LDAP Authentication

[Dafnis]

Hello,

I have a OpenLDAP server running over CentOS4.3
It is working good.

Now I want to authenticate the users in Tru64 ussing OpenLDAP server.

In Tru64 I install de paquet (Module Authentication) from Internet Express CD. The Server with Tru64 conected to Directory Server and see the users in it but when I go to authenticate in Tru64 it make localy and not in OpenLDAP.

How I configure Tru64 to authenticate users using LDAP?

1.- I see /etc/nsswitch.conf but nothing about ldap

aliases: files dns
auth_default: files
auth_devassign: files
auth_files: files
auth_prpasswd: files
auth_ttys: files
group: compat
group_compat: nis
hosts: files dns
netgroup: nis
networks: files
passwd: compat
passwd_compat: nis
protocols: files
rpc: files
services: files

2.- /etc/sia/matrix.conf was modify for ussing ldap but in second obtion.

siad_setpwent=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_endpwent=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_getpwent=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_getpwnam=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_getpwuid=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_chg_finger=(BSD,libc.so)
siad_chg_password=(BSD,libc.so)
siad_chg_shell=(BSD,libc.so)
siad_chk_user=(BSD,libc.so)
siad_setgrent=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_endgrent=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_getgrent=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_getgrnam=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_getgrgid=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)
siad_ses_init=(BSD,libc.so)
siad_chk_invoker=(BSD,libc.so)
siad_ses_authent=(BSD,libc.so)
siad_ses_suauthent=(BSD,libc.so)
siad_ses_reauthent=(BSD,libc.so)
siad_ses_estab=(BSD,libc.so)
siad_ses_launch=(BSD,libc.so)
siad_ses_release=(BSD,libc.so)
siad_init=(BSD,libc.so) (LDAP,/usr/shlib/libsialdap.so)

3.- I have to use PAM?

Thanks
Dafnis

[Ann Majeske]

Do you have the same users set up in both databases? If so, try deleting one of those users from the local database and see if it uses ldap for that user.

Ann