I am trying to enable ldap authentication on an AIX system to go against edirectory. I have used
AIX LDAP authentication on eDirectory [warmetal.nl] and
Local AIX Authentication using LDAP and eDirectory 8.8.2 | Novell User Communities as a reference and all seems to be setup as instructed on both the AIX side as well as lum enabled users on eDir side.
However, when I try to ssh into the AIX box with the configured user, in this case 'aixtest1', the connection is immediately rejected and I see this in the trace:
10/25/09
18:01:30 B62C1BA0 LDAP: New cleartext connection 0xa46b6c0 from 10.150.20.201:33049, monitor = 0x99e0cba0, index = 37
18:01:30 986B7BA0 LDAP: (10.150.20.201:33049)(0x0001:0x60) DoBind on connection 0xa46b6c0
18:01:30 986B7BA0 LDAP: (10.150.20.201:33049)(0x0001:0x60) Bind name:cn=aixtest1,ou=people,o=KUHAIV, version:3, authentication:simple
18:01:30 986B7BA0 LDAP: (10.150.20.201:33049)(0x0001:0x60) Sending operation result 0:"":"" to connection 0xa46b6c0
18:01:30 B5BBABA0 LDAP: (10.150.20.201:33049)(0x0002:0x42) DoUnbind on connection 0xa46b6c0
18:01:30 B5BBABA0 LDAP: Connection 0xa46b6c0 closed
18:02:02 B5BBABA0 LDAP: (10.150.20.201:1022)(0x0042:0x63) DoSearch on connection 0x8f3a900
18:02:02 B5BBABA0 LDAP: (10.150.20.201:1022)(0x0042:0x63) Search request:
base: ""
scope:0 dereference:0 sizelimit:0 timelimit:0 attrsonly:0
filter: "(objectclass=*)"
attribute: "ibm-servertype"
18:02:02 B5BBABA0 LDAP: (10.150.20.201:1022)(0x0042:0x63) Unsupported or duplicate attribute: "ibm-servertype"
18:02:02 B5BBABA0 LDAP: (10.150.20.201:1022)(0x0042:0x63) Sending search result entry "" to connection 0x8f3a900
18:02:02 B5BBABA0 LDAP: (10.150.20.201:1022)(0x0042:0x63) Sending operation result 0:"":"" to connection 0x8f3a900
18:02:30 B6CCBBA0 LDAP: Checking for configuration changes
18:03:41 986B7BA0 LDAP: (10.230.20.186:57937)(0x0002:0x63) Activating pending operation 0x2:0x63 on connection 0x9550b40
18:03:41 986B7BA0 LDAP: (10.230.20.184:36294)(0x0002:0x63) Activating pending operation 0x2:0x63 on connection 0x9550d80
18:03:41 986B7BA0 LDAP: (10.150.65.21:56246)(0x0002:0x63) Activating pending operation 0x2:0x63 on connection 0x9550900
18:03:41 986B7BA0 LDAP: (10.230.20.181:33568)(0x0002:0x63) Activating pending operation 0x2:0x63 on connection 0x95506c0
18:03:41 986B7BA0 LDAP: (10.230.20.186:57937)(0x0002:0x63) Activating pending operation 0x2:0x63 on connection 0x9550b40
18:03:41 986B7BA0 LDAP: (10.230.20.184:36294)(0x0002:0x63) Activating pending operation 0x2:0x63 on connection 0x9550d80
Any ideas on what I might not have configured properly yet?
Thanks!