问个ldap的问题

youcz

我练习用的机器ldap server 上的ldap文件被损坏了，我把 /etc/nsswitch 全不改为 files，
出现以下情况
ssh  root 用户登录ok
其余用户 登录 ，server unexpectedly closed network....

Sep 14 14:03:07 localhost sshd[32572]: pam_ldap: ldap_simple_bind Can't contact LDAP server
Sep 14 14:03:07 localhost sshd[32572]: Failed password for youcz20 from 172.18.5.84 port 2029 ssh2
Sep 14 14:03:07 localhost sshd[32573]: fatal: Access denied for user youcz20 by PAM account configuration
Sep 14 14:03:56 localhost sshd[32578]: pam_ldap: ldap_simple_bind Can't contact LDAP server
Sep 14 14:03:56 localhost sshd[32579]: fatal: Access denied for user youcz20 by PAM account configuration
Sep 14 14:03:56 localhost sshd[32578]: Failed password for youcz20 from 172.18.5.80 port 36530 ssh2

debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Trying private key: /root/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug1: Next authentication method: password
youcz20@172.18.5.80's password:
debug2: we sent a password packet, wait for reply
Connection closed by 172.18.5.80

然后我把/etc/pam.d/system-auth 所有关于ldap的注释掉，好了。

我记得以前只要把/etc/nsswitch 改了就可以了，为什么root行，其余的不行，不知上述的原因是什么？ 谢谢。

youcz

回复 1# youcz


    ding