Login or Register to Ask a Question and Join Our Community


AIX

LDAP user authentication issue

 
Thread Tools Search this Thread
Operating Systems AIX LDAP user authentication issue
Prev   Next
# 1  
Old 11-09-2009
LDAP user authentication issue
Hello everyone, hoping you can provide some incite with a little problem I'm having..

I have the LDAP client configured and running on my AIX 5.3 server, which is authenticating against an eDirectory LDAP server. I can login via LDAP no problems on the AIX server with newly created users, however I can't get existing local AIX users switched over and logged in via LDAP.

I issue the following: chuser SYSTEM=LDAP registry=LDAP username and try to login in with that user via putty and get a message stating "server unexpectedly closed network connection".

However, if I first login with a local user, then su to the user via LDAP it authenticates successfully, so it appears there is something not right with just the initial login, ideas?
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Emergency UNIX and Linux Support

LDAP and AD Authentication Query

Hi Friends, I have below scenarios . dom1.test.com - LDAP dom2.test.com - AD Requirement is establish a trust relation between LDAP and AD server in such a way that if any user login on LDAP managed authentication server with dom1\username -> get authenticated by LDAP host ... (2 Replies)
Discussion started by: Shirishlnx
2 Replies

2. AIX

LDAP authentication client issue

Hi, I am trying to authenticate AIX server against a IDS LDAP instance. The AIX version is 6.1 and TDS client is 6.1. I configured the secldapclntd using ldap.cfg file and changed /etc/security/user to set SYSTEM=LDAP, registry=LDAP for one user. Below are the ldap.cfg configurations - ... (5 Replies)
Discussion started by: vs1
5 Replies

3. AIX

LDAP authentication

Hi, We are trying to use LDAP to authenticate the login from our application. Our application is installed on AIX 6.1 and LDAP server is on active directory windows 2003. We are getting the below error when we try to login. We have the required lib file in the path it is looking for. Any idea... (3 Replies)
Discussion started by: Nand1010_MA
3 Replies

4. Debian

webdav share per user ldap authentication

hi all, i have configured Apache with WEBDAV & my aim is sharing outlook calendars because we don't use M$ ExChange. From outlook i did a simple test & am able to share a calendar. I want to create share for each user & then authenticate against LDAP before they can publish their... (0 Replies)
Discussion started by: coolatt
0 Replies

5. Solaris

Iplanet LDAP User Authentication on Solaris

Dear Friends, I have recently installed iplanet directory server on my Solaris 10 machine.I was able to successfully install and configure ldap on my system.Furthermore, was also able to add user entries to the LDAP database server.But now I am finding it difficult to authenticate LDAP users... (1 Reply)
Discussion started by: raunaqnilekani
1 Replies

6. Solaris

LDAP authentication

Hi folks, i have opends 1.2 manually installed subversion 1.4.3 and apache2 updated by package manager. i want to access svn using LDAP authentication its giving an error: ldap_simple_bind_s() failed. what could be the problem. i wrote some text at the end of httpd.conf fpr ldap... (2 Replies)
Discussion started by: visu_buri
2 Replies

7. UNIX for Advanced & Expert Users

LDAP Authentication AND Authorization

I see a lot of thread on LDAP Authentication but I want to enable LDAP Authentication with Authorization. Meaning, removing the user ID's and groups from the local servers and move them to an LDAP server. When a user logs in (via LDAP) they will be given their group memberships and access to the... (3 Replies)
Discussion started by: scottsl
3 Replies

8. Cybersecurity

LDAP authentication question

Hello, I have a Linux box with RHEL4 running on it. The box is meant to be on the DMZ. There is a directory on the box that will be remotely from time to time and I want a form of authentication on it. Presently, I have configured Basic authentication with apache but the security is not tight. I... (1 Reply)
Discussion started by: bptronics
1 Replies

9. Linux

LDAP authentication question

Hello, I have a Linux box with RHEL4 running on it. The box is meant to be on the DMZ. There is a directory on the box that will be remotely from time to time and I want a form of authentication on it. Presently, I have configured Basic authentication with apache but the security is not tight. I... (1 Reply)
Discussion started by: bptronics
1 Replies

10. Shell Programming and Scripting

Module for LDAP Authentication

Hello Everyone, I have enabled LDAP authentication on my Web script by adding the list of valid users in /etc/apach2/default-server.conf. However, I now want to retrieve the username of the person that logs in. How can I do that? Is there any such module? Regards, Harsha (0 Replies)
Discussion started by: garric
0 Replies
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

ocf_heartbeat_edir88

OCF_HEARTBEAT_EDIR88(7) 					OCF resource agents					   OCF_HEARTBEAT_EDIR88(7)

NAME

       ocf_heartbeat_eDir88 - Manages a Novell eDirectory directory server

SYNOPSIS

       eDir88 [start | stop | monitor | meta-data | validate-all]

DESCRIPTION

       Resource script for managing an eDirectory instance. Manages a single instance of eDirectory as an HA resource. The "multiple instances"
       feature or eDirectory has been added in version 8.8. This script will not work for any version of eDirectory prior to 8.8. This RA can be
       used to load multiple eDirectory instances on the same host.

       It is very strongly recommended to put eDir configuration files (as per the eDir_config_file parameter) on local storage on each node. This
       is necessary for this RA to be able to handle situations where the shared storage has become unavailable. If the eDir configuration file is
       not available, this RA will fail, and heartbeat will be unable to manage the resource. Side effects include STONITH actions, unmanageable
       resources, etc...

       Setting a high action timeout value is _very_ _strongly_ recommended. eDir with IDM can take in excess of 10 minutes to start. If heartbeat
       times out before eDir has had a chance to start properly, mayhem _WILL ENSUE_.

       The LDAP module seems to be one of the very last to start. So this script will take even longer to start on installations with IDM and LDAP
       if the monitoring of IDM and/or LDAP is enabled, as the start command will wait for IDM and LDAP to be available.

SUPPORTED PARAMETERS

       eDir_config_file
	   Path to configuration file for eDirectory instance.	(unique, optional, string, default /etc/opt/novell/eDirectory/conf/nds.conf)

       eDir_monitor_ldap
	   Should we monitor if LDAP is running for the eDirectory instance?  (optional, boolean, default 0)

       eDir_monitor_idm
	   Should we monitor if IDM is running for the eDirectory instance?  (optional, boolean, default 0)

       eDir_jvm_initial_heap
	   Value for the DHOST_INITIAL_HEAP java environment variable. If unset, java defaults will be used.  (optional, integer, no default)

       eDir_jvm_max_heap
	   Value for the DHOST_MAX_HEAP java environment variable. If unset, java defaults will be used.  (optional, integer, no default)

       eDir_jvm_options
	   Value for the DHOST_OPTIONS java environment variable. If unset, original values will be used.  (optional, string, no default)

SUPPORTED ACTIONS

       This resource agent supports the following actions (operations):

       start
	   Starts the resource. Suggested minimum timeout: 600.

       stop
	   Stops the resource. Suggested minimum timeout: 600.

       monitor
	   Performs a detailed status check. Suggested minimum timeout: 60. Suggested interval: 30.

       meta-data
	   Retrieves resource agent metadata (internal use only). Suggested minimum timeout: 5.

       validate-all
	   Performs a validation of the resource configuration. Suggested minimum timeout: 5.

EXAMPLE

       The following is an example configuration for a eDir88 resource using the crm(8) shell:

	   primitive p_eDir88 ocf:heartbeat:eDir88 
	     op monitor timeout="60" interval="30"

SEE ALSO

       http://www.linux-ha.org/wiki/eDir88_(resource_agent)

AUTHOR

       Linux-HA contributors (see the resource agent source for information about individual authors)

resource-agents UNKNOWN 					    03/09/2014						   OCF_HEARTBEAT_EDIR88(7)