Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

-1
votes
0answers
15 views

How to tie ldap groups with ldap users on ldap client [on hold]

I'm trying to tie up ldap groups to users on a client but that doesn't work. The ldap user who has logged into the server has been put under a local group on that machine. Foe example say: group admin ...
0
votes
0answers
27 views

phpldapadmin not being able to connect to LDAP server using ldaps

Scenario I am trying to set up an LDAP environment on my Debian Wheezy server. I want to secure the communication with the server using a valid SSL certificate (meaning, it is not self signed). I am ...
0
votes
1answer
13 views

LDAP configuration for Mac server

We just migrated our php webapps to a new web server (Mac OS X 10.9.5). We are having trouble with ldap logins to the webapps. We are able to successfully connect to a remote ldap server, but when we ...
-2
votes
0answers
14 views

Nested Contact Groups

fist i would like to explain what i'm working right now: I work at a school that needs to send emails to parents about things that happen in school. They're about 1000 contacts. I have setup ...
0
votes
0answers
13 views

Early tear down of communication

I have an application which performs an LDAP search which works in one domain but not in the other, when analyzing the packets sent between the application server and the domain controller being ...
-1
votes
3answers
67 views

how do I change 1000 user passwords using ldap? [on hold]

I have 1000 users I need to change the password for to a known password for a migration tool (groupwise to exchange). I do not have any of the existing password. How do I change the password for 1000 ...
2
votes
0answers
22 views

Is dual directory integrations possible with Windows?

In the Mac world, you can integrate OS X systems with dual directories so that OS X looks towards Active Directory for authentication and OpenLDAP for OS X managed preferences. Is the following ...
-2
votes
1answer
22 views

how do you query your existing ldap parameters?

ldapsearch -A locked my computer up and upchucked about 3000 unnecessary lines (not one clearly had the information I was looking for). Is their a quick summary search that will upchuck your ou, dn, ...
0
votes
0answers
10 views

LDAP config for Novell export

I am trying to export the email userlist from groupwise via the consoleOne export tool.. In the tool, they ask for some basic LDAP parameters that make little sense in the GUI (I dislike GUIs). ...
-2
votes
0answers
11 views

Spring Security 3.1 & Active Directory - how to set up config for users and groups with out a password? [closed]

I have a website and I would like to validate if a user should have access via an AD Group. If they click on the site - in the background it would check we would check AD, without the user entering ...
1
vote
1answer
53 views

Getting list of users indirectly members of an AD group through LDAP

I'm having a bit of a problem with LDAP search that should specify whether a user is a member of a given AD group or not (recursively). Basically, what I'm doing is issue a LDAP search with the ...
1
vote
0answers
24 views

LDAP authentication, pam_mkhomedir and NFS automounted homes

We currently have a setup (running on Ubuntu 12.04.5 LTS) with mixed LDAP/NIS authentication and automounted home directories from several servers (with the auto.home distributed over NIS). Everything ...
0
votes
1answer
30 views

Can't contact LDAP server (with ldaps) in Docker

I'm trying to do a ldapsearch like this : ldapsearch -x -D "uid=username,ou=people,dc=example" -w passw0rd -H ldaps://example.com "(objectClass=example)" But it's giving me this error : ...
0
votes
1answer
32 views

389 Directory Server - Multiple Domains

I have multiple business that i would like to authenticate to a single server for SSO. I am using 389 directory server and have already split each domain into it's own respective OU. I would like to ...
0
votes
1answer
24 views

FreeIPA/389 DS userPassword

I am connecting to FreeIPA LDAP (386 Directory Server) as admin. I can find a user, and add the userPassword attribute like #!RESULT OK #!CONNECTION ldap://freeipa1.localdomain:389 #!DATE ...
2
votes
2answers
70 views

pam_ldap and ldaps can't contact ldap server

I'm trying to allow authentication via LDAP on a CentOS host system. But I always get a Can't contact LDAP server error from pam_ldap. The LDAP server is pingable and authentication works perfectly ...
0
votes
0answers
19 views

SSH login with LDAP users over NSLCD works after restarting server

I have a working nslcd setup running on many servers. I distributed this config to many servers almost all of which are working without problems. However I forgot to install libnss-ldapd and ...
0
votes
2answers
26 views

How to configure OpenLDAP server and test using Apache HTTPD

I am using CentOS 6. I found a great article on how to install and configure OpenLDAP on CentOS 6, and I found some other great documentation here on how to configure LDAP to work on Apache HTTPD (I ...
0
votes
0answers
29 views

Using the memberOf attribute with zimbra to determine if an ldap user is member of a POSIX group

Zimbra seems to have the capability to determine if an ldap user is a member of a POSIX group (see ZCS6 attributes). From my understanding, this should not have 0 results: -bash-4.1$ ldapsearch -x -b ...
0
votes
0answers
47 views

Root and child domain authentication through one LDAP path

I have a webapp and in the web.config file, there is an LDAP path to allow AD token lookup for users to login. The app also requires users to be in a specific group to login. In my case red\appadmins ...
0
votes
0answers
14 views

Restricting proxy access to certain ldap users

I'd like to restrict access to a squid proxy server to certain ldap users. Since the ldap backend I use is zimbra, I intruduced a new Class of Service simply called squidusers and use that for the ...
0
votes
1answer
26 views

How to create additonal Organizational Units (ou) with zimbra

How can I create more ous or change existing ous with zimbra (preferably the web administration frontend). Is there a zimlet available? Or is is maybe best practise to use additional Classes of ...
0
votes
1answer
19 views

Error while configuring openldap with ssl

I have a certificate from Digicert and I have added the keys to the bdb config file. The rest of the LDAP setup works fine except the SSL part. I have added a Mozilla certificate store as well, but i ...
0
votes
1answer
28 views

Password complexity on clients authenticating via openldap

We have a bunch of linux servers authenticating via an ldap server. We have set a password complexity policy on the ldap server. However, the local system policy overrides the policy set on the ldap ...
8
votes
2answers
411 views

Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?

We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most. Thus, we are installing: a wiki (dokuwiki) ...
0
votes
1answer
34 views

Intranet AD login for External Website

Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
0
votes
0answers
34 views

LDAP user's NFS files are mapped to nogroup (user ID mapped correctly)

In my office environment, I have set up multiple Ubuntu machines with LDAP authentication using the LDAP & NFSv4 server hostS. The LDAP/NFS server hostS exports the /home directory for all users ...
0
votes
1answer
42 views

Issues with LDAP authentication over SSL (ldaps)

I'm trying to setup an LDAP server with ldaps support. The server is hosted on ec2 and it has a domain name on route 53. I got an SSL certificate for the route 53 domain (say example.com). When i try ...
0
votes
1answer
21 views

red hat directory 9 / 389 directory server - Do duplicate invalid passwords count toward the lockout policy?

I have been looking at Red Hat's Directory server 9 (aka 389 directory server). One thing I was looking to find out was how account lockouts are handled if the same invalid password is repeated over ...
0
votes
1answer
16 views

Configuring different read and write targets for OpenLDAP

I have a new piece of infrastructure (a simple LDAP web service) that will be a drop-in replacement for something that currently exists in production. The backend OpenLDAP server will not be upgraded ...
0
votes
0answers
54 views

MacOS X 10.9 Mavericks Kerberos login w/ FreeIPA

Has anyone successfully set up authentication and authorization between MacOS X and FreeIPA? An old revision of the FreeIPA documentation explains how to get it working in 10.4 and nothing in their ...
1
vote
0answers
26 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
1
vote
2answers
89 views

How can I log on my linux machine with my Active Directory credentials?

I'm on a windows computer RDPing to a RHEL 7 Server. I now want to be able to log into that server using my windows domain credentials(over SSH, preferably RDP too but not necessary). Here's what I ...
1
vote
1answer
63 views

Postfix Splitting Domain to Separate Mailstores using LDAP

I'm investigating a new mail setup to replace Exchange in our organization using Cyrus-IMAP, Postfix and Perdition IMAP proxy server. I'm running into issues dealing with sending emails to different ...
0
votes
1answer
29 views

FreeIPA krb5.conf has example.com entries

I have installed and reinstalled FreeIPA ipa-server-3.0.0-37.el6.x86_64 on a fully updated OEL 6.5 server a couple (3) times now and even if I destroy the existing /etc/krb5.conf file and reinstall ...
0
votes
1answer
31 views

389-ds and openldap client setup

I am working towards a proof concept: I have installed 389-dc on centos and enabled ssl via a self-signed certificate. (after a lot of reading) I can see the port 636 is listening on the centos ...
0
votes
0answers
24 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
0
votes
1answer
58 views

Limit access on Apache 2.4 to ldap group

I've upgraded from Ubuntu 12.04 LTS to 14.04 LTS, and suddenly, my Apache 2.4 (previous: Apache 2.2) now lets everybody in to my virtual host, which is unfortunate :-). What am I doing wrong? ...
0
votes
0answers
9 views

LDAP: Extend database using referral

My company uses an off-site LDAP server to handle authentication. I'm currently working on a local VPN for my branch that needs to use the off-site LDAP to check user's usernames and passwords, but I ...
1
vote
1answer
37 views

Are there any ldap proxy servers that can supplement the results from the main ldap server?

We have a central ldap server that authenticates and provides authorization information about users in our institution. I am looking for a LDAP Proxy that supplement the central LDAP server to support ...
-1
votes
2answers
71 views

RHEL 6.5 and LDAP

I am trying to connect our Active directory server to brand new RHEL 6.5 server. I want to authenticate users using AD credentials, but I want to restrict that only certain users can login, I don't ...
0
votes
0answers
51 views

Freenas & LDAP Multiple User Groups Not Taking Affect

we are using, Freenas 9.2.1.7 which communicates with LDAP to control file permission. We have Windows users in multiple groups. Some belong to Finance as their primary group and Admin as another ...
0
votes
1answer
26 views

phpldapadmin uidNumber stopped auto-updating on new user creation

We are having an issue that just started this morning. It seems our phpldapadmin (1.2.04) interface has stopped auto-incrementing the uidNumber on new user creation. Basically we are stuck at ...
0
votes
3answers
35 views

executing commands when user first logs in

So I use webmin to create ldap user. I then manually create public_html folder, and set quota for newly created home folder. Is there a way such that I can execute commands when user first logs in or ...
0
votes
0answers
51 views

Way to authenticate against Active Directory but without direct access to it?

So I'm in an interesting situation. I have an application that only supports authentication via LDAP on my network and client with active directory on their network. We have a secure VPN tunnel ...
0
votes
1answer
38 views

Change SAMBA password in LDAP with Apache Directory Studio

I am using Apache Directory Studio to administer a small LDAP database, and I am planning to stop using LAM for user and group management because it lacks groupOfUniqueNames support. I have only one ...
0
votes
0answers
33 views

ejabberd and LDAP authentication using StartTLS

I am trying to setup ejabberd that authenticates users against an LDAP server. The LDAP server requires all clients to connect via StartTLS (olcSecurity: tls=1). ejabberd's LDAP module does not ...
0
votes
0answers
78 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
1answer
20 views

Why does ldapsearch not show user's supplemental groups?

I have a user who when I type 'id username' shows more groups than when I query ldap using ldapsearch. What switch do I use? $ id apanda uid=14510(apanda) gid=5010(sambauser) ...
0
votes
1answer
62 views

Weblogic Admin server gets LDAP errors then unexpectedly shuts down

we have a new(ish) WLS 9.2 installation Over the last day or so, after restarting WLS, after a while, the admin server unexpectedly shuts down, preceded in the logs by many (hundreds) occurrences of ...