Hi guys,

I'm using FC5. I have ldap authentication setup and working.

The problem is that no domain users can use the floppy drive or cdrom drive on any of the machines.

Local root user can use both of these drives.

All I get when I try to access them from 'computer' is:

Error: cannot mount volume.

Any ideas?

Thanks,

Chris

Probably just because the ordinary users have insufficient privileges. Try modifying /etc/group and adding some user to the appropriate group, say "cdrom", and see if that user then can use the cdrom; you might also need to deal with udev config so udev gives permissions to groups, and then assign users to those groups.

I myself had a similar problem (though I'm not using ldap) on Ubuntu 6.06 after adding users, and it proved that I only needed to add the users to the groups "cdrom" and "floppy" to get them working. So that's probable, but not completely sure.

b0uncer,

Firstly, thanks for your reply.

I had tried adding users to groups using the group.so plugin for pam. This however proved unsuccessful, even to the point where I added the users to the root group as well as floppy and cdrom.

I have just discovered what the problem is however. The fact that the 'cn' for the user contained a capital letter! I am unsure as to why this would cause this problem, but I suppose a linux username does not contain any capital letters either, so it makes sense that the AD logon cannot either.

This now works for all users that I have modified their AD logon details to be lowercase.

Many thanks,

-Chris

Good you got it working. Linux at least makes difference between capital letters and non-capital letters, Windows does not in all situations, but does in some; this could create problems. It's a good idea to have capitals and non-capitals in username, as it is with numbers, special letters, spaces etc., but if you're dealing with some other OS/environment than that of your own, I suggest using only lowercase passwords so you can be sure they work everywhere.

Yet that sounds odd to me too, but this isn't a perfect world.

By the way; my own AD logon name (on Windows) does contain capitals and it works so I wonder why it wouldn't accept them from Linux?