OpenLDAP/Debian passwd: User not known to the underlying authentication module

t0bias · 03-04-2010, 06:54 PM

Hi,

I am trying to set up a ldap-server but when I try to change the password for a user I get the error:
"User not known to the underlying authentication module".

In /var/log/auth appears:

Code:

pam_unix(passwd:chauthtok): user "tobias" does not exist in /etc/passwd

but "id tobias" gives:
uid=10000(tobias) gid=10000(staff)

/etc/pam.d/common-account:

Code:

account sufficient    pam_ldap.so
account    required    pam_unix.so use_first_pass

/etc/pam.d/common-auth:

Code:

auth    sufficient    pam_ldap.so
auth    required    pam_unix.so nullok_secure use_first_pass

/etc/pam.d/common-password:

Code:

password   sufficient   pam_ldap.so
password   required     pam_unix.so use_first_pass nullok obscure md5

/etc/pam.d/common-session:

Code:

session sufficient    pam_ldap.so
session    required    pam_unix.so

any ideas?

thanks,

Tobias

acid_kewpie · 03-05-2010, 12:35 PM

how well is /etc/ldap.conf set up? does "getent passwd" work OK? Its a different use of the configuration data, but does prove it to a reasonable extent.