Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

2
votes
0answers
8 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
1
vote
0answers
12 views

How to determine the values for an LDAP bind to a Windows Server 2012 DC? [ldap_bind: Invalid Credentials (49)]

Sigh. I have been trying for nearly 6 hours to get my Gitlab deployment to authenticate via Windows Server 2012 Essentials Active Directory LDAP. I am running Ubuntu 14.04 for my Gitlab server. ...
0
votes
1answer
16 views

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group ...
1
vote
1answer
133 views

Continuously check LDAP connectivity to Domain Controllers ( LDAP Heartbeat Check)

working on developing script which runs via schedule task ; whole purpose of it is to target few domain controllers and continuously(for every 2 sec) do a ldap query targeting that particular DC and ...
0
votes
1answer
11 views

Use ldapsearch to bind using short username?

I am trying for more than 2 hours to find a way to use ldapsearch to connect to Microsoft Active Directory and I am not able to perform a successful bind. I do not want to use the CN of my account ...
2
votes
0answers
17 views

Are External LDAP referrals similar to a DNS Recursive or non recursive entry?

I'm very familiar with DNS, but less so with LDAP. In DNS I have the ability to delegate the CPU and IO load of referral chasing a given DNS query... or I can set norecurse and have the client ...
0
votes
1answer
23 views

Ldap with cloud application

I was wondering if you guys could help me, I'm trying to use ldap to connect with our AD but the settings on the cloud app seem to fail. How do you set up ldap with external servers? Is there some ...
0
votes
0answers
27 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
1
vote
0answers
43 views

allow Windows 2012 AD users to ssh into a linux computer

I have a Windows Server 2012 R2 running as a domain controller. I also have a Debian 7.2 server (running Webmin 1.6) which I would like to give users ssh access to using their domain accounts. On the ...
3
votes
0answers
41 views

Expensive LDAP queries from Workstations

Troubleshooting high LSASS process on a DC found expensive queries originating from a few workstations. Each query is as follows: Visited Entries: 1Million+ Returned Entries: <50 (most of the ...
2
votes
0answers
22 views

Kerberos, .k5login and sudo

Background: I am using a Debian 7 system which I have integrated with an LDAP+Kerberos system using libnss-ldap, libpam-krb5 and nscd. I have modified sudoers to permit an LDAP group the right to sudo ...
6
votes
2answers
209 views

Manage SSH Users with MySQL backend

is there a possibility to use a (mysql) Database to manage SSH login credentials instead of /etc/passwd ? I know I could use ldap but I only want simple user management and ldap seems a little bit ...
0
votes
0answers
16 views

Debian nfs-client shows nobody:nogroup

i have a running ldap-server, which works well with my webserver. Now i tried to get the nfs-server running with my a MySQL server. I (think) i did the same things like on my webserver configuration. ...
3
votes
1answer
29 views

Apache LDAP Authentication with AD Subgroup

I am trying to authenticate using an Active Directory User on a Website running on Apache. My Setup Active Directory: User "steven" is a member of the group "staff". User "cindy" is a member of the ...
1
vote
1answer
28 views

Can HP m476dn MFP be configured to lookup email from AD/LDAP

I am considering to buy HP m476dn MFP. Going through the specs it is no clear if the device can lookup for email address from the LDAP server. What I would like is to be able to send scans via email ...
0
votes
1answer
31 views

Mixed domain: how to setup password referral

I'm working with a mixture of linux and windows servers and am hoping to use AD to tie in to a centralized LDAP authentication process. I recently installed a Windows 2012 R2 server as a domain ...
0
votes
1answer
20 views

ldapsearch from root succeeds, but doesn't succeed when base is not root

I have a ou which looks like this ou=abcd,ou=ou1,ou=ou2,dc=mydomain,dc=com The ou has a property called 'l' which has a value pqrs. I do the following search ldapsearch -x -b "dc=mydomain,dc=com" ...
7
votes
1answer
323 views

Good practices regarding discontinued software in production (OpenDS)?

How bad is it to use OpenDS, which is not actively maintained, and had the last patch in 2010, and require JDK6(which is also obsolete) in a production environment? (Although at the backend and not ...
0
votes
1answer
38 views

restrict ssh access to host using sssd and LDAP

I need to restrict ssh access to hosts based on the user's LDAP group membership. I want to do this using sssd's ldap_access_filter feature. Here's my sssd.conf file: [sssd] config_file_version = 2 ...
0
votes
0answers
7 views

Is it possible to cache LDAP responses from referrals in other servers in AD?

I have a LDAP server that is called from a number of sites that each have their own (isolated) instance of AD Directory Services. Is it possible to cache an LDAP query, and response, in a local ADDS ...
2
votes
1answer
31 views

Can ADFS access other user's information?

I need to implement a company website that would be accessed from the outside of the company. It is required that the users are able to login with the same credentials as they access the company ...
0
votes
0answers
15 views

Unable to use custom attribute in Apache DS LDAP

I am new to LDAP and stuff, and I am struggling with adding new attributes to the schema. I created a new objectclass with some custom attributes as done here. Exported it to an LDIF file, and ...
2
votes
0answers
61 views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
1
vote
1answer
50 views

Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox

I want to connect liferay to zimbra in Virtual Box and I need to fill this form : ![Capture of liferay try to connect to ldap in VB] http://i.stack.imgur.com/cUOuV.png I got the url and password ...
-1
votes
0answers
16 views

Openldap ppolicy and pam_ldap interoperability

I followed ubuntu server guide, set up openldap for user authentication and connect my server to it using pam_ldap and things goes fine. But when i tried to add ppolicy to openldap, I'm not sure about ...
0
votes
1answer
29 views

LDAP Groups in authconfig

In my authconfig setup , I always use : --ldapbasedn='ou=users,o=Directory' I thought by using: --ldapbasedn='o=Directory' Groups would also be included, but no luck. My LDAP ...
0
votes
1answer
45 views

issue with master and slave ldap configuration

I am configuring master and slave ldap configuration. Initially I installed LDAP in Master machine and also installed on slave machine apt-get install -y slapd ldap-utils while installing LDAP ...
3
votes
1answer
56 views

How to get Active Directory domain objectGUID anonymously

As an authenticated Active Directory user, I can run this to get the domain GUID (objectGUID): dsquery * "DC=lab,DC=local" -scope base -attr objectguid I can use this command in Linux to get the ...
1
vote
0answers
34 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
0
votes
0answers
26 views

Why is my samba domain user created by a bash script behave differently from one created manually?

I have a samba server which is using LDAP as its backend. The PDC is working as expected as long as I create the users manually. This means that if I use the following command to create a new user, I ...
1
vote
3answers
78 views

Is it possible to have non-replicated data on an LDAP consumer?

I've read all the available documentation, the Mastering OpenLDAP book, and like a zillion mail-list posts but I haven't found a way to make such scenario possible. I see several use cases for this ...
1
vote
0answers
40 views

LDAP + NFS + automount home directories permissions issue

When an LDAP user logs into the system they have incorrect permissions to their home directory. LDAP and NFS services exist on the same server. The directory shows the correct ownership / ...
0
votes
0answers
15 views

How to make a role with all permissions on Ldap?

I'm working with Open Ldap and want to make a role which has all permissions. I mean if I make a new permission on the future, the role should automatically has that permission and no need to add the ...
1
vote
0answers
9 views

bind-sdb does not query for wildcard entry

I have successfully set up Bild with LDAP on a Fedora VM. The Problem is, bind-sdb simply does not query wildcard entries. When I do: nslookup doesnotexist.example.com. 127.0.0.1 The LDAP server ...
0
votes
0answers
17 views

Apache rewrite logged in username

I have included a git server in which users logs in with their username and password. By using the Basic Authentication, user are able to login without adding the domain (like DOMAIN\username). Here ...
0
votes
0answers
33 views

bugzilla authenticate with kerberos + ldap + SSO

I want to set up bugzilla with SSO, i cannot find any good documentation on how to do this. I have managed to set up ldap login which works fine. now I have set up kerberos on apache which works fine, ...
0
votes
0answers
18 views

LDAP sync between Win2008 and Cisco Unified Call Manager

I have a VOIP environment with Win 2008 as a primary LDAP server. However, before I setup Cisco Unified Call Manager to get LDAP sync from Win 2008, previous administrator has created users in CUCM ...
1
vote
1answer
69 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
0
votes
1answer
64 views

Using LDAP/Active Directory with PIN based authentication

We'd like to integrate our service with LDAP, but because of hardware constraints, we're only allow 4 digit user ids and passwords. What would be the best practice for performing such an ...
1
vote
2answers
52 views

How to disable password change for openldap user?

Considering possible solutions for some improvements I run into this theoretical question and I couldn't find a satisfying answer. Some of you may have first-hand experience with this in practice, so ...
0
votes
1answer
128 views

Apache 2.4 with PHP 5.5, LDAP in PHP not working

I'm working with a server running Debian 7.4 and it's currently running PHP 5.5.12 and Apache 2.2.22. I'm attempting to upgrade to Apache 2.4.9 so that I can enable Perfect Forward Secrecy. I ...
0
votes
1answer
66 views

LDAP query to search for the active user in a particular container

I am trying to configure ldap sync in Alfresco 4.2e. I am able to authenticate the users but I am unable to sync the users. I am using ldapadmin browser to check the tree of the active directory ...
1
vote
1answer
211 views

Pfsense+squid LDAP search filter error

Just installed pfsense and squid on a spare machine. I am trying to get Squid to authenticate AD users via LDAP. First I tried this: ...
1
vote
0answers
64 views

Disabling LDAP Signing on Windows PDC in Local Policy

I just tripped over my own feet it seems. Playing around on a Windows 2008 R2 server (set up as domain controller), I was intrigued by certain warning event (event id 2886) which says: "To enhance ...
0
votes
2answers
37 views

view all possible attributes of an objectClass for LDAP

I'm scripting some ldap automation and have reached a slight hangup. Basically, I want to check if an attribute being added to an entry actually exists within a given objectClass before I try to add ...
0
votes
1answer
106 views

CentOS/Redhat: Systemwide aliases when logging in through LDAP/sssd

I've asked this question in the Centos Support forum, but we didn't found a solution for it (https://www.centos.org/forums/viewtopic.php?f=13&t=46101#p196728) When logging in through LDAP/sssd, ...
0
votes
0answers
48 views

Add group/user on OpenLDAP

I am setting up OpenLDAP for the first time, on RHEL6 and using Puppet to do the initial install/configuration. I believe the configuration uses the slapd.d rather than slapd.conf method. Basically, ...
-1
votes
1answer
43 views

OpenLDAP modify member is not allowed

I am Struggeling with my LDAP attributes. I already created a few test users and groups, but I am unable to add users to the groups. #!DATE 2014-05-22T11:48:16.324 #!ERROR [LDAP: error code 65 - ...
0
votes
3answers
36 views

Possible to refer to a user in AD without the full LDAP path?

I have an application that needs to authenticate (log in as) a particular user. The vendor says they need to hard-code the full DN of the user to make this occur. It's been a while since I looked at ...
2
votes
0answers
67 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...