This is a discussion on Solaris 8 .rhosts file with automounted home & LDAP within the Sun Solaris Administration forums, part of the Solaris Operating System category; --> This was originally posted to Sunmanagers, however I received no response. I'm attempting to set-up Solaris 8 to authenticate ...
| |||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
| ||||
| This was originally posted to Sunmanagers, however I received no response. I'm attempting to set-up Solaris 8 to authenticate and load it's automount maps from LDAP. I have that part working great (even with OpenLDAP). However, we currently use RSH, and many of our users have an rhosts file that is in their $HOME (which is automounted) to simplify authentication. In the examples below, there is an .rhosts file that allows logins from the host "flab" When I attempt to connect as a regular user (with an automounted home directory), I get the following: [1001][cable@flab:~]$ rsh -l cable ldaptest Login incorrect rlogin: connection closed. Output from auth.debug facility on ldaptest shows: Feb 13 09:59:52 ldaptest login: [ID 468494 auth.crit] login account failure: Authentication failed When I attempt to connect as root (no automouted home), it works fine: [root@flab ~]# rsh ldaptest Last login: Wed Feb 13 09:49:28 from flab bash-2.03# Authentication section of pam.conf includes: login auth required pam_unix.so.1 rlogin auth sufficient pam_rhosts_auth.so.1 rlogin auth sufficient pam_unix.so.1 rlogin auth required pam_ldap.so.1 try_first_pass #dtlogin auth required pam_dhkeys.so.1 #dtlogin auth sufficient pam_unix_auth.so.1 #dtlogin auth required pam_ldap.so.1 use_first_pass rsh auth sufficient pam_rhosts_auth.so.1 rsh auth sufficient pam_unix.so.1 rsh auth required pam_ldap.so.1 try_first_pass other auth requisite pam_authtok_get.so.1 other auth required pam_dhkeys.so.1 other auth sufficient pam_unix_auth.so.1 other auth required pam_ldap.so.1 try_first_pass passwd auth sufficient pam_unix.so.1 passwd auth required pam_ldap.so.1 try_first_pass Password authentication for users with automounted homes works fine. rhosts authentication for users with automounted homes on our NIS+ server works fine. Just not with LDAP. Any ideas? |
| Thread Tools | |
| Display Modes | |
|
|