Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
8 views

Delete domain using ldapdelete

According to the man page of ldapdelete it should be possible to delete entries [root@controller ~]# man ldapdelete EXAMPLE The following command: ldapdelete "cn=Delete ...
0
votes
0answers
7 views

Php,apache ds,kerberos integration [on hold]

I have installed Apache ds and enabled kerberos server(the one coming along with DS).I am successful in connecting to server using GSSAPI authentication from Apache studio.Apache ds and kerbros is ...
1
vote
1answer
17 views

Joining Linux host to Active Directory fails to update Microsoft DNS

I am joining Linux hosts (CentOS 6) to Active Directory using a special bind account. I've granted delegate permissions to this user and when I join on the default Computers OU, a computer object is ...
1
vote
0answers
11 views

FreeIPA remove read and search permission

I want to disable the read and search permission that is granted to all user accounts by default. I don't want users to be able to display other users informations. is this possible? and is there ...
0
votes
0answers
16 views

How to setup openwrt PAM SSH to use LDAP server [on hold]

Is there any guide to setup PAM to authenticate user from LDAP server. My current setup has openwrt installed with PAM SSH, and LDAP server on another linux machine. I would like to authenticate any ...
0
votes
0answers
11 views

centos7 pam_authz_search for *.group.company.com

Upgrading from Centos6 where we were using ldap.conf entry "pam_check_host_attr=yes" previously, with wildcard 'host' attribute in ldap where the host attribute looked like 'host=*.group.company.com' ...
2
votes
2answers
38 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
1answer
21 views

Define a group leader in a LDAP posixgroup

I'm trying to find out if it's possible to define a certain member in a posixgroup as the group leader/manager of that specific group. I tried looking for some objectclasses with this purpose, but my ...
0
votes
0answers
37 views

Openvas ldap authentication configuration

I'm stuck in the process of Openvas ldap authentication configuration. I use the following openvas components version from upstream: openvas libraries - 8.0.3 openvas manager - 6.0.3 (both ...
0
votes
0answers
12 views

How to export LDAP RootDSE attributes to LDIF file?

How to export LDAP RootDSE attributes to LDIF file? I was able to use Active Directory Explorer to see RootDSE attributes but I can not export them: ...
1
vote
1answer
42 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
0
votes
1answer
24 views

LDAP authentification and sub-directories

My apache server is using the LDAP to authenticate users when they want to access the root of the server. I'd like to add another authentification (without prompt) to allow/forbid groups of users ...
-1
votes
0answers
27 views

What this warning mean - WARNING: No NSS support for mDNS detected

I have Linux machines that get the data from LDAP Each user that login to the Linux machine will authenticated VIA the LDAP , and will access the machine if login and password are correct The ...
1
vote
0answers
14 views

what is the the difference between all the NSS caching daemons?

I would like to see a comparison between nscd, unscd, nsscache, sssd and nss-pam-ldapd. Those are all the alternatives to nscd that i could find in Debian... Our setup is that we have a bunch of ...
0
votes
1answer
32 views

Track a machine who is entering bad passwords into a samba3 domain controller

I have a user who is getting its account locked constantly because an other machine is trying to login with an old and bad password and thus locking the user's account... The user doesn't know which ...
0
votes
0answers
9 views

assigning permissions to nested groups in FreeIPA

I have several user groups in FreeIPA (group1, group2, ..., group6) which are members of each other. (group1 is the master group) group1 -> group2 -> group3 -> group4 -> group5 -> ...
1
vote
1answer
68 views

Windows 2008R2 Logon Restrictions and LDAP Authentication

We use a Palo Alto firewall (and its GlobalProtect client) for VPN access to our network. The firewall uses LDAP to authenticate VPN logins. I am now trying to setup a user ID for a consultant and I ...
0
votes
0answers
25 views

OS X management - binding to OpenLDAP server

As my small company starts to realise the need to manage things more efficiently, I've been working on centralising management of our OS X workstations. Our overall environment consists of Linux and ...
1
vote
0answers
31 views

How do you add new custom attributetypes to existing objectclasses in LDAP

How the heck do we add new attributes to existing object? For example, I have a custom LDAP objectclass: m-oid=1.1.1.1.1.1... m-must: uid m-may: role m-may: cn m-may: sn Then I added some ...
0
votes
0answers
32 views

LDAP search query (using or) not returning values

I am using the following query in LDAP: ldapsearch -D "uid=test,cn=Users,cn=accounts,dc=earthlinktele,dc=com" -w dsaasddsa -b "cn=accounts,dc=earthlinktele,dc=com" ...
1
vote
0answers
24 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
2
votes
0answers
29 views

Multiple passwordStorageScheme values on same user on 389ds / FreeIPA

I have deployed a FreeIPA identity solution which is backed inside by a 389 directory server. Due to the need of periodically syncing user passwords to another platform (Google Apps for Work), I need ...
1
vote
0answers
10 views

ACL - Subtree Admin should be able to modify password as well as the users themselves

dn: olcDatabase={1}hdb,cn=config objectclass: olcDatabaseConfig objectclass: olcHdbConfig olcaccess: {0}to dn.subtree="ou=subtree,dc=domain,dc=tld" by self write by dn="cn=subadmin,dc=domain,dc=tld" ...
0
votes
0answers
10 views

cisco ucs user login using ldap group authorization

I'm trying to configure a cisco ucs server login with ldap using group authorization. I can login to the cisco server using ldap username and password when I add the user to "admins" group, but when I ...
0
votes
0answers
19 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
2
votes
1answer
55 views

Linux AD integration, unable to login when using Windows Server 2012 DC

I am trying to integrate my CentOS 6.6 servers into Active Directory. I've followed this guide from Red Hat using configuration 3 (SSSD/Kerberos/LDAP). When using a Windows Server 2008 R2 server as ...
0
votes
1answer
21 views

Dovecot not used as LDA by Postfix

I try to set up a mail server on Ubuntu using Postfix, Dovecot and LDAP. So far I can send and receive mails with Postfix and can connect to Dovecot via telnet (port 143) with an LDAP user. As a next ...
1
vote
1answer
32 views

How can I enable the audit logging in LDAP

I want to log the users activities (who does what) on LDAP, the audit log is disabled by default, how can I enable it?
0
votes
1answer
34 views

Weird authentication error from Active Directory Win 2008R2

I am trying to do a ldap query from a OpenBSD client to windows 2008R2 active directory and I am getting this error,"49: Invalid credentials". I don't understand why if I tried the same username and ...
1
vote
1answer
57 views

All LDAP traffic is being sent on TLSv1.1 not TLSv1.2

I have a kvm server, Centos 6.6 host with 6.6 guests. We run a php based web app that uses LDAP authentication for our clients. We just moved a client to this setup and they are reporting that all ...
1
vote
1answer
11 views

FreeIPA re-arrange custom attributes

I created several custom attributes and added them to LDAP and FreeIPA, but their order in the user page is very messy. I want to re-arrange them and put the related attributes together (such as ...
1
vote
0answers
28 views

OpenVPN routing based in LDAP Authentication?

To understand the solution better this is an example: The company has 1000 users that constantly switch seats (computers are set with DHCP IP, so the user can constantly have his IP address ...
1
vote
1answer
64 views

Zimbra: stuck .msg files and phantom messages in mailboxes

Users in my org use Outlook 2010 e-mail client with pop3 access to ZCS/OSE. These clients are using default "delete messages from server after 14 days" setting All message boxes are set up as follows: ...
0
votes
0answers
23 views

Mac OS X Server authenticate Samba agains external LDAP

Here's our current situation; We have 2 networks that are connected to each other with a router. The first network in an Microsoft Active Directory based network. The second network is an Apple Mac OS ...
1
vote
0answers
10 views

LDAP group of words (not names)

We use LDAP for authentication and organization of items, and we have the following structure (minus a couple top levels, of course): Clients Client1 client1Users (group of users, member is ...
1
vote
1answer
41 views

htpasswd: unable to update file

I am trying to add a new user to authenticate to Apache2 (httpd) through Active Directory. The user already exists and belongs to a domain. I am essentially following the instructions in this Apache ...
0
votes
0answers
21 views

Secure LDAP replication over the Internet

I have a remote site in which I'll need to authenticate my users. I have my users in a LDAP db. Thus my idea is to replicate the OpenLDAP server to the remote site to perform authentication locally ...
0
votes
1answer
29 views

OpenLdap error: Your attempt to add uidNumber (2276) to <cn …> is NOT allowed. That attribute/value belongs to another entry

I'm using OpenLDAP. The management interface is phpLDAPadmin. Whilst this has made things easy, it also means I've not been exposed to the internals. There is an existing entry using the uidNumber ...
1
vote
1answer
44 views

Filter getent passwd output with SSSD

I am using ldap_access_filter in sssd.conf in order to limit access to users that are in a specific ldap group. However, when I do a "getent passwd" I still get a full list of the ldap users. How can ...
0
votes
1answer
40 views

Apache - Multiple AuthLDAPURL

I currently have my vhosts setup to authenticate via LDAPS via Apache reverse proxy . I am wondering if it's possible to add a backup/fallback LDAP server if my primary one goes down. I tried working ...
0
votes
1answer
23 views

LDAP share attribute's value between a group members

I want to add members to a group, then I want them to share a single attribute value that need to be changed once for it to be changed for all other members. I found a page about effective attributes. ...
0
votes
1answer
39 views

FreeIPA users can't see new custom attributes

I have added some new custom attributes to my FreeIPA and so far I was using the admin account to check them in the WebUI. But today I accessed the WebUI using a regular user account and I was ...
0
votes
0answers
25 views

Checking ShadowExpire with apache's mod_authnz_ldap

I'm currently using mod_authnz_ldap for basic authentication. This works fine, but I'd like the ability to lock accounts without changing the user's password. For Linux, adding shadowExpire attribute ...
1
vote
0answers
43 views

Not able to take secure LDAP connection using perl NET::LDAPS

I trying to take a secure connection of AD server ( w2k12 ) using perl Net::LDAPs. Steps: $ldaps = Net::LDAPS->new('AD.server.ip', port => '636', verify => 'none', capath => ...
0
votes
2answers
28 views

Create a relationship between two attributes in LDAP

I created two attributes in LDAP (multivalued strings) and I want to (somehow) create a relationship between their values so that each value in one of then is linked to a value in the second: for ...
0
votes
0answers
14 views

Lighttpd ldap auth issue, massive performance loss (lighttpd 1.4.35-1.el6.x86_64 + RHEL 6.6)

I installed lighttpd for the first time from epel repo. I changed user and group for the webserver and ran the lighttpd server. I can download a page with 200 small images in about a second. If I ...
0
votes
1answer
43 views

Extending LDAP and FreeIPA

I'm working with freeipa and I extended its attributes successfully, but I noticed that the verification function in the python plugin added to the freeipa only works for the values entered through ...
0
votes
0answers
99 views

Call to undefined function ldap_connect() in ubuntu

I'm attempting to set up a test ldap server on an ubuntu 12 VM. I've gotten this error: Fatal error: Call to undefined function ldap_connect() in ubuntu I've installed the gettext extension in ...
2
votes
0answers
46 views

LDAP Not working for SSH connections on ubuntu 12.04

Connecting from the client to the server: $ ssh -vvv user@10.0.50.170 OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 debug1: Reading configuration data /etc/ssh_config debug1: /etc/ssh_config line 20: ...
3
votes
1answer
83 views

LDAP authentication fails

I try to set up an LDAP directory that will allow me to authenticate Debian users. Once the configuration of the LDAP server and PAM files is done, the authentication fails. I think the client doesn't ...