The Lightweight Directory Access Protocol is an application protocol for reading and editing directories that follow the Directory Information Model over an IP network using unsecured TCP/IP, TLS or SSL. LDAP is a binary protocol described in terms of ASN.1 and transmitted using ASN.1 Basic Encoding ...
1
vote
2answers
41 views
Samba + LDAP: Newly created users cannot log in
I'm having a problem where users which recently were created are unable to log in, even though they have been added to the correct groups. When viewing the error logs, I'm getting these errors:
...
0
votes
1answer
16 views
Postfix relay ldap lookups and transport
I'm trying to implement postfix + policyd/amavis + dspam. The problem is that I need to do ldap lookups in order to obtain the nexthop. But at the same time I need to redirect some "email address" to ...
0
votes
2answers
24 views
How to enable LDAP auth for SFTP logins only
I currently use ActiveDirectory for authentication on my Ubuntu 10.04 servers using a tool called Centrify Express. Centrify has a custom .so file that is configured in /etc/pam.d/common-auth.
I'd ...
0
votes
0answers
12 views
Inherited ASP.NET code that connects to OD not working when connected to AD
I've inherited a piece of software that connects to our Open Directory to provide web authentication. When connected to the OD it works like a charm but we want to transition to using Active Directory ...
1
vote
0answers
11 views
Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)
I'm setting up an application to authenticate to Open Directory using LDAP.
Open Directory stores groups in RFC 2307 posixGroups format, like this:
cn: mygroup
objectClass: top
objectClass: ...
3
votes
3answers
37 views
Use LDAP for MySQL authentication?
We run a couple dozen different MySQL servers for our users. Managing the Account Passwords on these servers is painful.
Are there any plugins which would allow us to use LDAP to help manage the ...
0
votes
1answer
14 views
Implementing LDAP with ASP.NET MVC3
I have an ASP MVC app that's supposed to be hosted on our DMZ server. What's the best practice to secure the network when connecting to the LDAP server?
3
votes
1answer
56 views
What are the differences in schemas of main directory servers?
Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
2
votes
0answers
26 views
Cisco ASA LDAP Group Privilege Level
We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
2
votes
1answer
36 views
How can I determine the last time an Open Directory network account was used on Mac OS X 10.7 Server?
How can I determine the last time an Open Directory network account was used? I am completing a user/group audit and am looking to identify users that have not used their network account recently.
0
votes
1answer
13 views
Using OpenLDAP's meta backend to map incoming user to someone else
I am attempting to set up an LDAP "tunnel" to work around an application that requires a configuration slightly different to my environment.
I need to be able to bind as USER1 to an LDAP server & ...
0
votes
0answers
23 views
openldap + active directory + nested groups + nss
I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing
nss_base_passwd ...
2
votes
0answers
55 views
Troubles with sssd and Active Directory Integration
I have Debian Squeeze and sssd installed. When I try to login to server by user 'alexwinner' by ssh I see in the log:
(Fri May 11 18:56:03 2012) [[sssd[krb5_child[26281]]]] [get_and_save_tgt] (1): ...
0
votes
1answer
19 views
Implementing TMG over AD
I am a programmer and ask for some help to sysadmins. I've have a Wordpress system (a website) that validates users through an Active Directory, this is done by a plugin.
My customer wants to protect ...
0
votes
0answers
13 views
How to create a custom role in SVN Edge
I am new to SVN Edge. Edge comes with the predefine set of rules . However I am in need of creating a new roles as default roles do not fin my needed.
I am using LDAP integrating with SVN. Upon ...
2
votes
0answers
20 views
Apache Authentication / LDAP Group based on URL
I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
1
vote
1answer
41 views
ActiveDirectory lastLogonTimeStamp Inactive
In joining a new company, I have inherited it's history.
I find that the User and Computer Object property lastLogonTimeStamp is not available. I have checked that the AD Schema version is 2003 R2, ...
2
votes
2answers
89 views
Integration (Authn & Authz) with Active Directory in linux [closed]
I am trying to find a unified authentication scheme for linux servers to authenticate against Active Directory. Mainly these are Ubuntu and CentOS servers.
What I need:
Free, stable solution
...
2
votes
2answers
54 views
Where can I find more information about custom/extension attributes in Active Directory?
I want to be able use a script to write/read from extensionAttribute1-15
I was wondering where I could find more info about the size of these fields, what can be written into them. I've used google, ...
1
vote
0answers
39 views
Reviewboard/LDAP groups
I'm curious if anyone has a solution for sync'ing RB and LDAP groups? I want to manage user/group data in LDAP and have those changes propagate to RB. The RB API doesn't allow creation/modification ...
1
vote
1answer
92 views
Connecting a linux client into active directory
I have a linux server (opensuse 12.1) running OTRS 3.0.10.
And a primary domain controller running Windows Server 2008R2.
I've followed the howto page here and here.
Obviously the Net::LDAP perl ...
1
vote
1answer
131 views
OpenLDAP on CentOS 6.2 (@ localhost)
I'm trying to configure openldap on CentOS 6.2, I'm just testing openldap on my server at home, so I don't have any DNS server and stuff like that.
I already installed openldap using the following ...
0
votes
0answers
35 views
LDAP connection string with SAM AccountType filter
I don't know how to write the connection string to include the filter. Is this correct?
LDAP://domain.com/OU=XXXX,OU=xxxx,DC=domain,DC=com(samAccountType=805306368)
We are trying to only pull users ...
2
votes
0answers
50 views
A single LDAP auth server for two companies
I run the network for a small company (mycompany.com) with 10 software developers and a laboratory (thelab.org) with 5 scientists. But the total number of people is 12, as 3 of them work both for the ...
1
vote
1answer
168 views
How Do I Install Gerrit Under Tomcat with LDAP?
I'm trying to find good instructions for installing Gerrit under Tomcat with LDAP support. I need this installed on a Windows 2008 Server, preferably. However, I can opt for Linux if not possible.
...
0
votes
0answers
55 views
ldap setup on ubuntu
I have setup an openldap master on ubuntu server 11.04 and I am trying to get a slave server also ubuntu 11.04 to use it for authentication purposes but when I try to use the credentials on the master ...
1
vote
1answer
91 views
Active Directory Certificate Import Successful, but LDAP Authentication Still Fails
I'm having a difficult time getting to the root of this issue. We use LDAP for authentication purposes across several services, confluence, bamboo, sonar, gerrit, etc.. Our LDAP service provider is ...
2
votes
2answers
80 views
I need to find the last user to log on to a computer from AD
OK I have over 500 desktops in my company and can confirm from the lastlogontimestamp which ones are active and which ones are not - so far so good. I now need to know who was the last user to log on ...
1
vote
0answers
89 views
How to configure LDAP client to authenticate against ApacheDS?
I am playing with LDAP lately and trying to authenticate against ApacheDS. I am unable to setup my Ubuntu client to print the LDAP users list (getent passwd for instance). I found few tutorials on the ...
1
vote
0answers
121 views
Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP
Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)?
...
3
votes
1answer
102 views
Certificate problems with Apache LDAPS access
I have a Subversion server running on Ubuntu 11.04 using Apache, and I'm trying to hook the authentication up with LDAPS. I got the Apache config file set up to authenticate against LDAP (sans the S) ...
1
vote
4answers
155 views
Subversion: Apache mod_ldap - 30 seconds for first authentication
I have a problem regarding my Subversion server installation with Apache (mod_ldap and mod_authnz_ldap) and my LDAP connection to a Microsoft Active Directory
I am using a CentOS5 64Bit system with ...
0
votes
0answers
27 views
Outlook 2007, AD and an external mail/LDAP/GAL
I have a rather weird setup - an AD based environment, with an external email server for all users (Zimbra in this case).
The users use Outlook to connect to their mailboxes, and are quite happy with ...
0
votes
0answers
29 views
PHP ldap_sasl_bind only works once
I'm trying to use LDAP from PHP to authenticate against Active Directory with SALS. It works fine: once. Then if I try it again, I get an authentication error from the LDAP server. As soon as I ...
3
votes
2answers
38 views
Only a subset of groups available
I have installed RHEL 6.2 and configured for using LDAP with the setup utility
and I can login.
What is stange is that only three LDAP groups are recognized per user. It is different
groups, even for ...
1
vote
1answer
98 views
Linux file ACL and secondary groups
The Problem:
CentOS does not seem to look at secondary groups when using ACL's on a folder or file
Scenario: CentOS 6 basic install, uses LDAP accounts to authenticate users. I am trying to setup ...
0
votes
1answer
118 views
getent passwd fails, getent group works?
I've almost got my AD integration working completely on my OpenSUSE 12.1 server. I have a OpenSUSE 11.4 system successfully integrated into our AD environment. (Meaning, we use ldap to authenticate to ...
2
votes
1answer
52 views
A unique ID number for Active Directory accounts that could be retrieved via LDAP interface
I wanted to know if there is either an auto-populated field or a field that we could populate at creation time with a unique ID number for accounts that we could query for.
The reason I ask for this ...
0
votes
0answers
42 views
Two samba servers and UID,GID mappings across them
I have a samba server and just installed the second one to configure a reserve file server.
It all went well and both of them successfully are on Active Directory domain (actually SAMBA 4)
the ...
0
votes
0answers
85 views
Lookup Active Directory entry by implicit UPN
In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
0
votes
0answers
71 views
Clients not recognizing secondary LDAP groups?
I'm having an issue where users who are members of secondary groups in LDAP are not being recognized as members of that group by the client. In this case, user jdoe is not being recognized as a member ...
1
vote
2answers
109 views
Active Directory 4003 (INSUFF_ACCESS_RIGHTS) - LDAP: error code 50 - 00002098: SecErr: DSID-03150A45
I tried to set an attribute to another user while I was logged with my account, which is member of Domain Admins group of the Active Directory.
Error while executing LDIF- [LDAP: error code 50 - ...
2
votes
1answer
27 views
ldap schema in development should it match production?
I been using LDAP for many years now and most of the firms I worked for used a development LDAP schema that was identical to the production and QA (staging) schemas. An example suffix would be:
...
1
vote
1answer
35 views
Move samba and ldap config to new machine
I'm not advanced administrator so this may be n00b question but I'll be grateful for help.
I have following problem: I have to move my server (ubuntu server) from old machine to new. I have samba ...
-2
votes
3answers
111 views
How to connect Active Directory (AD - W2K3) to Lightweight Directory Access Protocol (LDAP - Fedora + Dogtag)? [closed]
I want to connect a Active Directory (AD) to Lightweight Directory Access Protocol (LDAP) using Fedora + Dogtag after that using OS´s like Windows XP or 7 and Linuxs like Ubuntu they can access that ...
1
vote
1answer
87 views
Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?
[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ]
Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
1
vote
2answers
91 views
ActiveDirectory - LDAP query for objectCategory unexpected results
AD is at 2003 functional level, some of our DC's are running Windows Server 2003, some are 2008, some are 2008 R2.
When using the following query:
(objectCategory=user)
I do not expect to see any ...
2
votes
1answer
141 views
Export all AD attributes and default “Range Upper” size for the User class?
I need to write approximately 1000 - 5000 characters into a user property, but I'd prefer not to edit the schema rangeUpper attribute, or create one just for my purposes.
How should I research what ...
1
vote
1answer
68 views
Where is “Custom Attribute 14” in AD Schema?
I'm getting the following error when writing to Active Directory attribute 14
00002082: AtrErr: DSID-03151314, #1: 0: 00002082: DSID-03151314,
problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att ...
0
votes
0answers
34 views
Does Apache httpd 2.2.22 support LDAPReferrals directive from mod_ldap?
I'm trying Collabnet Subversion Edge(csvn) 2.3.0 with svn 1.7.4 and Apache httpd 2.2.22 bundled, on Windows Server 2003.
I encounter the problem similar to this (http://acksyn.org/diary/?p=227) but ...
