You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm a bit at wits end with this and I cant figure it out. I have a k3s cluster that is running a slurm stack. On the slurm stack there is a login pod that has a metalLB provided external IP address. I've loaded in a set of ldif files that work on my previous cluster and have a PAM config that works on my home lab. If i remove the option that doesn't deny access on incorrect password everyone can login
On login ldap is being queried but then all users just get permission denied when you try and ssh to the cluster. I can su - user on the pod and getent user and getent group both work I can even do an ldapsearch on the pod I just cant login with my ldap password. My last thought was that the certificate on the openldap stack is expired so maybe its quietly failing becasue of this. I'll post the version of this we are using when I'm off this train its about a year or so old.
Thanks any help would be appreciated.
The text was updated successfully, but these errors were encountered:
I'm a bit at wits end with this and I cant figure it out. I have a k3s cluster that is running a slurm stack. On the slurm stack there is a login pod that has a metalLB provided external IP address. I've loaded in a set of ldif files that work on my previous cluster and have a PAM config that works on my home lab. If i remove the option that doesn't deny access on incorrect password everyone can login
On login ldap is being queried but then all users just get permission denied when you try and ssh to the cluster. I can su - user on the pod and getent user and getent group both work I can even do an ldapsearch on the pod I just cant login with my ldap password. My last thought was that the certificate on the openldap stack is expired so maybe its quietly failing becasue of this. I'll post the version of this we are using when I'm off this train its about a year or so old.
Thanks any help would be appreciated.
The text was updated successfully, but these errors were encountered: