Re: [389-users] SSH AllowGroups and LDAP authentication

"Morris, Patrick" <patrick.morris@xxxxxx> · Mon, 08 Nov 2010 10:43:15 -0800



    On 11/8/2010 8:56 AM, Allan Hougham wrote:
    
      I need help with this issue, I setting sshd_config with
      "AllowGroups" but I can´t authenticate with LDAP, the groups are
      settings up, this is my configuration:

      Do you have any tutorial or guide for setting ssh authentication
      groups with LDAP?

      This is the mistake, but the user ahougham is in "Search Group"

       
      [root@ds03 log]# tail -f secure

      Nov  6 04:09:33 ds03 sshd[7055]: User ahougham from 10.10.38.27
      not allowed because none of user's groups are listed in
      AllowGroups

    
    Assuming your system is set up to use LDAP groups (usually via PAM,
    so make sure SSH is configured to use PAM), you don't need to do
    anything special to use AllowGroups.

    
    What does "groups ahougham" show on that box? Is that user in an
    allowed group?

  
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users