Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
1answer
15 views

Samba Domain Management [on hold]

I've recently setup a 2 Samba Domains using version 4.11 and trying to find a way to to manage the environment without using the shell. I know we could use some of the mmc tools from Microsoft, but ...
0
votes
1answer
14 views

ubuntu 12.04 sssd sudo not working

This is for Ubuntu 12.04.5 LTS I am trying to implement SSSD as a client and everything works all right BUT SUDO I cannot see anything happening in the sssd_sudo.log file at all but the usual file ...
-2
votes
0answers
29 views

Are the UID of users from a domain maintained locally in a machine?

This could be total nonsense but as I am new and am trying to learn. I came across this question. I have seen many of my office linux machines connected to some domain. I am wondering as if a ...
2
votes
2answers
69 views

Linux: sssd cache not being cleaned upon server reboot, what could be the cause and how can it be changed?

I'm using sssd in order to work with LDAP users and groups within our Linux environment. I had to rename the LDAP group of one of my Linux users and I noticed that after I finished editing the group, ...
0
votes
1answer
14 views

proprietary authentication to LDAP

I have a proprietary external authentication platform, that I can use to authenticate with over REST-WS. Now I would like to have / build a way to have numerous other web services (website, forum, ...
0
votes
2answers
28 views

ldap query with nested group

I try to build a ldap query to MS Active Directory. I found that there is a LDAP_MATCHING_RULE_IN_CHAIN type to do so. Which results in the follow syntax: ...
0
votes
1answer
20 views

Auth fail on Samba server with LDAP backend‏

I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc. The samba schema is present in the LDAP, and in the users profile. ...
1
vote
1answer
26 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
-2
votes
1answer
13 views

Migrate local user to LDAP server and keep the old user directory

I have an existing Debian server with a lot of local user (these user account are used for application authentication and keeps files in each home directory), and I want to migrate all the local user ...
0
votes
1answer
23 views

LDAP Bind failure / GroupPolicy 1006 / ErrorCode 81 (on one workstation only)

Multiple domain accounts on this same workstation yield the same error; those same accounts on other workstations sail through with no problems. It's occurring intermittently: roughly about 9 out of ...
0
votes
0answers
27 views

gitlab ldap authentication with domino server

i try to implement ldap authentication for my gitlab server 7.8.4 my ldap server is a Lotus Domino Server My group called "gitusers" with all of the allowed members does anyone know how to build the ...
1
vote
0answers
30 views

Promote Windows Server 2012 to domain controller in an existing samba network

I have a Windows Server that I want to use as a domain controller to push gpo's to workstations that are on a samba 3 domain served from an Oracle Solaris server. If I were to promote this server to a ...
1
vote
1answer
33 views

Check if account is allowed when using pam_access

I'm using pam_access and /etc/security/access.conf to restrict who can login to my Rhel 6.5 hosts. I have an LDAP server with a diverse user base, and the security people would like a list of who can ...
0
votes
1answer
25 views

migrate samba users to new server

I've read How to migrate Samba User Accounts to a new linux server? however it doesn't address my situation, or at least not with a solution. I have a RHEL 5 machine, wood, running Samba, Dovecot, ...
1
vote
0answers
40 views

Configurable ftp-proxy with LDAP authentication

I am looking for solution for following situation. I have bunch of ftp account (many servers) and many users. They need access to that servers. I don't want to give every user passwords to every ...
1
vote
0answers
25 views

Couldn't bind LDAP using PHP [migrated]

I try to bind LDAP using PHP and I getting this error Warning: ldap_bind() [function.ldap-bind]: Unable to bind to server: Can't contact LDAP server on line 21 and the script on line 21 is ...
1
vote
1answer
24 views

How to change an attribute value for all entries of ldap directory using ldapmodify command?

LDAP: How to modify an attribute value for all entries of directory using ldapmodify command? Looking for some syntax like below in modification input file for ldapmodify command dn: ...
0
votes
1answer
43 views

getent passwd dosen't show users of LDAP server

I have made the LDAP authentification configurations and I try to authenticate to the LDAP server on Ubuntu 14.04 TLS. This is the file nsswitch.conf : # /etc/nsswitch.conf # # Example configuration ...
0
votes
1answer
49 views

ldap_add: Constraint violation (19) additional info: some attributes not unique

Well I have already gone through ldap_add: Constraint violation (19) but couldn't solve my problem! Problem I'm facing is that, when I'm trying to add users from bckup.ldif file by issuing following ...
-1
votes
0answers
37 views

Unable to delete an OpenLdap entry - Invalid credentials (49)

I added this user to my ldap server : dn: cn=Bob Jones,ou=Users,dc=souad,dc=com cn: Bob Jones sn: Jones objectClass: inetOrgPerson userPassword: admin uid: bjones and this is the command I tried to ...
0
votes
1answer
27 views

Active Directory users authentication on Ubuntu server

I need the simplest way to authenticate Active Directory users on Ubuntu Server (at login). I am trying with libnss-ldap, but it only works with plain LDAP server (like SLAPD) but now Active ...
0
votes
0answers
24 views

ldapsearch - Get all members of a CN (nisNetgroupTriple)

I'm a bit new to using LDAP, especially non AD LDAP. We use RedHat Directory Server and was trying to do an LDAP query (filter specifically) that would retrieve all the users (and their attributes) ...
0
votes
0answers
35 views

Change domain name in Zentyal

I am not a network administrator, but it was requested of me to do a "small" maintenance on a server. The problem was that the domain name of the server was the same as the Web domain of the company, ...
0
votes
1answer
54 views

Unable to authenticate LDAP client with PAM when pwdReset = TRUE

I have searched tons of webs and tutorials but I couldn't find an answer to my problem. I have set up OpenLDAP 2.4 on a OpenSUSE 12.3 machine with a password policy overlay. The client is a Linux ...
1
vote
1answer
60 views

Ldap+kerberos authentication through AD

Is it possible to configure ldap+kerberos authentication on a linux machine without joining it to windows domain? I have to create a pool of VMs using RHEVM with a pretty short lifetime and I do not ...
0
votes
1answer
42 views

Configure which Nameserver responds to domain name [closed]

I have a domain with four name servers (Two behind a Firewall and two on the public network). We were required to have two of the servers behind the firewall. It's causing issues when bringing new ...
0
votes
1answer
30 views

LDAP communication between two local server

I want to make my LDAP Port accessible inside my private network. Is it possible? Operating System : Ubuntu 14.04 x64 My LDPA Server configuration: eth1 Link encap:Ethernet HWaddr ...
2
votes
1answer
137 views

Fedora 21 pam_sss authentication failure - permission denied

We have configured a OpenLDAP server which is working fine. FreeBSD, Debian, and a WordPress plugin authenticate with no problems. We are configuring Fedora 21 with pam_sss, but we get the following ...
1
vote
2answers
45 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
1
vote
0answers
49 views

Postfix not following MX, local delivery LDAP

Before explaining the problem, this is the setup: We run 5 servers, 2 in Montevideo [Uruguay], 3 in the US, on each server we have clients (domains, mail accounts, and obviously local logins) the LDAP ...
1
vote
2answers
62 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
3
votes
0answers
65 views

SSSD process won't die

Thanks for taking the time to check out my problem. I'm currently working on an issue that has only appeared once before. Back on Jan 3rd when this first appeared we were able to reboot the server ...
1
vote
2answers
66 views

How to filter ldap user logins on linux?

I have several linux servers (ubuntu 12.04) setup to authenticate user logins over an external (to my branch office) LDAP (Novell Edirectory specifically). This is working well, however I am trying to ...
0
votes
1answer
29 views

tracking down root cause for openldap account locking

This has happened to me in the past, and I've been able to find an email client or something random like that which was over zealously trying to login with the wrong password, but for the life of me, ...
0
votes
0answers
157 views

LDAP client can connect to LDAP host but can't see LDAP users

I'm configuring LDAP on a cluster of Ubuntu 14.04 machines. I successfully set up the LDAP host using these instructions. Now I'm trying to get an LDAP client to work using these instructions. ...
2
votes
2answers
106 views

Windows Hosts DNS query for _ldap._tcp.domaincontroller, is this normal?

To make this easier to wrap my head around, here's what I'm using in my examples: deecee = my domain controller dctoo = another domain controller internal.foo.bar = the full DNSDomainName of ...
0
votes
1answer
52 views

freeradius broken after apt-get update

Ubuntu 14.04.1 LTS apt-get update /upgrade was run last night at around 10pm. This morning people are saying that they can't get into ftp and wifi because these services are auth'd by freeradius. ...
1
vote
0answers
25 views

Access denied for creating user on LDAP

I have a web application that needs to be able to create users on a LDAP. I have created a cn=intranet,dc=example,dc=com and I need it to be able to add users unside ou=People,dc=example,dc=com. So I ...
0
votes
0answers
24 views

Why does Apache hang when failing to connect to LDAP?

Environment: Centos versions: 5.11, 6.6 Apache version: 2.2 Apache hung on several of my webservers today after failing to connect to LDAP. I fixed the LDAP issue but I was wondering why Apache ...
0
votes
0answers
69 views

OpenLDAP client certificate giving “Unable to find the certificate or key necessary for authentication”

Initial setup of system I have an OpenLDAP server running on SLC6.5 and a client running Fedora 20. The server and client are both running OpenLDAP 2.4.39 which is built with Mozilla NSS as its SSL ...
0
votes
1answer
89 views

LDAP users can't ssh

When I ssh to my CentOS 6 server with root account, everything is working fine. But when I try with an LDAP user, I get permission denied. I tried logging in with root, and then su to a LDAP user, to ...
0
votes
1answer
25 views

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories?

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories? Is there an Object Class that provides ObjectSID which can be used in other directory services such as ...
1
vote
2answers
72 views

Linux Authentication with Windows 2012R2 Server (Deprecated IMU role)

I've been looking around the web trying to find a way to authenticate users on Linux with a Domain User account on a Windows 2012R2 Server. The way I've done this in the past is using the "Identity ...
0
votes
0answers
38 views

Slow sudo response

We have LDAP setup to provide information regarding sudo. The whole system works, but it takes a long time (~10 seconds) for any sudo command to return. For instance if I run strace -f -r -o ...
1
vote
2answers
135 views

Apache 500 error with no entries in error.log [duplicate]

This is on a brand new Ubuntu 14.04 Server running a standard WAMP install with Apache DAV_SVN (using LDAP Authentication) added on top of it (mapped to /svn). I was able to get everything working ...
0
votes
0answers
27 views

Why I cannot add groupOfUniqueNames to LDAP?

Hi I'm trying to add groups for then add LDAP users to them but I don't know why LDAP is not adding. Previously I added users, organizational unit, etc. Here the exmaple of ldif that I would like to ...
0
votes
1answer
35 views

OpenLDAP server not working through ldap:// protocol

I have a vanilla Scientific Linux 6.6 install (essentially RHEL 6.6) which I am trying to set up as an LDAP server. I have installed openldap-servers and started slapd with service slapd start. This ...
1
vote
1answer
37 views

Can I configure pam_ldap without configuring nss?

On my servers I have my system users provisioned with Chef and have no desire to expose any additional users to these machines. I would however like to utilize pam for the authentication backend for ...
0
votes
0answers
41 views

LDAP with TLS: connect error(-11)

I configured OpenLDAP and today I've configured the TLS for more security following these guide lines: Configure OpenLDAP with TLS=required Modifying the cn=config.ldif with config file: dn: ...
0
votes
0answers
15 views

Connect OpenLDAP to Samba in read mode?

We have Samba 3 based domain controller. The password backend for the domain is pdb/*nix users, this means that we do not have LDAP service running with Samba (I may be wrong on this one, but I do not ...