On Sat, Nov 13, 2010 at 10:44:05AM +0100, Hanspeter Kunz wrote: > On Fri, 2010-11-12 at 21:20 -0800, Steve Langasek wrote: > > What are the full contents of /etc/pam.d/common-auth on this system?
> auth [success=2 default=ignore] pam_unix.so nullok_secure > auth [success=1 default=ignore] pam_ldap.so use_first_pass > auth requisite pam_deny.so > auth required pam_permit.so > #auth optional pam_smbpass.so migrate > > Do the users you're trying to su to have entries in passdb.tdb? Do they > > have passwords in passdb.tdb? > I have an entry for root but not for other users. > Anyway, I am storing the samba passwords in ldap, so I guess passdb.tdb > is not used anyway. Ah. Then this could be caused by bug #579647 (which should be a bug against gcrypt, I'm not sure why I can only now find the bug filed against openldap). Are you using libnss-ldap? Could you test using libnss-ldapd instead? -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developer http://www.debian.org/ [email protected] [email protected]
signature.asc
Description: Digital signature
