Hi List!
Ldapsearch returns data from "Fedora-DS" but
"getent group/passwd" and "id user"
commands can not get them. They just can get data from "/etc/passwd" and
"/etc/group".
What is
wrong?
Please, can someone help me?
Agnaldo
P.S.: Some configuration files
#
/etc/pam.d/system-auth
####################
#%PAM-1.0
# This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required /lib/security/$ISA/pam_env.so auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok auth sufficient /lib/security/$ISA/pam_ldap.so use_first_pass auth required /lib/security/$ISA/pam_deny.so account
required /lib/security/$ISA/pam_unix.so
broken_shadow
account sufficient /lib/security/$ISA/pam_succeed_if.so uid < 100 quiet account [default=bad success=ok user_unknown=ignore] /lib/security/$ISA/pam_ldap.so account required /lib/security/$ISA/pam_permit.so password
requisite /lib/security/$ISA/pam_cracklib.so
retry=3
password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok md5 shadow password sufficient /lib/security/$ISA/pam_ldap.so use_authtok password required /lib/security/$ISA/pam_deny.so session
required
/lib/security/$ISA/pam_limits.so
session required /lib/security/$ISA/pam_unix.so session optional /lib/security/$ISA/pam_ldap.so #
/etc/nsswitch.conf
################# passwd: files
ldap
shadow: files ldap group: files ldap hosts: files
dns
bootparams:
files
ethers: files netmasks: files networks: files protocols: files ldap rpc: files services: files ldap netgroup: files ldap publickey: files automount: files ldap aliases: files # ldap.conf
#########
host 192.168.2.3
base dc=sei,dc=intranet
bindpw passwd
rootbinddn cn=Directory
Manager,dc=sei,dc=intranet
timelimit 50 pam_lookup_policy yes nss_base_passwd
ou=People,dc=sei,dc=intranet?one
nss_base_shadow ou=People,dc=sei,dc=intranet?one nss_base_group ou=Groups,dc=sei,dc=intranet?one pam_password exop ssl off # /etc/pam.d/login
################ #%PAM-1.0
auth required pam_securetty.so auth required pam_stack.so service=system-auth auth required pam_nologin.so #auth sufficient /lib/security/pam_ldap.so use_first_pass #account sufficient /lib/security/pam_ldap.so account sufficient pam_stack.so service=system-auth password required pam_stack.so service=system-auth # pam_selinux.so close should be the first session rule # session required pam_selinux.so close session required pam_stack.so service=system-auth session required pam_loginuid.so session optional pam_console.so # pam_selinux.so open should be the last session rule # session required pam_selinux.so open [root@netuno1 ~]# strings
/lib/libnss_ldap.so.2 | grep
conf
_nss_ldap_readconfig _nss_ldap_readconfigfromdns _nss_ldap_init_config sysconf -conf /etc/ldap.conf /etc/openldap/ldap.conf version conflict in sasl_client_add_plugin for %s %.*s%c%s.conf auth-conf DB environment not configured for transactions Database environment not configured for encryption %s interface requires an environment configured for the %s subsystem DB_ENV->set_lk_conflicts Environment not configured as replication master or client an index not configured to support duplicates Primary databases may not be configured with duplicates ssl session id conflict confounded by authenticator. configuration file routines id-it-confirmWaitTime id-cmc-confirmCertAcceptance no sign function configured no verify function configured no config database X509V3_EXT_conf no conf no conf or environment variable conflicting engine id v3_conf.c conf_lib.c conf_api.c conf_def.c /etc/krb5.conf:/etc/krb5.conf Can't open/find Kerberos configuration file Improper format of Kerberos configuration file No supported encryption types (config file error?) |
-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users