Comment # 4 on bug 1096173 from Guillaume De Nayer

Hi,

The module "pam_ldap" is no more missing for 64bits, however they are some
problems with it:

- the "pam_ldap" module can be installed without problem and it installs the
file /lib64/security/pam_ldap.so.

- When I try to enable in Yast2 under "LDAP and Kerberos Client" the option
"Allow LDAP users to authenticate" it does not work. The GUI does not want to
activate it, but I do not get any error message.

- I searched a little bit and I found that I can activate ldap in pam with
"pam-config --add --ldap". If I run this command I get: "ERROR: module
/lib/security/pam_ldap.so is not installed."

- So the pam-config command searches the library in the 32bit directory on a
64bit installation.

- The "pam_ldap_32bits" module is missing.

- If I make the link "ln -sf /lib64/security/pam_ldap.so
/lib/security/pam_ldap.so", the command "pam-config --add --ldap" executes
successfully and the pam files under /etc/pam.d are updated for ldap. However,
I get the following error with "su myusername": "su: Authentication service
cannot retrieve authentication info".

Can you readd the "pam_ldap_32bits" module? perhaps it solves the
problematic...

I saw that pam_ldap is considered as obsolete. Which alternative does exist?

Best regards
Guillaume De Nayer