Steven Jones wrote:
8><----err=32 means no such object. That is, ou=Group,dc=cognifide,dc=pl does not exist. In your file above, you haveThe log now shows, 8><----- PosixAccount)(uid=root))" attrs=ALL [11/Sep/2007:10:01:01 +1200] conn=200 op=2 RESULT err=32 tag=101 nentries=0 etime=0 [11/Sep/2007:10:01:01 +1200] conn=200 op=2 RESULT err=32 tag=101 nentries=0 etime=0 [11/Sep/2007:10:01:01 +1200] conn=200 op=3 SRCH base="ou=Group,dc=cognifide,dc=pl" scope=2 filter="(&(objectClass=posixGroup)(memberUid=root))" attrs="gidNumber" [11/Sep/2007:10:01:01 +1200] conn=200 op=3 RESULT err=32 tag=101 nentries=0 etime=0 [11/Sep/2007:10:01:01 +1200] conn=200 op=3 RESULT err=32 tag=101 nentries=0 etime=0 [11/Sep/2007:10:01:01 +1200] conn=200 op=-1 fd=67 closed error 104 (Connection reset by peer) - TCP connection reset by peer. So pam is now actually querying the LDAP server it seems, it is not getting it right but it's a small step.suffix "dc=vuw,dc=ac,dc=nz" Do you have ou=Groups,dc=vuw,dc=ac,dc=nz ? I have no idea....I suspect not, need an English explanation on some of this stuff...Fedora has a nice gui but it hides things so trying to determine if the test user is in the right "place" for the external query would seem an issue... Is there a command line syntax to run to see if I get a positive password return?
ldapsearch -x -b dc=vuw,dc=ac,dc=nzWill see if dc=vuw,dc=ac,dc=nz exists and if there is any data there. I'm not sure what you mean by "positive password return".
Regards Steven -- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users