pam_user.conf problems

[Keith Schauer]

Hi all,
I'm trying to implement a custom LDAP PAM for certain users in such a way that they must and can only use LDAP authentication. The PAM module works fine when in pam.conf. When I try to use pam_user.conf for specific overrides nothing seems to happen. (ie. the PAM module is not loaded or used).

I've included my pam.conf, pam_user.conf, pam_debug and a tusc trace file. This is on 11.11

Thanks!

[Jens Keinath · Accepted solution]

Hello Keith,
Your setup doesn't use libpam_ldap.1 at all? - But anyway, the pam_user.conf file can only be used to assign different pam module options (e.g. debug) on a per user base. It can neither be used to assign different modules per user nor different control flags.

In your configuration, you defined in pam_user.conf that user shanatj shall use libpam_unix authentication with the debug option, which is the default for all users in your pam.conf, too!?

[Keith Schauer]

Thanks. It took me a while to figure out that only the passed parameters can be changed. Appreciate your taking the time to help!