Great, thanks a lot, solved the problem. No more annoying logs every 2-5 seconds :)

Steve Johnson

On Wed, 2004-07-07 at 14:39, Ray Miller wrote:

On Wed, Jul 07, 2004 at 02:21:04PM -0400, Steve Johnson wrote:

...

I've tried with just the following:

auth sufficient /lib/security/$ISA/pam_ldap.so use_first_pass password sufficient /lib/security/$ISA/pam_ldap.so use_authtok session optional /lib/security/$ISA/pam_ldap.so [...] In both of these situations, users can't authenticate. Is there something I'm doing wrong? I'm not that familiar with pam, so it's a very plausible cause! :)

I'm fairly sure you don't need the password line, but that's not likely to be causing your problem - more likely it's the use_first_pass option. Try:

auth required /lib/security/$ISA/pam_ldap.so account required /lib/security/$ISA/pam_ldap.so password required /lib/security/$ISA/pam_deny.so session required /lib/security/$ISA/pam_ldap.so