pam_unix(sshd:auth): authentication failureLDAP pass-through authenticationPostfix “SASL authentication failure: No worthy mechs found”Logging authentication failure on OpenLDAParch openldap authentication failurePAM: auth: pam_unix(dovecot:auth): authentication failure;Kerberos-PAM authentication failure: pam or pre-authenticationLDAP authentication failsUnspecified GSS failure. after setting up krb5/ldap authenticationMySQL Authentication against OpenLDAP FailureSMTP authentication failure after TLS cert

How did Arya manage to disguise herself?

Why debootstrap can only run as root?

If I supply 24v to a 50v rated 22000uf electrolytic capacitor, does that mean it will store 44000uf at 24v?

Is it appropriate to refer to God as "It"?

How to reply this mail from potential PhD professor?

I lost my Irish passport. Can I travel to Thailand and back from the UK using my US passport?

Can I use 1000v rectifier diodes instead of 600v rectifier diodes?

What happened to Rhaegal?

Is lying to get "gardening leave" fraud?

What happens if I start too many background jobs?

What is the limiting factor for a CAN bus to exceed 1Mbps bandwidth?

Has any spacecraft ever had the ability to directly communicate with civilian air traffic control?

How do you center multiple equations that have multiple steps?

Is Cola "probably the best-known" Latin word in the world? If not, which might it be?

Is there a QGIS plugin that reclassify raster symbology based on current extent?

Accidentally deleted the "/usr/share" folder

Transfer over $10k

Is it the same airport YUL and YMQ in Canada?

Who died in the Game of Thrones episode, "The Long Night"?

Survey Confirmation - Emphasize the question or the answer?

Why is Arya visibly scared in the library in S8E3?

How can I close a gap between my fence and my neighbor's that's on his side of the property line?

Can a cyclic Amine form an Amide?

Is it cheaper to drop cargo than to land it?



pam_unix(sshd:auth): authentication failure


LDAP pass-through authenticationPostfix “SASL authentication failure: No worthy mechs found”Logging authentication failure on OpenLDAParch openldap authentication failurePAM: auth: pam_unix(dovecot:auth): authentication failure;Kerberos-PAM authentication failure: pam or pre-authenticationLDAP authentication failsUnspecified GSS failure. after setting up krb5/ldap authenticationMySQL Authentication against OpenLDAP FailureSMTP authentication failure after TLS cert






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








0















i have openldap and server Debian 8. i want set ldap authentication. i install ldap-utils libnss-ldapd libpam-ldapd and set them.



# getent passwd user.name
user.name:x:1537:3174:User Name:/home/user.name:/bin/bash
# getent shadow user.name
user.name:*:15140:0:99999:7:::0


when i login i have error:



Sep 19 17:49:49 LDAPClient login[475]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=name.user
Sep 19 17:49:49 LDAPClient login[475]: pam_ldap(login:auth): Authentication failure; user=name.user`
Sep 19 17:49:53 LDAPClient login[475]: FAILED LOGIN (1) on '/dev/tty1' FOR 'name.user', Authentication failure`


i also set ssh, but have same error:



Sep 19 17:46:37 LDAPClient sshd[807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.60.92 user=name.user
Sep 19 17:46:37 LDAPClient sshd[807]: pam_ldap(sshd:auth): Authentication failure; user=name.user
Sep 19 17:46:39 LDAPClient sshd[807]: Failed password for name.user from 192.168.60.92 port 63122 ssh2
Sep 19 17:46:43 LDAPClient sshd[807]: pam_ldap(sshd:auth): Authentication failure; user=name.user
Sep 19 17:46:45 LDAPClient sshd[807]: Failed password for name.user from 192.168.60.92 port 63122 ssh2


How to fix it? I don't have idea:(



# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd: compat ldap
group: compat ldap
shadow: compat ldap
gshadow: files

hosts: files dns
networks: files

protocols: db files
services: db files
ethers: db files
rpc: db files


the problem was in acl:



olcAccess: 2to dn.subtree="ou=People,dc=example,dc=com"
by peername.ip="192.168.250.78" read
by peername.ip="xx.xx.xx.xx" read
by peername.ip="192.168.250.204" read
by dn="cn=replica,dc=example,dc=com" read
by group.exact="cn=Directory Administrators,dc=example,dc=com" manage
by dn.subtree="ou=Special Users,dc=example,dc=com" read
by dn.subtree="ou=Special Users,dc=example,dc=com" read
!!!by * none

olcAccess: 5to *
by peername.ip="xx.xx.xx.xx" read
by peername.ip="192.168.250.204" read
by group.exact="cn=Directory Administrators,dc=example,dc=com" manage
by dn="cn=admin,dc=example,dc=com" write
by dn="cn=replica,dc=example,dc=com" read
by dn.subtree="ou=Special Users,dc=example,dc=com" read
!!!by * none









share|improve this question



















  • 1





    Have you changed /etc/nsswitch.conf to point to LDAP?

    – Tim Fletcher
    Sep 20 '16 at 10:14











  • yep, my /etc/nsswitch.conf: passwd: combat ldap group: compat ldap shadow: compat ldap gshadow: files hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files

    – Nikita
    Sep 21 '16 at 3:43












  • What does the command getent passwd output on the system? It should list all users, local and LDAP

    – Tim Fletcher
    Sep 21 '16 at 7:57












  • @timFletcher yep, this command list all users, local and LDAP

    – Nikita
    Sep 21 '16 at 11:26






  • 1





    Could you update the question with this answer to help others, thanks

    – Tim Fletcher
    Sep 22 '16 at 10:21

















0















i have openldap and server Debian 8. i want set ldap authentication. i install ldap-utils libnss-ldapd libpam-ldapd and set them.



# getent passwd user.name
user.name:x:1537:3174:User Name:/home/user.name:/bin/bash
# getent shadow user.name
user.name:*:15140:0:99999:7:::0


when i login i have error:



Sep 19 17:49:49 LDAPClient login[475]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=name.user
Sep 19 17:49:49 LDAPClient login[475]: pam_ldap(login:auth): Authentication failure; user=name.user`
Sep 19 17:49:53 LDAPClient login[475]: FAILED LOGIN (1) on '/dev/tty1' FOR 'name.user', Authentication failure`


i also set ssh, but have same error:



Sep 19 17:46:37 LDAPClient sshd[807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.60.92 user=name.user
Sep 19 17:46:37 LDAPClient sshd[807]: pam_ldap(sshd:auth): Authentication failure; user=name.user
Sep 19 17:46:39 LDAPClient sshd[807]: Failed password for name.user from 192.168.60.92 port 63122 ssh2
Sep 19 17:46:43 LDAPClient sshd[807]: pam_ldap(sshd:auth): Authentication failure; user=name.user
Sep 19 17:46:45 LDAPClient sshd[807]: Failed password for name.user from 192.168.60.92 port 63122 ssh2


How to fix it? I don't have idea:(



# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd: compat ldap
group: compat ldap
shadow: compat ldap
gshadow: files

hosts: files dns
networks: files

protocols: db files
services: db files
ethers: db files
rpc: db files


the problem was in acl:



olcAccess: 2to dn.subtree="ou=People,dc=example,dc=com"
by peername.ip="192.168.250.78" read
by peername.ip="xx.xx.xx.xx" read
by peername.ip="192.168.250.204" read
by dn="cn=replica,dc=example,dc=com" read
by group.exact="cn=Directory Administrators,dc=example,dc=com" manage
by dn.subtree="ou=Special Users,dc=example,dc=com" read
by dn.subtree="ou=Special Users,dc=example,dc=com" read
!!!by * none

olcAccess: 5to *
by peername.ip="xx.xx.xx.xx" read
by peername.ip="192.168.250.204" read
by group.exact="cn=Directory Administrators,dc=example,dc=com" manage
by dn="cn=admin,dc=example,dc=com" write
by dn="cn=replica,dc=example,dc=com" read
by dn.subtree="ou=Special Users,dc=example,dc=com" read
!!!by * none









share|improve this question



















  • 1





    Have you changed /etc/nsswitch.conf to point to LDAP?

    – Tim Fletcher
    Sep 20 '16 at 10:14











  • yep, my /etc/nsswitch.conf: passwd: combat ldap group: compat ldap shadow: compat ldap gshadow: files hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files

    – Nikita
    Sep 21 '16 at 3:43












  • What does the command getent passwd output on the system? It should list all users, local and LDAP

    – Tim Fletcher
    Sep 21 '16 at 7:57












  • @timFletcher yep, this command list all users, local and LDAP

    – Nikita
    Sep 21 '16 at 11:26






  • 1





    Could you update the question with this answer to help others, thanks

    – Tim Fletcher
    Sep 22 '16 at 10:21













0












0








0








i have openldap and server Debian 8. i want set ldap authentication. i install ldap-utils libnss-ldapd libpam-ldapd and set them.



# getent passwd user.name
user.name:x:1537:3174:User Name:/home/user.name:/bin/bash
# getent shadow user.name
user.name:*:15140:0:99999:7:::0


when i login i have error:



Sep 19 17:49:49 LDAPClient login[475]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=name.user
Sep 19 17:49:49 LDAPClient login[475]: pam_ldap(login:auth): Authentication failure; user=name.user`
Sep 19 17:49:53 LDAPClient login[475]: FAILED LOGIN (1) on '/dev/tty1' FOR 'name.user', Authentication failure`


i also set ssh, but have same error:



Sep 19 17:46:37 LDAPClient sshd[807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.60.92 user=name.user
Sep 19 17:46:37 LDAPClient sshd[807]: pam_ldap(sshd:auth): Authentication failure; user=name.user
Sep 19 17:46:39 LDAPClient sshd[807]: Failed password for name.user from 192.168.60.92 port 63122 ssh2
Sep 19 17:46:43 LDAPClient sshd[807]: pam_ldap(sshd:auth): Authentication failure; user=name.user
Sep 19 17:46:45 LDAPClient sshd[807]: Failed password for name.user from 192.168.60.92 port 63122 ssh2


How to fix it? I don't have idea:(



# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd: compat ldap
group: compat ldap
shadow: compat ldap
gshadow: files

hosts: files dns
networks: files

protocols: db files
services: db files
ethers: db files
rpc: db files


the problem was in acl:



olcAccess: 2to dn.subtree="ou=People,dc=example,dc=com"
by peername.ip="192.168.250.78" read
by peername.ip="xx.xx.xx.xx" read
by peername.ip="192.168.250.204" read
by dn="cn=replica,dc=example,dc=com" read
by group.exact="cn=Directory Administrators,dc=example,dc=com" manage
by dn.subtree="ou=Special Users,dc=example,dc=com" read
by dn.subtree="ou=Special Users,dc=example,dc=com" read
!!!by * none

olcAccess: 5to *
by peername.ip="xx.xx.xx.xx" read
by peername.ip="192.168.250.204" read
by group.exact="cn=Directory Administrators,dc=example,dc=com" manage
by dn="cn=admin,dc=example,dc=com" write
by dn="cn=replica,dc=example,dc=com" read
by dn.subtree="ou=Special Users,dc=example,dc=com" read
!!!by * none









share|improve this question
















i have openldap and server Debian 8. i want set ldap authentication. i install ldap-utils libnss-ldapd libpam-ldapd and set them.



# getent passwd user.name
user.name:x:1537:3174:User Name:/home/user.name:/bin/bash
# getent shadow user.name
user.name:*:15140:0:99999:7:::0


when i login i have error:



Sep 19 17:49:49 LDAPClient login[475]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=name.user
Sep 19 17:49:49 LDAPClient login[475]: pam_ldap(login:auth): Authentication failure; user=name.user`
Sep 19 17:49:53 LDAPClient login[475]: FAILED LOGIN (1) on '/dev/tty1' FOR 'name.user', Authentication failure`


i also set ssh, but have same error:



Sep 19 17:46:37 LDAPClient sshd[807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.60.92 user=name.user
Sep 19 17:46:37 LDAPClient sshd[807]: pam_ldap(sshd:auth): Authentication failure; user=name.user
Sep 19 17:46:39 LDAPClient sshd[807]: Failed password for name.user from 192.168.60.92 port 63122 ssh2
Sep 19 17:46:43 LDAPClient sshd[807]: pam_ldap(sshd:auth): Authentication failure; user=name.user
Sep 19 17:46:45 LDAPClient sshd[807]: Failed password for name.user from 192.168.60.92 port 63122 ssh2


How to fix it? I don't have idea:(



# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd: compat ldap
group: compat ldap
shadow: compat ldap
gshadow: files

hosts: files dns
networks: files

protocols: db files
services: db files
ethers: db files
rpc: db files


the problem was in acl:



olcAccess: 2to dn.subtree="ou=People,dc=example,dc=com"
by peername.ip="192.168.250.78" read
by peername.ip="xx.xx.xx.xx" read
by peername.ip="192.168.250.204" read
by dn="cn=replica,dc=example,dc=com" read
by group.exact="cn=Directory Administrators,dc=example,dc=com" manage
by dn.subtree="ou=Special Users,dc=example,dc=com" read
by dn.subtree="ou=Special Users,dc=example,dc=com" read
!!!by * none

olcAccess: 5to *
by peername.ip="xx.xx.xx.xx" read
by peername.ip="192.168.250.204" read
by group.exact="cn=Directory Administrators,dc=example,dc=com" manage
by dn="cn=admin,dc=example,dc=com" write
by dn="cn=replica,dc=example,dc=com" read
by dn.subtree="ou=Special Users,dc=example,dc=com" read
!!!by * none






debian openldap






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Sep 28 '16 at 8:55







Nikita

















asked Sep 20 '16 at 10:00









NikitaNikita

313




313







  • 1





    Have you changed /etc/nsswitch.conf to point to LDAP?

    – Tim Fletcher
    Sep 20 '16 at 10:14











  • yep, my /etc/nsswitch.conf: passwd: combat ldap group: compat ldap shadow: compat ldap gshadow: files hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files

    – Nikita
    Sep 21 '16 at 3:43












  • What does the command getent passwd output on the system? It should list all users, local and LDAP

    – Tim Fletcher
    Sep 21 '16 at 7:57












  • @timFletcher yep, this command list all users, local and LDAP

    – Nikita
    Sep 21 '16 at 11:26






  • 1





    Could you update the question with this answer to help others, thanks

    – Tim Fletcher
    Sep 22 '16 at 10:21












  • 1





    Have you changed /etc/nsswitch.conf to point to LDAP?

    – Tim Fletcher
    Sep 20 '16 at 10:14











  • yep, my /etc/nsswitch.conf: passwd: combat ldap group: compat ldap shadow: compat ldap gshadow: files hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files

    – Nikita
    Sep 21 '16 at 3:43












  • What does the command getent passwd output on the system? It should list all users, local and LDAP

    – Tim Fletcher
    Sep 21 '16 at 7:57












  • @timFletcher yep, this command list all users, local and LDAP

    – Nikita
    Sep 21 '16 at 11:26






  • 1





    Could you update the question with this answer to help others, thanks

    – Tim Fletcher
    Sep 22 '16 at 10:21







1




1





Have you changed /etc/nsswitch.conf to point to LDAP?

– Tim Fletcher
Sep 20 '16 at 10:14





Have you changed /etc/nsswitch.conf to point to LDAP?

– Tim Fletcher
Sep 20 '16 at 10:14













yep, my /etc/nsswitch.conf: passwd: combat ldap group: compat ldap shadow: compat ldap gshadow: files hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files

– Nikita
Sep 21 '16 at 3:43






yep, my /etc/nsswitch.conf: passwd: combat ldap group: compat ldap shadow: compat ldap gshadow: files hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files

– Nikita
Sep 21 '16 at 3:43














What does the command getent passwd output on the system? It should list all users, local and LDAP

– Tim Fletcher
Sep 21 '16 at 7:57






What does the command getent passwd output on the system? It should list all users, local and LDAP

– Tim Fletcher
Sep 21 '16 at 7:57














@timFletcher yep, this command list all users, local and LDAP

– Nikita
Sep 21 '16 at 11:26





@timFletcher yep, this command list all users, local and LDAP

– Nikita
Sep 21 '16 at 11:26




1




1





Could you update the question with this answer to help others, thanks

– Tim Fletcher
Sep 22 '16 at 10:21





Could you update the question with this answer to help others, thanks

– Tim Fletcher
Sep 22 '16 at 10:21










1 Answer
1






active

oldest

votes


















0














If you check your shadow you have not set a password for you account.
user.name:*:15140:0:99999:7:::0 ---- * means no password.



The system does not allow no password login.



TRY to create a password for your account and retry to login






share|improve this answer

























  • but i have pass.

    – Nikita
    Sep 21 '16 at 3:46











Your Answer








StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













draft saved

draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f804187%2fpam-unixsshdauth-authentication-failure%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









0














If you check your shadow you have not set a password for you account.
user.name:*:15140:0:99999:7:::0 ---- * means no password.



The system does not allow no password login.



TRY to create a password for your account and retry to login






share|improve this answer

























  • but i have pass.

    – Nikita
    Sep 21 '16 at 3:46















0














If you check your shadow you have not set a password for you account.
user.name:*:15140:0:99999:7:::0 ---- * means no password.



The system does not allow no password login.



TRY to create a password for your account and retry to login






share|improve this answer

























  • but i have pass.

    – Nikita
    Sep 21 '16 at 3:46













0












0








0







If you check your shadow you have not set a password for you account.
user.name:*:15140:0:99999:7:::0 ---- * means no password.



The system does not allow no password login.



TRY to create a password for your account and retry to login






share|improve this answer















If you check your shadow you have not set a password for you account.
user.name:*:15140:0:99999:7:::0 ---- * means no password.



The system does not allow no password login.



TRY to create a password for your account and retry to login







share|improve this answer














share|improve this answer



share|improve this answer








edited Sep 28 '16 at 8:59









Flup

5,52112541




5,52112541










answered Sep 20 '16 at 10:16









JuriJuri

11




11












  • but i have pass.

    – Nikita
    Sep 21 '16 at 3:46

















  • but i have pass.

    – Nikita
    Sep 21 '16 at 3:46
















but i have pass.

– Nikita
Sep 21 '16 at 3:46





but i have pass.

– Nikita
Sep 21 '16 at 3:46

















draft saved

draft discarded
















































Thanks for contributing an answer to Server Fault!


  • Please be sure to answer the question. Provide details and share your research!

But avoid


  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f804187%2fpam-unixsshdauth-authentication-failure%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Wikipedia:Vital articles Мазмуну Biography - Өмүр баян Philosophy and psychology - Философия жана психология Religion - Дин Social sciences - Коомдук илимдер Language and literature - Тил жана адабият Science - Илим Technology - Технология Arts and recreation - Искусство жана эс алуу History and geography - Тарых жана география Навигация менюсу

Bruxelas-Capital Índice Historia | Composición | Situación lingüística | Clima | Cidades irmandadas | Notas | Véxase tamén | Menú de navegacióneO uso das linguas en Bruxelas e a situación do neerlandés"Rexión de Bruxelas Capital"o orixinalSitio da rexiónPáxina de Bruselas no sitio da Oficina de Promoción Turística de Valonia e BruxelasMapa Interactivo da Rexión de Bruxelas-CapitaleeWorldCat332144929079854441105155190212ID28008674080552-90000 0001 0666 3698n94104302ID540940339365017018237

What should I write in an apology letter, since I have decided not to join a company after accepting an offer letterShould I keep looking after accepting a job offer?What should I do when I've been verbally told I would get an offer letter, but still haven't gotten one after 4 weeks?Do I accept an offer from a company that I am not likely to join?New job hasn't confirmed starting date and I want to give current employer as much notice as possibleHow should I address my manager in my resignation letter?HR delayed background verification, now jobless as resignedNo email communication after accepting a formal written offer. How should I phrase the call?What should I do if after receiving a verbal offer letter I am informed that my written job offer is put on hold due to some internal issues?Should I inform the current employer that I am about to resign within 1-2 weeks since I have signed the offer letter and waiting for visa?What company will do, if I send their offer letter to another company