Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
14 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
1answer
15 views

perl print ldap tree hierarchy at command line

Is there a way to print a tree like view of an existing ldap directory at the command line with perl? Like the 'tree' command does with files/directories, but for ldap?
2
votes
1answer
17 views

SSH key authentication using LDAP

In short: Would like a way to do SSH key authentication via LDAP. Problem: We use LDAP (slapd) for directory services and we've recently moved to using our own AMI for building instances. The ...
0
votes
0answers
14 views

client crash after installing libpam-ldap and nscd and getting users authenticated by ldapserver [on hold]

I configured a client machine for authentication through LDAP server. Using this tutorial. I was able to authenticate an LDAP user from the server. But when I restarted the machine, it failed to ...
1
vote
0answers
18 views

Nagios 3.2.3 Core web interface login via LDAP using full names for username

First off I've never done any Nagios or LDAP configuration in the past and I've been sort of dumped into this as is so often the case so forgive my inevitable ignorance regarding these things but I've ...
0
votes
0answers
16 views

Q: MTA cannot connected to LDAP in Zimbra Multiserver

I want to install Zimbra multiserver, with 2 server, MTA and LDAP. I follow this tutorial: http://www.zimbra.com/docs/ne/6.0.8/multi_server_install/multi-server_install.5.01.html I have problem ...
0
votes
1answer
15 views

Unable to connect to server via LDAPS

I'm running OpenLDAP on an up-to-date Debian box. I'm trying to run a simple command: ldapsearch -x -h <<IP>>:636 -D cn=<<BASE DN>> -d1 and I get this output: ldap_create ...
2
votes
0answers
14 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
-1
votes
0answers
10 views

OpenDS and Samba fails to add user

We are running OpenDS as LDAP server and samba for shares. Recently previous sysadmin (on his last day) accidentally mixed up OpenDS records and now we can't create new user. When we try to add new ...
0
votes
0answers
24 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
2
votes
1answer
18 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
1
vote
1answer
39 views

git-http-backend and LDAP authentication, push error: requested URL returned error: 401 Authorization Required

My setup OS: debian git: v 1.7.10 apache (with suexec mode enabled) configuration with git-http-backend and LDAP authorization to git repos which works for clone operations, but not working for push ...
1
vote
0answers
16 views

delay in ACK packets for ldap abandon request

we have migrated from an openldap server on linux to a DirX on windows 2008. The ldap server und normal serch request behaves as expected. However with some applications (weblogic deployed webapps) ...
2
votes
1answer
28 views

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all ...
0
votes
1answer
26 views

Official name for AD/LDAP targets

Say I have an AD user called flimflam that is "located" at OU=System, DC=fizzbuzz, DC=myorg, DC=com: What is the technical/appropriate verbiage for OU=System, DC=fizzbuzz, DC=myorg, DC=com? Location? ...
3
votes
2answers
40 views

When does an ACCOUNTDISABLE value in userAccountControl *not* correspond to a disabled mailbox?

We are querying a number (dozens) of LDAP servers (mostly Active Directory, but not exclusively) to determine which mailboxes are active, for the purpose of a mail gateway/forwarding application. We ...
1
vote
0answers
14 views

Configuring openldap/PHP LDAP against “signed” LDAP connections with Active Directory

This may sound like a stupid question, and maybe it's already been answered, but I can't find a definitive answer anywhere, so I thought I'd ask. When someone enables "Domain controller: LDAP server ...
4
votes
0answers
121 views

Configuring Synology NAS as freeIPA client

I'm attempting to deploy freeIPA in my company. The network is quite simple: < 10 FC20 (and FC21 beta) desktops < 5 FC20 servers (including the one with freeIPA) 1 Synology NAS DS1813+ (DSM ...
1
vote
0answers
78 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
0
votes
0answers
54 views

nslcd fails to connect to ldap server

Hey guys I searched a bit on stackexchange but could find help for my problem. I'm trying to integrating LDAP authentication on a centos 7 client, but I can't get it working, and I can't find out ...
1
vote
0answers
16 views

PhpMyAdmin and auth_ldap plugin

I have a need to authenticate MySQL users from an LDAP source using the community edition of MySQL Server 5.5. The auth_ldap plugin has been compiled from source ...
0
votes
0answers
16 views

Apache HTTP Server LDAP authentication with netgroups

Is it possible to do a group authentication in Apache HTTP Server ("Require ldap-group") but instead of a normal (posix) ldap group to use a netgroup?
0
votes
1answer
92 views

ldapsearch returns result, but getent does not

I am setting up a fresh CentOS 7 server to and need to setup LDAP authentication i.e. there already exists a server that authenticates users, which we use for other GNU/Linux servers. For instance, ...
2
votes
1answer
71 views

openssl s_client ignoring custom root CA certificate in /usr/share/ca-certificates

I've set up an Active Directory server and configured LDAP-over-SSL, which works fine for machines on the domain, however because it's using certificates provisioned by AD's Certificate Services it ...
-1
votes
3answers
49 views

ldap. What is binddn_passwd [closed]

I installed Nginx with LDAP, it works. But I can't understand the purpose of "binddn" and "binddn_passwd" ldap_server dc1 { url ...
0
votes
1answer
37 views

Does Active Directory alone is not enough to secure hadoop?

I am trying to secure Hadoop environment installed in windows. So basically I started to analyse how to secure a Unix-based hadoop cluster. Have gone through various links related to Kerberos and ...
1
vote
1answer
34 views

Using sssd ldap access filter DENY based on group?

I am currently using sssd.conf to only allow login for ldap users that are in a specific group. I would like to do the opposite and DENY login based on group membership of a user, while allowing all ...
0
votes
1answer
41 views

Freeradius LDAP through AP

I need help with a connection to RADIUS throught Access Point LevelOne EAP-110. I configured RADIUS + LDAP, tried with radiusd -X I get this message: radtest fsobarzo ********** localhost 100 ...
1
vote
3answers
194 views

NSLCD only connects to LDAP server in debug mode

Hey guys I searched a bit on stackexchange but could find help for my problem. I'm trying to integrating LDAP authentication on a centos 7 client, but I can't get it working, and I can't find out ...
0
votes
0answers
84 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
1
vote
1answer
186 views

WebLogic 10.3.2 LDAP Authentication failure after Domain Controller Patch MS14-066 (KB2992611)

I have configured a LDAP authenticator in my WebLogic 10.3.2 domain. Login worked until the domain controller was patched with MS14-066 (KB2992611). Domain Controller OS is Win Server2008R2 (x64). ...
0
votes
1answer
30 views

LDAP passthrough authentication. testsaslauthd fails only with ldaps

I am trying to set up an OpenLDAP passthrough authentication to another server. When I do testsaslauthd with simple ldap:// the test works fine. When I try with ldaps:// it fails. ...
3
votes
1answer
29 views

Chasing referrals in Ldap

I'm currently improving a program featuring an ldap integration. This ldap integration is currently not able to handle ldap referrals. I do understand, that i will gen entries back that will hold the ...
0
votes
1answer
31 views

Only allow ldap users to connect to Inspircd

I've set up Inspircd for our IT shop and I'm trying to configure it to be closed except for LDAP users. I used ./configure --enable-extras=m_ldapauth.cpp and I configured the LDAP module in ...
1
vote
1answer
31 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
2
votes
1answer
49 views

Understanding LDAP traffic with ActiveDirectory

In looking at LDAP traffic through Wireshark I was curious to understand the conversation between the a windows client and Active Directory. Each conversation would vary to less than 80k bytes. But ...
1
vote
0answers
100 views

Ubuntu server + Samba + PAM + Apple OpenDirectory

Due to various reasons, we are looking to migrate our file servers from OS X Server 10.9 over to a true Samba implementation running on Ubuntu 14.04LTS. We have Ubuntu up and running with Samba ...
3
votes
1answer
54 views

Debian staff group causes problems

We have an (old and grown) infrastructure of linux machines (mostly debian). For user authentication we use LDAP where we have defined several groups with different access rights. Unluckily one of ...
1
vote
0answers
99 views

Centos client authenticate against zentyal DC via ldap

I have a bit of a problem. 3 months ago we deployed a zentyal dc on my workplace because it was a good way of authenticating both windows, linux and mac against the same server. I got authentication ...
0
votes
1answer
21 views

Does LDAP allow User Permission at Application Level?

Following is the scenario in the picture, We have one server at back and five other servers (running 5+ applications). We are developing LDAP instead of basic Database authentication rule in which we ...
1
vote
2answers
16 views

Are certificates from all Active Directory domain controllers needed on client for LDAPS?

I am setting up LDAPS on our AD servers to encrypt ldap authentication between the domain and a web server using an internal CA cert. The AD servers and web server are on one side of the firewall but ...
0
votes
1answer
25 views

JBoss - Not working the next day

We are having a problem, our JBoss EAP 6.3 cluster (2 nodes in domain mode + Apache) on a Centos OS, is not working after a period of inactivity (night). Its connected to an ldap. We do login, ...
0
votes
0answers
51 views

openLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04

I have installed an ldap server in Ubuntu 12.04 using the tutorial https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-server-installation. First time everything went fine but had ...
1
vote
1answer
78 views

ldap/AD proxy: Unable to bind using sAMAccountName, but last name and first name is able to bind

I am attempting to set up a pass-through proxy to Active Directory, using ldap on Debian Wheezy. The slapd.conf file is below. I can bind just find by using lastname, first name: ldapsearch -x -h ...
0
votes
0answers
70 views

LDAP query to obtain distinguished name of a list of users

Hi im working on a migration process on which we are migrating users from one server to another domain controller. Right now I have a list of users I migrated, but I also got another of them I didnt. ...
-1
votes
1answer
41 views

How to setup a group profile based for terminal server via LDAP?

I have 4 terminal server "they are clustered together." All of them have the same specs and same configuration. and have Windows Server 2008 R2 installed on them. All users are using LDAP to log in. ...
1
vote
1answer
26 views

Sync GApps users to LDAP (or just passwd file)

Do you know any way to sync users from GApps to LDAP? Or, maybe, is there any tool to sync GApps users with passwd file? I know, that Google has tool to sync users from LDAP to GApps... Why I need ...
0
votes
1answer
44 views

can't get “memberof” to work in my OpenLDAP config

I'm trying to set up OpenLDAP on a Debian 7.7 server. While basic auth seems to work, I can't get the "memberof" overlay to work. Being new to LDAP, all that memberof config seems overly complex to ...
0
votes
1answer
13 views

how to use ldapsearch for sort attribues filter

I would like to know how to use ldapsearch filter for sort mail by gid number. I tried several command and I don't get what I expected. I got all the entry without sorting or nothing. Thanks for your ...
0
votes
1answer
24 views

Samba: per-user ip restriction

We have a Samba server with LDAP authentication running. User privileges are controlled by UNIX groups and ACL and everything works just nicely. In the future we will allow users to connect via VPN ...