3
votes
2answers
123 views

In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?

I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
2
votes
1answer
94 views

Puppet: Enumerating all users within a group

Is there any way to enumerate an array of all users within a group within Puppet, either as a fact or something so I can do something like this? $users = enumusers('wheel') each($users) |$user| { ...
9
votes
4answers
552 views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
3
votes
1answer
407 views

Dynamic group membership to work around no nested security group support for Active Directory

My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS). These legacy administration ...
0
votes
2answers
164 views

how to add groupOfEntries object class to openLDAP

I am working on the design of LDAP structure, that basically should hold users and groups. There should be support for nested groups (so I thought on using groupOfNames object class) and for the ...
3
votes
2answers
177 views

Only a subset of groups available

I have installed RHEL 6.2 and configured for using LDAP with the setup utility and I can login. What is stange is that only three LDAP groups are recognized per user. It is different groups, even for ...
0
votes
0answers
516 views

Clients not recognizing secondary LDAP groups?

I'm having an issue where users who are members of secondary groups in LDAP are not being recognized as members of that group by the client. In this case, user jdoe is not being recognized as a member ...
1
vote
2answers
3k views

How to add LDAP user to existing group?

I'm attempting to add some of our LDAP users to a locally defined group on our RHEL server, however I get an error stating that the LDAP user is not found in /etc/passwd. What would be the best way ...
1
vote
1answer
464 views

ubuntu mount nfs only if user is in group

I have basic-to-medium advanced network setup at my work. We run an ubuntu 10.04 fileserver serving a few different directories (including /home) over NFS and all client machines (various ubuntu ...
1
vote
2answers
5k views

Jenkins/Hudson - LDAP group *lookup* does not work

I'm trying to get Jenkins to authenticate users via our active directory groups. If I insert users they are correctly looked up. If I insert group names, they are not found. Edit: Through trial ...
6
votes
3answers
7k views

How to authenticate users in nested groups in Apache LDAP?

I've working LDAP authentication with the following setup AuthName "whatever" AuthType Basic AuthBasicProvider ldap AuthLDAPUrl ...
0
votes
2answers
3k views

How do I enable group enumeration on a Linux server that is using LDAP to connect to an AD server?

I've got a set of servers that I need to authenticate against a central Active Directory forest. The AD admins have kindly installed the UNIX AD extensions and the NIS ones as well, so I've got a lot ...
2
votes
2answers
2k views

dn-based linux groups from ldap

Is there any way to use one of LDAP's DN-based groups for linux groups instead of using the uid-based posixGroup objectclass? More broadly, is there any way I can avoid having one set of groups for ...
1
vote
1answer
913 views

rfc2307bis and posix groups

I've needed to configure LDAP authentication for Joomla! and the only way to get it to work together (with LDAP group based was by using groupOfUniqueNames, not the posixGroup. In other words, Joomla ...
4
votes
1answer
469 views

Active Directory, Linux, and User Private Groups

We're in the process of moving from NIS on our Linux systems to binding everything to Active Directory. The NIS environment follows the common standard used by many Linux distributions that a user's ...
2
votes
1answer
4k views

SquidGuard and Active Directory: how to deal with multiple groups?

I'm setting up SquidGuard (1.4) to validate users against an Active Directory domain and apply ACLs based on group membership; this is an example of my squidGuard.conf: src AD_Group_A { ...
3
votes
3answers
5k views

How can I proxy multiple LDAP servers, and still have grouping of users on the proxy?

I have 2 problems that I'm hoping to find a common solution to. First, I need to find a way to have multiple LDAP servers (Windows AD's across multiple domains) feed into a single source for ...
3
votes
2answers
4k views

LDAP query on linux against AD returns groups with no members

I am using LDAP+kerberos to authenticate against Active Directory on Windows 2003 R2. My krb5.conf and ldap.conf appear to be correct (according to pretty much every sample I found on the 'net). I ...