8><----
The log now shows,
8><-----
PosixAccount)(uid=root))" attrs=ALL
[11/Sep/2007:10:01:01 +1200] conn=200 op=2 RESULT err=32 tag=101
nentries=0 etime=0
[11/Sep/2007:10:01:01 +1200] conn=200 op=2 RESULT err=32 tag=101
nentries=0 etime=0
[11/Sep/2007:10:01:01 +1200] conn=200 op=3 SRCH
base="ou=Group,dc=cognifide,dc=pl" scope=2
filter="(&(objectClass=posixGroup)(memberUid=root))"
attrs="gidNumber"
[11/Sep/2007:10:01:01 +1200] conn=200 op=3 RESULT err=32 tag=101
nentries=0 etime=0
[11/Sep/2007:10:01:01 +1200] conn=200 op=3 RESULT err=32 tag=101
nentries=0 etime=0
[11/Sep/2007:10:01:01 +1200] conn=200 op=-1 fd=67 closed error 104
(Connection reset by peer) - TCP connection reset by peer.
So pam is now actually querying the LDAP server it seems, it is not
getting it right but it's a small step.
err=32 means no such object. That is, ou=Group,dc=cognifide,dc=pl does
not exist. In your file above, you have
suffix "dc=vuw,dc=ac,dc=nz"
Do you have ou=Groups,dc=vuw,dc=ac,dc=nz ?
I have no idea....I suspect not, need an English explanation on some of
this stuff...Fedora has a nice gui but it hides things so trying to
determine if the test user is in the right "place" for the external
query would seem an issue...
Is there a command line syntax to run to see if I get a positive
password return?
Regards
Steven