Hi ! I'm trying to change pam_login_attribute to cn in /etc/ldap.conf to authenticate users from common_name but don't works.... My /etc/ldap.conf is: <snip> ssl no nss_map_attribute uniqueMember member pam_filter objectclass=posixAccount pam_login_attribute cn nss_base_passwd dc=xxx,dc=com nss_base_shadow dc=xxx,dc=com nss_base_group dc=xxx,dc=com <snip> /etc/pam.d/login #%PAM-1.0 auth required pam_securetty.so auth include common-auth auth required pam_nologin.so auth required pam_mail.so account include common-account password include common-password session include common-session session required pam_resmgr.so When I try to login using cn like "John_Lennon" , I give this error: login[11170]: User not known to the underlying authentication module If "pam_login_attribute uid" is used, all works fine... What's wrong?