0

Hello Ubuntu Community :D

I have a problem with ubuntu 14.04 and ldap :( here are my configuration file:


/etc/ldap.conf:

base dc=ad,dc=school,dc=fr
uri ldap://dcad1.ad.school.fr
ldap_version 3
binddn CN=app,OU=admin,DC=ad,DC=school,DC=fr
bindpw mypassword

nss_map_objectclass posixAccount user
nss_map_objectclass shadowAccount user
nss_map_attribute uid sAMAccountName
nss_map_attribute homeDirectory unixHomeDirectory
nss_map_attribute shadowLastChange pwdLastSet
nss_map_objectclass posixGroup group
nss_map_attribute uniqueMember member
pam_login_attribute sAMAccountName
pam_filter objectclass=User
nss_base_passwd ou=people,dc=ad,dc=school,dc=fr?sub
nss_base_group ou=etp,ou=uds,ou=groups,dc=ad,dc=school,dc=fr?sub

/etc/nsswitch.conf:

passwd:         files ldap
group:          files ldap
shadow:         files ldap

hosts:          files mdns4_minimal [NOTFOUND=return] dns mdns4
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

/etc/krb5.conf:

[libdefaults]
       default_realm = AD.SCHOOL.FR
       dns_lookup_realm = true
       dns_lookup_kdc = true

[domain_realm]
      .u-SCHOOL.fr = AD.SCHOOL.FR
      u-SCHOOL.fr = AD.SCHOOL.FR
      .SCHOOL.fr = AD.SCHOOL.FR
      SCHOOL.fr = AD.SCHOOL.FR
      .app.ad.SCHOOL.fr = AD.SCHOOL.FR
      app.ad.SCHOOL.fr = AD.SCHOOL.FR

[logging]
   kdc = FILE:/var/log/krb5kdc.log
   admin_server = FILE:/var/log/krbadmin.log
   default = FILE:/var/log/krb5lib.log

/etc/ssh/sshd_config:

KerberosAuthentication yes
KerberosOrLocalPasswd yes

/etc/pam.d/common-account :

account sufficient      pam_krb5.so ignore_root realm=AD.SCHOOL.FR
account required        pam_unix.so

Pour /etc/pam.d/common-auth :

auth    sufficient      pam_krb5.so ignore_root realm=AD.SCHOOL.FR
auth    required        pam_unix.so nullok_secure try_first_pass

/etc/pam.d/common-password :

password        required        pam_unix.so nullok obscure sha512

/etc/pam.d/common-session :

session sufficient      pam_krb5.so ignore_root realm=AD.UNISTRA.FR
session required        pam_unix.so

This configuration work fine with Ubuntu 10.04 but ubuntu 14.04 i have a probleme: the session opens and closes immediately. Thanks :)

var/log/auth.log:

Feb 24 08:58:12 ubuntu-VM2 lightdm: PAM adding faulty module: pam_kwallet.so   
Feb 24 08:59:26 ubuntu-VM2 lightdm: pam_succeed_if(lightdm:auth): requirement "user ingroup nopasswdlogin" not met by user "baillard"    
Feb 24 08:59:32 ubuntu-VM2 lightdm: pam_krb5(lightdm:auth): user baillard authenticated as baillard@AD.SCHOOL.FR   
Feb 24 08:59:36 ubuntu-VM2 lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm    
Feb 24 08:59:41 ubuntu-VM2 lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory    
Feb 24 08:59:41 ubuntu-VM2 lightdm: PAM adding faulty module: pam_kwallet.so    
Feb 24 08:59:46 ubuntu-VM2 lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0)    
Feb 24 08:59:46 ubuntu-VM2 systemd-logind[534]: New session c5 of user lightdm.    
Feb 24 08:59:56 ubuntu-VM2 lightdm: PAM unable to dlopen(pam_kwallet.so): /lib/security/pam_kwallet.so: cannot open shared object file: No such file or directory
Feb 24 08:59:56 ubuntu-VM2 lightdm: PAM adding faulty module: pam_kwallet.so
0

Are you able to login switching to a textual tty? If yes, do you recive warnings about a missing home? In this case check the permissions on /home/<your username>. Otherwise

uri ldap://dcad1.ad.school.fr

try editing as follow : uri ldap://dcad1.ad.school.fr/. Note the trailing slash

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.