vinishrustagi Absent Member.
Absent Member.
152 views

Domain users are not able to login from GUI


Hi,

First we have installed OS with the mentioned iso (OES11-SP2 with
SLES11-SP3 x86_64.iso). After that, we have installed eDirectory and
created some users. (domain users).

In RHEL-6.5 Desktop, domain users are able to login from command prompt
(terminal login). But when we are trying from GUI, users are not able to
login (Authentication Failure).

Pls help us to resolve this out.

Thanks..


--
vinishrustagi
------------------------------------------------------------------------
vinishrustagi's Profile: https://forums.netiq.com/member.php?userid=8822
View this thread: https://forums.netiq.com/showthread.php?t=54249

Labels (1)
0 Likes
1 Reply
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Domain users are not able to login from GUI

This is not an eDirectory issue. If the users can login from anywhere,
the eDirectory, and perhaps in your case, Domain Services for Windows
(DSfW), pieces are working properly. What is not working is RHEL's
configuration to also allow remote users to be authenticated when the
interface is the GUI (X windows, probably Gnome) and that's probably just
a PAM misconfiguration. I'd look at /etc/nsswitch.conf and /etc/pam.d/*
to check that, or check in RHEL-specific forums. To verify this
conclusion, compare what you see in eDirectory via ndstrace with the
commands below:


ndstrace
set dstrace=nodebug
dstrace +time +tags +ldap
dstrace file on
set dstrace=*r
#perform test here
dstrace file off
quit


Use the commands above for both the successful and failing logins. I
suspect on successful attempts, you'll see stuff, and on failing attempts
you'll see nothing, meaning RHEL is not trying to even access eDirectory
because of the PAM misconfiguration.


--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.