I have a application (Webmin) which has to authenticates user throught LDAP on rhel5, 6 and 7.
The package nss_ldap
and even more its equivalent nss-pam-ldapd
on rhel7 does not allow to get users not listed through getent passwd
.
I used to think that for authenticating users in LDAP, we were trying to get a connection using the correct user distingish name and provided password.
Does a module pam that authenticates against LDAP exists without imposing those users to be system user too exists? Why should I not use such an authentication for Web applications?