LDAP用户无法登录gnome，但可以使用kde

Question

对于KDE和SSH，LDAP和NFS正常工作，用户无需任何问题即可登录。但只有LDAP用户无法直接或通过NX客户端登录到GNOME桌面。

当在服务器上直接登录就显示了这个错误：

Xsession: Login for is disabled 

当通过NX客户端登录这表明它成功，然后验证这个弹出消息quited：

Could not connect to session bus: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused 

我关闭这个弹出窗口和另外一个出现：

Could not acquire name on session bus 

尾巴30行o f/var/log/messages：

Apr 11 22:20:07 opensuse_11.4 sshd[5047]: error: Failed to allocate internet-domain X11 display socket. 
Apr 11 22:20:08 opensuse_11.4 sshd[5123]: Accepted password for from 127.0.0.1 port 46543 ssh2 
Apr 11 22:20:08 opensuse_11.4 sshd[5127]: Received disconnect from 127.0.0.1: 11: disconnected by user 
Apr 11 22:20:11 opensuse_11.4 sshd[5345]: Accepted password for from 127.0.0.1 port 46547 ssh2 
Apr 11 22:20:14 opensuse_11.4 kernel: [ 508.616092] start_kdeinit (5654): /proc/5654/oom_adj is deprecated, please use /proc/5654/oom_score_adj instead. 
Apr 11 22:20:30 opensuse_11.4 kernel: [ 524.991957] fuse init (API version 7.15) 
Apr 11 22:20:31 opensuse_11.4 pulseaudio[5787]: pid.c: Daemon already running. 
Apr 11 22:20:48 opensuse_11.4 sshd[5347]: Received disconnect from 127.0.0.1: 11: disconnected by user 
Apr 11 22:21:09 opensuse_11.4 sshd[5896]: Accepted publickey for nx from 
port 52235 ssh2 
Apr 11 22:21:09 opensuse_11.4 sshd[5898]: error: Failed to allocate internet-domain X11 display socket. 
Apr 11 22:21:10 opensuse_11.4 sshd[5973]: Accepted password for from 127.0.0.1 port 46564 ssh2 
Apr 11 22:21:10 opensuse_11.4 sshd[5975]: Received disconnect from 127.0.0.1: 11: disconnected by user 
Apr 11 22:21:13 opensuse_11.4 sshd[6193]: Accepted password for from 127.0.0.1 port 46568 ssh2 
Apr 11 22:21:15 opensuse_11.4 gnome-session[6458]: WARNING: Could not make bus activated clients aware of DISPLAY=:1080 environment variable: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused 
Apr 11 22:21:15 opensuse_11.4 gnome-session[6458]: WARNING: Could not make bus activated clients aware of GNOME_DESKTOP_SESSION_ID=this-is-deprecated environment variable: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused 
Apr 11 22:21:15 opensuse_11.4 gnome-session[6458]: WARNING: Could not make bus activated clients aware of SESSION_MANAGER=local/opensuse_11.4:@/tmp/.ICE-unix/6458,unix/opensuse_11.4:/tmp/.ICE-unix/6458 environment variable: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused 
Apr 11 22:22:33 opensuse_11.4 gnome-session[6458]: Gtk-CRITICAL: IA__gtk_main_quit: assertion `main_loops != NULL' failed 
Apr 11 22:22:33 opensuse_11.4 gnome-session[6458]: CRITICAL: dbus_g_proxy_new_for_name: assertion `connection != NULL' failed 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: Gtk-CRITICAL: IA__gtk_main_quit: assertion `main_loops != NULL' failed 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: GLib-GObject-CRITICAL: g_object_unref: assertion `G_IS_OBJECT (object)' failed 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: keycode1 not existant 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: keycode2 not existant 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: GSIdleMonitor: IDLETIME counter not found 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: CRITICAL: error getting session bus: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: Unable to register presence with session bus 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: CRITICAL: dbus_g_proxy_new_for_name: assertion `connection != NULL' failed 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: WARNING: Error retrieving configuration key '/desktop/gnome/session/idle_delay': Failed to contact configuration server; the most common cause is a missing or misconfigured D-Bus session bus daemon. See http://projects.gnome.org/gconf/ for information. (Details - 1: Failed to get connection to session: Error connecting: Connection refused) 
Apr 11 22:23:00 opensuse_11.4 gnome-session[6458]: CRITICAL: error getting session bus: Failed to connect to socket /tmp/dbus-0frstajyNE: Connection refused 
Apr 11 22:23:00 opensuse_11.4 sshd[6195]: Received disconnect from 127.0.0.1: 11: disconnected by user 
Apr 11 22:24:26 opensuse_11.4 su: (to root) on /dev/pts/2 

任何意见/建议非常感谢。

Answer 1

我在Centos 5.6上修复了类似的问题。我遇到的第一个问题是无法使用gdm登录屏幕来使用LDAP。

事实证明，gdm需要安全连接到LDAP服务器进行登录身份验证，并且由于我的自签名证书不受信任而导致失败。

为了让gdk先与我的LDAP服务器交谈，我将LDAP服务器的自签名证书文件放在/ etc/openldap/cacerts中，然后调整了我的/etc/ldap.conf文件 - 我更改了URI线使用LDAPS：//和端口636，然后加入这一行的证书问题：

TLS_CACERT /etc/openldap/cacerts/ldap.pem

解决了之后，我也有类似的问题到上面描述的内容，在登录时，我遇到了一些关于无法连接到/ tmp中某个套接字的错误。在设置LDAP认证之前，我一直在使用本地用户帐户。但是，一旦我切换到使用我的LDAP服务器，我的posix uid和gid就改变了。修复/ tmp中拥有我的旧uid和gid的所有权，为我解决了这个问题。