The Lightweight Directory Access Protocol is an application protocol for reading and editing directories that follow the Directory Information Model over an IP network using unsecured TCP/IP, TLS or SSL. LDAP is a binary protocol described in terms of ASN.1 and transmitted using ASN.1 Basic Encoding ...
0
votes
2answers
37 views
Active Directory Integration over VPN
I recently started working as a network admin for a company who has 2 locations and we use a VPN to connect them. We need to set up an Active Directory and Exchange Server at the second location to be ...
1
vote
1answer
24 views
389 Directory Server Administrative Limit Exceeded error?
I am trying to use 389 ds with large amounts of data as children of entries. I have tried doing a search on these entries using ldapsearch but I keep getting the following error:
result: 11 ...
1
vote
0answers
13 views
LDAP authentication for Trixbox
I have a trixbox IP PBX for a 700 user company and currently it is a painful process for managing user names & passwords.
I wanted to use LDAP authentication for connecting to Trixbox so that ...
1
vote
1answer
22 views
Secure LDAP Alias Lookup through Sendmail
I'm trying to configure sendmail to use an LDAP lookup as an alias table.
I have this line in my config:
Kldapfullname ldap -k"uid=%s" -v"mail" -h"my-ldap-server"
I've been using that for a long ...
0
votes
0answers
13 views
Squid Digest Authentication keeps asking the password
I have this setup: a squid3 server, and ldap server for squid authentication using Digest.
The only problem is that browsers keeps asking the users for authentication against the proxy every 5-10 ...
2
votes
0answers
27 views
Securing access to virtual directories with valid users determined by part of the URL
I'm not a very experienced Apache sysadmin (fell in to the role as I was the only person who knew anything at all about it!) and I'm really stuck with this problem. Thanks to an over-zealous salesman ...
2
votes
1answer
28 views
Database Administrator
I have a Novell LDAP server running on RHEL. and I want to authenticate my LDAP users from the Website on one of my machine having HTTP, so I use in the httpd.conf
<Directory /var/www/html>
...
-3
votes
0answers
36 views
What is LDAP? How to use it in Windows? [closed]
I want to install LDAP to my windows and to learn to use it.
I am totally new to it.
So, how can I start? Does it have graphical interface?
Can you direct me where can I download its installation?
...
1
vote
1answer
36 views
passwd for ldap users
I'm trying to enable linux hosts to authenticate against an active directory server using port 389 and tls. I seem to have that much working, but the users cannot change their passwords via passwd.
...
1
vote
2answers
61 views
What is required for LDAP authentication to work?
I would like to have LDAP authentication on a webpage.
On a CentOS server the .htaccess looks like this
Order deny,allow
Deny from All
AuthName "Only members"
AuthType Basic
AuthBasicProvider ldap
...
1
vote
0answers
21 views
Specify attribute's minimum length
I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam.
I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
0answers
32 views
slapd not launching on Mac OS X 10.6
I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
-6
votes
2answers
76 views
Is There An Active Directory Alternative [closed]
Possible Duplicate:
What Are Some Good Open Source Alternatives to Active Directory?
Is there an alternative (preferably FREE/Open Source) to Active Directory. Either managed via Windows or ...
0
votes
1answer
22 views
problem_ldap_bind
contents of file.ldif
(le file.ldif)
dn: dc=ircoms,dc=com
changetype: add
objectclass: top
objectclass: dcObject
objectclass: organization
o: ircoms
dc: ircoms
dn: ou=People,dc=ircoms,dc=com
...
0
votes
1answer
59 views
ldap_bind: Invalid credentials (49)
i have a problem with ldap configuration :
$ ldapadd -x -D 'cn=Manager,dc=ircoms,dc=com' -f file.ldif -W
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
i deleted the contains of ...
0
votes
0answers
67 views
cannot add ldap group to system local user
I have an ldap server with users and groups.
Also, another server that is using the first one for the accounts.
Users from ldap can login to the second server.
I can add groups to the users in ldap.
...
1
vote
1answer
87 views
Multiple authentication backends in lighttpd
I have some users in a LDAP directory and I'd like to have another user in a plain or htpasswd file that can login although the connection with the LDAP server is not available.
Is it possible to ...
0
votes
0answers
40 views
Clean copy of LDIF user data without Gosa schema in openldap ldap software
I have two ldap, one full of users, with gosa open source project specific schema (https://oss.gonicus.de/labs/gosa), and one which is empty, without all of these schema.
I want to make a clean copy ...
0
votes
2answers
28 views
How to check the Sun Directory Server version?
How to get LDAP Server (Sun DS) Information in Sun OS 5.10
SunOS hostname 5.10 Generic_144488-06 sun4v sparc SUNW,T5240
Specifically
Server Type
Server Version
Protocol
Using the command ...
1
vote
1answer
33 views
Novel eDirectory and Windows XP/Seven clients
A customer asked if it's possible to authenticate windows users (on XP or Win7 machines) against an eDirectory server to be able to open a session on a Windows 2008 server.
Let me try to clarify my ...
0
votes
1answer
38 views
Add permission to modify ds-pwp-account-disabled attribute
I am OpenAM for SSO and OpenDJ as the user directory. Our applications use the generated openssouser to modify the user directory. However, this user is unable to update the ds-pwp-account-disabled ...
2
votes
1answer
28 views
Can UNIX/MSAD LDAP/Kerberos authentication work without matching usernames?
It looks as though there is a solid requirement for usernames on the UNIX client and in the MSAD to match for kerberos authentication to function (I think LDAP authentication too).
Is this absolutely ...
2
votes
1answer
163 views
Unable to add user using useradd
Attempting to add a (non-existant) user to my CentOS system is returning useradd: user example exists. I can successfully manually add the user to /etc/passwd and /etc/shadow, but that workaround is A ...
3
votes
1answer
126 views
Unable to modify schema in OpenLDAP using run-time configuration cn=config
I'm having trouble modifying the schema of an OpenLDAP installation using the run-time configuration (cn=config). What I'm trying to do is modify existing attributes and add new ones to a custom ...
1
vote
2answers
46 views
Identify AD Group Type: Distribution Group or Security Group
How do I know whether a AD group is a Distribution Group or Security Group?
Note: I am an ordinary user. I do not have permission to run power shell scripts. Any way to identify using User Interface ...
1
vote
0answers
23 views
Can ApacheDS LDAP change root user name?
ApacheDS 1.5 has the following account by default.
Bind dn or user: uid=admin,ou=system
Bind password: secret
i would like to change it to the following to avoid making changes in my code
Bind dn ...
0
votes
1answer
69 views
store users and groups permission (ACL) to LDAP
I'm trying to store ACL permissions to LDAP. I have permission for users and for groups (user belongs to many groups). Here is structure i create:
ou=Groups
cn=Admin [posixGroup] ...
0
votes
2answers
51 views
apache2 ldap authentication
For whatever reason, I am not able to include the following line in my httpd.conf:
AuthBasicProvider file ldap
I keep getting the following error:
Unknown Authn provider: ldap
Apache is ...
3
votes
2answers
60 views
Authenticating Nested Groups in LDAP
I don't know much about LDAP so I apologise in advance.
I am looking at a bug in an application that does some authentication using LDAP.
The LDAP directory structure set up by the client contains ...
2
votes
1answer
86 views
Git/LDAP Accounts/Gitolite
I have relatively little knowledge about what exactly LDAP is and how it works except that I know I can use my LDAP account username/password to log into multiple linux servers. Right now we are ...
-5
votes
1answer
31 views
Documentation for RHEL Directory Server [closed]
Can any provide me links of documentation for Redhat Directory server
1
vote
1answer
30 views
Samba drives on Ubuntu lost priviledges, directories now defunct, what to do?
I defined two Samba network drives to /mnt on a server. Our network uses LDAP authentication.
For some reason it seems like at some point the priviledges were lost. Now /mnt looks like
d????????? ? ...
0
votes
1answer
93 views
Apache httpd with LDAP error in CentOS
I'm trying to setup an Apache web server that only allows access to users that are in an LDAP store. I am able to setup exactly what I want on my local Windows 7 machine using Apache 2.2.21 against ...
5
votes
3answers
115 views
When setting up OpenLDAP for the first time, what are some things to keep in mind?
I'm in the process of reading up on documentation and setting up OpenLDAP to handle authentication throughout my network, for email, web services, user accounts, any anything else that I could throw ...
3
votes
2answers
145 views
Windows Home Basic and Domain or LDAP [closed]
I did some googling, and everywhere it says Windows Home cannot join a domain or LDAP or is not recommended.
But is there a way? We dont need an Active Directory, simple LDAP with Z drive is ...
2
votes
4answers
111 views
What are my options for centralizing Unix user management
We have 15 Debian servers and growing.
What's a simple, lightweight method for centralizing user management? Use cases would be adding a user across all servers, tweaking a users access on a specific ...
0
votes
0answers
78 views
Squid Kerberos/LDAP AD-Auth
I want to get Squid running with Kerberos as default Logintype and all special cases handled by LDAP with Basic-Auth.
I tried several Configuration and approaches. This is what my configuration looks ...
0
votes
1answer
90 views
Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap
I start with a fresh installation of openldap 2.4.28 on debian.
They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library.
It's hard to understand ...
4
votes
1answer
55 views
LDAP passwords encryption (userPassword attribute)
I'm trying to import passwords from an LDAP to a MySQL database. When I look at the userPassword attribute for the known password test I get this:
userPassword:: ...
0
votes
0answers
202 views
git push over smart HTTP fails with 403
This has been driving me nuts. I'm running git 1.7.8.rc4 with Apache/2.2.14 on Lucid Ubuntu, and set up LDAP authentication. The authentication seems to be working fine, and i can pull, but i can't ...
0
votes
1answer
51 views
dsquery remote AD server
Im attempting to do a dsquery on a remoter AD server that I have access to through my network(No UN and PASS required).
dsquery server -s <server name> is supposed to connect me to a server ...
1
vote
2answers
96 views
Changing user passwords under Kerberos/LDAP
I've set up Kerberos/LDAP on Ubuntu 11.04 Server according to this guide. My client machines are auto-mounting NFS volumes from the server using krb5. All is good: Users can log in to any of the ...
0
votes
1answer
54 views
Learning OpenLDAP cn=config: comments and reverting incorrect attempts
I'd like to learn how to configure OpenLDAP (2.4), with the objective to deploy it on an Ubuntu 10.04 LTS system.
Since slapd.conf usage is deprecated, I'm trying to understand better how to use the ...
3
votes
1answer
34 views
When updating the schema in OpenLDAP, should we reload the master or the slave first?
We currently have one master server that is replicated to two read-only slaves. We are adding to the schema. Is it recommended to reload the master first or the slaves?
2
votes
1answer
71 views
How to get client to update GPO to recognized scripts were added in manually
So I'm attempting to programmatically add a logon/logoff/etc script to be ran with a GPO. I add the scripts in their respective /Sysvol/blah... directory. I update the scripts.ini file correctly to ...
0
votes
1answer
45 views
Sanitizing dates using sed or awk on an ldapsearch query
I'd like to pipe the output of an ldapsearch to sanitize the dates returned - I presume sed and/or awk can help with this but would appreciate a bit of help.
The fixed length date format in the LDIF ...
1
vote
1answer
100 views
Use LDAP to authenticate oracle database users
I have Oracle Database 11g set up in few locations in either pure Linux/OpenLDAP, Samba/OpenLDAP environment and a full-blown Windows/AD environment.
The applications that will be using those ...
1
vote
0answers
40 views
LDAP Proxy Authentication with Active Directory
I am running an application (JIRA) that uses Active Directory as its user directory. In order to connect to the DC, JIRA needs to either bind with a preconfigured username and password, or to bind ...
0
votes
0answers
98 views
How do I configure Solaris 10 as a LDAP client
I have a 389-ds LDAP Server on Linux, and I want to configure Solaris to authenticate against it as an LDAP client.
I am able to see the user in getent passwd output, and can see user in ldaplist ...
2
votes
0answers
41 views
Error importing sudoers ldif schema to Active Directory
As per this question, we are on the process of migrating our sudoers file to Active Directory. As per the documentation, this requires importing the schema.ActiveDirectory LDIF which comes with the ...
