Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
12 views

Apache mod_authnz_ldap: Is it possible to connect via Unix domain socket file?

On my Debian server I have configured the LDAP server slapd to accept connections only via Unix domain socket file. This is the relevant part from /etc/defaults/slapd: SLAPD_SERVICES="ldapi:///" I ...
0
votes
1answer
8 views

nslcd and kerberos without Reverse DNS

I am trying to get nslcd to connect with an ldap instance using GSSAPI and kerberos authentication. Problem i'm having is that nslcd keeps using the wrong principal to try and connected with the ...
1
vote
1answer
21 views

Are LDAP search results transactional?

When a client makes an LDAP search against a directory like AD or OpenLDAP, are the results that come back required to represent the state of the directory either before or after any modifying ...
0
votes
0answers
10 views

Apache WebDAV and LDAP group membership authorization

I'd like to authenticate and authorize webdav access based on LDAP. The authentication part works just fine using mod_authnz_ldap with Apache 2.4. The authorization part is giving me more problems. ...
0
votes
1answer
11 views

Can Windows Authenticate Against ApacheDS?

ApacheDS claims to have support for ldap and Kerberos, so is it possible to authenticate Windows machines using it?
3
votes
1answer
13 views

ldap query for blank attribute value?

How does one query an ldap attribute for a blank value? The equivalent of str1==null in programming? I tried the following but it didn't work: (&(objectCategory=computer)(whenCreated>=...
0
votes
1answer
14 views

ion Where can I find a good list of Active Directory ldap attributes? [closed]

To be clear, I'm looking for the node data, and NOT the keys in Active Directory's ldap tree node. To be specific I suppose I'm looking for the official Microsoft documentation on this.
2
votes
1answer
33 views

What is the difference between an RDN, a DN, and a CN in LDAP?

I'm reading two (link1, link2) articles on LDAP and they make mention of Relative Distinguished Name (RDN), Distinguished Name (DN) and CN which is supposed to be the same thing as an RDN. I ...
0
votes
0answers
11 views

Make DokuWiki update sambaNTPassword when updating LDAP-password

I'm running an LDAP authentication service (OpenLDAP with phpLdapAdmin) on a Debian box, and at the moment it's connected to a local Samba share and an instance of DokuWiki. Everything is working ...
-1
votes
0answers
8 views

LDAP special user [closed]

I have an ldap server that has local accounts on it. Say the accounts are named account1 and account2. Would it be possible for the users of the ldap to read and execute from these accounts but not ...
0
votes
1answer
25 views

Troubleshooting AD LDS

I have a Win 2012 Server that I've created a new AD LDS forest on. I'm running a software application on the server that uses this forest for user credentials. The software application is not logging ...
3
votes
0answers
28 views

Authentication vsftpd account using remote LDAP user

I'm trying to authenticate vsftpd from LDAP logins which hosted remotely another server . vsftpd hosted on Ubuntu 14.04.2 LTS (GNU/Linux 3.13.0-48-generic x86_64) amazon aws . from the LDAP server ...
1
vote
1answer
31 views

OpenLDAP client inside a docker container

I have a docker container running CentOS 6 with a non-root user and OpenLDAP. When I use getent passwd it just returns the data from /etc/passwd. The config file /etc/nsswitch.conf is customized ...
1
vote
1answer
20 views

LDAP user account with no password (Linux)

Is it possible to setup a password-less ldap user login? I'd like to create a user that runs batch jobs with sudo rights. So it can ssh to multiple machines and run jobs without using ssh-keygen, ...
-1
votes
0answers
14 views

openldap as filtering proxy for AD

I have successfully set up an OpenLDAP as proxy; this is so that public-facing servers not in our corp network can run LDAP-authenticating web apps without having to expose the Windows AD Server to ...
2
votes
0answers
55 views

LDAP changing password for wrong user?

I have an OpenLDAP server setup. I currently have two users added to my server. As far as my testing goes, a single user instance work just perfectly. My first issue arise when i have two users on the ...
0
votes
1answer
27 views

Ssh + ldap not asking for private/public key

I have fully configured a LDAP server which works perfectly for authenticating users across my multiple nodes. I wanted to add an extra layer of security with the usual two factor public private key. ...
0
votes
1answer
24 views

Configuring django with LDAP

I have configured LDAP successfully with a python application using little more than these statements in db/model.py: from gluon.contrib.login_methods.ldap_auth import ldap_auth auth.settings....
5
votes
1answer
66 views

get AD group path in the domain/tree

How to get the path of a specific group from the Domain/tree? I am not getting to the info with the "Active Directory Users and Groups" program. We have a extensive tree of folders beneath the ...
0
votes
0answers
14 views

SAMaccountname bind against Windows RODC not working

I'm currently trying to bind against an Windows 2012 RODC using the SAMAccountName and it doesnt work but when I try the userPrincipalName it works like a dream. Is there any way that I can enable ...
1
vote
2answers
28 views

Managing SSH access for rolling teams to many AWS instances

We have a team of 20+ interns that join and leave us every 3-6 months. They each have individual SSH logins setup on 10-15 shared AWS instances, some of which have been running for years, others run ...
0
votes
0answers
21 views

Is it possible to authenticate through two ldap servers? [closed]

Is it possible to have a little linux ldap server VM in dept1 that authenticates valid employees from company.com ldap, but allocates membership to dept1 resources without making any new associations ...
-1
votes
0answers
10 views

Integrating Google App Directory with Linux File Share [duplicate]

This is a bit of hopeful question, as I'm not finding much on own about this. We are migrating to a new Linux server. We have been using Open Directory on a Mac Mini so far, and have run into problems ...
0
votes
0answers
33 views

NFS nobody issue

I am having the nfs nobody issue running Centos 6 . I am running nfsv4 and authenticating users using 389-ds LDAP . The nfs mounts on the client are fine, but I am getting the folling error: ...
0
votes
0answers
30 views

AD LDS - Can't enable LDAP over SSL

I have basically read some kilometers of documentation and I still can't enable LDAPS on AD LDS... I installed a self-signed certificate and a certification authority following for instance this link ...
0
votes
0answers
19 views

Remote LDAP authentication test in Windows server

I've a windows server A loggedin under domain local-domain.com I've another read only domain that is called remote-domain.com all ldap users are exist in the remote-domain.com. I want a simplest ...
0
votes
0answers
35 views

How do I enable nis schema in SunLDAP Server 11r1?

How do I enable nis schema in SunLDAP Server 11r1? I would like to be able to use the posixAccount and posixGroup classes
0
votes
0answers
20 views

Printer unable to reach ldap server

I am trying to configure a Ricoh C2051 printer to use LDAP authentication. I have my ldapserver setup and working correctly, and is reachable from the network where the printer is. There is no ...
0
votes
0answers
11 views

Is it possible to create this directory structure in AD LDS?

A customer is determined to have a directory structure like this: cn=lab1,ou=HHH, l=London, C=GB, OU=ACME Research,O=ACME Is this possible in AD LDS? How would I go about creating it? Currently ...
0
votes
1answer
15 views

SunLDAP Schema Extensions to support Linux/Unix Authentication + Sudo

We are running SunLDAP (Sun/Oracle Directory server 11), and would like our Linux/Unix machines to authenticate against LDAP and also use LDAP for storing SUDO policies. What Schema Extensions are ...
0
votes
0answers
46 views

ldaps on Debian Jessie with let's encrypt certificate

I'm already struggling for a while to set up an LDAP-Server on debian Jessie with enabled TLS. I'm new to the topic, so please show me my mistakes. I started by installing an reconfiguring slapd apt-...
0
votes
0answers
20 views

LDAPs calls fail through PHP installed on Nginx Server

I have PHP running on an Nginx Server and I want to make calls to my Active Directory over LDAPs. Calls over LDAP run just fine, but LDAPs poses some connection errors. I have ensured that LDAPs works ...
2
votes
0answers
37 views

Ldap over ssl not working

I have configured AD DS, DNS and AD CS in windows server 2012 R2. I have restarted machine after configured. I can able to connect with ldap on port 389 using ldp.exe. When trying to connect with ...
0
votes
1answer
50 views

ldapsearch can't connect to ldaps

I am using a Centos 6.6 and i'm trying to use ldapsearch to connect to my windows ad server and i can't connect using port 636. I exported the CA root certificate of my ad server in base64 and added ...
1
vote
0answers
25 views

PAM+LDAP no longer working after SLES 10.4->11.4 Upgrade

authentication via LDAP has ceased functioning after we upgraded to SLES 11.4 via recommended method (boot from DVD). Unfortunately with SLES I cannot give you any meaningful log output since neither ...
1
vote
0answers
22 views

libnss-ldapd and Onelogin vLDAP

I'm trying to get Onelogin's new vLDAP service working with libnss-ldapd on an Ubuntu server (14.04). It looks like vLDAP uses authenticated bind per user. I've tried lots of different configurations ...
0
votes
1answer
56 views

Running (brew) openldap on osx El Capitan?

As Apple keeps making "improvements" to the LDAP that comes with OSX (i.e. keeps breaking it on each update), I had to do my own installation of openldap, which worked fine on Maverick and Yosemite (...
1
vote
0answers
116 views

How to allow users on an openLDAP server to create, update, and modify users under a certain organizationalUnit?

I have been stuck on trying to allow openLDAP users that are in a certain group (EX: cn=Admins,dc=mydomain,dc=com) to create, modify, update, and delete users that are in another organizationalUnit (...
0
votes
0answers
18 views

Applying ppolicy.ldif in OpenLdap

I just added the ppolicy.ldif schema to ldap by running the following: ldapadd -T EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif I then try to ldapadd my change.ldif file seen below #...
0
votes
0answers
8 views

How to set an ACL in OpenLDAP to allow a user to fully manage an OrganizationalUnit? [duplicate]

I just installed OpenLDAP on my Ubuntu Server 16.04 LTS. I have my OpenLDAP server setup as depicted in the image below: Just like the image depicts I would like the blue color coded cn=admin to be ...
0
votes
2answers
39 views

Using ldapModify to delete objectClass in LDAP entry

I have a need to delete three different objectClasses from a bunch of LDAP entries. Here's my ldif file: dn: uid=user,ou=People,dc=example,dc=net changetype: modify delete: objectClass objectClass: ...
0
votes
0answers
15 views

Sync data between AD DS and AD LDS with differing schema

first off I have only recently been introduced to this world so forgive me if I trip up a bit :) From what I have read about replicating/synchronizing between AD and LDS it tends to disagree when the ...
0
votes
0answers
14 views

Oracle LDAP search where uid is not a part of the dn

I have a test server setup with users that have a uid in their DN and a CN in their DN: dn: cn=John Doe,ou=users,dc=qaoracleldap,dc=foo,dc=lan cn: John Doe givenname: John objectclass: ...
0
votes
1answer
22 views

Weird behavior with ldap and getent or repquota

I've observed a weird behavior in my network. I have my network users stored in OpenLDAP 2.4 which also serves a samba 3.6 Domain. I have user quotas on my NFS servers and that is where I stumbled ...
2
votes
1answer
34 views

What version(s) of SSL/TLS does Active Directory support?

I'm running a pair of 2012R2 RODCs behind a load balancer for authentication for certain applications (mostly on Linux). LDP.exe works fine for lookups, but we're having an issue with Postgres where ...
0
votes
2answers
89 views

Is it possible to configure a Cisco AnyConnect VPN to use two separate LDAP authentication methods simultaneously?

I have a Cisco ASA 5505 with a Security Plus license along with an AnyConnect Plus license. I don't currently have any VPN configuration on the ASA as I'm still in the planning phase. I would like to ...
0
votes
0answers
29 views

LDAP modify doesn't change anything

Got an issue with Active Directory LDAP and setting passwords. I'm connected through the LDAPS protocol to my AD server, and binding is successful. When attempting to set a user password, no error is ...
0
votes
0answers
24 views

Debian Cyrus SASL LDAP Auth fails

I am in the middle of an emergency server transfer from a server I did not setup to a new piece of hardware. I am running the newest Debian with Postfix and Cyrus. I have copied over the majority of ...
1
vote
1answer
80 views

sAMAccountName requires DOMAIN\ to authenticate

I am trying to ingtegrate SLES with Windows Active directory server for authentication purposes. We need to use sAMAccountName as login name but its unable to bind if we didn't give DOMAIN/...
0
votes
0answers
21 views

How to change the 'olcAccess' values of olcDatabase in OpenLDAP via spring-ldap?

I'm a new person of using spring-ldap-2.0.4 in order to communicate openldap, and change olcAccess values of olcDatabase via spring LDAP interface without using LDIF, I have met a difficult problem, ...