topic Re: LDAP and local root login in Operating System - Linux

LDAP and local root login

Alexander Chuzhoy — Sun, 06 Nov 2005 08:25:46 GMT

Hi all.
I have a centralized management of users via LDAP.
Whenever the network goes down - I can't login locally (rhel ws 4 update 1) with local root's account (I also can't login with users defined in LDAP - but that's to be expected).
In /etc/nsswitch.conf in passwd line I have: passwd: files ldap
I also use nscd for caching.

The nscd package version I use is
nscd-2.3.4-2.13
If someone knows how to fix this-please help.
Thanks.

Re: LDAP and local root login

Aco Blazeski — Mon, 07 Nov 2005 03:29:22 GMT

It was long time ago since I've played with this one.

I can't give you the exact solution, but I think that you should look for solution in /etc/pam.d directory.

I think that similar problem I've solved with commenting the following line in /etc/pam.d/system-auth:

#account [default=bad success=ok user_unknown=ignore service_err=ignore system_err=ignore] /lib/security/$ISA/pam_ldap.so

Note: there is also a command for configuring/changing system-auth file, but don't have linux box at the moment to find the syntax :-(

Hope at least I gave you the direction

Re: LDAP and local root login

Ivan Ferreira — Mon, 07 Nov 2005 06:51:31 GMT

Also, try setting in sswitch.conf:

passwd: ldap [UNAVAIL=continue] files
group:ldap [UNAVAIL=continue] files
shadow: ldap [UNAVAIL=continue] files

Re: LDAP and local root login

Alexander Chuzhoy — Wed, 09 Nov 2005 03:51:27 GMT

still have this problem,
when I disconnect my system from the network,
I can't login as root (nor with any LDAP user) on any terminal.
Get an error message
"cannot retrieve authentication info"
Can anyone help?

Re: LDAP and local root login

Ivan Ferreira — Wed, 09 Nov 2005 08:30:18 GMT

What is the configuration of /etc/pam.d/system-auth

Did you run authconfig and configured to use local authentication also?

Re: LDAP and local root login

Alexander Chuzhoy — Thu, 17 Nov 2005 06:46:18 GMT

Thanks!