SEO

I have Red Hat Enterprise Edition Version 4 running. I have a Windows
2003 Active Directory server for LDAP. The problem comes when I try to
login via GDM with an Acitive Directory account. I get an
Authenticaion Failed error message. The only accounts I can login via
GDM are local accounts. I can telnet/SSH with my LDAP account and
everything works fine. Below are error messages from /var/log/messages
and the /etc/pam.d/ config files of interet:

So, I'm using either local accounts from /etc/passwd or LDAP accounts
authenticated via kerberos.

Any thoughts?
Thanks
Scott
scottiecs@gmail.com


/var/log/# tail -f messages

Mar 7 23:26:04 svlsvr3 telnetd[1010]: ttloop: peer died: Invalid or
incomplete multibyte or wide character
Mar 7 23:26:06 svlsvr3 gdm[1011]: pam_krb5[1011]: error resolving user
name 'ssullivan' to uid/gid pair
Mar 7 23:26:06 svlsvr3 gdm[1011]: pam_krb5[1011]: error getting
information about 'ssullivan'
Mar 7 23:26:11 svlsvr3 gdm(pam_unix)[1011]: check pass; user unknown
Mar 7 23:26:11 svlsvr3 gdm(pam_unix)[1011]: authentication failure;
logname= uid=0 euid=0 tty=10.44.11.100:0 ruser= rhost=10.44.11.100
Mar 7 23:26:14 svlsvr3 gdm-binary[1011]: Couldn't authenticate user


[root@svlsvr3 pam.d]# more gdm
#%PAM-1.0
auth sufficient /lib/security/pam_krb5.so
auth required /lib/security/pam_unix.so
try_first_pass
auth required /lib/security/pam_env.so
account sufficient /lib/security/pam_krb5.so
account required /lib/security/pam_unix.so
session sufficient /lib/security/pam_krb5.so
session required /lib/security/pam_unix.so
password sufficient /lib/security/pam_krb5.so
password required /lib/security/pam_unix.so


[root@svlsvr3 pam.d]# more system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
#auth required /lib/security/$ISA/pam_env.so
auth sufficient /lib/security/$ISA/pam_unix.so try_first_pass
auth sufficient /lib/security/$ISA/pam_krb5.so
auth required /lib/security/$ISA/pam_deny.so

account required /lib/security/$ISA/pam_unix.so
account sufficient /lib/security/$ISA/pam_krb5.so
#account [default=bad success=ok user_unknown=ignore]
/lib/security/$ISA/pam_krb5.so
account required /lib/security/$ISA/pam_permit.so

password sufficient /lib/security/$ISA/pam_unix.so
password sufficient /lib/security/$ISA/pam_krb5.so
password required /lib/security/$ISA/pam_deny.so

session required /lib/security/$ISA/pam_unix.so
session optional /lib/security/$ISA/pam_krb5.so


[root@svlsvr3 pam.d]# more login
#%PAM-1.0
auth sufficient /lib/security/pam_krb5.so
auth required /lib/security/pam_unix.so
try_first_pass
account sufficient /lib/security/pam_krb5.so
account required /lib/security/pam_unix.so
session sufficient /lib/security/pam_krb5.so
session required /lib/security/pam_unix.so
password sufficient /lib/security/pam_krb5.so
password required /lib/security/pam_unix.so

scottiecs@gmail.com wrote:

> I have Red Hat Enterprise Edition Version 4 running. I have a Windows
> 2003 Active Directory server for LDAP. The problem comes when I try to
> login via GDM with an Acitive Directory account. I get an
> Authenticaion Failed error message. The only accounts I can login via
> GDM are local accounts. I can telnet/SSH with my LDAP account and
> everything works fine. Below are error messages from /var/log/messages
> and the /etc/pam.d/ config files of interet:
>
> So, I'm using either local accounts from /etc/passwd or LDAP accounts
> authenticated via kerberos.
>
> Any thoughts?
> Thanks
> Scott
> scottiecs@gmail.com
>
>
> /var/log/# tail -f messages
>
> Mar 7 23:26:04 svlsvr3 telnetd[1010]: ttloop: peer died: Invalid or
> incomplete multibyte or wide character
> Mar 7 23:26:06 svlsvr3 gdm[1011]: pam_krb5[1011]: error resolving user
> name 'ssullivan' to uid/gid pair
> Mar 7 23:26:06 svlsvr3 gdm[1011]: pam_krb5[1011]: error getting
> information about 'ssullivan'
> Mar 7 23:26:11 svlsvr3 gdm(pam_unix)[1011]: check pass; user unknown
> Mar 7 23:26:11 svlsvr3 gdm(pam_unix)[1011]: authentication failure;
> logname= uid=0 euid=0 tty=10.44.11.100:0 ruser= rhost=10.44.11.100
> Mar 7 23:26:14 svlsvr3 gdm-binary[1011]: Couldn't authenticate user
>
>
> [root@svlsvr3 pam.d]# more gdm
> #%PAM-1.0
> auth sufficient /lib/security/pam_krb5.so
> auth required /lib/security/pam_unix.so
> try_first_pass
> auth required /lib/security/pam_env.so
> account sufficient /lib/security/pam_krb5.so
> account required /lib/security/pam_unix.so
> session sufficient /lib/security/pam_krb5.so
> session required /lib/security/pam_unix.so
> password sufficient /lib/security/pam_krb5.so
> password required /lib/security/pam_unix.so
>
>
> [root@svlsvr3 pam.d]# more system-auth
> #%PAM-1.0
> # This file is auto-generated.
> # User changes will be destroyed the next time authconfig is run.
> #auth required /lib/security/$ISA/pam_env.so
> auth sufficient /lib/security/$ISA/pam_unix.so try_first_pass
> auth sufficient /lib/security/$ISA/pam_krb5.so
> auth required /lib/security/$ISA/pam_deny.so
>
> account required /lib/security/$ISA/pam_unix.so
> account sufficient /lib/security/$ISA/pam_krb5.so
> #account [default=bad success=ok user_unknown=ignore]
> /lib/security/$ISA/pam_krb5.so
> account required /lib/security/$ISA/pam_permit.so
>
> password sufficient /lib/security/$ISA/pam_unix.so
> password sufficient /lib/security/$ISA/pam_krb5.so
> password required /lib/security/$ISA/pam_deny.so
>
> session required /lib/security/$ISA/pam_unix.so
> session optional /lib/security/$ISA/pam_krb5.so
>
>
> [root@svlsvr3 pam.d]# more login
> #%PAM-1.0
> auth sufficient /lib/security/pam_krb5.so
> auth required /lib/security/pam_unix.so
> try_first_pass
> account sufficient /lib/security/pam_krb5.so
> account required /lib/security/pam_unix.so
> session sufficient /lib/security/pam_krb5.so
> session required /lib/security/pam_unix.so
> password sufficient /lib/security/pam_krb5.so
> password required /lib/security/pam_unix.so
>
maybe it is a unicode vs i18n issue.
--
JosephKK
Gegen dummheit kampfen die Gotter Selbst, vergebens.
--Schiller