Questions tagged [directory-services]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
10 votes
5 answers
9k views

Add daemon account on OS X

I'm trying to manually install a daemon (Oracle Grid Engine) on my machine, and I would like it to run under an isolated account. What is the preferred way, using Directory Services, to add a "system" ...
Tim Yates's user avatar
  • 235
8 votes
5 answers
29k views

How to check AD DS domain/forest functional level from domain joined workstation?

Is it possible to define AD DS domain/forest functional levels from domain joined workstation? Preferably through CLI/PS and if possible w/o Domain Admin rights... How I can accomplish it?
Mike's user avatar
  • 1,315
5 votes
1 answer
7k views

Demote 2003 DC from within Directory Services Restore Mode

We've had a child DC fail on us, and can't get into Windows on it as Directory Services is failing. A restore of the backed-up active directory hasn't worked due to a corruption, and so we've decided ...
adam's user avatar
  • 243
4 votes
2 answers
4k views

Upgrading Windows Server + Domain Controller to Windows Server 2019 - Fails On "ADPrep.exe"

I'm am using the instructions here to upgrade my Windows Server 2012 AD Controller to Windows Server 2019. This server is a isolated AD controller that has no other server/clients connected to it in ...
David Rogers's user avatar
3 votes
1 answer
365 views

What are the differences in schemas of main directory servers?

Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
CharlesB's user avatar
  • 585
3 votes
1 answer
182 views

In the context of Active Directory, what does "single schema" mean and why is this an advantage?

in my learning of AD DS Ecosystem I came across with this definition [link]: By using the Windows Server® 2008 Active Directory® Lightweight Directory Services (AD LDS) role, formerly known as ...
Noob_Number_1's user avatar
2 votes
1 answer
5k views

Reset dscl UniqueID and PrimaryGroupID of root to 0 on Mac OS X

Because of a very faulty script my root's PrimaryGroupID is 101 and UniqueID is 101. I have still an access to root, I can run sudo from my admin account, but the sudo and root do not have all the ...
pirags's user avatar
  • 23
2 votes
0 answers
799 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
special_cheese's user avatar
1 vote
3 answers
425 views

Guides to implement OpenLDAP just as directory and not to control Network access? [closed]

I have been trying to configure OpenLDAP in Ubuntu Intrepid Ibex but the guides I find in the web are confusing for me. I have had no succes. I think the problem is most guides assume you want to use ...
vmarquez's user avatar
  • 131
1 vote
1 answer
235 views

Scripting Directory Services without passwords

I'm in an environment where user/group information is maintained in /etc/passwd and /etc/group files, which are NFS mounted. This is nice because we can just edit flat files to change user/group ...
singingwolfboy's user avatar
1 vote
1 answer
1k views

How to relocate the database directory for Red Hat Directory Server 9.0

I am running RHDS in a VM, but would like to store the data and logs on a separate volume, that is on a SAN. The partition is ext4fs on /sdb1 and is mounted as /data. I tried many variations of the ...
Luke Koops's user avatar
1 vote
0 answers
356 views

Open Directory authenticated bind succeeds, but creates incomplete record

I have about a dozen Macs running 10.6.7 or 10.6.8, which are all failing to bind properly to my new 10.7.4 Server OD. I can bind them just fine via Directory Utility or dsconfigldap, and it reports ...
Jay Thompson's user avatar
0 votes
2 answers
2k views

Is there any relation between LDAP and SNMP? Can SNMP exist without LDAP?

I understand that SNMP is a protocol for managing (view/update) system resources information remotely and LDAP is a protocol to access and use directory services information. But is there any ...
GP92's user avatar
  • 741
0 votes
1 answer
397 views

ODSEE 11.1.1.7 pagination support

I installed Oracle Directory Services Enterprise Edition 11.1.1.7 and it by default does not support pagination critical extension. I searched in the web and found that ODSEE 5.2 has not been ...
pointer's user avatar
  • 113
0 votes
1 answer
5k views

AWS AD connector to on premise AD failed

I am attempting to setup AWS AD Connector to our on-premise Active Directory by following Amazon document "AD Connector Prerequisites". The status is Failed with the following error. Connectivity ...
Roger's user avatar
  • 111
0 votes
1 answer
527 views

Performing Nonauthoritative restore of AD on offline DC

I have a domain controller that's been offline for 3 months. If I bring it back online normally, it will cause issues due to the tombstone life now being over the 60 day expiry. What's the best method ...
Ben Blackmore's user avatar
0 votes
1 answer
64 views

redhat-idm-console removing or adding accounts takes a longtime to take effect

Using the redhat-idm-console tool often takes a long time to allow the changes to be reflected in directory services. Closing Firefox and clearing the cache does not seem to have any noticeable effect....
Engineer2021's user avatar
0 votes
1 answer
1k views

It looks like somebody is using my Mac OS X server to brute force attack another server which is LDAP. What can I do to stop it?

An LDAP server on another is reporting an unusually large number of attempts to read the LDAP directory and attempting a number of users, all of which look like hacking attempts to read user/password ...
jack's user avatar
  • 1
0 votes
2 answers
624 views

Active Directory in EC2: Can't create new users

I'm trying to set up a series of EC2 instances running Windows Server 2012 connected with Active Directory. This is a new AWS account and I've only done the following: created a VPC with a public and ...
Roma149's user avatar
  • 115
0 votes
1 answer
111 views

directory services group query changing randomly

I am receiving an unusual behaviour in my asp.net application. I have code that uses Directory Services to find the AD groups for a given, authenticated user. The code goes something like ... string ...
user avatar
-1 votes
1 answer
2k views

Directory-Service-SAM Error

In the Windows System event log, there are errors from Directory-Services-SAM. It is saying "The request for a new account-identifier pool failed. The operation will be retried until the request ...
Boon Chye Phang's user avatar