nslcd.conf:
Код: Выделить всё
uid nslcd
gid nslcd
uri ldap://dc1.example.com/
uri ldap://dc2.example.com/
base DC=example,DC=com
base passwd DC=example,DC=com
base shadow DC=example,DC=com
base group DC=example,DC=com
#ldap_version 3
binddn CN=user,DC=example,DC=com
bindpw password
scope sub
pagesize 1000
referrals off
filter passwd (&(objectClass=person)(!(userAccountControl=514))(|(memberOf=CN=IT,OU=Groups,DC=example,DC=com)))
map passwd uid sAMAccountName
map passwd homeDirectory unixHomeDirectory
map passwd gecos displayName
map passwd loginShell "/usr/local/bin/bash"
filter shadow (&(objectClass=person)(!(userAccountControl=514))(|(memberOf=CN=IT,OU=Groups,DC=example,DC=com)))
map shadow uid sAMAccountName
map shadow shadowLastChange pwdLastSet
filter group (&(objectClass=group)(gidNumber=*))
Код: Выделить всё
passwd: files ldap
group: files ldap
shadow: files ldap
netgroup: nis
hosts: files dns
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis
Код: Выделить всё
#
# $FreeBSD: releng/10.2/etc/pam.d/sshd 197769 2009-10-05 09:28:54Z des $
#
# PAM configuration for the "sshd" service
#
# auth
auth sufficient pam_opie.so no_warn no_fake_prompts
auth requisite pam_opieaccess.so no_warn allow_local
#auth sufficient pam_krb5.so no_warn try_first_pass
#auth sufficient pam_ssh.so no_warn try_first_pass
auth sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass minimum_uid=1000
auth required pam_unix.so no_warn try_first_pass
auth sufficient pam_ldap.so use_first_pass
# account
account required pam_nologin.so
#account required pam_krb5.so
account required pam_login_access.so
account required /usr/local/lib/pam_ldap.so ignore_authinfo_unavail ignore_unknown_user minimum_uid=1000
account required pam_unix.so
account sufficient pam_ldap.so
# session
#session optional pam_ssh.so want_agent
session required pam_permit.so
session required /usr/local/lib/pam_mkhomedir.so umask=0022 skel=/usr/share/skel
session optional pam_ldap.so
#
# password
#password sufficient pam_krb5.so no_warn try_first_pass
password required /usr/local/lib/pam_ldap.so use_authok minimum_uid=1000
password required pam_unix.so no_warn try_first_pass
Пишет неверный пароль
Тестил на фряхах 8.2 и 10.2, на дебиане с такими же конфигами все работает
Что делаю не так?
