Using pam_ldap for authentication on RHEL 7 not working with local users

Solution In Progress - Updated -

Issue

  • Unlike Red Hat 6, pam_ldap.so requires nslcd running and queries your ldap server for the 'UID'. If your local user does not match the case of your UID on your ldap server it will not be able to map your local user with your user in ldap.
Jan 21 16:11:53 localhost sshd[20190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=localhost  user=tuser
Jan 21 16:11:53 localhost sshd[20190]: pam_ldap(sshd:auth): username changed from tuser to TUSER
Jan 21 16:11:53 localhost sshd[20190]: pam_unix(sshd:account): could not identify user (from getpwnam(TUSER))
Jan 21 16:11:53 localhost sshd[20190]: Failed password for tuser from

Environment

  • Red Hat Enterprise Linux 7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.