Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

-1
votes
0answers
11 views

How do I bind Isilon clusters to dsee7 using ldaps?

It's trivial to make the Isilon talk to my ldap servers unencrypted but I'm mostly clueless regarding the Bind To: and password fields. We're using TLS to secure LDAP on the Linux clients . . . not ...
1
vote
1answer
20 views

Are there any ldap proxy servers that can supplement the results from the main ldap server?

We have a central ldap server that authenticates and provides authorization information about users in our institution. I am looking for a LDAP Proxy that supplement the central LDAP server to support ...
-1
votes
2answers
37 views

RHEL 6.5 and LDAP

I am trying to connect our Active directory server to brand new RHEL 6.5 server. I want to authenticate users using AD credentials, but I want to restrict that only certain users can login, I don't ...
0
votes
0answers
14 views

Freenas & LDAP Multiple User Groups Not Taking Affect

we are using, Freenas 9.2.1.7 which communicates with LDAP to control file permission. We have Windows users in multiple groups. Some belong to Finance as their primary group and Admin as another ...
0
votes
1answer
8 views

phpldapadmin uidNumber stopped auto-updating on new user creation

We are having an issue that just started this morning. It seems our phpldapadmin (1.2.04) interface has stopped auto-incrementing the uidNumber on new user creation. Basically we are stuck at ...
0
votes
3answers
30 views

executing commands when user first logs in

So I use webmin to create ldap user. I then manually create public_html folder, and set quota for newly created home folder. Is there a way such that I can execute commands when user first logs in or ...
0
votes
0answers
38 views

Way to authenticate against Active Directory but without direct access to it?

So I'm in an interesting situation. I have an application that only supports authentication via LDAP on my network and client with active directory on their network. We have a secure VPN tunnel ...
0
votes
1answer
17 views

Change SAMBA password in LDAP with Apache Directory Studio

I am using Apache Directory Studio to administer a small LDAP database, and I am planning to stop using LAM for user and group management because it lacks groupOfUniqueNames support. I have only one ...
0
votes
0answers
13 views

ejabberd and LDAP authentication using StartTLS

I am trying to setup ejabberd that authenticates users against an LDAP server. The LDAP server requires all clients to connect via StartTLS (olcSecurity: tls=1). ejabberd's LDAP module does not ...
0
votes
0answers
23 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
0answers
30 views

Apache - Restrict access to a ldap group on a directory [closed]

Requirement - I want to restrict access on a directory for ldap groups. Ldap group B members must not be able to access http://foobar.com/a Ldap group A members must not be able to access ...
0
votes
1answer
15 views

Why does ldapsearch not show user's supplemental groups?

I have a user who when I type 'id username' shows more groups than when I query ldap using ldapsearch. What switch do I use? $ id apanda uid=14510(apanda) gid=5010(sambauser) ...
0
votes
1answer
22 views

Weblogic Admin server gets LDAP errors then unexpectedly shuts down

we have a new(ish) WLS 9.2 installation Over the last day or so, after restarting WLS, after a while, the admin server unexpectedly shuts down, preceded in the logs by many (hundreds) occurrences of ...
0
votes
0answers
22 views

Mini mac server returning:- attribute “entryCSN” index delete failure

I have an Open Directory(OD) server running on OSX 10.8.5. I have software connecting to it (a web interface) which is searching the LDAP for users. So I run the query on the web app, and look in ...
0
votes
1answer
13 views

How do I change pwdMaxAge on a “specialized password policy?”

I'm supporting dsee7 (Oracle/Sun LDAP server) and I have a "specialized password policy" for non human accounts called, SrvsPasswdPolicy. "pwdPolicySubentry: cn=SrvsPasswdPolicy,cn=config" I need to ...
-1
votes
0answers
24 views

AD/LDAP: User accounts lost “Change password” permission for SELF

Seemingly random user objects in our 2003 Native Active Directory lost the non-inherited "SELF" and "Everyone" entries that grant "Change password." This has resulted in random people not being able ...
0
votes
0answers
27 views

Percona MySQL LDAP authentication fails through .NET MySQL connector

Basically, MySQL uses its native authentication, where usernames and passwords are stored in mysql.user table. MySQL authenticates user against the credentials stored in mysql.user table. Our ...
0
votes
0answers
17 views

Is it possible to use iptables and trafficcontrol (tc qdisc) together to set rules on only specific packets/traffic?

I would need to set delay on my network interface such that only a specific set of packets/traffic is affected by this delay. i.e., I can set a 9 sec delay on eth0 tc qdisc add dev eth0 root netem ...
0
votes
1answer
82 views

LDAP client on Ubuntu 14.04 LTS server

I am setting up an LDAP client on Ubuntu 14.04 server and can't seem to be able to logon. I see an error in the auth.log that says unknown user. I installed packages: ldap-auth-client ...
0
votes
1answer
23 views

Create alias for UNIX username in LDAP for DB2

I want to use LDAP data for the authentication process in DB2. I have already configured DB2 via PAM to retrieve the information of the NIS server that is in the ActiveDirectory. It works perfect ...
-1
votes
0answers
11 views

ldap_bind() not working on windows 2012 and database is ms sql server

ldap_connect function is working but when i tried use "ldap_bind" function it returns an empty result. I tried with domain name and username still its not working.Windows server is 2012. below is my ...
1
vote
2answers
41 views

In LDAP, what exactly IS a bind DN?

I've written various pieces of code that connect to LDAP servers and run queries, but it's always been voodoo to me. One thing I don't really understand is the concept of a bind DN. Here's an example ...
0
votes
1answer
22 views

ldap change schema and config password

I installed openldap server to fedora 20, and try use it for manage bugzilla accounts. So I first configure it for my domain, plus set password: dn: olcDatabase={0}config,cn=config changetype: modify ...
1
vote
0answers
17 views

Where are the attributes for room mailbox stored?

I'm using Exchange 2007 and I've created a room mailbox. I want to know where the settings of the room mailbox are stored? What are the attributes used to store room mailbox information? Are they ...
1
vote
1answer
31 views

Is it possible to have one group or account authenticate locally, bypassing LDAP auth?

We have one RAC cluster of machines where the local UID:GID of a couple users (oracle and grid) do not match the UID:GID of those same users in LDAP. Ultimately we ought to change the UID and GID of ...
-2
votes
0answers
16 views

IIS SMTP Service LDAP

Right now, I am trying to validate the users of my smtp with Active Directory to avoid directory harvest attacks. I have tested a lots of way but none of them seems to be working. See the below ...
0
votes
0answers
27 views

Why does samba include seemingly bogus “supplementary groups”?

Our environment is subject to the "16 group limit" with Samba. We are using Samba version 3.6.12. Basically if a user is in more than 16 groups, the whole system gets hosed and things go haywire. ...
1
vote
2answers
61 views

What is [PSH, ACK] doing during my connection to a global catalog server?

A linux server of mine is trying to establish a LDAPS connection to a global catalog server and the connection is getting dropped (presumably by the GC side). For the purpose of discussion, let's ...
0
votes
2answers
47 views

specify LDAP Query

When I ping 140West-dc it returns: Pinging 140West-dc.bvncap.local And my LDAP Query is as follows: LDAP://dc=bvncap,dc=local Is there anyway to pass "140West-dc.bvncap.local" to LDAP query ...
1
vote
1answer
39 views

Postfix/dovecot remove LDAP user

I have to remove or blacklist an LDAP/dovecot user. The authentication is setup from active directory what I cannot manage so I thought there should be a way at least to disable this specific user on ...
2
votes
1answer
56 views

Search AD for empty sAMAccountName & userPrincipalName

I'm in the process of implementing a User privilege management solution and it needs to audit all users within our AD. It's currently falling over due to an account which has two blank attributes: ...
1
vote
1answer
70 views

Is anyone using access.conf and netgroup authentication with sssd?

I want to be able to authenticate users (via ssh) to specific groups of hosts based on the users' LDAP netgroup membership. The LDAP server is dsee7. The distro is OEL 6.5 with openldap as the client. ...
0
votes
0answers
43 views

openldap timeout causes server to slow down

Running into an issue with openldap I've never had much success to tackle. We run openldap on another machine on its own vlan. Now if that ldap server dies anything that accesses uid or gid seems to ...
0
votes
1answer
26 views

Cannot see objectClass from custom schema

I added new schema to my ldap server but when I trey to create an entry with custom objectClass an custom attributes, it doesn't see my custom stuff. It's just experimental so OID's are not important. ...
2
votes
0answers
53 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
1
vote
1answer
104 views

How to determine the values for an LDAP bind to a Windows Server 2012 DC? [ldap_bind: Invalid Credentials (49)]

Sigh. I have been trying for nearly 6 hours to get my Gitlab deployment to authenticate via Windows Server 2012 Essentials Active Directory LDAP. I am running Ubuntu 14.04 for my Gitlab server. ...
0
votes
1answer
25 views

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group ...
2
votes
1answer
237 views

Continuously check LDAP connectivity to Domain Controllers ( LDAP Heartbeat Check)

working on developing script which runs via schedule task ; whole purpose of it is to target few domain controllers and continuously(for every 2 sec) do a ldap query targeting that particular DC and ...
1
vote
2answers
29 views

Use ldapsearch to bind using short username?

I am trying for more than 2 hours to find a way to use ldapsearch to connect to Microsoft Active Directory and I am not able to perform a successful bind. I do not want to use the CN of my account ...
2
votes
0answers
27 views

Are External LDAP referrals similar to a DNS Recursive or non recursive entry?

I'm very familiar with DNS, but less so with LDAP. In DNS I have the ability to delegate the CPU and IO load of referral chasing a given DNS query... or I can set norecurse and have the client ...
0
votes
1answer
26 views

Ldap with cloud application

I was wondering if you guys could help me, I'm trying to use ldap to connect with our AD but the settings on the cloud app seem to fail. How do you set up ldap with external servers? Is there some ...
0
votes
0answers
50 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
1
vote
0answers
122 views

allow Windows 2012 AD users to ssh into a linux computer

I have a Windows Server 2012 R2 running as a domain controller. I also have a Debian 7.2 server (running Webmin 1.6) which I would like to give users ssh access to using their domain accounts. On the ...
3
votes
0answers
58 views

Expensive LDAP queries from Workstations

Troubleshooting high LSASS process on a DC found expensive queries originating from a few workstations. Each query is as follows: Visited Entries: 1Million+ Returned Entries: <50 (most of the ...
2
votes
0answers
44 views

Kerberos, .k5login and sudo

Background: I am using a Debian 7 system which I have integrated with an LDAP+Kerberos system using libnss-ldap, libpam-krb5 and nscd. I have modified sudoers to permit an LDAP group the right to sudo ...
6
votes
2answers
255 views

Manage SSH Users with MySQL backend

is there a possibility to use a (mysql) Database to manage SSH login credentials instead of /etc/passwd ? I know I could use ldap but I only want simple user management and ldap seems a little bit ...
0
votes
0answers
40 views

Debian nfs-client shows nobody:nogroup

i have a running ldap-server, which works well with my webserver. Now i tried to get the nfs-server running with my a MySQL server. I (think) i did the same things like on my webserver configuration. ...
3
votes
1answer
59 views

Apache LDAP Authentication with AD Subgroup

I am trying to authenticate using an Active Directory User on a Website running on Apache. My Setup Active Directory: User "steven" is a member of the group "staff". User "cindy" is a member of the ...
1
vote
1answer
73 views

Can HP m476dn MFP be configured to lookup email from AD/LDAP

I am considering to buy HP m476dn MFP. Going through the specs it is no clear if the device can lookup for email address from the LDAP server. What I would like is to be able to send scans via email ...
0
votes
1answer
40 views

Mixed domain: how to setup password referral

I'm working with a mixture of linux and windows servers and am hoping to use AD to tie in to a centralized LDAP authentication process. I recently installed a Windows 2012 R2 server as a domain ...