We are using an AIX ldap server with both Linux and AIX clients. The error ONLY happens when the Linux clients login. "id: cannot find name for user ID 2110". This only happens with the ldap user and NOT root or local accounts.

If the same user logs in to an AIX server, it works without any issues.

I have checked permissions in nsswitch.conf, ldap.conf and they are 644. I inherited this setup and the AIX administrator did as well. He doesn't know much about ldap and neither do it so trying to figure it out as I go. I also have a ticket with Redhat but they're not helping much. The other gotcha is there isn't any logging on the AIX server.

It seems like a permissions issue but don't know where.

Any help would be greatly appreciated.

why does it seem like a permissions issue? What makes you say that?

what does a "getent passwd 2110" say? what about just a "getent passwd"?

As root:
getent passwd | grep con21084
con21084:x:2110:1:Mike Murphy - FPP:/home/con21084:/usr/bin/ksh

As con21084
getent passwd | grep con21084
$

It only lists the local accounts on the server and this is not a local account.

Hmmm ... what version of Linux are you using? How is LDAP authentication set up (i.e. are you using pam_ldap, nslcd, or something like sssd)? What happens when you run "ldapsearch -x" as both a normal user and as root?

It looks to me like there's some sort of issue binding to the LDAP server as an unprivileged user, but you'd have to hunt through how the LDAP is configured to figure out what it is. Also, there's potentially a version mismatch between the client and the server. Do you know if the AIX server is running OpenLDAP, or something proprietary from IBM?

The ldap server is running IBM Directory Server 6.0.

right, and what about the other things btmiller asked?

# @(#)$Id: ldap.conf,v 1.38 2006/05/15 08:13:31 lukeh Exp $
#
# This is the configuration file for the LDAP nameservice
# switch library and the LDAP PAM module.
#
# The man pages for this file are nss_ldap(5) and pam_ldap(5)
#
# PADL Software
# http://www.padl.com

what's that for?