How to debug LDAP in PAM / NSS

The basic mechanism for diagnosing problems with the nss_ldap utility involves adding to the /etc/ldap.conf file the following parameters:

debug 255
logdir /tmp/nsslogs

Create the log directory as follows:

mkdir /tmp/nsslogs

See Procedure 5.1. NSS_LDAP Diagnostic Steps and PAM/NSS Configuration in chapter 5 of Samba Guide for more information.

Links:

• Fedora DS PAM Howto
• Fedora 8 PAM LDAP.diff