[SSSD] sssd can't get shadow information from ldap

Stephen Gallagher sgallagh at redhat.com
Fri Nov 18 13:17:22 UTC 2011


On Fri, 2011-11-18 at 15:10 +0200, Aziz Sasmaz wrote:
> I started the sssd with debug level 7. 
> When ldap is online i logged into the system. 
> I shut down the ldap server and tried to log in, but it was
> unsuccessfull.
> 
> 
> I am sending the debug file.



(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[be_pam_handler] (4): Got request with the following data
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): command: PAM_AUTHENTICATE
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): domain: ldaptest.jazzythemartian.com
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): user: aziz
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): service: sshd
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): tty: ssh
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): ruser: 
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): rhost: 172.16.50.48
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): authtok type: 1
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): authtok size: 0
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): newauthtok type: 0
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): newauthtok size: 0
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): priv: 0
(Fri Nov 18 14:58:47 2011) [sssd[be[ldaptest.jazzythemartian.com]]]
[pam_print_data] (4): cli_pid: 31489


According to this, you're sending a zero-length password to log in.
That's not going to work, and should never work.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111118/318d448d/attachment.sig>


More information about the sssd-devel mailing list