0
votes
0answers
22 views

SSH login with LDAP users over NSLCD works after restarting server

I have a working nslcd setup running on many servers. I distributed this config to many servers almost all of which are working without problems. However I forgot to install libnss-ldapd and ...
3
votes
0answers
105 views

Kerberos, .k5login and sudo

Background: I am using a Debian 7 system which I have integrated with an LDAP+Kerberos system using libnss-ldap, libpam-krb5 and nscd. I have modified sudoers to permit an LDAP group the right to sudo ...
0
votes
1answer
225 views

NFS, Quota and LDAP

I have the following scenario in two servers with Debian: Server #1 OpenLDAP, NFS exporting /home Server #2 PAM with pam_ldap configured to authenticate against Server #1, /home directory mounted ...
0
votes
0answers
114 views

LDAP_route not working after upgrade from Debian Lenny to Wheezy

 I have Debian 5 box (Lenny) with configured sendmail and LDAP_routing feature. This box is placed between Internet and my final mail server (MS Exchange). LDAP_route feture was used to validate ...
0
votes
1answer
542 views

OpenLdap: Why slapd tell me there's no DB_CONFIG when there is one

When I run slapcat or restart slapd on Debian 6, OpenLdap 2.4.23-7.32.4.23-7.3, I see this warning: hdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (14). Expect poor ...
0
votes
0answers
217 views

Ubuntu 12.04 Preseed LDAP Config

I'm trying to deploy Ubuntu 12.04 via xCAT, everything works except the automatic configuration of LDAP, the preseed file is read but the file /etc/nsswitch is not written properly. My Preseed File: ...
0
votes
0answers
45 views

Import accounts from Kerberos/OpenLDAP to linux

I have a configuration of our own Kerberos server and OpenLDAP server that manages user accounts. I want to get rid of Kerberos and LDAP altogether and import a list of users as well as their shadow ...
0
votes
1answer
162 views

Can't make libnss-ldap resolve groups in Debian

We have an (active directory) LDAP server and I'm trying to use libnss-ldap to resolve ldap users and groups. When I run 'getent passwd', all of the users are returned exactly like I'd expect. ...
3
votes
1answer
3k views

How to correctly ldapmodify replace olcAccess lines?

This is a part from olcDatabase={1}hdb.ldif olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=somesite,dc=com" write by * none olcAccess: ...
2
votes
1answer
78 views

How to securely connect to multiple different LDAPS servers (Debian)

I'm trying to connect to multiple different LDAPS servers. A lot of the documentation I've seen recommends setting TLS_REQCERT never, but that strikes me as horribly unsecure to not verify the ...
1
vote
2answers
2k views

Upgrading to Debian 7: Postfix Auth fails

I'm upgrading various Debian 6 servers to Debian 7. There are a few minor issues, but this one is a show stopper. On Debian, Postfix runs in a chrooted environment. That environment is setup ...
1
vote
0answers
427 views

Samba + LDAP: user authentication works for one but not another server

I have a very frustrating problem I'm trying to solve for a few days now, maybe one of you can help me. I have two (standalone) samba servers which should authenticate the users using an LDAP server. ...
2
votes
1answer
133 views

Overriding Debian default groups from LDAP

This is a thing that has always bothered me: how am I best to handle Debian standard groups for LDAP users? Debian has a number of groups defined by default, e.g. plugdev, audio, cdrom and so on. ...
1
vote
1answer
1k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
3
votes
2answers
339 views

After user is added to LDAP, user cannot login to SVN unless apache is restarted

System specs: LDAP: apache-ds 2.0 M7/debian squeeze SVN: subversion 1.6.5/debian Apache: 2.2 mod_svn/auth_ldap mods enabled I have successfully integrated the two systems together (LDAP and SVN). The ...
1
vote
1answer
181 views

Courier IMAP stucks after authentication in Debian

I just updated my Debian and Courier imap is not logging in anymore. Pop3 service works fine. In the logs I can see that authdaemon authenticates, but imapd gets stuck and does not return OK. Logs: ...
0
votes
1answer
516 views

Debian + ProFTPD + LDAP Incorrect Password Issue

I have the LDAP configuration configured for ProFTPD and I have modified the modules.conf file to include the LDAP module. However, every time I login with FileZilla I get 530 Login Incorrect. It ...
2
votes
2answers
266 views

How can I jail users to their home directory with mod_userdir in Apache?

I need to make my users' home directories available to them over the web. I have LDAP authentication in place so only valid users can access the home directories but currently a valid user can access ...
1
vote
1answer
426 views

DebianEDU repaire broken ldap database & dhcp server

We a have DebianEDU 5.0.9 codename lenny Last week it crashed, DHCP I get error: Cannot find host LDAP entry dhcp (&(objectClass=dhcpServer)(cn=dhcp)) LDAP: no space left on device, ...
2
votes
1answer
2k views

Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap

I start with a fresh installation of openldap 2.4.28 on debian. They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library. It's hard to understand ...
1
vote
1answer
4k views

smbpasswd: Failed to add entry for user

tl;dr Assuming a basic (but functioning) LDAP/PAM configuration, how come smbpasswd fails with this error message when I try to add an existing UNIX/LDAP user to Samba? I have a basic, but working ...
0
votes
1answer
340 views

LDAP backup script only send email if error

I am using this script to backup the LDAP daily via cronjob. Is it possible to modify the script to only send a email if there has been an error. Copy of email sent daily * Create data directory: ...
5
votes
1answer
770 views

Apache authentication against LDAP fails for passwords with umlauts

When authenticating against LDAP (Active Directory, Server 2008) from an Apache server I get the following message in the error log: authentication failure for "/": Password Mismatch This only ...
0
votes
1answer
544 views

Can't connect to Samba/LDAP share, no obvious error

I just did an initial Samba/LDAP configuration on a Debian Squeeze system. I added a single user to an ldap directory and installed libnss-ldap. I can now successfully login to the system using the ...
4
votes
3answers
2k views

libpam-ldap or libpam-ldapd?

I'm setting up LDAP authentication on my personal VPS, and Ubuntu has two packages for the same purpose: libpam-ldap and libpam-ldapd. Which should I use?
2
votes
1answer
277 views

Purging database when slapd is purged

While configuring the slapd package in Debian 5, I found one of the questions intriguing: Do you want the database to be removed when slapd is purged? What does it mean to purge the slapd ...
7
votes
5answers
4k views

Debian 6.0 AD integration

Despite multiple questions already about this, e.g. Linux on Windows AD Domain I'd like to know how to get Debian 6.0 Squeeze integrated with AD using open source or otherwise free of charge for ...
0
votes
1answer
195 views

Squid LDAP integration

I have integrated Squid running on a gateway Debian machine with an LDAP directory. I have an acl called ldaplogin for the ldap authentication configured with the right parameters. I also have rules ...
1
vote
1answer
327 views

LDAP loginShell on platforms with different paths

I'm using LDAP to deal with users and authentication across my network. I'm now adding FreeBSD hosts and have hit a problem with login shells. on Linux, shells tend to be in /bin/$shellname, so ...
1
vote
1answer
388 views

Samba authentication via LDAP

Could you please tell me how did you enable samba authentication via LDAP ? I saw your post but could not find any steps :( Thanks in advance. Maniyeri
0
votes
1answer
594 views

Problem with LDAP: ldapindex

I'm installing ldap server on debian machine. Here is the link to the guide I am following: http://www.debian-administration.org/article/OpenLDAP_installation_on_Debian I installed all the needed ...
2
votes
2answers
2k views

I cannot su when LDAP is running

I have problem with ldap, that when it is online, I login with user/pass from LDAP db and then cannot su to root with local pass. When I turn offline LDAP I can login with local user/pass and su to ...
0
votes
1answer
2k views

smbldap-tools: how do I list groups

I'm using smldap-tools to administrate a small office network. Whenever I add a new user I always forget which groups I've created and therefore which groups I need to add a user to. Is there an easy ...
2
votes
2answers
2k views

How to automatically create user accounts ( SSH + LDAP )

I set up remote LDAP server (Server1) and SSH with pam_ldap on Server2. Everything is working ok, I can login to SSH with LDAP credentials. But when I want to add new user, I have to firstly create it ...
1
vote
1answer
472 views

Looking for an addressbook (web)application that read/writes LDAP

In an existing infra-structure based on Debian/Cyrus/Exim/Horde/LDAP I'm trying to make all the clients (OSX and Windows 7, preferably also iPhone and blackberry) work with a centralized LDAP ...
2
votes
1answer
541 views

Passwd via PAM only work for LDAP

Now I'v got a working setup using PAM+LDAP over SSL but I can only passwd users in the ldap tree, any idea about how to be able to passwd every users ? Here are some conf files : ...
0
votes
2answers
3k views

How to disable anonymous access on LDAP

I need to secure my LDAP server and am not quite sure the best way to go about it. I am running Debian "Lenny", and using OpenLDAP (slapd). I notice that if I run: ldapsearch -x -W -b ...
8
votes
1answer
384 views

Starting openLDAP

I work as a sysadmin in a company and i am required to Deploy openLDAP. I have read a lot of materials but i really can't figure out where to start. First about the company: Services: Email: every ...
2
votes
4answers
682 views

Small and medium business: user and workstation management with Debian Linux

I'm looking into building a more unified user and workstation management system and I thought it would be a good idea to ask others how they have solved the apparent issues. I would use LDAP for user ...
1
vote
3answers
6k views

OpenLDAP with ldaps support on Debian Lenny

somehow I am unable to configure slapd to enable ldaps support on Debian Lenny. It looks like OpenLDAP is compiled with GnuTLS instead of OpenSSL which could be part of the problem. I've added the ...
3
votes
3answers
12k views

Apache + LDAP Auth: access to / failed, reason: require directives present and no Authoritative handler

Can't solve this one, here's my .htaccess: AuthPAM_Enabled Off AuthType Basic AuthBasicProvider ldap AuthzLDAPAuthoritative on AuthName "MESSAGE" Require ldap-group cn=CHANGED, cn=CHANGED ...