Re: [Working fix] Problems combining nss_ldap/pam_ldap with pam_mkhomedir in FreeBSD 7.0

2008-03-19 Thread Dmitriy Kirhlarov
Daniel Bond wrote: |> /usr/local/etc/nss_ldap.conf -> openldap/ldap.conf |> /usr/local/etc/ldap.conf -> openldap/ldap.conf | | I'm not sure is it correct. | etc/ldap.conf and etc/openldap/ldap.conf -- different files for | different purposes. | etc/nss_ldap.conf -> etc/ldap.conf -- it's correct.

Re: [Working fix] Problems combining nss_ldap/pam_ldap with pam_mkhomedir in FreeBSD 7.0

2008-03-19 Thread Daniel Bond
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello! Dmitriy Kirhlarov wrote: | Hi! | | Daniel Bond wrote: | |> I'm pretty sure my ldap.conf and nsswitch.conf are OK, but here they are |> anyway: |> |> |> /usr/local/etc/nss_ldap.conf -> openldap/ldap.conf |> /usr/local/etc/ldap.conf -> openldap

Re: Problems combining nss_ldap/pam_ldap with pam_mkhomedir in FreeBSD 7.0

2008-03-18 Thread Dmitriy Kirhlarov
Hi! Daniel Bond wrote: # auth ... This pam.d/ssh config working fine for me: # auth authrequiredpam_nologin.so no_warn authsufficient pam_opie.so no_warn no_fake_prompts authrequisite pam_opieaccess.so no_warn

Re: Problems combining nss_ldap/pam_ldap with pam_mkhomedir in FreeBSD 7.0

2008-03-18 Thread Daniel Bond
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Valerio Daelli wrote: | On Mon, Mar 17, 2008 at 5:03 PM, Daniel Bond <[EMAIL PROTECTED]> wrote: |> -BEGIN PGP SIGNED MESSAGE- |> Hash: SHA1 |> |> Hi, |> Now, if I uncomment the line with pam_mkhomedir.so on it, logins stop to |> work. In /

Re: Problems combining nss_ldap/pam_ldap with pam_mkhomedir in FreeBSD 7.0

2008-03-18 Thread Valerio Daelli
On Mon, Mar 17, 2008 at 5:03 PM, Daniel Bond <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi, > Now, if I uncomment the line with pam_mkhomedir.so on it, logins stop to > work. In /var/log/auth.log I now see two lines appearing: > > Mar 17 16:46:40 webmail s

Problems combining nss_ldap/pam_ldap with pam_mkhomedir in FreeBSD 7.0

2008-03-17 Thread Daniel Bond
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, we use a large number of servers with centralized user-accounts in LDAP for ease of administration. The machines bind to LDAPv3 with TLS, and PAM accepts logins for ssh checking groupdn. This has been working great in FreeBSD 4.x, 5.x and 6.x, bu