I use LightDM als my display manager, entering user credentials via its greeter login. The system's PAM authenticates against a LDAP server. Unfortunately, the network is unreliable hence the LDAP server often cannot be reached. This is what is logged in auth.log
:
lightdm: nss_ldap: could not connect to any LDAP server as (null) - Can't contact LDAP server
lightdm: nss_ldap: failed to bind to LDAP server ldap://ldap.example.com: Can't contact LDAP server
lightdm: nss_ldap: could not search LDAP server - Server is unavailable
Consequently, the LDAP PAM module fails. Unfortunately, the exact reason of the error is lost along the way and LightDM shows a "wrong password" message, which is horribly misleading:
Is there any way to display a "login failed due to LDAP server unreachable" message instead? This is a mock-up of what I would like to see:
Further details:
- I cannot guarantee that a user has ever been logged-on to any machine in particular.
- A network connection is needed as the user's home resides on a share.