Security Software

Hello yet again,

I'm struggling to figure out some intermittent authentication failures that are being reported by my userbase and I've started to notice the following errors coming up periodically in /var/adm/messages on the LDAP client systems:

Jul 25 16:01:48 host1 sshd[13131]: [ID 293258 auth.error] libsldap: Status: 49 Mesg: openConnection: simple bind failed - Invalid credentials

...I have no idea why this would happen only sporadically, since the proxyagent password (all of my clients are using proxy auth...I'd like to move to pam_ldap if anyone wants to help explain how! :) ) is stored in /var/ldap/ldap_client_file, right? The password is definitely there, and it hasn't changed at all in over 3 months (and I'm the only LDAP admin at the moment, so nobody else even has access).

Note that in the error message, it's sshd that's spitting that out, which to me means that it's not possible that it's a proxyagent thing, but what I'm trying to figure out is whether this error is indicative of a login failure by a user (and if so, why isn't there a more detailed error, possibly indicating username and host from which they're attempting the connection?).

All help and other brainstorming appreciated!

Patrick