Originally posted by: PeterBehrik

Hello,

I have installed ldapclient on AIX 7.1.

there are two LDAP servers (TDS 6.3) the only difference is that DEV one has no password encryption enabled, the PROD one has salted SSH512.

once I configure mksecldap against DEV, everything is working, I can list user via lsuser -a registry SYSTEM username and also logon.

once I configure it against PROD, lsuser returns 3004-687 User "username" does not exist.

when watching log file during authentication, search filters return user, but when entering password there is:

filter: (&(objectclass=POSIXACCOUNT)(uid=NOUSER))

which obviously returns 0.

any ideas are more then appreciated

Thx

Peter

Originally posted by: PeterBehrik

it was solved by decreasing password encryption on TDS server from SSHA512 to SSHA256 ...

so, seems to be bug in the TDS client for AIX.

Peter