I believe my problem is related to this thread but the point of failure seems to be whether the host can reverse lookup the client. In a nutshell: I can telnet (logind) to the host as long as the client has a reverse lookup. The really odd thing here is I can rlogin using LDAP with OR without the reverse map. I'm using the pam.d from the nss_ldap package in RH6.2. The problem seems pretty consistent. I've played around a bit trying pam_pwdb vs pam_unix but confess that as of this point I have not delved into the details. Even when the login fails, the ldap logs show a successful lookup. Any help appreciated, -- <=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=++=+=+=> Edwin Whitelaw Principal Engineer - Networking General Dynamics Advanced Technology Systems Phone: (336) 698-8396
begin:vcard n:Whitelaw;Edwin tel;pager:(888) 489-6460 tel;work:(336) 698-8396 x-mozilla-html:FALSE org:General Dynamics Advanced Technology Systems adr:;;5440 Millstream Road;McLeansville;NC;27301; version:2.1 email;internet:ewhitelaw@gdats.com title:Member Technical Staff x-mozilla-cpt:;23072 fn:Edwin Whitelaw end:vcard