Using pam_ldap for authentication on RHEL 7 not working with local users

Solution In Progress - Updated -

Issue

  • Unlike Red Hat 6, pam_ldap.so requires nslcd running and queries your ldap server for the 'UID'. If your local user does not match the case of your UID on your ldap server it will not be able to map your local user with your user in ldap.
Jan 21 16:11:53 localhost sshd[20190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=localhost  user=tuser
Jan 21 16:11:53 localhost sshd[20190]: pam_ldap(sshd:auth): username changed from tuser to TUSER
Jan 21 16:11:53 localhost sshd[20190]: pam_unix(sshd:account): could not identify user (from getpwnam(TUSER))
Jan 21 16:11:53 localhost sshd[20190]: Failed password for tuser from

Environment

  • Red Hat Enterprise Linux 7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content