openssh Match block support for Ldap? Centos 5.3

whit_wolf1 · 09-13-2010, 01:57 PM

I am having some issues with opensshd ive recompiled with 5.6p1 on centos so that it supports Match Blocks.

I would like it so that only certain users can use passwords and others only keys mind you this is all ldap authentication

here is my config:

Code:

UsePAM no
PasswordAuthentication no
PermitRootLogin no
Match Group thesshgroup
    X11Forwarding no
    AllowTCPForwarding yes
    PasswordAuthentication yes

But when I go to login it fails like it is having issues looking up the user name in ldap I have enabled UsePam and was successful with a local user but I would like to use ldap.

Any ideas?

prayag_pjs · 10-14-2010, 07:04 AM

Can you post output of

tail -f /var/log/secure

fiku · 10-14-2010, 08:23 AM

post also the output of

Code:

getent group thesshgroup

and

Code:

id the_user_in_thesshgroup