[Fedora-directory-users] solaris 10 caching credentials? Inactivated users allowed in via ssh
aly.dharshi at telus.net
aly.dharshi at telus.net
Tue Aug 30 20:24:45 UTC 2005
Hi Brian,
Is the nscd caching the query ? I guess try restarting nscd and
see if that fixes your problem, if you aren't running nscd this is a
useless suggession.
Cheers,
Aly.
On Tue, 30 Aug 2005, Brian K. Jones wrote:
> Hi all,
>
> I'm running FDS (binary rpm) on rhel4. I have rhel4 and solaris 10 clients.
>
> If I inactivate a user account in the FDS admin GUI, then try to log in via
> ssh as that inactivated user on any ol' random Linux client, the BIND
> operation fails with err=53 (unwilling to perform). This, I should think, is
> the expected behaviour.
>
> Solaris 10, on the other hand, lets the user in (again, ssh). The only BIND I
> can correllate in the logs come from the solaris proxy user. Then a search is
> done for "shadowaccount=<username>", and then a search is done for the group
> memberships of that user (presumably I'm already in when this is done).
> There's never a BIND operation as the inactive user at all!
>
> Can someone explain what's happening?
>
> brian.
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
--
Aly S.P Dharshi
aly.dharshi at telus.net
"A good speech is like a good dress
that's short enough to be interesting
and long enough to cover the subject"
More information about the 389-users
mailing list