Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
15 views

Can a base DN for LDAP queries be a group DN?

I am trying to do LDAP integration for user authentication in HP NNMi. (NNMi on RHEL6 to Active Directory on W2K8 R2) I know I can get it to work if I use the OU that my users are in as the base DN ...
-1
votes
0answers
11 views

Where are the zentyal users stored?

I just succeeded in setting up zentyal and sending/receiving emails. The problem is, the first user that I created in zentyal Users and Computers, does not show up. I can not reproduce the problem ...
0
votes
0answers
12 views

LDAP syncrepl with kerberos authentication

I'm trying to set up a replication server for LDAP using syncrepl. I would like to use Kerberos to authenticate the consumer, because we have it set up, and it seems more secure. The database ...
2
votes
2answers
32 views

ldap is working but not ldaps correctly

I'm a little lost with ldapsearch... I have to configure a cloud with AD authentication. this is working well ldapsearch -h server -p 389 -x -D 'admin.test' -w 'xxx' -b ...
2
votes
2answers
29 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
0
votes
1answer
28 views

OpenLdap Replication

I have installed openldap on two machines and tried to setup multi-way replication.I am able to perform the multi-way replication (Add/Update/delete) when both the machines are up and ldap is running. ...
0
votes
0answers
20 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
-1
votes
0answers
34 views

ldapsearch is working but still unable to login user for ldap server from client [closed]

I followed this procedure for ssh and ldap access for users to login to ubuntu machine. ldapsearch is working nicely but I am unable to login user. The following error message is coming. sshd[]: ...
0
votes
0answers
13 views

How to authenticate RHEL 6.6 to Windows Server 2012 Active Directory and LDAP? [duplicate]

Need help with setting up LDAP on Windows Server 2012 R2, I have AD setup already, but not sure what all I need to do to get LDAP running. Then I can't find any good resources online to authenticate ...
2
votes
0answers
33 views

How to configure LDAP client without Yast - SLES 11 SP3 [closed]

I'm configuring an LDAP client in a large number of Suse servers. The only way that I know to do this is using Yast, and this way is slow. I can't find another way. I did it on RHEL, Debian, and ...
-1
votes
2answers
21 views

getxattr operation not supported samba audit

I have a strange issue with my samba ldap server, its a centos server with same 3.0, it was working fine from quite some time but suddenly I noticed that my log file is full of messages saying ...
1
vote
0answers
42 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
0
votes
0answers
16 views

ldapsearch through ssh tunnel failing

I have following situation: 2 servers: a_server - this one from which I want to perform ldapsearch b_server - this is where LDAP directory located When I'm on b_server, this command ldapsearch -x ...
0
votes
2answers
49 views

Linux-SSSD: always getting incorrect password when su'ing to domain users, but why?

I've built a new Linux environment at my work place. I've configured sssd and bound it to one of the Active Directory domains of the company. I can tell that the sssd is partially working, let me ...
0
votes
0answers
31 views

Integrate Squid Kerberos auth and Squidguard ldapusersearch into AD

I'm having trouble with Squid Kerberos auth and the Squidguard ldapusersearch that I use to apply ACLs by Active Directory groups membership. The problem is : Squid and Squidguard see my user as : ...
-1
votes
0answers
30 views

How to backup and restore users for openldap replication setup (syncrepl)

I am not able to restore the users using slapadd in replication setup of two nodes. When i restore it works on the where i restored but another one fails in the replication. We have two ldap nodes ...
0
votes
1answer
39 views

LDAP auth fails for some users

Something weird is happening, some users are not able to authenticate via our LDAP to access services (SSH connection, Samba, etc.). Their entries are in the LDAP and everything seems to be fine, I ...
-1
votes
1answer
52 views

IT for a small organization: mailing lists, file server, hosting [closed]

I've been asked to help manage my church's information systems. We're small (~3 staff, ~150 parishioners), which puts us below the needs of a lot of the "Church Management" software I've seen. The ...
0
votes
0answers
30 views

active directory simple bind always anonymous (event 1219)

I am getting event 1219: "Active Directory could not initialize simple bind authentication. Therefore, simple bind authentication against this LDAP interface will result in binding as an ...
2
votes
1answer
42 views

Why can't I use inetOrgPerson with groupOfNames?

I am trying to create a user in LDAP that uses object classes inetOrgPerson with groupOfNames (so i could use the attribute 'member') but it won't let me no matter which combination I try. What is the ...
1
vote
1answer
45 views

OpenLDAP & Asterisk - no global superior knowledge

I'm struggling to setup OpenLDAP to allow Asterisk to store information about users. I've tried to follow several howto's, but unfortunately I'm not able to set it up correctly. It seems like most ...
1
vote
1answer
42 views

Backing up Zimbra 8.0.x, data.mdb issues

When trying to create a backup of zimbra open source edition 8.0.1+ I ran into issues with data.mdb 'exploding'. While my /opt/zimbra directory is only about 8GB my backup is around 80GB. both rsync ...
0
votes
1answer
28 views

Does Active Directory uses LDAP natively?

I was asked to use LDAP over SSL (LDAPS) in our domain. Does it require any change in AD itself? Does AD use LDAP natively? Or is it something need to be done in application level that approach AD ...
0
votes
0answers
30 views

LDAP Browser(Softerra) vs LDP.exe

Here is the issue; -> There is a Deny All(FullControll) set on 2 OUs for a service account. -> When i use LDP.exe to query those OUs, it can read their names but can not display any objects ...
-1
votes
1answer
54 views

Ldap Active directory checking (and securely storing it) user provided password [closed]

Hey all I am needing to know if it is possible to check a users typed in password against the AD to make sire it's the correct password? Reason being is that once they log in I need to use their user ...
0
votes
0answers
19 views

ProFTPD with AD LDAP dont retrieve right usergroup

I am struggling with a ProFTPD with AD LDAP auth. I have everything configured and the AUTH works, it retrieves de user from the AD and if it exist, it creates the home folder and let he user in. The ...
1
vote
1answer
16 views

Verify TLS encryped communication when querying LDAP server?

I have a web application (not hosted on windows) that authenticates users by querying an LDAP server (a windows domain controller). The app is configured to use STARTTLS to encrypt communication with ...
0
votes
0answers
20 views

LDAP ACLs with filters

I am trying to write LDAP ACL filters that would suspend authentication for domains that have a custom attribute set to some value. I created a custom object with an extra NAME attribute domainStatus ...
0
votes
1answer
42 views

how to translate an Active Directory group into a NIS netgroup?

The goal is to be able to add + : @DL-MyCompany-MyTeam : ALL to /etc/security/access.conf and have it work as expected. This is my sssd.conf: [domain/default] cache_credentials = True [sssd] ...
0
votes
2answers
21 views

Apply changes to PAM changes

Does the server or a specific service needs to be restarted to let changes to pam files (/etc/pam.d/system-auth) take effect? longer version - I'm working on configuring SSSD to connect with LDAP for ...
1
vote
2answers
30 views

migrate to new root-dn

I'm using LDAP used (mostly) as a backend for user authentication (pam, samba, web,...). Now I'm trying to migrate the LDAP-database to a new root-dn. old root-dn: dc=local new root-dn: ...
0
votes
1answer
45 views

ubuntu 12.04 sssd sudo not working

This is for Ubuntu 12.04.5 LTS I am trying to implement SSSD as a client and everything works all right BUT SUDO I cannot see anything happening in the sssd_sudo.log file at all but the usual file ...
-2
votes
1answer
36 views

Are the UID of users from a domain maintained locally in a machine?

This could be total nonsense but as I am new and am trying to learn. I came across this question. I have seen many of my office linux machines connected to some domain. I am wondering as if a ...
3
votes
2answers
91 views

Linux: sssd cache not being cleaned upon server reboot, what could be the cause and how can it be changed?

I'm using sssd in order to work with LDAP users and groups within our Linux environment. I had to rename the LDAP group of one of my Linux users and I noticed that after I finished editing the group, ...
0
votes
1answer
21 views

proprietary authentication to LDAP

I have a proprietary external authentication platform, that I can use to authenticate with over REST-WS. Now I would like to have / build a way to have numerous other web services (website, forum, ...
0
votes
2answers
49 views

ldap query with nested group

I try to build a ldap query to MS Active Directory. I found that there is a LDAP_MATCHING_RULE_IN_CHAIN type to do so. Which results in the follow syntax: ...
1
vote
1answer
72 views

Auth fail on Samba server with LDAP backend‏

I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc. The samba schema is present in the LDAP, and in the users profile. ...
1
vote
1answer
48 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
-2
votes
1answer
24 views

Migrate local user to LDAP server and keep the old user directory

I have an existing Debian server with a lot of local user (these user account are used for application authentication and keeps files in each home directory), and I want to migrate all the local user ...
0
votes
1answer
35 views

LDAP Bind failure / GroupPolicy 1006 / ErrorCode 81 (on one workstation only)

Multiple domain accounts on this same workstation yield the same error; those same accounts on other workstations sail through with no problems. It's occurring intermittently: roughly about 9 out of ...
0
votes
0answers
34 views

gitlab ldap authentication with domino server

i try to implement ldap authentication for my gitlab server 7.8.4 my ldap server is a Lotus Domino Server My group called "gitusers" with all of the allowed members does anyone know how to build the ...
1
vote
0answers
52 views

Promote Windows Server 2012 to domain controller in an existing samba network

I have a Windows Server that I want to use as a domain controller to push gpo's to workstations that are on a samba 3 domain served from an Oracle Solaris server. If I were to promote this server to a ...
1
vote
1answer
50 views

Check if account is allowed when using pam_access

I'm using pam_access and /etc/security/access.conf to restrict who can login to my Rhel 6.5 hosts. I have an LDAP server with a diverse user base, and the security people would like a list of who can ...
0
votes
1answer
48 views

migrate samba users to new server

I've read How to migrate Samba User Accounts to a new linux server? however it doesn't address my situation, or at least not with a solution. I have a RHEL 5 machine, wood, running Samba, Dovecot, ...
1
vote
0answers
48 views

Configurable ftp-proxy with LDAP authentication

I am looking for solution for following situation. I have bunch of ftp account (many servers) and many users. They need access to that servers. I don't want to give every user passwords to every ...
1
vote
1answer
29 views

How to change an attribute value for all entries of ldap directory using ldapmodify command?

LDAP: How to modify an attribute value for all entries of directory using ldapmodify command? Looking for some syntax like below in modification input file for ldapmodify command dn: ...
0
votes
1answer
80 views

getent passwd dosen't show users of LDAP server

I have made the LDAP authentification configurations and I try to authenticate to the LDAP server on Ubuntu 14.04 TLS. This is the file nsswitch.conf : # /etc/nsswitch.conf # # Example configuration ...
0
votes
1answer
68 views

ldap_add: Constraint violation (19) additional info: some attributes not unique

Well I have already gone through ldap_add: Constraint violation (19) but couldn't solve my problem! Problem I'm facing is that, when I'm trying to add users from bckup.ldif file by issuing following ...
0
votes
1answer
39 views

Active Directory users authentication on Ubuntu server

I need the simplest way to authenticate Active Directory users on Ubuntu Server (at login). I am trying with libnss-ldap, but it only works with plain LDAP server (like SLAPD) but now Active ...
0
votes
0answers
68 views

ldapsearch - Get all members of a CN (nisNetgroupTriple)

I'm a bit new to using LDAP, especially non AD LDAP. We use RedHat Directory Server and was trying to do an LDAP query (filter specifically) that would retrieve all the users (and their attributes) ...