Код: Выделить всё
radio# cat /etc/nsswitch.conf
group: files ldap
group_compat: nis
hosts: files dns
networks: files
passwd: files ldap
passwd_compat: nis
shells: files
radio#Код: Выделить всё
radio# cat /etc/pam.d/sshd
#
# $FreeBSD: src/etc/pam.d/sshd,v 1.15.12.1.4.1 2008/10/02 02:57:24 kensmith Exp $
#
# PAM configuration for the "sshd" service
#
# auth
auth sufficient pam_opie.so no_warn no_fake_prompts
auth requisite pam_opieaccess.so no_warn allow_local
auth sufficient /usr/local/lib/pam_ldap.so no_warn
#auth sufficient pam_krb5.so no_warn try_first_pass
#auth sufficient pam_ssh.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass
# account
account required pam_nologin.so
#account required pam_krb5.so
account required pam_login_access.so
account required /usr/local/lib/pam_ldap.so no_warn ignore_authinfo_unavail ignore_unknown_user
account required pam_unix.so
# session
#session optional pam_ssh.so
session required pam_permit.so
# password
#password sufficient pam_krb5.so no_warn try_first_pass
password required pam_unix.so no_warn try_first_pass
radio#Код: Выделить всё
radio# cat /usr/local/etc/ldap.conf | grep -v "^#" | grep -v '^$'
host 192.168.0.3
base dc=second,dc=ua
uri ldap://192.168.0.3:389/
ldap_version 3
binddn cn=us,cn=Users,dc=second,dc=ua
bindpw cegthl;f,th123
rootbinddn cn=us,cn=Users,dc=second,dc=ua
pam_login_attribute sAMAccountName
radio#
Код: Выделить всё
error: PAM: authentication error for illegal user test from localhost.second.ua
