Tagged Questions
0
votes
0answers
27 views
How to install and configure Windows Server 2008 Active Directory + LDAP + SAML 2.0 for providing SSO?
I want to run a Windows Active Directory Server and provide LDAP, SAML 2.0 protocol to our trusted applications inside our company to implement SSO.
After googling for a few days I found that ...
1
vote
1answer
33 views
How to setup SSL for Active Directory?
I have a Windows 2008 Server (Base2) machine.
In Server Manager > Roles, i can see:
1. Active Directory Domain Services
2. DNS Server
3. Active Directory Certificate Services.
Under Active Directory ...
0
votes
0answers
14 views
wso2 Governance Registry Active Directory integration unable to find valid certification path to requested target
I am attempting to set up a WSO2 Governance Registry server on RHEL5 that will integrate with our Active Directory using ldaps, but normal methods of setting up trust of the domain controllers ssl ...
0
votes
0answers
31 views
How to create and add a self signed certificate in Windows 7 [closed]
I am using Apache Directory Studio to test a application on Windows 7.
I am using ldaps (on port 10636) support and followed the instructions to create a keystore and was able to successfully connect ...
0
votes
0answers
14 views
LDAP read privileges for comupter, IIS under ApplicationPoolIdentity user
Is it possible to set up LDAP read privileges to Active Directory for computer account?
If I run web application on IIS 7.5, which application pool is running under ApplicationPoolIdentity, I have ...
2
votes
3answers
69 views
Why is local root able to su to any LDAP user?
We have an LDAP server set up with our Active Directory. When users login to a Linux machine with LDAP client installed as root, they are able to su - into any Active Directory account without ...
1
vote
2answers
112 views
What is the best way to see objects attributes in Active Directory?
I can not find how to see objects attributes in Active Directory in Microsoft Management Console (MMS).
Please tell me if it is possible to do it in MMS.
I found the Active Directory Explorer that ...
0
votes
0answers
50 views
Samba4: external authentication [closed]
From what I understand, Samba4 cannot use external LDAP servers.
That's too bad; I have zero experience, but the thought of using OpenLDAP's back-shell and back-perl in order to authenticate against ...
1
vote
0answers
22 views
Apache 2.2 Ldap Authantication error 500 - AuthLDAPURL
I have an Apache server on RHEL 6 that uses our active directory for authentication,
We added a new "LocationMatch"
AuthLDAPURL ...
0
votes
1answer
64 views
LDAP search only returns 25 users
If I use ldapsearch on my Active Directory to bring back members of the Engineers team I only see 25 users. However in AD there are almost 50 users in Engineers. What am I doing wrong?
ldapsearch -p ...
0
votes
0answers
29 views
Apache to accept a (corrupt) certificate without a Subject?
I am using .htaccess to ask for a username and passphrase which authenticates against LDAP.
The problem is, that the certificate is corrupt, and so Apache of course won't allow users to login.
As ...
0
votes
1answer
37 views
Simple authentication via AD over LDAP for Tomcat-hosted app
We use a central AD server for authentication, and have several different webapps that connect to it via LDAP.
I'm trying to connect a simple webapp running on Tomcat 5.5 on Windows to the AD server ...
0
votes
1answer
79 views
LDAP Can't perform an authenticated bind - Windows Server 2008 R2 Using PHP/Apache
I'm having issues performing an authenticated bind against the server. The issues doesn't appear to be in code however maybe a server issue.
Just so you know;
LDAP is enabled in Apache/PHP
I'm ...
0
votes
2answers
47 views
LDAP/ActiveDirectory BindDN syntax
I'm troubleshooting a linux-based hardware firewall for a client. This hardware firewall connects to ActiveDirectory for Single SignOn authentication.
ActiveDirectory is largley just a perverted ...
2
votes
1answer
113 views
Active Directory: Thunderbird LDAP autocompletion not working with Kerberos auth
The Problem:
I'm trying to configure an LDAP mail autocompletion - a built-in functionality of Mozilla Thunderbird 17.0.5 @ Windows 7 x64 in 2008R2 domain environment. The OS is a fresh, ...
0
votes
1answer
56 views
Role Based Access Control, Where Roles Change Depending on Location In Application
I am tasked with designing a new, role based access model for our system.
The requirements are something to the effect of the following:
A user can log in, and will have a different role depending ...
1
vote
0answers
62 views
Authentication between Windows AD and Linux LDAP Server and google APPS
I have an active directory instance hosted in a secure data center offsite. That active directory allows my sharepoint users to have authentication
I have google apps for all my users in the ...
2
votes
1answer
78 views
How to change the default user group's name in Active Directory?
I guess this question is more like can I use a single word as the default AD user group for users (currently it is "AD\Domain Users").
If I can, I would like to use something like "users" or similar. ...
2
votes
0answers
85 views
How do I download the avatar image from an Active Directory server?
I'm using the ldapsearch.exe binary that was installed along with an Oracle client. It took awhile to tease out the arguments that it wanted, but I'm able to successfully connect to AD and parse out ...
1
vote
2answers
510 views
How to get LDAP connection string for my ActiveDirectory
I am trying to get Grails LDAP plugin to work with my Active Directory.
The plugin requires a lot of things which I'm not really familiar with as I don't know much about Active Directory.
Here are ...
1
vote
1answer
150 views
Unable to authenticate using Apache and authnz_mod_ldap in Active Directory
I have a problem with Apache2 authentication using authnz_ldap_module in order to authenticate users from Active Directory.
My Apache version is 2.2.16-6+squeeze10.
Here is the configuration I am ...
1
vote
1answer
192 views
Why do I need Pre-Windows 2000 Compatible Access to enumerate group membership?
I am trying to lock down security including removing the leaked password hashes that the UNIX addon creates. I removed Authenticated Users from the Pre-Windows 2000 Compatible Access group. However ...
12
votes
1answer
101 views
What does “DEL:” mean in the DistinguishedName of an AD Object?
Sorry -- I'm not really a Windows System Admin, just trying to slam through some LDAP interactions in Java.
I'm finding a ton of objects with "DEL:" in the distinguishedName. Are these orphaned ...
3
votes
1answer
100 views
How Do I Change the Active DIrectory Auditing Events Maximum?
We recently starting testing the ADAudit tool and turned on some new auditing features in AD.
I have an LDAP Modify action in a custom program I've written that updates very large memberships for ...
1
vote
1answer
101 views
LDIFDE command returns “Invalid Parameter: Bad argument '-r'”
I am running the following command in an attempt to export all of the groups from my domain.
ldifde -f export_Groups_NO_Members.ldf -s XXX -d "dc=XXX,dc=XXX,dc=XXX" -p subtree –r ...
0
votes
1answer
194 views
Copying Groups and Membership From One Domain to Another
I created a test domain and copied the OU structure and user accounts to it from my existing domain using ldifde as described in the KB below. Unfortunately, this did not copy the groups, or the ...
1
vote
1answer
114 views
Able to access non-secure LDAP over port 636
I have enabled LDAPS in my Windows AD environment. Using LDP.exe, I am able to connect to the server in question on port 636 with the SSL option both checked and unchecked. Does that mean that ...
2
votes
3answers
263 views
Unified Authentication between Windows AD and Linux LDAP Server
Does anyone know of a solution that would allow me to do user account synchronization between Windows Active Directory and an LDAP Server hosted on a Linux Server? I'm currently looking at FreeIPA ...
1
vote
0answers
73 views
Can't make updates with LDAP from Linux box to Windows AD
I have a webapp (built using Zend Framework - PHP) that runs on a Linux environment which needs to authenticate against Active Directory on a Windows server.
So far my webapp can authenticate with ...
1
vote
2answers
76 views
Active Directory LDS classes: what's the difference?
I'm creating some AD LDS objects. In AD I'm prompted with this window.
What's the difference between 'container' and 'group'? Is there a web resource that lists the difference? I haven't been able ...
2
votes
2answers
161 views
SVN Active Directory authentication with ProxyPass redirect in the mix
We have a BitNami SVN stack running on a Windows machine which holds our SVN repository. It's set up to authenticate against our AD server and uses authz to control rights.
We need to be able to ...
1
vote
2answers
183 views
nagios ldap-group based front end login permission issues [duplicate]
Possible Duplicate:
nagios - Web interface: authentication through kerberos OK, what about authorization on cgi.cfg?
I want to grant users access to the nagios 3 core frontend by using an ...
3
votes
4answers
115 views
What are the dominant purposes of having random user names vs fixed-format email addresses with AD/LDAP?
Example, a user name might be "ekg7d9a", but the user's real name is "Charlie Hanes", and the email is "chanes@example.com".
What are the dominant reasons to use non-related user names with logins ...
1
vote
1answer
525 views
Can Office365 (Enterprise) sync from a remote LDAP server?
I am looking in to the details of a migration to Office365 - primarily for the use of hosted Outlook capability. I see that the Enterprise plans have "Active Directory Sync", but details seem scarce.
...
0
votes
2answers
313 views
ADExplorer, how to search with “distinguishedName contains” condition?
I'm using ADExplorer 1.42 from Microsoft. I'm not very versed at this program so please kindly help me out with a search-related problem.
Right click on a node(e.g., CN=NlscanStaff) and select Search ...
-1
votes
1answer
209 views
LDAP: The Workstation service has not been started [closed]
I'm using ASP.NET-MVC4 Framework for building a web application. I want use the ActiveDirectoryMembershipProvider for authentication against my active directory I'm using at my Windows 2012 vServer. ...
0
votes
1answer
345 views
Cisco SSL VPN authenticating aginast AD via LDAP
I have an ASA 5520 and am trying to set up a remote access SSL VPN authenticating against AD using LDAP. Between these two guides:
...
1
vote
1answer
260 views
How do I pull a user name and password from Active Directory and store via LDAP?
I am trying to store a users log in and password after they enter it at encryption so that when they go to log on to our terminal server they do not have to enter a user name and password. It would be ...
1
vote
0answers
493 views
Active directory over SSL Error 81 = ldap_connect(hLdap, NULL);
I have been several day to getting AD over SSL (LDAPS)
I followed exactly this guide. I have Active Directory Certifica Service installed (stand alone Root CA), I can request cert, install certs.
...
0
votes
0answers
100 views
Apache - LDAP: Is auth for subdirectories inherited from the parent directory
We're using the authnz_ldap_module with Apache 2.2.12. Is the authentication configuration for a sub-directory inherited from the parent directory?
Considering the following configuration in ...
0
votes
1answer
73 views
Email address as rdn in Active Directory Application Mode - ADAM
Is it OK to use an email address as the CN attribute in ADAM (I don't mean the email/mail attribute)?
I have a requirement that calls for ADAM for authentication and the user's email address as the CN ...
3
votes
1answer
269 views
Dynamic group membership to work around no nested security group support for Active Directory
My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS). These legacy administration ...
1
vote
1answer
645 views
Spring Security 3.1 & Active Directory - how to set up config for users and groups
I have not been able to find anything relating to what I want to achieve
I have a web system that is using Spring Secuirty 3.1 that needs to link users from an Active Directory. For my dev, I was ...
0
votes
1answer
501 views
How to add AD users to a “Domain Controller” running ADLDS?
I installed ADLDS to my development machine in hopes to be able to test authentication from .NET code without having to have a separate machine (or even VM) running Active Directory. Everything went ...
0
votes
1answer
595 views
Changing Active Directory password over LDAP using passwd/ldappasswd/Samba
I am trying to change the Active Directory (on a Windows 2008 server) from a CentOS 6.2 machine over openLDAP.
I have tried passwd, ldappasswd and trying to see if I can do it with Samba without the ...
0
votes
2answers
743 views
How to safely use corporate Active Directory (LDAP) authentication for an internet facing web site? [closed]
Let's say you have a public web service (Jira in my case) that is used by both intranet users and external users. The server is already configured to use HTTPS (secure).
Because the server is ...
4
votes
1answer
263 views
How can I retrieve the LDAP server certificate for Windows 2008 and 2003 global catalog servers?
Windows Server 2008 | Windows Server 2003
I want to leverage LDAPS on a linux appliance. The vendor requires the server certificate for my Windows 2008 | Windows 2003 global catalog servers so it ...
1
vote
1answer
140 views
Get logon information through ldap from AD server
I want to know users logged into the domain and from which IP. I know it is possible to see by monitoring AD eventlogs. However, I want to do it without any software on AD server itself.
Is it ...
2
votes
1answer
177 views
How can I query the Full Name field in Active Directory
In Windows Server 2003 Active Directory there was no UI to access the FullName field - see this blog post for a discussion of this, and how Display Name is not the same as Full Name.
In Windows ...
0
votes
1answer
54 views
Possible to include user IP within application requests to LDAP or Active Directory?
Given the following standard workflow:
A user supplies a username and password to an application (ie, webmail).
The application authenticates the user against LDAP or AD.
LDAP or AD log the ...
