Solaris, LDAP and "su: Unknown id"

  • Follow


Hello All,

I am in the process of converting our NIS stuff over to LDAP and have
run into a snag. On the client box, root can su to an ldap user, but
the ldap user is unknown if trying to su from an user other than root
(eg: nobody)

observe below as root can su to Joe Test, but user nobody cannot:

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
#

[ root@lclient1 / ]$ su - jtest
Sun Microsystems Inc.   SunOS 5.9       Generic May 2002
bash-2.05$ bash
[ jtest@lclient1 / ]$ exit 
bash-2.05$ logout


[ root@lclient1 / ]$ su - nobody
$ bash
[ nobody@lclient1 / ]$ su - jtest
Password: 
su: Unknown id: jtest

# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
#

Anyone know what gives?

Thanks,
bl8n8r
0
Reply bl8n8r 5/19/2004 9:32:25 PM

<snip>

> 
> Anyone know what gives?
> 
> Thanks,
> bl8n8r

Got it working.  Just in case anyone else runs into this, in the
iPlanet console, add a "shadowaccount" for every user.  This
apparently isn't done by default when you add a user.

User -> Properties -> Advanced -> scroll to "object class" and hilite
-> Add Value -> shadowaccount -> Ok -> Ok ...
0
Reply bl8n8r 5/21/2004 1:28:25 PM


"bad_knee" <bl8n8r@yahoo.com> wrote in message
news:e817ca4d.0405210528.84abc24@posting.google.com...
> <snip>
>
> >
> > Anyone know what gives?
> >
> > Thanks,
> > bl8n8r
>
> Got it working.  Just in case anyone else runs into this, in the
> iPlanet console, add a "shadowaccount" for every user.  This
> apparently isn't done by default when you add a user.
>
> User -> Properties -> Advanced -> scroll to "object class" and hilite
> -> Add Value -> shadowaccount -> Ok -> Ok ...

Hi, I was trying to experiement with the Solaris LDAP? Do you have a good
source and easy tutorial of installing the packages,  how to configure it
,and run it?

I am using just a file based name services(e.g /etc/hosts, /etc/passwd,
/etc/group, etc..) and thinking of using the LDAP directly if possible.

Thanks for your kind help.


0
Reply Sarah 5/21/2004 2:28:21 PM

"Sarah Tanembaum" <sarah.tanembaum@yahoo.com> wrote in message news:<2h6i0aF9d2p4U1@uni-berlin.de>...
> "bad_knee" <bl8n8r@yahoo.com> wrote in message
> news:e817ca4d.0405210528.84abc24@posting.google.com...

<snip>

> Hi, I was trying to experiement with the Solaris LDAP? Do you have a good
> source and easy tutorial of installing the packages,  how to configure it
> ,and run it?
> 
> I am using just a file based name services(e.g /etc/hosts, /etc/passwd,
> /etc/group, etc..) and thinking of using the LDAP directly if possible.
> 
> Thanks for your kind help.


Hi Sarah,
Probably the best thing you could do is snag a copy of 
"LDAP in the Solaris Operating Environment" ISBN# 0-13-145693-8

I've found some enlightment here as well:
http://docs.sun.com/db/doc/816-4856/6mb1q0bjk

The book has been the best source of information overall.


good luck.
0
Reply bl8n8r 5/21/2004 6:57:43 PM

3 Replies
1196 Views

(page loaded in 0.178 seconds)

Similiar Articles:













7/21/2012 8:28:45 PM


Reply: