Tuesday, December 16, 2014

Solaris 10: an LDAP user can login, but can't use SSH: You don't exist, go away!


As said in the title, I've encountered
Solaris 10: an LDAP user can login, but can't use SSH: You don't exist, go away!


Symptom: 
[14-12-03 - 14:09:54 on servername]  ~$ id -auid=1201 gid=1200 groups=1200,1300
[14-12-03 - 14:08:13 on servername]  ~$ ssh -vv
You don't exist, go away!

Cause:
users (not in root or sys group) can't access information from LDAP Server

Solution:
as root:

 
[14-12-03 - 14:40:42 on servername] root /etc
$ chmod o+r /var/ldap/*
[14-12-03 - 14:42:05 on servername] root /etc
$ ll /var/ldap/*
-rw-r--r--   1 Template root         10K Dec  3 13:45 /var/ldap/cachemgr.log
-rw----r--   1 Template root         64K Aug  5  2013 /var/ldap/cert8.db
-rw----r--   1 Template root         32K Aug  5  2013 /var/ldap/key3.db
-r-----r--   1 Template root         222 Dec  3 13:38 /var/ldap/ldap_client_cred
-r-----r--   1 Template root         478 Dec  3 13:38 /var/ldap/ldap_client_file
-rw----r--   1 Template root         32K Aug  5  2013 /var/ldap/secmod.db

then "id" commands show correct results coming from LDAP server:
[14-12-03 - 14:14:15 on servername] alex ~
$ id -a
uid=1201(alex) gid=1200(admin) groups=1200(admin),1300(support)


It's a quick post, please leave your questions in the comments!