Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network
0
votes
0answers
10 views
Kerberos + Ldap Setup not working with ssh
I have a Kerberos 5 + LDAP configuration in the same server.
They both work well (I assume). Kerberos works fine when asking for a TGT.
The problem comes when I try to login from client1 to ...
0
votes
0answers
27 views
How to install and configure Windows Server 2008 Active Directory + LDAP + SAML 2.0 for providing SSO?
I want to run a Windows Active Directory Server and provide LDAP, SAML 2.0 protocol to our trusted applications inside our company to implement SSO.
After googling for a few days I found that ...
1
vote
1answer
35 views
How to setup SSL for Active Directory?
I have a Windows 2008 Server (Base2) machine.
In Server Manager > Roles, i can see:
1. Active Directory Domain Services
2. DNS Server
3. Active Directory Certificate Services.
Under Active Directory ...
1
vote
1answer
37 views
How can I tell if my LDAP authentications are using StartTLS?
I'm setting up a new OpenLDAP server on Ubuntu 12.04 with a copy of our current LDAP database. I've gotten most of the configuration down, I think, but I'm having trouble telling if the LDAP queries ...
0
votes
0answers
14 views
wso2 Governance Registry Active Directory integration unable to find valid certification path to requested target
I am attempting to set up a WSO2 Governance Registry server on RHEL5 that will integrate with our Active Directory using ldaps, but normal methods of setting up trust of the domain controllers ssl ...
0
votes
0answers
31 views
How to create and add a self signed certificate in Windows 7 [closed]
I am using Apache Directory Studio to test a application on Windows 7.
I am using ldaps (on port 10636) support and followed the instructions to create a keystore and was able to successfully connect ...
1
vote
0answers
23 views
Any reason why nsAccountLock is multi-valued?
I discovered today that the nsAccountLock attribute (used in LDAP servers such as RedHat Directory Server, 389ds, ...) is multi-valued.
Link to source.
I cannot think of any reason explaining why it ...
0
votes
0answers
20 views
Need help in configuring LDAP acl
I am trying to configure acl in such a way users with attribute allowedService with application name can only login to that particular application.
We have users as follows:
dn: ...
0
votes
0answers
14 views
LDAP read privileges for comupter, IIS under ApplicationPoolIdentity user
Is it possible to set up LDAP read privileges to Active Directory for computer account?
If I run web application on IIS 7.5, which application pool is running under ApplicationPoolIdentity, I have ...
0
votes
0answers
11 views
Web Interface for managing FTP-server use LDAP database
I want:
Web interface for FTP for managing access to folders: "set home dir", "set groups, which can access to this folder".
Users and groups have to be taken from LDAP database (not MySQL).
I ...
0
votes
1answer
22 views
How to enable SSL for LDAP with Apache Directory Studio?
I am using Apache Directory Studio for testing LDAP services for an application. I am lost in configuring the LDAP with SSL.
So far I've tried:
Started ApacheDS with port 10389 (ldap://) and also ...
1
vote
0answers
24 views
postfix, dovecot, dovecot-sasl, ldap, and static UIDs for NFS-shared email storage
I'm trying to build a Ubuntu 12.04 mail server as such.
Must:
Auth against an existing Open-LDAP server.
Storage in Maildirs on an existing NFS server, everything owned by 8:8 (mail:mail).
Auth is ...
3
votes
2answers
60 views
sssd and ldap authentication cache
On our box running OpenSUSE 12.2 we have installed OpenLDAP and sssd daemon. We are using these two services for user authentication. Recently we created a script which creates new web-users for our ...
0
votes
1answer
32 views
I can't make sudo su on old version CentOS with LDAP
I configured many servers with the option to make "sudo su" with ldap users, and works fine.
But in 2 servers (CentOS 5.7 and 5.5) this option show me an error:
[user] is not in the sudoers ...
2
votes
3answers
70 views
Why is local root able to su to any LDAP user?
We have an LDAP server set up with our Active Directory. When users login to a Linux machine with LDAP client installed as root, they are able to su - into any Active Directory account without ...
0
votes
0answers
16 views
How to configure Amazon EC2 Sharepoint instance to use internal LDAP authentication
I've created a Sharepoint Foundation Server instance in Amazon EC2 (inside a VPC) which has a connection into my internal, non-Active Directory, LDAP (I've opened the LDAP port to Sharepoint IP).
I ...
1
vote
1answer
14 views
Unable to login applications using LDAP alias
We have several applications and we are able to integrate LDAP successfully.
In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
0
votes
1answer
93 views
How to make samba4 use external LDAP for authN, internal LDAP for all else?
I have Samba v4.0.5 installed and running. It is running its own 'bundled' ldap service. I'm happy for it to use its own internal ldap service, but I'd like it to use an external ldap service for ...
0
votes
0answers
13 views
slapd Target is quarantined
I have a syncrepl set up in my slapd that was previously working.
I've checked the ssl connection using:
$openssl s_client -connect host.mydomain.com.au:636 -key /etc/ca/host.key -cert ...
1
vote
2answers
112 views
What is the best way to see objects attributes in Active Directory?
I can not find how to see objects attributes in Active Directory in Microsoft Management Console (MMS).
Please tell me if it is possible to do it in MMS.
I found the Active Directory Explorer that ...
1
vote
0answers
26 views
Cache LDAP users from Server 2008 to Ubuntu
Is there a way to cache user creds from a Windows Server 2008 to a Ubuntu server?
We have 2 internal Active Directory servers on Windows Server 2008 and we have many different applications that use ...
0
votes
0answers
88 views
Integrate LDAP with group based authentication in New gitlab 5.1.0
We currently installed gitlab 5.1.0 and is working fine. Also we are able to integrate Gitlab with LDAP with the following configuration:
root@geopc:/home# vi /home/git/gitlab/config/gitlab.yml
...
0
votes
0answers
50 views
Samba4: external authentication [closed]
From what I understand, Samba4 cannot use external LDAP servers.
That's too bad; I have zero experience, but the thought of using OpenLDAP's back-shell and back-perl in order to authenticate against ...
1
vote
0answers
47 views
segmentation fault trying to start ldap
My PDC using Samba 3.6 with LDAP (the latest version) works very fine as long as I use hdb as the backend. Nevertheless, I change the backend to sql I receive the following error while trying to ...
1
vote
0answers
22 views
Apache 2.2 Ldap Authantication error 500 - AuthLDAPURL
I have an Apache server on RHEL 6 that uses our active directory for authentication,
We added a new "LocationMatch"
AuthLDAPURL ...
0
votes
0answers
45 views
I need clarity on sssd [closed]
I'm a newbie on LDAP/sssd/pam/nslcd.
After reading the Fedora documentation on sssd. SSSD provides access to identity and authentication providers. A domain in sssd is a database of user information. ...
0
votes
1answer
61 views
The system cannot log you on now because the domain is not available
I am using two virtualbox machines, one running XUbuntu 12.4 LTs and the other running a Windows XP as a testbed for implementing a Samba-based domain. The Linux machine is my PDC and the XP machine ...
0
votes
0answers
16 views
Ldap module compilation with apache2.2
We have a already installed httpd on one of the server. We need enable the ldap authentication for that server. I tried to compile the LDAP module with APACHE. While restarting Apache i am getting ...
0
votes
1answer
51 views
Is there any bad thing happens if I change /etc/ldap/slapd.d/cn=config.ldif manually?
Since 2.3, OpenLDAP uses a configuration engine called slapd-config. They said that use it make all LDAP configuration can be changed on fly.
This is the header of /etc/ldap/slapd.d/cn=config.ldif:
...
0
votes
0answers
26 views
New users in 389/Fedora DS are not able to browse the directory
I'm having a really weird issue where any new user I create in 389 DS is not able to browse the directory.
What I mean is that the user binds without any issue, but when you use any directory browser ...
3
votes
1answer
51 views
How can I relate the value of one ldap attribute to the value of another?
For a variety of reasons, I've become the defacto LDAP admin at my workplace. I've been learning it on the job for about a year now. So, as I describe things, feel free to suggest better ways of doing ...
0
votes
1answer
64 views
LDAP search only returns 25 users
If I use ldapsearch on my Active Directory to bring back members of the Engineers team I only see 25 users. However in AD there are almost 50 users in Engineers. What am I doing wrong?
ldapsearch -p ...
0
votes
0answers
67 views
Error attempting to join a windows xp to a samba domain
I have installed SAMBA and LDAP on XUBUNTU and they work normlly but when I try to join a windows xp machine it fails. I have already added the workstation using smbldap-useradd and the worksation ...
0
votes
1answer
51 views
Why all LDAP user passwords are incorrectly imported? And can't be modified?
First of all I am new to OpenLDAP setup. I have followed instructions coming from:
HowToForge.com linux openldap setup
#root
dn: dc=localhost,dc=com
dc: localhost
objectClass: dcObject
objectClass: ...
0
votes
0answers
29 views
Apache to accept a (corrupt) certificate without a Subject?
I am using .htaccess to ask for a username and passphrase which authenticates against LDAP.
The problem is, that the certificate is corrupt, and so Apache of course won't allow users to login.
As ...
0
votes
1answer
35 views
Slaptest for slapd.conf fails due to an invalid path
I have just installed Openldap on Xubuntu. The slapd daemon is working and I can easily stop and start it. Nevertheless when I run a test for the configuration file slapd.conf as follows:
slapdtest ...
0
votes
1answer
38 views
Simple authentication via AD over LDAP for Tomcat-hosted app
We use a central AD server for authentication, and have several different webapps that connect to it via LDAP.
I'm trying to connect a simple webapp running on Tomcat 5.5 on Windows to the AD server ...
0
votes
1answer
12 views
Openldap. How to add and then re-read new attribute
I have custom schema in my ldap customContact.schema with 5 attributes
Now I need to add one more attribute:
# localID
attributetype ( 2.16.840.1.113730.3.1.36
NAME 'localID'
DESC 'Local ...
0
votes
1answer
79 views
LDAP Can't perform an authenticated bind - Windows Server 2008 R2 Using PHP/Apache
I'm having issues performing an authenticated bind against the server. The issues doesn't appear to be in code however maybe a server issue.
Just so you know;
LDAP is enabled in Apache/PHP
I'm ...
0
votes
0answers
31 views
LDAP hosts file on Posix Host with multiple ips in ipHostNumber attribute
I need some assistance mapping LDAP objects to hosts. I'm not too sure how to map stuff using PAM and NSLCD, but feel certain it can be done ... just need advice from a *nix Guru
*Basically my issue ...
0
votes
2answers
47 views
LDAP/ActiveDirectory BindDN syntax
I'm troubleshooting a linux-based hardware firewall for a client. This hardware firewall connects to ActiveDirectory for Single SignOn authentication.
ActiveDirectory is largley just a perverted ...
0
votes
1answer
71 views
Disable LDAP service in CentOS 6.3
What command needed to disable LDAP service in CentOS 6.3.
I tried:
authconfig --disableldap
but it doesn't work.
I am trying to run ISC-DHCP in my machine but it always shows
Not searching ...
-1
votes
1answer
62 views
What is LDAP used for? [closed]
I've been going over some LDAP tutorials, but I can't imagine why would i use that? I figured that it is some kind of a list of all users and usergroups, but where is it different than system users ...
0
votes
0answers
65 views
configuring ldap client in ubuntu ( Bad file descriptor error )
I am configuring ldap client in ubuntu. I am following this tutorial link to configure the ldap client. But, When I try to update nss to use ldap, I am getting an error. That is,
root@sat:/# ...
2
votes
1answer
113 views
Active Directory: Thunderbird LDAP autocompletion not working with Kerberos auth
The Problem:
I'm trying to configure an LDAP mail autocompletion - a built-in functionality of Mozilla Thunderbird 17.0.5 @ Windows 7 x64 in 2008R2 domain environment. The OS is a fresh, ...
0
votes
1answer
56 views
Role Based Access Control, Where Roles Change Depending on Location In Application
I am tasked with designing a new, role based access model for our system.
The requirements are something to the effect of the following:
A user can log in, and will have a different role depending ...
1
vote
1answer
44 views
login time attribute in eDirectory
I cannot find an attribute in our eDirectory schema that provides a record of a user's last login time, as in what is the date and time of their last login, not how long were they logged in for (don't ...
0
votes
1answer
43 views
Apache mod_ldap / mod_authnz_ldap not caching?
I have an Ubnutu 12.04 server running Apache2 that is configured as a reverse proxy. Apache has been further configured for basic authentication via LDAP. Everything is working fine, except the ...
1
vote
1answer
141 views
Secure LDAP Authentication Issue
I am using the following C# code in the code behind of a webform deployed in an ASP.NET 4 (4.0.30319) application pool on Server1 and Server2.
PrincipalContext pc = new ...
0
votes
0answers
24 views
Cannot ldapdelete
When I run ldapdelete I get ldap_delete: Insufficient access (50):
[root@199 ~]# ldapdelete -Y EXTERNAL -H ldapi:/// 'dc=ashley-vps,dc=mildred,dc=fr'
SASL/EXTERNAL authentication started
SASL ...
