Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
12 views

Allow or disallow some users login in Dovecot based in their network

I have a server running dovecot with IMAP and LDAP authentification. All works as expected, however I would want to let some users to access the mail server from outside and other to access from the ...
0
votes
0answers
11 views

Migrate logcal windows users to FreeIPA ones

We have several Windows machine (running 7, 8, and 10, but that should not be relevant) with local users. Most of those local users are the same login name but might have different UID/GID based on ...
1
vote
0answers
13 views

Migrate logcal linux users to FreeIPA ones

We have several Linux machine (running various versions of Fedora and CentOS, but that should not be relevant) with local users. Most of those local users are the same login name but might have ...
0
votes
2answers
9 views

openldap TLS error -8179:Peer's Certificate issuer is not recognized

tl;dr Does this error mean that I need to find my company's ldap server's public certificate and install it, or that my company's ldap server needs to install my public cert? If the former, how can I ...
-2
votes
1answer
7 views

Samba and windows2008 AD,ldap works for windows,not for samba

The situation Two server one slackware with latest samba 4.3 another windows with windows2008R2 From a linux client i did ldapsearch -vvv -d 100 -b dc=server,dc=prov -H ldap://server.prov ...
0
votes
0answers
8 views

How can I set up Redmine Zentyal Active Directory authentication?

Redmine Application is not authenticating with Zentyal Active Directory, When i test the connection it is working fine, but the users are not able to login. login attribute i tried with ...
0
votes
0answers
11 views

How to get rid of unexpected nslcd related messages caused by resolvconf?

I'm on a Ubuntu 12.04 based system. Our system is setup to use nslcd to allow LDAP authentication. In syslog we see lines like this: /var/log/syslog.1:Dec 20 06:25:11 T53-1014-014 nslcd[1496]: ...
0
votes
0answers
14 views

How to set initial user password in openldap?

I am new in setting up LDAP server. I have configured Openldap server and able to add test users from LDIF file. The LDIF file has username and password for each user. Now for the real part, I have ...
0
votes
1answer
18 views

Citrix NetScaler: Configure LDAP Authentication Server

I am trying to configure a Citrix NetScaler to do authentication with Active Directory, and trying to do so from the CLI. Looking at support forums and documentation, it looks like this can be ...
0
votes
0answers
14 views

Export IAM user accounts (with passwords) into LDAP

I have a blank LDAP account and want to import all the IAM user accounts to LDAP and keep the LDAP in sync with IAM (not the other way around using federation). Is this possible? I need a LDIF file ...
0
votes
1answer
26 views

Multiple OU User Search for OpenVPN Server with AD/LDAP Authentication

I have an OpenVPN server that authenticates against a single AD domain. Here is my auth-ldap.conf that is used with OpenVPN <LDAP> URL ...
0
votes
0answers
15 views

nscd: nss_ldap: could not search LDAP server - server is unavaliable

I have an installation of ubuntu 14.04 and samba4 for Active Directory Today when I login with my LDAP usae has not allowed me, then update and restart the server And now i can see the next errors: ...
-1
votes
0answers
14 views

Usermapping on Ubuntu with a Windows NFS server

First of all the idea of what I want: I have a ubuntu server (name: leda) with an OpenLDAP server in combination with a Samba server, which "emulates" a Windows domain. Now I have a second server ...
0
votes
1answer
13 views

How do I determine if strong key protection is enabled for a certificate private key in Server 2008 R2?

I'm trying to get a Windows Server 2008 R2 domain controller to use SSL with LDAP. I have a certificate installed, but I'm unable to connect on port 636 via ldp.exe (port 389 works just fine). I ...
1
vote
1answer
24 views

Add several new entries to LDAP fails

I can't add more than one record to LDAP. I have blank line before a new DN entry but it seems it doesn't work for some season. ldapadd -x -D cn=Manager,dc=hadoop,dc=local -w -f ldap.ldif ...
0
votes
1answer
13 views

ldap-overlay with fixed default attributes

i'm having a largish user-base (>>1000) which should be able to collectively use some sharing service. the user base is slowly but constantly changing. esp. we are not interested in privilege ...
0
votes
2answers
25 views

pam_groupdn doesn't work at all. always all users allowed to log in

i have tried to install pam, ldap on fedora23. i have configured pam.d/system-auth as follows: #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time ...
0
votes
2answers
58 views

LDAP Authentication - GLPI 0.90.1

I'm trying to integrate GLPI with Active Directory. I'm using windows XAMPP V3.2.2 and GLPI 0.90.1. While setting up the LDAP Directory, I'm getting an error "Test failed: Main server ADSrv". What am ...
0
votes
0answers
30 views

User-Password is not sent with RADIUS request

I am trying to get my router wifi to authenticate the username and password from an LDAP database on my ubuntu server. I followed the steps mentioned in this tutorial: ...
0
votes
0answers
17 views

Needed permissions to read msDS-ReplLinkFailures attribute

I'm using powershell to get the value of msDS-ReplLinkFailures attribute like this: Get-ADRootDSE -Properties msDS-ReplLinkFailures This works ok if the current user is member of domain's ...
0
votes
0answers
41 views

horde 5 ldap/samba4 authentication fails “Bad search filter Parameters”

I am trying to authenticate my horde users against my samba4 active directory but I am always getting a "Bad search filter Parameters" error. Unfortunately I am not able to identify the exact problem ...
1
vote
0answers
32 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
0
votes
1answer
26 views

OpenLDAP Filtering Users that are part of Groups of Groups

LDAP Configuration: MemberOf Overlay is enabled Users are part of an organizationalUnit called People. Each user is a "memberOf" a role. For example, a user in their role at a company is a ...
0
votes
0answers
6 views

Ambari log is filled with LdapTemplate warning

I'm running: # ambari-server --version 2.1.0 Specifically, I'm running IBM Open Platform for Hadoop 4.1 FP2. I configured Ambari to use LDAP for authentication, and the LDAP authentication is ...
1
vote
0answers
18 views

Why is LDAP “memberUid” restricted to ascii, but “uid” is not?

I'm getting this error from ApacheDS (2.0.0-M21): ERR_04447_CANNOT_NORMALIZE_VALUE Cannot normalize the wrapped value ERR_04473_NOT_VALID_VALUE Not a valid value 'gu\C3\AApes' for the AttributeType ...
0
votes
0answers
16 views

Webmin authentication against LDAP

I want ultimately to authenticate Webmin user against one LDAP. I have read the page How can I make a Webmin user always use the same password as Unix?. According to this explanation, the ...
-1
votes
1answer
7 views

Unable to set ADS security on Samba DC

I've been trying to set my security as ADS for my Samba DC. Unfortunately, whenever I do, the LDAP server can no longer be found using net ads info. Below is my current smb.conf. [global] workgroup = ...
1
vote
1answer
22 views

Howto setup LDAP/Linux so when a user is deleted, its bash user session is immediately closed

Is there a way to setup OpenLDAP on a Linux (Redhat/CentOS) system so that when a user is removed from the LDAP server or he/she is removed from the "login is authorized" group, all his/her open ...
0
votes
0answers
23 views

LDAP connection string issue

Sir! please help I have a connection string extracted like this /o=First/ou=Exchange Administrative Group (EDABMHF23SPDLT)/cn=Recipients/cn=852edeadbeef354a4c8000ebaae09fdd01-Robert It doesn't ...
0
votes
0answers
23 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
27 views

issues with svnserve using ldap and sasl

I am trying to setup SVN's svnserve server using ldap and sasl to authenticate users and to encrypt data but I come across the following issues: /var/log/messages error or warning when I execute ...
1
vote
1answer
67 views

Is LDAP used by Active Directory for anything if I only use Kerberos for authentication?

In my windows only domain, Kerberos is used for all authentication. The domain controllers I understand replicate & authenticate using RPC. Is LDAP used for anything else? Should I close the ...
1
vote
0answers
39 views

Allow self password change using LDAP(s) with Samba4

I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ ...
0
votes
1answer
22 views

ldap_add: Invalid DN syntax (34)

I am configuring my LDAP for roaming profiles using autofs, but when I run this command ldapadd -x -D "cn=admin,dc=example,dc=com" -W -f automount.ldif I get this error message ldap_add: Invalid ...
1
vote
0answers
26 views

LDAP at IBM XIV

I have problem with authenticating users over LDAP (Active Directory) Windows 2008 R2 on IBM XIV. After troubleshooting I've find out problems caused by polish letters in CommonName ...
1
vote
1answer
107 views

LDAP auth successful with additional characters

I have a service which uses a LDAP directory (anonymous bind) to get the users and their passwords in order to perform the authentication. The problem is that I've realized that I can login with a ...
3
votes
1answer
50 views

Rabbitmq Won't Talk to Active Directory

I have a rabbitmq server that I need to hook up to AD. Configuration is set using puppet rabbitmq module, with some minor manual changes (log level): % This file managed by Puppet % Template Path: ...
5
votes
3answers
155 views

How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?

I'm setting up OpenLDAP slapd on Ubuntu 14.04 Trusty Tahr. I want certain instances (replication etc.) that aren't users to be able to login via SASL using DIGEST-MD5 mechanism. Unlike users, they ...
0
votes
0answers
22 views

Freeradius not expanding “Calling-Station-Id” attribute in LDAP search

I'm trying to do PEAP-MSCHAPv2, then do a LDAP search to verify the user is in the correct group AND see if there MAC address is under a otherLoginWorkstation entry. If you look in the logs, ...
0
votes
0answers
11 views

Can one safely migrate a non-LDAP Gitlab to an LDAP one?

I have two Gitlab installations. One uses Gitlab's internal authentication system and the other (newer) one uses LDAP. I now want to migrate everything from the old one to the new one. Both Gitlabs ...
1
vote
1answer
41 views

OpenLDAP - How to restrict Debian login to specific groups (posixGroup)?

I'm trying to restrict login to specific LDAP groups in Debian 8. The system is configured to use OpenLDAP (PAM) as authentication method. My goal is to configure the system to allow all local users ...
0
votes
0answers
37 views

Why I cannot find ldap.conf file when I want to integrate 389-ds and samba on centos 7?

I am working on two servers, a samba server and a 389-ds server. Now I want to integrate them so that samba shares are authenticated via ldap server. I have followed instructions on ...
0
votes
0answers
24 views

postfix rejects all EMails Recipient address rejected: User unknown inlocal recipient table

Hi Together I've got a problem with my postfix server and i can't solve it. I set up a local mailserver with dovecot and postfix to receive e-mail over my own domain. It worked fine till i tried to ...
0
votes
1answer
29 views

Grant Kerberos Ticket on successfull authentication against third party password store

I am currently building a system where I would like to deploy Kerberos. However my external constraints on the user management do not allow me to authenticate the users against Kerberos itself. I do ...
0
votes
0answers
12 views

LDAP dynlist not working with syncrepl replication

I'm using syncrepl replication with one master and many slaves. I'm also using dynlist overlay. Dynlist works on the master, but not on slaves. When I run a query on master, everything works ...
0
votes
1answer
13 views

AD LDS data refreshing from script

I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account. I cannot enable syncrepl ont ...
0
votes
1answer
19 views

Apache Authenication -http request failing in sub directories

I'm running an apachev2.2 server and I am using LDAP to authenticate the root directory. The authenication works well, however my page uses php which is using the file_puts_content function to grab ...
1
vote
1answer
38 views

Export LDAP schema without data

For testing purposes, I need a copy of our LDAP server without any personal data. What is the best way, to export this from an existing OpenLDAP server? I tried ldapsearch and Apache Directory ...
1
vote
0answers
26 views

Gitlab and LDAP against CommuniGate Pro Server

I'm currently trying to make our GitLab authenticate to LDAP that is provided by CommuniGate Pro server. When using command line tests (like ldapsearch) I'm successfully authenticating and getting ...
0
votes
1answer
34 views

How to configure openldap with ldapmodify

At the beginning i would like to apologize for my english. I have to admit that i am totally beginner with ldap but i really would like to learn how to configure it. I've just installed package of ...