From owner-freebsd-current@FreeBSD.ORG  Thu May 22 09:46:38 2003
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8255F37B401
	for <freebsd-current@freebsd.org>;
	Thu, 22 May 2003 09:46:38 -0700 (PDT)
Received: from bart.esiee.fr (bart.esiee.fr [147.215.1.20])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6B1ED43FB1
	for <freebsd-current@freebsd.org>;
	Thu, 22 May 2003 09:46:37 -0700 (PDT)
	(envelope-from bonnetf@bart.esiee.fr)
Received: from bart.esiee.fr (localhost.esiee.fr [127.0.0.1])
	by bart.esiee.fr (8.12.9/8.12.7) with ESMTP id h4MGkWtn023543
	for <freebsd-current@freebsd.org>;
	Thu, 22 May 2003 18:46:32 +0200 (METDST)
Received: (from bonnetf@localhost)
	by bart.esiee.fr (8.12.9/8.12.7/Submit) id h4MGkVBY023542
	for freebsd-current@freebsd.org;
	Thu, 22 May 2003 18:46:31 +0200 (METDST)
Date: Thu, 22 May 2003 18:46:31 +0200
From: Frank Bonnet <bonnetf@bart.esiee.fr>
To: freebsd-current@freebsd.org
Message-ID: <20030522184631.A23366@bart.esiee.fr>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Subject: 5.1 beta2 still in trouble with pam_ldap
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 22 May 2003 16:46:38 -0000

Hi

I've installed 5.1 beta2 but I'm still in trouble
with pam_ldap / nss_ldap 

the scenario is the following

if in any file of the pam.d directory I replace
the original line :

auth           required        pam_unix.so             no_warn try_first_pass nullok

by the following 

auth            sufficient      /usr/local/lib/pam_ldap.so

for example in the /etc/pam.d/su file I can perform the "su -"
command WITHOUT TYPING ANY PASSWORD from a normal user login.

Do I missunderstand pam concepts or is it a real bug ?

LDAP related packages installed are 

openldap-2.0.25_3
nss_ldap-1.204_1
pam_ldap-1.6.1

Thanks for any infos
-- 
Frank Bonnet