Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
32 views

LDAP Authentication on Apache denies valid credentials

I'm trying to link my LDAP with an Apache 2.4 server dedicated to my SVN repositories, so I use the Apache mods dav_svn and authnz_ldap. The LDAP works properly on its own. I could manage to bind the ...
0
votes
0answers
10 views

What does Samba need from LDAP for a valid account?

I have inherited an OpenLDAP system, coupled to a FreeNAS and it is quite a headache to create users all the time. I just want to create a user that can access its own homes share. I have a working ...
0
votes
0answers
8 views

Enabling LDAP on xampp [on hold]

I'm completely new to Xampp and apache, and right now, I'm trying to get ldap authentication for my xampp server. Unfortunately, I couldn't find any tutorials specifically for xampp, most seem to work ...
0
votes
0answers
25 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
1
vote
1answer
16 views

Adding more than one DIT

I have posted this question in dba.stackexchange.com but it is considered off-topic and people suggest that I should post it here so I am posting it here. I have an openldap server up and running on ...
0
votes
1answer
19 views

LDAP group access controls

I'm trying to set up our LDAP server so that members of the pwmadmins group can change people's passwords for them. To be more specific, we have PWM for Tomcat set up and are trying to let pwmadmins ...
0
votes
1answer
21 views

How to configure 389ds LDAP for idle user timeout

For my application till now i was using Java code for timing out the inactive user session from application. But for the purpose of upgrading it, want to use 389ds LDAP (my application is already ...
0
votes
1answer
25 views

Populate “Lab” Domain via LDAP

I have a lab environment where I need to own Active Directory Services/DNS/DHCP/etc at work. I have a pseudo "production" environment in this lab that has everything from vCenters to Jenkins to VDI ...
1
vote
0answers
17 views

GitLab Active Directory authentication: no results and no authentication

I'm trying to set up LDAP authentication with GitLab (version 7.12.2 installed on Ubuntu 14.04 amd64 on a VM, Omnibus set up). I've edited my gitlab.rb file to look like the following: ...
-1
votes
1answer
40 views

How Do I Configure ApacheDS LDAP Like AD

I am trying to set up Apache DS to simulate my company Active Directory locally. I have created a new partition to match. I then created an ldif file to add users and groups. e.g. ##Create the root ...
0
votes
2answers
29 views

Apache LDAPS connection to AD not working

I am trying to set up LDAPS with apache, so that users logging in to my site will be authenticated against my AD, and that this auth traffic is itself encrypted. Apache is version 2.2.15 running on ...
0
votes
1answer
39 views

AD keeps local accounts from timing out?

Currently, our customer requirements say that after 60 days, the local accounts on our devices are supposed to be locked. When AD is being implemented, the local accounts are not being used (everyone ...
1
vote
1answer
17 views

What files get modified by the authconfig?

I am trying to identify which files are edited with the following command, but can not find. authconfig --enablemd5 --enableshadow --enablecache --enablelocauthorize --enableldap --enableldapauth ...
0
votes
2answers
41 views

Where are LDAP user's home stored

I have been goolging around LDAP these days. And I'm trying to deploy a central authentication server for quite a few ubuntu servers. After all the research, one question come to my mind. Where are ...
0
votes
1answer
30 views

pam google authenticator can't compute location of secret file

I've installed Google Authentication on all the machines in our system, and while the authentication during login works fine, our machines are producing logs that have this line over and over: ...
0
votes
0answers
43 views

LDAP Query Of All Users In Various Groups In A Specific ActiveDirectory OU

I need to configure Atlassian Crowd to query all the users in my AD server that are in various groups in a top-level OU. The DN for the OU is "OU=Atlassian,DC=NNNN,DC=com". The various groups would ...
-1
votes
2answers
22 views

Checking ldapsearch and ldapsearch -h 127.0.0.1 -Z -x in nagios [closed]

Basically I just want to ensure whether ldapsearch and ldapsearch -h 127.0.0.1 -Z -x I did some check_ldap command and it's fine but I specially want to verify ldapsearch and ldapsearch -h ...
-1
votes
0answers
15 views

Schannel Fatal Alert 48 from failed LDAP connection over TLS, but Domain computers only [duplicate]

So I am setting up a service using PHP and it's LDAP functions to edit AD user accounts. I want to change account passwords and that requires an encrypted connection, so I use TLS. Now here's where ...
0
votes
1answer
53 views

Why is LDAP using servers other than those specified?

I have a linux system that is using Active Directory (2012) for LDAP lookups of users and groups. It's in a network that is connected to our main site by VPN. When the VPN goes down, all ldap ...
3
votes
0answers
44 views

LDAP over TLS fails to connect, Schannel Alert 48

I am trying to use PHP to edit users in active directory through LDAP. My test machine is using a simple WAMP setup and is NOT connected to the windows domain. This machine can connect to LDAP on the ...
0
votes
1answer
28 views

Make active directory available to remote users [closed]

I have an AD filled with test data. I have automated tests that query this AD. I would quite like to be able to run these tests from anywhere, including outside of the domain. I have seen the ...
0
votes
0answers
9 views

Kolab removed FreeIPA admin write privileges

I was able to configure kolab so that it could import users from an external FreeIPA server, but after that I found that the admin user in FreeIPA doesn't have write permission anymore. I tried to ...
0
votes
2answers
21 views

OpenLDAP - possible to search without specifying base?

I am having some issues with OpenLDAP and Spring security, where the latter does a search with the whole path in dn (filter), and an empty base. OpenLDAP does not like this, and the query fails. The ...
0
votes
0answers
85 views

How to let a user remove the pwdAccountLockedTime attribute without being an admin in ApacheDS?

I am probably going about this all wrong but there is no "Look stupid, do this..." level documentation out there that I have found. I have Apache DS v2.0.0 I have users I want some users (who I add ...
2
votes
1answer
33 views

dovecot/ postfix make me two different folder same user (user; user@domain)

I had some problem with the Dovecot/Postfix/LDAP/SASL config files: The LDAP query, SASL config its work but my problem is postfix and the dovecot: When i first login the outlook/thunderbird/etc.. it ...
0
votes
0answers
24 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
1
vote
0answers
67 views

LDAP build script failing on openLDAP-2.4.31 ( ldapmodify -Y EXTERNAL -H ldapi:/// )

I want to set the password to the backend admin so that I can change the LDAP ACL to what I need... needless to say I don't want my config posted all over the place, plus the .ldif files are correct. ...
0
votes
0answers
26 views

389DS Access.log parsing - turning LDAP request type into an audit event

Has anyone authored code to parse a 389 Directory Server's access.log file with an aim of generating audit events based around the LDAP request type. Bascially, take the log sequence ...
0
votes
0answers
41 views

LDAP, nslcd and intermittent “Invalid user”

EDITED for simplification and new information. Some of my Ubuntu boxen, after an upgrade (12.04 -> 15.04), decided they don't want to accept new users. Sometimes. I turned off nscd so it wouldn't ...
1
vote
1answer
40 views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with ...
0
votes
1answer
38 views

How to add a user containing a UID to OpenLDAP that runs on CentOS7?

Add a user user.ldif dn: uid=sampleuser,ou=people,dc=my-domain,dc=com objectClass: top objectClass: inetOrgPerson cn: sample user uid: sampleuser Problem [root@host ~]# ldapadd -x -W -D ...
1
vote
1answer
83 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...
2
votes
1answer
40 views

How update passwords of user's already existing in ldap? [closed]

I want to update passwords [user's already existing in ldap] of the user by importing data from /etc/passwd and /etc/shadow. How to achieve this? I will give the overview of my setup. Nodes user ...
0
votes
1answer
25 views

cannot config LDAP in filenet p8 5.2

i tried to fulfil this form many times and click "test LDAP connection". it's alway return success. but when i click "run task", it's alway return Running the task failed with the following message: ...
0
votes
1answer
31 views

Delete domain using ldapdelete

According to the man page of ldapdelete it should be possible to delete entries [root@controller ~]# man ldapdelete EXAMPLE The following command: ldapdelete "cn=Delete ...
1
vote
1answer
46 views

Joining Linux host to Active Directory fails to update Microsoft DNS

I am joining Linux hosts (CentOS 6) to Active Directory using a special bind account. I've granted delegate permissions to this user and when I join on the default Computers OU, a computer object is ...
1
vote
0answers
14 views

FreeIPA remove read and search permission

I want to disable the read and search permission that is granted to all user accounts by default. I don't want users to be able to display other users informations. is this possible? and is there ...
0
votes
2answers
63 views

pam_ldap user password changes using rootbinddn on Debian Jessie

When configuring pam_ldap on Debian Jessie, end user password changes are utilizing the rootbinddn, circumventing OpenLDAP's ppolicy overlay. This is allowing end users to change their passwords ...
0
votes
0answers
26 views

centos7 pam_authz_search for *.group.company.com

Upgrading from Centos6 where we were using ldap.conf entry "pam_check_host_attr=yes" previously, with wildcard 'host' attribute in ldap where the host attribute looked like 'host=*.group.company.com' ...
2
votes
2answers
47 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
1answer
32 views

Define a group leader in a LDAP posixgroup

I'm trying to find out if it's possible to define a certain member in a posixgroup as the group leader/manager of that specific group. I tried looking for some objectclasses with this purpose, but my ...
1
vote
1answer
115 views

Openvas ldap authentication configuration

I'm stuck in the process of Openvas ldap authentication configuration. I use the following openvas components version from upstream: openvas libraries - 8.0.3 openvas manager - 6.0.3 (both ...
0
votes
0answers
22 views

How to export LDAP RootDSE attributes to LDIF file?

How to export LDAP RootDSE attributes to LDIF file? I was able to use Active Directory Explorer to see RootDSE attributes but I can not export them: ...
1
vote
1answer
111 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
0
votes
1answer
30 views

LDAP authentification and sub-directories

My apache server is using the LDAP to authenticate users when they want to access the root of the server. I'd like to add another authentification (without prompt) to allow/forbid groups of users ...
0
votes
0answers
41 views

What this warning mean - WARNING: No NSS support for mDNS detected

I have Linux machines that get the data from LDAP Each user that login to the Linux machine will authenticated VIA the LDAP , and will access the machine if login and password are correct The ...
1
vote
0answers
31 views

what is the the difference between all the NSS caching daemons?

I would like to see a comparison between nscd (part of glibc), unscd, nsscache, sssd and nss-pam-ldapd. Those are all the alternatives to nscd that i could find in Debian... Our setup is that we ...
0
votes
1answer
35 views

Track a machine who is entering bad passwords into a samba3 domain controller

I have a user who is getting its account locked constantly because an other machine is trying to login with an old and bad password and thus locking the user's account... The user doesn't know which ...
0
votes
0answers
14 views

assigning permissions to nested groups in FreeIPA

I have several user groups in FreeIPA (group1, group2, ..., group6) which are members of each other. (group1 is the master group) group1 -> group2 -> group3 -> group4 -> group5 -> ...
1
vote
1answer
91 views

Windows 2008R2 Logon Restrictions and LDAP Authentication

We use a Palo Alto firewall (and its GlobalProtect client) for VPN access to our network. The firewall uses LDAP to authenticate VPN logins. I am now trying to setup a user ID for a consultant and I ...