API tools faq
paste
SRD

nss-pam-ldapd

SRD
Jan 25th, 2016
277
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 27.64 KB | None | 0 0
raw download clone embed print report
  1. server: OpenLDAP 2.4.43
  2. clients: nss-pam-ldapd 0.9.6
  3.  
  4. I have a user configured in the OpenLDAP database and I can run ldapsearch from the server and get back valid results. Below is what I'm seeing when trying to log into the LDAP client from the server.
  5.  
  6. $ ssh 10.0.1.1
  7. You are required to change your password immediately (root enforced)
  8. WARNING: Your password has expired.
  9. You must change your password now and login again!
  10. (current) LDAP Password:
  11. passwd: User not known to the underlying authentication module
  12. passwd: password unchanged
  13. Connection to 10.0.1.1 closed.
  14.  
  15. On the LDAP client, the following output is from running nslcd -d (debug). So I believe this is telling me that the LDAP client is talking to the LDAP server. But I do not understand why the connection is being closed, or why the passwd is expired.Also, running 'getent passwd' on the server returns all users withing /etc/passwd. Running the same command from the LDAP client looks like it's only returning the users from the LDAP client's /etc/passwd file (no users).
  16.  
  17. nslcd: DEBUG: NSS_LDAP nss-pam-ldapd 0.9.6
  18. nslcd: DEBUG: CFG: threads 5
  19. nslcd: DEBUG: CFG: uid nslcd
  20. nslcd: DEBUG: CFG: gid 246
  21. nslcd: DEBUG: CFG: uri ldap://10.0.0.11/
  22. nslcd: DEBUG: CFG: ldap_version 3
  23. nslcd: DEBUG: CFG: base dc=my,dc=example,dc=com
  24. nslcd: DEBUG: CFG: scope sub
  25. nslcd: DEBUG: CFG: deref never
  26. nslcd: DEBUG: CFG: referrals yes
  27. nslcd: DEBUG: CFG: filter aliases (objectClass=nisMailAlias)
  28. nslcd: DEBUG: CFG: filter ethers (objectClass=ieee802Device)
  29. nslcd: DEBUG: CFG: filter group (objectClass=posixGroup)
  30. nslcd: DEBUG: CFG: filter hosts (objectClass=ipHost)
  31. nslcd: DEBUG: CFG: filter netgroup (objectClass=nisNetgroup)
  32. nslcd: DEBUG: CFG: filter networks (objectClass=ipNetwork)
  33. nslcd: DEBUG: CFG: filter passwd (objectClass=posixAccount)
  34. nslcd: DEBUG: CFG: filter protocols (objectClass=ipProtocol)
  35. nslcd: DEBUG: CFG: filter rpc (objectClass=oncRpc)
  36. nslcd: DEBUG: CFG: filter services (objectClass=ipService)
  37. nslcd: DEBUG: CFG: filter shadow (objectClass=shadowAccount)
  38. nslcd: DEBUG: CFG: map group userPassword "*"
  39. nslcd: DEBUG: CFG: map passwd userPassword "*"
  40. nslcd: DEBUG: CFG: map passwd gecos "${gecos:-$cn}"
  41. nslcd: DEBUG: CFG: map shadow userPassword "*"
  42. nslcd: DEBUG: CFG: map shadow shadowLastChange "${shadowLastChange:--1}"
  43. nslcd: DEBUG: CFG: map shadow shadowMin "${shadowMin:--1}"
  44. nslcd: DEBUG: CFG: map shadow shadowMax "${shadowMax:--1}"
  45. nslcd: DEBUG: CFG: map shadow shadowWarning "${shadowWarning:--1}"
  46. nslcd: DEBUG: CFG: map shadow shadowInactive "${shadowInactive:--1}"
  47. nslcd: DEBUG: CFG: map shadow shadowExpire "${shadowExpire:--1}"
  48. nslcd: DEBUG: CFG: map shadow shadowFlag "${shadowFlag:-0}"
  49. nslcd: DEBUG: CFG: bind_timelimit 10
  50. nslcd: DEBUG: CFG: timelimit 0
  51. nslcd: DEBUG: CFG: idle_timelimit 0
  52. nslcd: DEBUG: CFG: reconnect_sleeptime 1
  53. nslcd: DEBUG: CFG: reconnect_retrytime 10
  54. nslcd: DEBUG: CFG: ssl off
  55. nslcd: DEBUG: CFG: tls_reqcert demand
  56. nslcd: DEBUG: CFG: pagesize 0
  57. nslcd: DEBUG: CFG: nss_min_uid 0
  58. nslcd: DEBUG: CFG: nss_nested_groups no
  59. nslcd: DEBUG: CFG: nss_getgrent_skipmembers no
  60. nslcd: DEBUG: CFG: nss_disable_enumeration no
  61. nslcd: DEBUG: CFG: validnames /^[a-z0-9._@$()]([a-z0-9._@$() \~-]*[a-z0-9._@$()~-])?$/i
  62. nslcd: DEBUG: CFG: ignorecase no
  63. nslcd: DEBUG: CFG: cache dn2uid 15m 15m
  64. nslcd: version 0.9.6 starting
  65. nslcd: DEBUG: unlink() of /run/nslcd/socket failed (ignored): No such file or directory
  66. nslcd: DEBUG: initgroups("nslcd",246) done
  67. nslcd: DEBUG: setgid(246) done
  68. nslcd: DEBUG: setuid(101) done
  69. nslcd: accepting connections
  70. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  71. nslcd: [8b4567] DEBUG: connection from pid=2850 uid=0 gid=0
  72. nslcd: [8b4567] <group/member="root"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=root))")
  73. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_initialize(ldap://10.0.0.11/)
  74. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_set_rebind_proc()
  75. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_PROTOCOL_VERSION,3)
  76. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_DEREF,0)
  77. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_TIMELIMIT,0)
  78. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_TIMEOUT,0)
  79. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT,0)
  80. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_REFERRALS,LDAP_OPT_ON)
  81. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_RESTART,LDAP_OPT_ON)
  82. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_simple_bind_s(NULL,NULL) (uri="ldap://10.0.0.11/")
  83. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_result(): end of results (0 total)
  84. nslcd: [8b4567] <group/member="root"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixGroup)(memberUid=root))")
  85. nslcd: [8b4567] <group/member="root"> DEBUG: ldap_result(): end of results (0 total)
  86. nslcd: [7b23c6] DEBUG: connection from pid=27158 uid=0 gid=0
  87. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  88. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  89. nslcd: [7b23c6] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  90. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_initialize(ldap://10.0.0.11/)
  91. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_set_rebind_proc()
  92. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_set_option(LDAP_OPT_PROTOCOL_VERSION,3)
  93. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_set_option(LDAP_OPT_DEREF,0)
  94. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_set_option(LDAP_OPT_TIMELIMIT,0)
  95. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_set_option(LDAP_OPT_TIMEOUT,0)
  96. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT,0)
  97. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_set_option(LDAP_OPT_REFERRALS,LDAP_OPT_ON)
  98. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_set_option(LDAP_OPT_RESTART,LDAP_OPT_ON)
  99. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_simple_bind_s(NULL,NULL) (uri="ldap://10.0.0.11/")
  100. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  101. nslcd: [7b23c6] <passwd="james"> (re)loading /etc/nsswitch.conf
  102. nslcd: [7b23c6] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  103. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  104. nslcd: [3c9869] DEBUG: connection from pid=27158 uid=0 gid=0
  105. nslcd: [3c9869] <group/member="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  106. nslcd: [3c9869] <group/member="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  107. nslcd: [3c9869] <group/member="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixGroup)(|(memberUid=james)(member=uid=james,ou=users,dc=my,dc=example,dc=com)))")
  108. nslcd: [3c9869] <group/member="james"> DEBUG: ldap_result(): end of results (0 total)
  109. nslcd: [334873] DEBUG: connection from pid=27158 uid=0 gid=0
  110. nslcd: [334873] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  111. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  112. nslcd: [334873] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  113. nslcd: [334873] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  114. nslcd: [b0dc51] DEBUG: connection from pid=27158 uid=0 gid=0
  115. nslcd: [b0dc51] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  116. nslcd: [b0dc51] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  117. nslcd: [b0dc51] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  118. nslcd: [495cff] DEBUG: connection from pid=27158 uid=0 gid=0
  119. nslcd: [495cff] <shadow="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=shadowAccount)(uid=james))")
  120. nslcd: [495cff] <shadow="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  121. nslcd: [495cff] <shadow="james"> DEBUG: ldap_result(): end of results (1 total)
  122. nslcd: [e8944a] DEBUG: connection from pid=27158 uid=0 gid=0
  123. nslcd: [e8944a] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  124. nslcd: [e8944a] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  125. nslcd: [e8944a] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  126. nslcd: [5558ec] DEBUG: connection from pid=27158 uid=0 gid=0
  127. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  128. nslcd: [5558ec] <authz="james"> DEBUG: nslcd_pam_authz("james","sshd","","10.0.0.11","ssh")
  129. nslcd: [5558ec] <authz="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  130. nslcd: [5558ec] <authz="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  131. nslcd: [5558ec] <authz="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=shadowAccount)(uid=james))")
  132. nslcd: [5558ec] <authz="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  133. nslcd: [8e1f29] DEBUG: connection from pid=27158 uid=0 gid=0
  134. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  135. nslcd: [8e1f29] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  136. nslcd: [8e1f29] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  137. nslcd: [8e1f29] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  138. nslcd: [e87ccd] DEBUG: connection from pid=27158 uid=0 gid=0
  139. nslcd: [e87ccd] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  140. nslcd: [e87ccd] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  141. nslcd: [e87ccd] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  142. nslcd: [1b58ba] DEBUG: connection from pid=27158 uid=0 gid=0
  143. nslcd: [1b58ba] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  144. nslcd: [1b58ba] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  145. nslcd: [1b58ba] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  146. nslcd: [7ed7ab] DEBUG: connection from pid=27158 uid=0 gid=0
  147. nslcd: [7ed7ab] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  148. nslcd: [7ed7ab] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  149. nslcd: [7ed7ab] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  150. nslcd: [b141f2] DEBUG: connection from pid=27158 uid=0 gid=0
  151. nslcd: [b141f2] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  152. nslcd: [b141f2] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  153. nslcd: [b141f2] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  154. nslcd: [b71efb] DEBUG: connection from pid=27158 uid=0 gid=0
  155. nslcd: [b71efb] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  156. nslcd: [b71efb] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  157. nslcd: [b71efb] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  158. nslcd: [e2a9e3] DEBUG: connection from pid=27158 uid=0 gid=0
  159. nslcd: [e2a9e3] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  160. nslcd: [e2a9e3] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  161. nslcd: [e2a9e3] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  162. nslcd: [45e146] DEBUG: connection from pid=27158 uid=0 gid=0
  163. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  164. nslcd: [45e146] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  165. nslcd: [45e146] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  166. nslcd: [45e146] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  167. nslcd: [5f007c] DEBUG: connection from pid=27158 uid=0 gid=0
  168. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  169. nslcd: [5f007c] <sess_o="james"> DEBUG: nslcd_pam_sess_o("james","sshd","ssh","10.0.0.11",""): kQlRjhzsaaNBTFAtM7eBH6QP
  170. nslcd: [8c895d] DEBUG: connection from pid=27158 uid=0 gid=0
  171. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  172. nslcd: [8c895d] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  173. nslcd: [8c895d] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  174. nslcd: [8c895d] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  175. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  176. nslcd: [3ab105] DEBUG: connection from pid=27163 uid=0 gid=1000
  177. nslcd: [3ab105] <group/member="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  178. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_initialize(ldap://10.0.0.11/)
  179. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_set_rebind_proc()
  180. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_set_option(LDAP_OPT_PROTOCOL_VERSION,3)
  181. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_set_option(LDAP_OPT_DEREF,0)
  182. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_set_option(LDAP_OPT_TIMELIMIT,0)
  183. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_set_option(LDAP_OPT_TIMEOUT,0)
  184. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT,0)
  185. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_set_option(LDAP_OPT_REFERRALS,LDAP_OPT_ON)
  186. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_set_option(LDAP_OPT_RESTART,LDAP_OPT_ON)
  187. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_simple_bind_s(NULL,NULL) (uri="ldap://10.0.0.11/")
  188. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  189. nslcd: [3ab105] <group/member="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixGroup)(|(memberUid=james)(member=uid=james,ou=users,dc=my,dc=example,dc=com)))")
  190. nslcd: [3ab105] <group/member="james"> DEBUG: ldap_result(): end of results (0 total)
  191. nslcd: [1da317] DEBUG: connection from pid=27163 uid=0 gid=1000
  192. nslcd: [1da317] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  193. nslcd: [1da317] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  194. nslcd: [1da317] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  195. nslcd: [43a858] DEBUG: connection from pid=27163 uid=0 gid=1000
  196. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  197. nslcd: [43a858] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  198. nslcd: [43a858] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  199. nslcd: [43a858] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  200. nslcd: [1d5ae9] DEBUG: connection from pid=27158 uid=0 gid=0
  201. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  202. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  203. nslcd: [1d5ae9] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  204. nslcd: [1d5ae9] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  205. nslcd: [1d5ae9] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  206. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  207. nslcd: [63845e] DEBUG: connection from pid=27164 uid=0 gid=1000
  208. nslcd: [63845e] <passwd=1000> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uidNumber=1000))")
  209. nslcd: [63845e] <passwd=1000> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  210. nslcd: [63845e] <passwd=1000> DEBUG: ldap_result(): end of results (1 total)
  211. nslcd: [a2a8d4] DEBUG: connection from pid=27164 uid=0 gid=1000
  212. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  213. nslcd: [a2a8d4] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  214. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  215. nslcd: [a2a8d4] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  216. nslcd: [a2a8d4] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  217. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  218. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  219. nslcd: [edbdab] DEBUG: connection from pid=27164 uid=0 gid=1000
  220. nslcd: [edbdab] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  221. nslcd: [edbdab] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  222. nslcd: [edbdab] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  223. nslcd: [838cb2] DEBUG: connection from pid=27164 uid=0 gid=1000
  224. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  225. nslcd: [838cb2] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  226. nslcd: [838cb2] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  227. nslcd: [838cb2] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  228. nslcd: [53d0cd] DEBUG: connection from pid=27164 uid=0 gid=1000
  229. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  230. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  231. nslcd: [53d0cd] <config=1> DEBUG: nslcd_config_get(1)
  232. nslcd: [03e0c6] DEBUG: connection from pid=27164 uid=0 gid=1000
  233. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  234. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  235. nslcd: [03e0c6] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  236. nslcd: [03e0c6] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  237. nslcd: [03e0c6] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  238. nslcd: [9a769b] DEBUG: connection from pid=27164 uid=0 gid=1000
  239. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  240. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  241. nslcd: [9a769b] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  242. nslcd: [9a769b] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  243. nslcd: [9a769b] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  244. nslcd: [e49eb4] DEBUG: connection from pid=27164 uid=0 gid=1000
  245. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  246. nslcd: [e49eb4] <authc="james"> DEBUG: nslcd_pam_authc("james","passwd","***")
  247. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  248. nslcd: [e49eb4] <authc="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  249. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  250. nslcd: [e49eb4] <authc="james"> DEBUG: myldap_search(base="uid=james,ou=users,dc=my,dc=example,dc=com", filter="(objectClass=*)")
  251. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_initialize(ldap://10.0.0.11/)
  252. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_set_rebind_proc()
  253. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_set_option(LDAP_OPT_PROTOCOL_VERSION,3)
  254. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_set_option(LDAP_OPT_DEREF,0)
  255. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_set_option(LDAP_OPT_TIMELIMIT,0)
  256. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_set_option(LDAP_OPT_TIMEOUT,0)
  257. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT,0)
  258. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_set_option(LDAP_OPT_REFERRALS,LDAP_OPT_ON)
  259. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_set_option(LDAP_OPT_RESTART,LDAP_OPT_ON)
  260. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_sasl_bind("uid=james,ou=users,dc=my,dc=example,dc=com","***") (uri="ldap://10.0.0.11/")
  261. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  262. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_unbind()
  263. nslcd: [e49eb4] <authc="james"> DEBUG: bind successful
  264. nslcd: [e49eb4] <authc="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=shadowAccount)(uid=james))")
  265. nslcd: [e49eb4] <authc="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  266. nslcd: [e49eb4] <authc="james"> uid=james,ou=users,dc=my,dc=example,dc=com: "${shadowLastChange:--1}": need a new password
  267. nslcd: [f32454] DEBUG: connection from pid=27158 uid=0 gid=0
  268. nslcd: [f32454] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  269. nslcd: [f32454] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  270. nslcd: [f32454] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  271. nslcd: [a88611] DEBUG: connection from pid=27158 uid=0 gid=0
  272. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  273. nslcd: [a88611] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  274. nslcd: [a88611] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  275. nslcd: [a88611] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  276. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  277. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  278. nslcd: [36c40e] DEBUG: connection from pid=27158 uid=0 gid=0
  279. nslcd: [36c40e] <sess_c="james"> DEBUG: nslcd_pam_sess_c("james","sshd",kQlRjhzsaaNBTFAtM7eBH6QP)
  280. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  281. nslcd: [901d82] DEBUG: connection from pid=27158 uid=0 gid=0
  282. nslcd: [901d82] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  283. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  284. nslcd: [901d82] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  285. nslcd: [901d82] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  286. nslcd: [95f874] DEBUG: connection from pid=27158 uid=0 gid=0
  287. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  288. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  289. nslcd: [95f874] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  290. nslcd: [95f874] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  291. nslcd: [95f874] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  292. nslcd: [138641] DEBUG: connection from pid=27158 uid=0 gid=0
  293. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  294. nslcd: [138641] <passwd="james"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=james))")
  295. nslcd: [138641] <passwd="james"> DEBUG: ldap_result(): uid=james,ou=users,dc=my,dc=example,dc=com
  296. nslcd: [138641] <passwd="james"> DEBUG: ldap_result(): end of results (1 total)
  297. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  298. nslcd: [7ff521] DEBUG: connection from pid=27173 uid=0 gid=0
  299. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  300. nslcd: DEBUG: accept() failed (ignored): Resource temporarily unavailable
  301. nslcd: [7ff521] <group/member="root"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixAccount)(uid=root))")
  302. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_initialize(ldap://10.0.0.11/)
  303. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_set_rebind_proc()
  304. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_PROTOCOL_VERSION,3)
  305. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_DEREF,0)
  306. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_TIMELIMIT,0)
  307. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_TIMEOUT,0)
  308. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT,0)
  309. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_REFERRALS,LDAP_OPT_ON)
  310. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_set_option(LDAP_OPT_RESTART,LDAP_OPT_ON)
  311. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_simple_bind_s(NULL,NULL) (uri="ldap://10.0.0.11/")
  312. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_result(): end of results (0 total)
  313. nslcd: [7ff521] <group/member="root"> DEBUG: myldap_search(base="dc=my,dc=example,dc=com", filter="(&(objectClass=posixGroup)(memberUid=root))")
  314. nslcd: [7ff521] <group/member="root"> DEBUG: ldap_result(): end of results (0 total)
  315.  
  316. These are my LDAP clients pam.d files.
  317.  
  318. /etc/pam.d/passwd
  319. auth sufficient pam_rootok.so
  320. auth include system-auth
  321. account include system-auth
  322. password include system-auth
  323.  
  324. /etc/pam.d/sshd
  325. auth include system-remote-login
  326. account include system-remote-login
  327. password include system-remote-login
  328. session include system-remote-login
  329.  
  330. /etc/pam.d/system-auth
  331. auth required pam_env.so
  332. auth required pam_unix.so try_first_pass likeauth nullok
  333. auth optional pam_permit.so
  334. auth sufficient pam_ldap.so use_first_pass
  335. account required pam_unix.so
  336. account optional pam_permit.so
  337. account sufficient pam_ldap.so
  338. password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
  339. password required pam_unix.so try_first_pass use_authtok nullok sha512 shadow
  340. password optional pam_permit.so
  341. password sufficient pam_ldap.so use_authtok use_first_pass
  342. session required pam_limits.so
  343. session required pam_env.so
  344. session required pam_unix.so
  345. session optional pam_permit.so
  346. session optional pam_ldap.so
  347.  
  348. /etc/pam.d/system-remote-login
  349. auth include system-login
  350. account include system-login
  351. password include system-login
  352. session include system-login
  353.  
  354. /etc/pamd/system-login
  355. auth required pam_tally2.so onerr=succeed
  356. auth required pam_shells.so
  357. auth required pam_nologin.so
  358. auth include system-auth
  359. account required pam_access.so
  360. account required pam_nologin.so
  361. account include system-auth
  362. account required pam_tally2.so onerr=succeed
  363. password include system-auth
  364. session optional pam_loginuid.so
  365. session required pam_env.so
  366. session optional pam_lastlog.so silent
  367. session include system-auth
  368. session optional pam_motd.so motd=/etc/motd
  369. session optional pam_mail.so
  370.  
  371. /etc/nslcd.conf
  372. uid nslcd
  373. gid nslcd
  374. uri ldap://10.0.0.11
  375. base dc=my,dc=example,dc=com
  376.  
  377. /etc/nsswitch.conf
  378. passwd: files ldap
  379. group: files ldap
  380. shadow: files ldap
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!