LDAP-UX and user authentication

[Greg Wojtak]

I am using LDAP-UX to set up HP servers to authenticate against our eDirectory tree, and so far I have been successful with one glaring problem. Every authentication method I have tried (telnet, ftp, ssh, rsh, su, etc) worhs with the exception of ssh. I can log in as a user with a local account but when I use an LDAP user, I get the message 'Connection closed by xxx.xxx.xxx.xxx'. It does this without prompting for a password. I have set sshd to debug, but haven't found anything useful, I have tried adding the debug option to the libpam_unix.so.1 and libpam_ldap.so.1 entries in /etc/pam.conf with nothing useful. Can anyone suggest a course of action here? I'm just stuck!

[Armin Kunaschik · Accepted solution]

What version of ssh do you use?
The official HP-Version (at least) tells, that
it's LDAP capable.
Are all required patches installed (i remember
there was a requisite pam patch...)
Did you try the debug mode for sshd (sshd -ddd)?
And, of course, ssh -vvv is your friend...

Hope this helps,
Armin

[Sanjay_6]

Hi Greg,

Try these two docs,

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000076639703

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000076639739

The itrc doc id's are KBRC00015978 & KBRC00016027.

Hope this helps.

Regds

[Greg Wojtak]

Upgraded the version of HP secure shell I was using and it worked. HP secure shell 3.7 was installed, and apparently it didn't support pam ldap authentication. Thanks for your input!