LDAP用户不能登录gnome，但可以使用kde登录

Question

LDAP和NFS在KDE和SSH上工作得很好，用户可以毫无问题地登录。但是只有LDAP用户不能直接或通过NX客户端登录到GNOME桌面。

当直接登录到服务器时，会显示以下错误：

Xsession: Login for  is disabled

通过NX客户端登录时，它显示已成功通过身份验证，然后退出，弹出消息如下：

Could not connect to session bus: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused

我关闭了这个弹出窗口，又出现了一个：

Could not acquire name on session bus

结尾30行/var/log/messages：

Apr 11 22:20:07 opensuse_11.4 sshd[5047]: error: Failed to allocate internet-domain X11 display socket.
Apr 11 22:20:08 opensuse_11.4 sshd[5123]: Accepted password for  from 127.0.0.1 port 46543 ssh2
Apr 11 22:20:08 opensuse_11.4 sshd[5127]: Received disconnect from 127.0.0.1: 11: disconnected by user
Apr 11 22:20:11 opensuse_11.4 sshd[5345]: Accepted password for  from 127.0.0.1 port 46547 ssh2
Apr 11 22:20:14 opensuse_11.4 kernel: [  508.616092] start_kdeinit (5654): /proc/5654/oom_adj is deprecated, please use /proc/5654/oom_score_adj instead.
Apr 11 22:20:30 opensuse_11.4 kernel: [  524.991957] fuse init (API version 7.15)
Apr 11 22:20:31 opensuse_11.4 pulseaudio[5787]: pid.c: Daemon already running.
Apr 11 22:20:48 opensuse_11.4 sshd[5347]: Received disconnect from 127.0.0.1: 11: disconnected by user
Apr 11 22:21:09 opensuse_11.4 sshd[5896]: Accepted publickey for nx from 
 port 52235 ssh2
Apr 11 22:21:09 opensuse_11.4 sshd[5898]: error: Failed to allocate internet-domain X11 display socket.
Apr 11 22:21:10 opensuse_11.4 sshd[5973]: Accepted password for  from 127.0.0.1 port 46564 ssh2
Apr 11 22:21:10 opensuse_11.4 sshd[5975]: Received disconnect from 127.0.0.1: 11: disconnected by user
Apr 11 22:21:13 opensuse_11.4 sshd[6193]: Accepted password for  from 127.0.0.1 port 46568 ssh2
Apr 11 22:21:15 opensuse_11.4 gnome-session[6458]: WARNING: Could not make bus activated clients aware of DISPLAY=:1080 environment variable: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused
Apr 11 22:21:15 opensuse_11.4 gnome-session[6458]: WARNING: Could not make bus activated clients aware of GNOME_DESKTOP_SESSION_ID=this-is-deprecated environment variable: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused
Apr 11 22:21:15 opensuse_11.4 gnome-session[6458]: WARNING: Could not make bus activated clients aware of SESSION_MANAGER=local/opensuse_11.4:@/tmp/.ICE-unix/6458,unix/opensuse_11.4:/tmp/.ICE-unix/6458 environment variable: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused
Apr 11 22:22:33 opensuse_11.4 gnome-session[6458]: Gtk-CRITICAL: IA__gtk_main_quit: assertion `main_loops != NULL' failed
Apr 11 22:22:33 opensuse_11.4 gnome-session[6458]: CRITICAL: dbus_g_proxy_new_for_name: assertion `connection != NULL' failed
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: Gtk-CRITICAL: IA__gtk_main_quit: assertion `main_loops != NULL' failed
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: GLib-GObject-CRITICAL: g_object_unref: assertion `G_IS_OBJECT (object)' failed
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: keycode1 not existant
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: keycode2 not existant
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: GSIdleMonitor: IDLETIME counter not found
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: CRITICAL: error getting session bus: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: Unable to register presence with session bus
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: CRITICAL: dbus_g_proxy_new_for_name: assertion `connection != NULL' failed
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: Error retrieving configuration key '/desktop/gnome/session/idle_delay': Failed to contact configuration server; the most common cause is a missing or misconfigured D-Bus session bus daemon. See http://projects.gnome.org/gconf/ for information. (Details -  1: Failed to get connection to session: Error connecting: Connection refused)
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: CRITICAL: error getting session bus: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused
Apr 11 22:23:00 opensuse_11.4 sshd[6195]: Received disconnect from 127.0.0.1: 11: disconnected by user
Apr 11 22:24:26 opensuse_11.4 su: (to root)  on /dev/pts/2

任何建议/建议都是非常感谢的。

Answer 1

我在Centos 5.6上修复了一个类似的问题。我遇到的第一个问题是gdm登录屏幕无法使用LDAP。

事实证明，gdm需要到LDAP服务器的安全连接才能进行登录身份验证，但它失败了，因为我的自签名证书不受信任。

为了让gdk首先与我的LDAP服务器通信，我将LDAP服务器的自签名证书文件放在/etc/openldap/cacerts中，然后调整/etc/ldap.conf文件-我将URI行更改为使用ldaps://和端口636，然后为证书问题添加了以下行：

TLS_CACERT /etc/openldap/cacerts/ldap.pem

在解决了这个问题后，我遇到了一个类似于你上面描述的问题，在登录时，我收到了一堆关于无法连接到/tmp中的某个套接字的错误。在设置LDAP身份验证之前，我一直使用本地用户帐户。但是，当我切换到使用LDAP服务器时，我的posix uid和gid发生了变化。修复/tmp中具有我的旧uid和gid的所有内容的所有权为我修复了这个问题。