Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
5 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
-2
votes
0answers
10 views

no rootdn is created when installing openldap

I am a newbie to Openldap I tried everything to understand it clearly but its too hard for me. please help me. I am using ubuntu 14.04 when I installed the openldap using the #sudo apt-get install ...
1
vote
0answers
15 views

LDAP build script failing on openLDAP-2.4.31 ( ldapmodify -Y EXTERNAL -H ldapi:/// )

I want to set the password to the backend admin so that I can change the LDAP ACL to what I need... needless to say I don't want my config posted all over the place, plus the .ldif files are correct. ...
0
votes
0answers
12 views

389DS Access.log parsing - turning LDAP request type into an audit event

Has anyone authored code to parse a 389 Directory Server's access.log file with an aim of generating audit events based around the LDAP request type. Bascially, take the log sequence ...
0
votes
0answers
14 views

LDAP, nscd and “Invalid user”

Some of my Ubuntu boxen, after an upgrade (12.04 -> 15.04), decided they don't want to accept new users. I create a new entry in my OpenLDAP New user can't ssh in: Jul 3 17:23:46 $HOST ...
1
vote
1answer
20 views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with ...
0
votes
1answer
15 views

How to add a user containing a UID to OpenLDAP that runs on CentOS7?

Add a user user.ldif dn: uid=sampleuser,ou=people,dc=my-domain,dc=com objectClass: top objectClass: inetOrgPerson cn: sample user uid: sampleuser Problem [root@host ~]# ldapadd -x -W -D ...
1
vote
1answer
50 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...
1
vote
1answer
15 views

update passwords [user's already existing in ldap]

I want to update passwords [user's already existing in ldap] of the user by importing data from /etc/passwd & /etc/shadow How to achieve this ? I will give the overview of my setup. nodes user ...
0
votes
1answer
11 views

cannot config LDAP in filenet p8 5.2

i tried to fulfil this form many times and click "test LDAP connection". it's alway return success. but when i click "run task", it's alway return Running the task failed with the following message: ...
0
votes
1answer
17 views

Delete domain using ldapdelete

According to the man page of ldapdelete it should be possible to delete entries [root@controller ~]# man ldapdelete EXAMPLE The following command: ldapdelete "cn=Delete ...
0
votes
0answers
7 views

Php,apache ds,kerberos integration [on hold]

I have installed Apache ds and enabled kerberos server(the one coming along with DS).I am successful in connecting to server using GSSAPI authentication from Apache studio.Apache ds and kerbros is ...
1
vote
1answer
19 views

Joining Linux host to Active Directory fails to update Microsoft DNS

I am joining Linux hosts (CentOS 6) to Active Directory using a special bind account. I've granted delegate permissions to this user and when I join on the default Computers OU, a computer object is ...
1
vote
0answers
12 views

FreeIPA remove read and search permission

I want to disable the read and search permission that is granted to all user accounts by default. I don't want users to be able to display other users informations. is this possible? and is there ...
0
votes
0answers
17 views

How to setup openwrt PAM SSH to use LDAP server [closed]

Is there any guide to setup PAM to authenticate user from LDAP server. My current setup has openwrt installed with PAM SSH, and LDAP server on another linux machine. I would like to authenticate any ...
0
votes
0answers
13 views

centos7 pam_authz_search for *.group.company.com

Upgrading from Centos6 where we were using ldap.conf entry "pam_check_host_attr=yes" previously, with wildcard 'host' attribute in ldap where the host attribute looked like 'host=*.group.company.com' ...
2
votes
2answers
39 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
1answer
23 views

Define a group leader in a LDAP posixgroup

I'm trying to find out if it's possible to define a certain member in a posixgroup as the group leader/manager of that specific group. I tried looking for some objectclasses with this purpose, but my ...
0
votes
0answers
53 views

Openvas ldap authentication configuration

I'm stuck in the process of Openvas ldap authentication configuration. I use the following openvas components version from upstream: openvas libraries - 8.0.3 openvas manager - 6.0.3 (both ...
0
votes
0answers
14 views

How to export LDAP RootDSE attributes to LDIF file?

How to export LDAP RootDSE attributes to LDIF file? I was able to use Active Directory Explorer to see RootDSE attributes but I can not export them: ...
1
vote
1answer
50 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
0
votes
1answer
24 views

LDAP authentification and sub-directories

My apache server is using the LDAP to authenticate users when they want to access the root of the server. I'd like to add another authentification (without prompt) to allow/forbid groups of users ...
0
votes
0answers
29 views

What this warning mean - WARNING: No NSS support for mDNS detected

I have Linux machines that get the data from LDAP Each user that login to the Linux machine will authenticated VIA the LDAP , and will access the machine if login and password are correct The ...
1
vote
0answers
14 views

what is the the difference between all the NSS caching daemons?

I would like to see a comparison between nscd, unscd, nsscache, sssd and nss-pam-ldapd. Those are all the alternatives to nscd that i could find in Debian... Our setup is that we have a bunch of ...
0
votes
1answer
32 views

Track a machine who is entering bad passwords into a samba3 domain controller

I have a user who is getting its account locked constantly because an other machine is trying to login with an old and bad password and thus locking the user's account... The user doesn't know which ...
0
votes
0answers
10 views

assigning permissions to nested groups in FreeIPA

I have several user groups in FreeIPA (group1, group2, ..., group6) which are members of each other. (group1 is the master group) group1 -> group2 -> group3 -> group4 -> group5 -> ...
1
vote
1answer
74 views

Windows 2008R2 Logon Restrictions and LDAP Authentication

We use a Palo Alto firewall (and its GlobalProtect client) for VPN access to our network. The firewall uses LDAP to authenticate VPN logins. I am now trying to setup a user ID for a consultant and I ...
0
votes
0answers
33 views

OS X management - binding to OpenLDAP server

As my small company starts to realise the need to manage things more efficiently, I've been working on centralising management of our OS X workstations. Our overall environment consists of Linux and ...
1
vote
0answers
36 views

How do you add new custom attributetypes to existing objectclasses in LDAP

How the heck do we add new attributes to existing object? For example, I have a custom LDAP objectclass: m-oid=1.1.1.1.1.1... m-must: uid m-may: role m-may: cn m-may: sn Then I added some ...
0
votes
0answers
32 views

LDAP search query (using or) not returning values

I am using the following query in LDAP: ldapsearch -D "uid=test,cn=Users,cn=accounts,dc=earthlinktele,dc=com" -w dsaasddsa -b "cn=accounts,dc=earthlinktele,dc=com" ...
1
vote
0answers
26 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
2
votes
0answers
29 views

Multiple passwordStorageScheme values on same user on 389ds / FreeIPA

I have deployed a FreeIPA identity solution which is backed inside by a 389 directory server. Due to the need of periodically syncing user passwords to another platform (Google Apps for Work), I need ...
1
vote
1answer
13 views

ACL - Subtree Admin should be able to modify password as well as the users themselves

dn: olcDatabase={1}hdb,cn=config objectclass: olcDatabaseConfig objectclass: olcHdbConfig olcaccess: {0}to dn.subtree="ou=subtree,dc=domain,dc=tld" by self write by dn="cn=subadmin,dc=domain,dc=tld" ...
0
votes
0answers
12 views

cisco ucs user login using ldap group authorization

I'm trying to configure a cisco ucs server login with ldap using group authorization. I can login to the cisco server using ldap username and password when I add the user to "admins" group, but when I ...
0
votes
0answers
26 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
2
votes
1answer
59 views

Linux AD integration, unable to login when using Windows Server 2012 DC

I am trying to integrate my CentOS 6.6 servers into Active Directory. I've followed this guide from Red Hat using configuration 3 (SSSD/Kerberos/LDAP). When using a Windows Server 2008 R2 server as ...
1
vote
1answer
23 views

Dovecot not used as LDA by Postfix

I try to set up a mail server on Ubuntu using Postfix, Dovecot and LDAP. So far I can send and receive mails with Postfix and can connect to Dovecot via telnet (port 143) with an LDAP user. As a next ...
1
vote
1answer
36 views

How can I enable the audit logging in LDAP

I want to log the users activities (who does what) on LDAP, the audit log is disabled by default, how can I enable it?
0
votes
1answer
35 views

Weird authentication error from Active Directory Win 2008R2

I am trying to do a ldap query from a OpenBSD client to windows 2008R2 active directory and I am getting this error,"49: Invalid credentials". I don't understand why if I tried the same username and ...
1
vote
1answer
57 views

All LDAP traffic is being sent on TLSv1.1 not TLSv1.2

I have a kvm server, Centos 6.6 host with 6.6 guests. We run a php based web app that uses LDAP authentication for our clients. We just moved a client to this setup and they are reporting that all ...
1
vote
1answer
11 views

FreeIPA re-arrange custom attributes

I created several custom attributes and added them to LDAP and FreeIPA, but their order in the user page is very messy. I want to re-arrange them and put the related attributes together (such as ...
1
vote
0answers
29 views

OpenVPN routing based in LDAP Authentication?

To understand the solution better this is an example: The company has 1000 users that constantly switch seats (computers are set with DHCP IP, so the user can constantly have his IP address ...
1
vote
1answer
66 views

Zimbra: stuck .msg files and phantom messages in mailboxes

Users in my org use Outlook 2010 e-mail client with pop3 access to ZCS/OSE. These clients are using default "delete messages from server after 14 days" setting All message boxes are set up as follows: ...
0
votes
0answers
25 views

Mac OS X Server authenticate Samba agains external LDAP

Here's our current situation; We have 2 networks that are connected to each other with a router. The first network in an Microsoft Active Directory based network. The second network is an Apple Mac OS ...
1
vote
0answers
11 views

LDAP group of words (not names)

We use LDAP for authentication and organization of items, and we have the following structure (minus a couple top levels, of course): Clients Client1 client1Users (group of users, member is ...
1
vote
1answer
41 views

htpasswd: unable to update file

I am trying to add a new user to authenticate to Apache2 (httpd) through Active Directory. The user already exists and belongs to a domain. I am essentially following the instructions in this Apache ...
0
votes
0answers
21 views

Secure LDAP replication over the Internet

I have a remote site in which I'll need to authenticate my users. I have my users in a LDAP db. Thus my idea is to replicate the OpenLDAP server to the remote site to perform authentication locally ...
0
votes
1answer
29 views

OpenLdap error: Your attempt to add uidNumber (2276) to <cn …> is NOT allowed. That attribute/value belongs to another entry

I'm using OpenLDAP. The management interface is phpLDAPadmin. Whilst this has made things easy, it also means I've not been exposed to the internals. There is an existing entry using the uidNumber ...
1
vote
1answer
45 views

Filter getent passwd output with SSSD

I am using ldap_access_filter in sssd.conf in order to limit access to users that are in a specific ldap group. However, when I do a "getent passwd" I still get a full list of the ldap users. How can ...
0
votes
1answer
40 views

Apache - Multiple AuthLDAPURL

I currently have my vhosts setup to authenticate via LDAPS via Apache reverse proxy . I am wondering if it's possible to add a backup/fallback LDAP server if my primary one goes down. I tried working ...