 Interactive shell used to administer ldap directories
nss_ldap-1.255 RFC 2307 NSS module
openldap-client-2.3.37 Open source LDAP client implementation
openldap-server-2.3.37 Open source LDAP server implementation
p5-perl-ldap-0.34 A Client interface to LDAP servers
pam_ldap-1.8.2 A pam module for authenticating with LDAP
php5-ldap-5.2.3_1 The ldap shared extension for php
access1#
