pam_ldap errors in authentication

[Jyotishmaan]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Hi all,

I had been trying to log on to the server machine, after configuring the ldap server (the /etc/openldap/slapd.conf file and the /etc/ldap.conf file) but could not authenticate. The acl's have been included for proper configuration in slapd.conf file but still, i could not log on.

Can you give some hints!!

 The messages from the /var/log/messages are shown below:-

Dec 22 12:59:46 authdns gdm[2361]: pam_ldap: error trying to bind as user "uid=jmaan,stornt=non-teach,bn=compcen,dc=nits,dc=ac,dc=in" (Invalid credentials)
Dec 22 12:59:49 authdns gdm[2361]: Couldn't authenticate user
Dec 22 13:00:39 authdns gdm[2361]: pam_ldap: error trying to bind as user "uid=jmaan,stornt=non-teach,bn=compcen,dc=nits,dc=ac,dc=in" (Invalid credentials)
Dec 22 13:00:41 authdns gdm[2361]: Couldn't authenticate user
Dec 22 13:01:28 authdns gdm[2361]: pam_ldap: error trying to bind as user "uid=jmaan,stornt=non-teach,bn=compcen,dc=nits,dc=ac,dc=in" (Invalid credentials)
Dec 22 13:01:32 authdns gdm[2361]: Couldn't authenticate user
Dec 22 13:03:04 authdns gdm[2361]: pam_ldap: error trying to bind as user "uid=ldapusr,stornt=non-teach,bn=compcen,dc=nits,dc=ac,dc=in" (Invalid credentials)
Dec 22 13:03:07 authdns gdm[2361]: Couldn't authenticate user


My ldap.conf file of the ldap server machine is show below:

[root@authdns log]# egrep -v '^(^$|#)' /etc/ldap.conf

base dc=nits,dc=ac,dc=in
timelimit 120
bind_timelimit 120
idle_timelimit 3600
nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon
uri ldap://127.0.0.1/
ssl no
tls_cacertdir /etc/openldap/cacerts
pam_password md5

The slapd.conf file of my server machine is as shown below:

[root@authdns log]# egrep -v '^(^$|#)' /etc/openldap/slapd.conf
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema
include        /etc/openldap/schema/nit.schema
access to * by * read
 allow bind_v2
pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args
database        bdb
suffix          "dc=nits,dc=ac,dc=in"
rootdn          "cn=Manager,dc=nits,dc=ac,dc=in"
rootpw                     {SSHA}Y3RagOP7u3FsNbHCnPVLwsxUepwIgezo
directory       /var/lib/ldap
index objectClass                       eq,pres index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub
  
                                                                                                                            
access to attrs=userPassword
         by * auth
         by  self write
access to *
         by *  read
access to *
       by dn="cn=Manager,dc=nits,dc=ac,dc=in"  write
       by dn="uid=jmaan,stornt=non-teach,bn=compcen,dc=nits,dc=ac,dc=in" read
       by dn="uid=ldapusr,stornt=non-teach,bn=compcen,dc=nits,dc=ac,dc=in" read
       by dn="uid=usr1,dc=nits,dc=ac,dc=in" read
       by users read
       by self write
       by * read
                                                                                                                            
lastmod  on
access to * by users read
authz-regexp
          uid=([^,]*),dc=[^,]*,cn=auth
          uid=$1,stornt=non-teach,bn=compcen,dc=nits,dc=ac,dc=in
loglevel         -1

Thank you for taking efforts to read till this line. Now please show me your expertise on this, and let me resolve this authentication ?

Jyotishmaan

With Thanks and Regards,
Jyotishmaan Ray

Moderator Of Paradise Groups

http://yahoogroups.com/group/Spirituality-Paradise

 

Are You Spiritually Aware  !!! Are You Enjoying Yourself  !!!  See What All You Had Been Missing !!!!
Please Join Immediately By Sending A Blank Mail @ 
Spirituality-Paradise-subscribe@...
 

 

 

---

Never miss a thing. Make Yahoo your homepage.