This is occurring at login, before the user-specific path is set. (At least, I hope we're waiting for authentication before setting the user's path!) So, the relevant path is the one built into sshd at compile time, and reported in /etc/ssh/sshd_config, right?[1] That's just /usr/local/bin:/bin:/usr/bin. I took at shot at "ps faux" to see if I could find any child processes invoked by sshd to test the ldap authentication. I didn't catch anything. "getent passwd" as root on these hosts does return the LDAP based users. So, I can see at least that much of the RHDS. So, I know the server is visible and talking to these hosts. Thanks! David [1] - http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1307470719578+28353475&threadId=686313 On Tue, June 7, 2011 10:49, crashingdaily wrote: > Oracle includes its own LDAP client and libs whose syntax is different > from OpenLDAP's. Is $ORACLE_HOME/bin/ earlier in your $PATH than / > usr/bin ? > > On Jun 7, 2011, at 1:38 PM, David Barr wrote: > >> Good Morning! >> >> Take 30 hosts, all with identical >> >> /etc/nsswitch.conf >> /etc/ldap.conf >> /etc/ssh/ssh_config >> /etc/ssh/sshd_config >> /etc/auto.master and subsidiary files >> >> The only two hosts where LDAP authentication fails are the two Oracle >> servers. All are running on the same RHEL 5.4. >> >> Anyone seen anything like this, before? >> >> Thanks! >> David -- David - Offbeat http://dafydd.livejournal.com dafydd - Online http://pgp.mit.edu/ Battalion 4 - Black Rock City Emergency Services Department Integrity*Commitment*Communication*Support -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users