pam_ldap conversation error

From: Derrick Stensrud <dstensrud(at)worleyco(dot)com>
To: pgsql-admin(at)postgresql(dot)org
Subject: pam_ldap conversation error
Date: 2006-12-17 23:57:02
Message-ID: 4585D94E.4090809@worleyco.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

I'm trying to setup postgresql to authenticate using pam_ldap against a
windows 2003 Active Directory server. I have setup accounts on the
Active directory and tested the authentication against it using services
like local machine login and ssh logins and it authenticates properly.
I edited the pg_hba.conf and added an entry for one of the users, like this:

local all derrick3 pam postgres

I have a file in /etc/pam.d/ called postgres and it looks like this:

auth required /lib/security/pam_ldap.so
account required /lib/security/pam_ldap.so

I have logged into the template1 database and added the user derrick3.
I then tried to run this:

psql -U derrick3 -d template1

it prompts for a password and gives this error after I use the password
I setup in Active Directory:

psql: FATAL: PAM authentication failed for user "derrick3"

if I look in postgresql.log I find this:

LOG: pam_authenticate failed: Conversation error
FATAL: PAM authentication failed for user "derrick3"
LOG: could not send data to client: Broken pipe
LOG: pam_authenticate failed: User not known to the underlying
authentication module
FATAL: PAM authentication failed for user "derrick3"

Can anyone help put me on the right track? Thanks.

Browse pgsql-admin by date

  From Date Subject
Next Message Matthias.Pitzl 2006-12-18 08:15:34 Re: Troubles with Ident Authetication
Previous Message Rajesh Kumar Mallah 2006-12-17 04:00:30 Re: Adding a column with default value possibly corrupting a functional index.