ssh + ldap issues

Lev Lvovsky lists1 at sonous.com
Tue Feb 24 05:36:28 EST 2004


In an effort to install cfengine (which requires 0.96b + of ssl), we've 
had to recompile all sorts of related packages on our RedHat 6.2 boxes. 
  In addition, we're trying to implement an LDAP directory.  Basically 
the source RPMS for RedHat 7.3 were installed and compiled on a 6.2 box 
to get this all to work.

We're running into the following problem on the 6.2 boxes after having 
compiled/installed openssh-3.7.1p2 with the spec file in the contrib 
directory.  Upon attempting to use an LDAP username with ssh, ssh, we 
get the following output in the logfile:

------
Feb 23 18:32:36 tsthvy1-did1 modprobe: modprobe: Can't locate module 
net-pf-10
Feb 23 18:32:40 tsthvy1-did1 sshd: PAM unable to 
dlopen(/lib/security/pam_ldap.so)
Feb 23 18:32:40 tsthvy1-did1 sshd: PAM [dlerror: 
/lib/security/pam_ldap.so: symbol gethostbyname_r, version GLIBC_2.1.2 
not defined in file libc.so.6 with link time reference]
Feb 23 18:32:40 tsthvy1-did1 sshd: PAM adding faulty module: 
/lib/security/pam_ldap.so
Feb 23 18:32:42 tsthvy1-did1 sshd(pam_unix)[17825]: check pass; user 
unknown
Feb 23 18:32:42 tsthvy1-did1 sshd(pam_unix)[17825]: authentication 
failure; logname=root uid=0 euid=0 tty=ssh ruser= rhost=login-server
------

The above-referenced file pam_ldap.so does exist.  All other LDAP 
related applications (su, ldapsearch, etc...) work, and are able to 
authenticate the user.

Not sure if any more info is necessary to diagnose the problem, but any 
help would be appreciated.

thanks,
-lev




More information about the openssh-unix-dev mailing list