Questions tagged [directory-services]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
18 views

No rootDN in DIT after setting up OpenLDAP in Ubuntu 22.04

I am new to LDAP and Directory Services in general (My goal is to import ldif files containing certificates from a Public Key Directory (pkddownloadsg.icao.int/download)). But I am already failing at ...
0 votes
1 answer
5k views

AWS AD connector to on premise AD failed

I am attempting to setup AWS AD Connector to our on-premise Active Directory by following Amazon document "AD Connector Prerequisites". The status is Failed with the following error. Connectivity ...
4 votes
2 answers
4k views

Upgrading Windows Server + Domain Controller to Windows Server 2019 - Fails On "ADPrep.exe"

I'm am using the instructions here to upgrade my Windows Server 2012 AD Controller to Windows Server 2019. This server is a isolated AD controller that has no other server/clients connected to it in ...
-1 votes
1 answer
2k views

Directory-Service-SAM Error

In the Windows System event log, there are errors from Directory-Services-SAM. It is saying "The request for a new account-identifier pool failed. The operation will be retried until the request ...
0 votes
1 answer
399 views

ODSEE 11.1.1.7 pagination support

I installed Oracle Directory Services Enterprise Edition 11.1.1.7 and it by default does not support pagination critical extension. I searched in the web and found that ODSEE 5.2 has not been ...
0 votes
2 answers
2k views

Is there any relation between LDAP and SNMP? Can SNMP exist without LDAP?

I understand that SNMP is a protocol for managing (view/update) system resources information remotely and LDAP is a protocol to access and use directory services information. But is there any ...
8 votes
5 answers
29k views

How to check AD DS domain/forest functional level from domain joined workstation?

Is it possible to define AD DS domain/forest functional levels from domain joined workstation? Preferably through CLI/PS and if possible w/o Domain Admin rights... How I can accomplish it?
0 votes
2 answers
629 views

Active Directory in EC2: Can't create new users

I'm trying to set up a series of EC2 instances running Windows Server 2012 connected with Active Directory. This is a new AWS account and I've only done the following: created a VPC with a public and ...
2 votes
0 answers
808 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
3 votes
1 answer
183 views

In the context of Active Directory, what does "single schema" mean and why is this an advantage?

in my learning of AD DS Ecosystem I came across with this definition [link]: By using the Windows Server® 2008 Active Directory® Lightweight Directory Services (AD LDS) role, formerly known as ...
10 votes
5 answers
9k views

Add daemon account on OS X

I'm trying to manually install a daemon (Oracle Grid Engine) on my machine, and I would like it to run under an isolated account. What is the preferred way, using Directory Services, to add a "system" ...
0 votes
1 answer
550 views

Performing Nonauthoritative restore of AD on offline DC

I have a domain controller that's been offline for 3 months. If I bring it back online normally, it will cause issues due to the tombstone life now being over the 60 day expiry. What's the best method ...
0 votes
1 answer
64 views

redhat-idm-console removing or adding accounts takes a longtime to take effect

Using the redhat-idm-console tool often takes a long time to allow the changes to be reflected in directory services. Closing Firefox and clearing the cache does not seem to have any noticeable effect....
1 vote
1 answer
1k views

How to relocate the database directory for Red Hat Directory Server 9.0

I am running RHDS in a VM, but would like to store the data and logs on a separate volume, that is on a SAN. The partition is ext4fs on /sdb1 and is mounted as /data. I tried many variations of the ...
1 vote
0 answers
356 views

Open Directory authenticated bind succeeds, but creates incomplete record

I have about a dozen Macs running 10.6.7 or 10.6.8, which are all failing to bind properly to my new 10.7.4 Server OD. I can bind them just fine via Directory Utility or dsconfigldap, and it reports ...
3 votes
1 answer
370 views

What are the differences in schemas of main directory servers?

Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
0 votes
1 answer
1k views

It looks like somebody is using my Mac OS X server to brute force attack another server which is LDAP. What can I do to stop it?

An LDAP server on another is reporting an unusually large number of attempts to read the LDAP directory and attempting a number of users, all of which look like hacking attempts to read user/password ...
2 votes
1 answer
5k views

Reset dscl UniqueID and PrimaryGroupID of root to 0 on Mac OS X

Because of a very faulty script my root's PrimaryGroupID is 101 and UniqueID is 101. I have still an access to root, I can run sudo from my admin account, but the sudo and root do not have all the ...
0 votes
1 answer
111 views

directory services group query changing randomly

I am receiving an unusual behaviour in my asp.net application. I have code that uses Directory Services to find the AD groups for a given, authenticated user. The code goes something like ... string ...
5 votes
1 answer
7k views

Demote 2003 DC from within Directory Services Restore Mode

We've had a child DC fail on us, and can't get into Windows on it as Directory Services is failing. A restore of the backed-up active directory hasn't worked due to a corruption, and so we've decided ...
1 vote
3 answers
425 views

Guides to implement OpenLDAP just as directory and not to control Network access? [closed]

I have been trying to configure OpenLDAP in Ubuntu Intrepid Ibex but the guides I find in the web are confusing for me. I have had no succes. I think the problem is most guides assume you want to use ...
1 vote
1 answer
235 views

Scripting Directory Services without passwords

I'm in an environment where user/group information is maintained in /etc/passwd and /etc/group files, which are NFS mounted. This is nice because we can just edit flat files to change user/group ...