Re: [Fedora-directory-users] warnings in /var/log/secure
On Thu, Apr 10, 2008 at 6:40 AM, Aaron Bliss <abliss(a)brockport.edu> wrote:
Hi everyone,
I have several redhat 4 and 5 machines authenticating successfully against
our ldap servers. I used authconfig to configure the clients and everything
works great, ssh, vsftp, etc. However, for some reason, I always see a log
entry similar to the following in /var/log/secure, even though the login
works;
Apr 10 08:34:27 server1 sshd[30937]: pam_unix(sshd:auth): authentication
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.21.80.195
user=user1
Here is the contents of /etc/nsswitch.conf
cat /etc/nsswitch.conf | grep -v \#
passwd: files ldap
shadow: files ldap
group: files ldap
hosts: files dns
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks: files
networks: files
protocols: files ldap
rpc: files
services: files ldap
netgroup: files ldap
publickey: nisplus
automount: files ldap
aliases: files nisplus
I think we will need the contents of /etc/pam.d/system-auth for anyone to help .
--
Stephen J Smoogen. -- CSIRT/Linux System Administrator
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"