ldap pam active directory login
 

hey, i have ldap configured so it authenticates to active directory. I can do getent passwd and getent group; and get all active directory users and groups. but when i try to login with a user i get the following error:

[root@server~]# ssh test@localhost
test@localhost's password:correctpassword
Permission denied, please try again.

What is going wrong?

I checked /var/log/messages:

ay 20 10:45:16 server sshd(pam_unix)[6776]: session opened for user Orange1 by (uid=0)
May 20 10:49:31 server sshd(pam_unix)[6810]: check pass; user unknown
May 20 10:49:31 server sshd(pam_unix)[6810]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=server
May 20 10:50:14 server sshd(pam_unix)[6813]: check pass; user unknown
May 20 10:50:14 server sshd(pam_unix)[6813]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.246.70.122
May 20 10:50:21 server sshd(pam_unix)[6813]: check pass; user unknown
May 20 10:50:39 server sshd(pam_unix)[6813]: 1 more authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.246.70.122
May 20 10:53:05 server sshd(pam_unix)[6830]: check pass; user unknown
May 20 10:53:05 server sshd(pam_unix)[6830]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=server

Help?