[scponly] scponly + ldap = "no knowledge of username"

[Kaleb Pederson]

On Friday 14 August 2009 01:00:30 pm dave-scponly at dbg.com wrote:
> Hey all, 
> 
> Having a problem with scponly not recognizing ldap users.  Local users
> work fine. LDAP users authenticate find and are immediatly logged out by
> scponly with the following error messages: 
> 
> 
> 
> Aug 14 14:07:00 foobox scponly[1865]: no knowledge of username foouser [username: (1503), IP/port: 192.168.1.4 38457 22]
> Aug 14 14:07:00 foobox scponly[1865]: scponly is misconfigured. contact sysadmin.

Dave,

That's an interesting problem.  Scponly checks the username and uid for sanity early in the application's lifetime.  For some reason, the getpwnam system call on your machine isn't retrieving information from LDAP as it should.

A few questions that may help us figure out what's going on:

1) What libraries does ldd `which scponly` show are being used?
2) What OS and version are you running on?
3) What does /etc/nsswitch.conf look like?

Please let us know.

Thanks.

--Kaleb