It’s unsatisfying, but su - leopetr4
and ssh leopetr4@my_hostname
started working soon after I set the bounty on the question. I spent some time thinking about why that was without coming to a clear conclusion, as it would be bad for it to stop working as suddenly as it started.
One change I recall making is switching the pam_password
setting in /etc/pam_ldap.conf
from md5
and exop
:
#pam_password md5
pam_password exop
However, the change from broken to working was not immediate, so I hesitate to attribute it to that change.