Re: [webmin-l] Disable posixAccount and associated attrs for LDAP users and groups module

[Jamie C. <jca...@we...>]

On 28/Apr/2006 15:27 Leah Cunningham wrote ..
> On Friday 28 April 2006 13:49, Greg Moeller wrote:
> > >>> jca...@we... 4/28/2006 12:43 >>>
> > Unfortunately, that is not possible. The module is designed for editing
> > Unix users stored in LDAP, which always (as far as I know) have the
> > posixAccount class.
> 
> Ah, okay.  The reason I am looking to do this is slightly odd, as the problem
> I have when I leave it enabled is that the user gets created w/an object
> class of shadowAccount and then gets one attribute which is shadowLastChange.
> 
> The users created this way can log into the server (if they are in the
> right 
> magic groups and so on, but they cannot log into webmin itself for some
> reason.)  Is there a reason why webmin login would balk at these users.
> Should additional shadow attrs be being set that are not?  I wouldn't mind
> using the shadow features, but I'm trying to use virtualmin and need the
> users created to be able to login to webmin.

Check the /etc/pam.d/webmin file, and make sure it has an entry to talk
to LDAP. Also, make sure the Authen::PAM perl module is installed..

 - Jamie