Login Does Not Work

LDAP clients use the PAM(3) modules for user authentication during the logins. When using the standard unix PAM module, the password is read from the server and checked on the client side. This can fail due to one of the following reasons:

1. ldap does not exists as a source in the /etc/nsswitch.conf file

2. Password on the server is not readable by the proxy agent. You need to allow at least the proxy agent to read the password because the proxy agent returns it to the client for comparison

3. Incorrectly configured proxy agent causes authentication to fail.

4. The entry does not have the shadowAccount objectclass.