ldap pam.d (vyřešeno)

Zdravim, snazim se ve virtualizaci rozbehat ldap. Chtel bych, aby pam.d roota, ktereho ma v ldapu dokazal overit, pri prihlaseni k systemu. LDAP by mel byt rozjetej:

getent shadow | grep root
root:$6$CHzRwF.A$ClFrJjWAW7FFt9rgGL90P8G7k.FOdktYHkl4iX4NUaFF/voHW/As0VUnHh635dZE6pQAB8KgLIJwQR8CVUGKC0:15743::99999:7:::0
root:$6$CHzRwF.A$ClFrJjWAW7FFt9rgGL90P8G7k.FOdktYHkl4iX4NUaFF/voHW/As0VUnHh635dZE6pQAB8KgLIJwQR8CVUGKC0:15743:0:99999:7:::

ldapsearch -x -b "dc=xxx,dc=tld" "uid=root"
# extended LDIF
#
# LDAPv3
# base dc=zdenek,dc=tld> with scope subtree
# filter: uid=root
# requesting: ALL
#

# root, People, zdenek.tld
dn: uid=root,ou=People,dc=zdenek,dc=tld
uid: root
cn: root
sn: root
mail: root@zdenek.tld
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
userPassword:: e2NyeXB0fSQ2JENIelJ3Ri5BJENsRnJKaldBVzdGRnQ5cmdHTDkwUDhHN2suRk9
 ka3RZSGtsNGlYNE5VYUZGL3ZvSFcvQXMwVlVuSGg2MzVkWkU2cFFBQjhLZ0xJSndRUjhDVlVHS0Mw
shadowLastChange: 15743
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 0
gidNumber: 0
homeDirectory: /root
gecos: root

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

/etc/pam.d/common-account
#account	[success=2 new_authtok_reqd=done default=ignore]	pam_unix.so 
account	[success=1 default=ignore]	pam_ldap.so 
account	requisite			pam_deny.so
account	required

pam_permit.so

/etc/pam.d/common-auth
#auth	[success=2 default=ignore]	pam_unix.so nullok_secure
auth	[success=1 default=ignore]	pam_ldap.so use_first_pass
auth	requisite			pam_deny.so
auth	required			pam_permit.so

Z logu vyctu jen:

Feb 18 19:59:58 raw sshd[862]: pam_ldap: error trying to bind (Invalid credentials)
Feb 18 19:59:58 raw sshd[862]: Failed password for root from 192.168.0.10 port 53243 ssh2

Dotaz: ldap pam.d

Odpovědi