LDAP SSH AUTH

[Darrin De Sa]

Hi,

I have configured OpenLDAP, PAM, NIS so far that an rlogin and ssh for an ldap user works. The only problem is that everytime I start an ssh connection for any ldap user the old password, new password and re-enter new password prompts come up. Is there any way to turn it off?

the ldap users support the object class posixAccount. I have also tried additionally with the object class shadowAccount but it did not help.

thx,
Darrin

[RAC_1]

May be because, your user account is expired. Check passwd -s "user_name" and also with ldap commands.

[Darrin De Sa]

hi rac,

Thank you for the prompt reply, but it seems to be more confusing now.

passwd -s "user name"

returns the following:

Password cannot be changed. Reason: Cannot access protected password entry.

but the ssh login for the same user works, i.e., the password is successfully changed. Well, it would be okay if this just happened once.

Darrin