Using pam_ldap for authentication on RHEL 7 not working with local users
Issue
- Unlike Red Hat 6, pam_ldap.so requires nslcd running and queries your ldap server for the 'UID'. If your local user does not match the case of your UID on your ldap server it will not be able to map your local user with your user in ldap.
Jan 21 16:11:53 localhost sshd[20190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=localhost user=tuser
Jan 21 16:11:53 localhost sshd[20190]: pam_ldap(sshd:auth): username changed from tuser to TUSER
Jan 21 16:11:53 localhost sshd[20190]: pam_unix(sshd:account): could not identify user (from getpwnam(TUSER))
Jan 21 16:11:53 localhost sshd[20190]: Failed password for tuser from
Environment
- Red Hat Enterprise Linux 7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.