Package: libpam-ldap Version: 180-1.8 Severity: important We have recently set up a 2slave, 1 master ldap configuration using replication and redirection. So the clients point at the slaves and are redirected to the master for updates.
When ssl is set to 'start_tls' in pam_ldap.conf and a user attempts to change their password on a client the passwd utility, they get this result: [EMAIL PROTECTED]:/etc$ passwd Enter login(LDAP) password: New password: Re-enter new password: LDAP password information update failed: Unknown error passwd: Permission denied passwd: password unchanged in slapd logs, we see: ... 2008-04-11T10:30:07+07:00 ldap-slave1 local4 debug slapd slapd[12439]: conn=5 op=6 PASSMOD id="uid=chiestand,ou=People,dc=snl,dc=salk,dc=edu" new 2008-04-11T10:30:07+07:00 ldap-slave1 local4 debug slapd slapd[12439]: conn=5 op=6 RESULT oid= err=10 text= 2008-04-11T10:30:07+07:00 ldap-master local4 debug slapd slapd[12501]: conn=6 fd=13 ACCEPT from IP=198.202.70.98:40950 (IP=0.0.0.0:636) 2008-04-11T10:30:07+07:00 ldap-master local4 debug slapd slapd[12501]: conn=6 fd=13 TLS established tls_ssf=128 ssf=128 2008-04-11T10:30:07+07:00 ldap-master local4 debug slapd slapd[12501]: conn=6 fd=13 closed (connection lost) 2008-04-11T10:30:07+07:00 ldap-slave1 local4 debug slapd slapd[12439]: conn=5 op=7 UNBIND 2008-04-11T10:30:07+07:00 ldap-slave1 local4 debug slapd slapd[12439]: conn=5 fd=19 closed ... This bug sounds similar to #340303, but I'm not sure if there's a relation. Please not that when using 'ssl on', the uri begins with ldaps:// and when using 'ssl start_tls' the uri begins with ldap:// -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (990, 'stable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-6-amd64 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages libpam-ldap depends on: ii debconf [debconf-2.0] 1.5.11etch1 Debian configuration management sy ii libc6 2.3.6.ds1-13etch5 GNU C Library: Shared libraries ii libldap2 2.1.30-13.3 OpenLDAP libraries ii libpam0g 0.79-5 Pluggable Authentication Modules l libpam-ldap recommends no packages. -- debconf-show failed -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
