Gary, here's the output from /var/adm/messages: Aug 30 16:17:38 unknown last message repeated 1 time Aug 30 16:17:38 unknown sshd[1354]: [ID 800047 auth.error] error: PAM: Authentication failed for testdba from cnyitsun01.composers.foo.com Aug 30 16:17:39 unknown sshd[1354]: [ID 316739 auth.error] pam_ldap: no legal authentication method configured What does that mean? I took the pam.conf from the website you gave me and commented out the lines, like you said: login auth requisite pam_authtok_get.so.1 debug login auth required pam_dhkeys.so.1 debug #login auth required pam_unix_cred.so.1 debug login auth required pam_dial_auth.so.1 debug login auth binding pam_unix_auth.so.1 server_policy debug login auth required pam_ldap.so.1 debug Also: bash-2.03# getent passwd testdba testdba::10001:7000::/home/testdba:/bin/bash sshd -d is totally silent. No output after startup: bash-2.03# /usr/local/sbin/sshd -d debug1: sshd version OpenSSH_3.9p1 debug1: read PEM private key done: type RSA debug1: private host key: #0 type 1 RSA debug1: read PEM private key done: type RSA debug1: private host key: #1 type 1 RSA debug1: read PEM private key done: type DSA debug1: private host key: #2 type 2 DSA Disabling protocol version 1. Could not load host key debug1: rexec_argv[0]='/usr/local/sbin/sshd' debug1: rexec_argv[1]='-d' debug1: Bind to port 22 on ::. Server listening on :: port 22. debug1: Bind to port 22 on 0.0.0.0. Server listening on 0.0.0.0 port 22. debug1: fd 5 clearing O_NONBLOCK debug1: Server will not fork when running in debugging mode. debug1: rexec start in 5 out 5 newsock 5 pipe -1 sock 10 --- "Tay, Gary" <Gary_Tay at platts.com> wrote: > What is the output of "id testdba" and "getent passwd testdba"? > > To use ldap auth for SSH Server, you must set these lines in /etc/ssh/sshd_config: > > PasswordAuthentication yes > ChallengeResponseAuthentication yes > UsePAM yes Yep, changed that! Still (from the remote machine): cnyitsun01/ > ssh testdba at 192.85.86.87 Password: LDAP Password: Password: LDAP Password: And it never lets me in. ____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs
