> > dn: cn=PAM Pass Through Auth,cn=plugins,cn=config > objectClass: top > objectClass: nsSlapdPlugin > objectClass: extensibleObject > objectClass: pamConfig > cn: PAM Pass Through Auth > nsslapd-pluginPath: libpam-passthru-plugin > nsslapd-pluginInitfunc: pam_passthruauth_init > nsslapd-pluginType: betxnpreoperation > nsslapd-pluginEnabled: on > nsslapd-pluginloadglobal: true > nsslapd-plugin-depends-on-type: database > pamMissingSuffix: ALLOW > pamExcludeSuffix: cn=config > pamIncludeSuffix: ou=Internal Users,ou=people,dc=lab,dc=com > pamIDMapMethod: RDN ENTRY > pamIDAttr: uid > pamFallback: FALSE > pamSecure: FALSE > pamService: ldapserver > nsslapd-pluginId: pam_passthruauth > nsslapd-pluginVersion: 1.4.4.11 > nsslapd-pluginVendor: 389 Project > nsslapd-pluginDescription: PAM pass through authentication plugin > modifiersName: cn=directory manager > modifyTimestamp: 20211126222824Z > > EXAMPLE OF AD SYNCED USER(as you can see nsAccount is not present): > > 36 uid=test.user10,ou=testsync,dc=lab,dc=com > objectclass: top > objectclass: person > objectclass: organizationalperson > objectclass: inetOrgPerson > objectclass: ntUser > ntUserDeleteAccount: true > uid: test.user10 > sn: User 10 > givenName: Test > cn: Test User 10 > ntUserCodePage: 0 > ntUserAcctExpires: 9223372036854775807 > ntUserDomainId: test.user10 > ntUniqueId: 9658f59ce2a1d54cbeacb783c12a6de3 > Hi there, I've recreated this setup and I have it working for me. Can you show the content of /etc/pam.d/ldapserver and the config of the relevant pam services that it connects to? It's likely a pam or auth service misconfiguration I think. -- Sincerely, William Brown Senior Software Engineer, Identity and Access Management SUSE Labs, Australia _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
