Is there any to do for a PAM + LDAp error?

English Applications
1 
linux v6.12.0-160000.32-default x86_64
ID="opensuse-leap"
VERSION_ID="16.0"

The journal entries below occur every time I log in as root. Is there anything I should do?

2026-06-05T11:15:58-07:00 sma-server3.sma.com sshd-session[12803]: PAM unable to dlopen(/usr/lib64/security/pam_ldap.so): /usr/lib64/security/pam_ldap.so: cannot open shared object file: No such file or directory
2026-06-05T11:15:58-07:00 sma-server3.sma.com sshd-session[12803]: PAM adding faulty module: /usr/lib64/security/pam_ldap.so
2

Maybe an obvious question, but does the file that is indicated in the error message exist on your system in the location indicated?

3

No, it does not exist.

$ ll /usr/lib64/security/pam_ldap.so
ls: cannot access '/usr/lib64/security/pam_ldap.so': No such file or directory
$ ll /usr/lib64/security/pam_l*
-rwxr-xr-x  1 root root 14K Mar 22 22:02 /usr/lib64/security/pam_lastlog2.so*
-rwxr-xr-x. 1 root root 35K Aug 19  2025 /usr/lib64/security/pam_limits.so*
-rwxr-xr-x. 1 root root 15K Aug 19  2025 /usr/lib64/security/pam_listfile.so*
-rwxr-xr-x. 1 root root 15K Aug 19  2025 /usr/lib64/security/pam_localuser.so*
-rwxr-xr-x. 1 root root 15K Aug 19  2025 /usr/lib64/security/pam_loginuid.so*
$
4

Sounds like you need to install nss-pam-ldapd and configure it.

5

Could you be more specific?

I looked for pam_ldap in the repos. No luck.
I looked for nss in the repos. Lots of nss-y things installed.
I installed openLDAP. No change.
I do not know what to think about PAM. Lots of apps there, as well.

There are 16 configuration files in /etc/pam.d with these entries:

account requisite       pam_unix.so     try_first_pass
account sufficient      pam_localuser.so
account required        pam_ldap.so     use_first_pass
6

Why not just copy and paste the name given by @hendersj

>  sudo zypper se nss-pam-ldapd

S  | Name          | Summary                                                  | Type
---+---------------+----------------------------------------------------------+--------
   | nss-pam-ldapd | NSS module and daemon for using LDAP as a naming service | package
7

Yes, nss-pam-ldapd is the specific package name you will need to install.

Just adding the configuration files isn’t sufficient - the library pam_ldap.so is not installed on your system, and that package is what provides it.

8

The package is not in the repos for LEAP 16.0. (It is for tumbleweed.)

# zypper se nss-pam-ldapd
Refreshing service 'openSUSE'.
Loading repository data...
Reading installed packages...
No matching items found.

    Note: For an extended search including not yet activated remote resources please use 'zypper search-packages'.
# zypper search-packages nss-pam-ldapd
Could not search for the package: Error: Registration server returned 'base product not found' (404)No package found
#
9

Do you even use ldap for auth? Because if you don’t, the easiest would be remove the reference from the config files.

Was this host upgraded from 15.6? It looks like pam_ldap was removed from Leap 16 and instead you would use sssd. The pam_ldap entries are left over.

10

Apologies, you’re correct. I wasn’t paying attention and thought I was looking at a Leap 16 VM when I was looking at a Tumbleweed setup.

Sounds like mhurron’s solution is the way to go - sssd with the sssd-ldap plugin.

11

That worked! Thank you.

12

sssd is already installed. And with an LDAP module.

13

yes, but sssd replaced pam_ldap, which is why pam_ldap.so doesn’t exist and there is no package that installs it. That pam_ldap.so was still referenced in the config files is left over from an upgrade.

If you used ldap, you would also have to configure sssd, it doesn’t use the same configuration that pam_ldap did.

1 Like
14

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.