-1
votes
2answers
47 views

RHEL 6.5 and LDAP

I am trying to connect our Active directory server to brand new RHEL 6.5 server. I want to authenticate users using AD credentials, but I want to restrict that only certain users can login, I don't ...
1
vote
1answer
33 views

Is it possible to have one group or account authenticate locally, bypassing LDAP auth?

We have one RAC cluster of machines where the local UID:GID of a couple users (oracle and grid) do not match the UID:GID of those same users in LDAP. Ultimately we ought to change the UID and GID of ...
0
votes
0answers
56 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
6
votes
2answers
261 views

Manage SSH Users with MySQL backend

is there a possibility to use a (mysql) Database to manage SSH login credentials instead of /etc/passwd ? I know I could use ldap but I only want simple user management and ldap seems a little bit ...
0
votes
0answers
44 views

Why is my samba domain user created by a bash script behave differently from one created manually?

I have a samba server which is using LDAP as its backend. The PDC is working as expected as long as I create the users manually. This means that if I use the following command to create a new user, I ...
2
votes
1answer
146 views

build user chroot on first login

I'm using ldap for remote user authentication and I basically need to either figure out how to: a. chroot a user on machine b from machine a via nfs,(which doesn't seem possible without mounting ...
15
votes
4answers
1k views

Common wisdom about Active Directory authentication for Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for Linux servers and modern Windows Server operating systems (CentOS/RHEL-focused)? Over the years since my first ...
0
votes
1answer
44 views

389 directory server - password not recognized

I have installed "389 directory server" on a CentOS6.5 server, with the setup-ds-admin.pl script. Then added 2 users from the '389-console', to "People" (setting their password from the GUI). Now I'm ...
0
votes
1answer
36 views

Is it possible to configure a Linux server to use more than one LDAP target?

We have an environment that we are tasked with managing while also giving access to projects that run the applications on the servers. Some of those projects have stood up LDAP for authenticating ...
3
votes
1answer
661 views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
1
vote
1answer
1k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
0answers
100 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
1answer
27 views

Linux map usernames

We had an LDAP server which had our own groups and usernames on. Now we are moving to a centrally managed LDAP server. The users now have a different username but still have a home folder mapped to ...
0
votes
0answers
559 views

Change local password as root after configuring for MS-AD Kerberos+LDAP

I have followed this excelent post to configure Kerberos + LDAP: http://koo.fi/blog/2013/01/06/ubuntu-12-04-active-directory-authentication/ However, there are some local users used for services. When ...
0
votes
1answer
57 views

Sudo Command Alias option equivalent in OpenLDAP

I have an OpenLDAP installation that manages Sudo as well. Everytime I create a sudoers role, I have to list the commands that that sudoers role can run. This leads to a lot of repetition. Is there ...
-1
votes
1answer
78 views

LightSquid ldap authentication fails

I have a lightsquid server to generate reports about Internet use. It is integrated with LDAP server. I cant login in lightsquid web page. cat /var/log/apache2/error.log Thu Dec 26 13:54:04 2013] ...
0
votes
0answers
127 views

Can connect to LDAP server, but cannot bind: OpenLdap error message: Can't contact LDAP server

We have a PHP application deployed on a RHEL6 machine that relies on some ldap calls to function. In particular, ldap_connect and ldap_bind are used to verify users and also to look up their details. ...
0
votes
2answers
152 views

starting Standalone LDAP Daemon, slapd

I am following THIS guide to install an ldap server. At step 9 i use: /usr/local/libexec/slapd instead of: su root -c /usr/local/libexec/slapd since i dont have access to su I get this ...
0
votes
1answer
40 views

DNS Portability with regards to LDAP/Kerberos

How portable is a DNS server when it comes to LDAP, especially Kerberos which I am using for authentication? Meaning, how much do I have to change to use the same LDAP server with 2 different DNS ...
3
votes
1answer
344 views

How to use PAM to check LDAP password for some users, yet always use UID/GIDs from local files?

For a subset of my users in /etc/passwd, I would like to configure PAM (on Linux) to do the password checking part of the logon against an LDAP server, ignoring that these users are actually are ...
0
votes
1answer
268 views

Unknown LDAP cn=config admin password

when I installed openldap I was asked to create a password for an admin user but now i realize there's another admin user for cn=config whose password i don't know. Does anyone know how should i ...
1
vote
0answers
33 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
0
votes
1answer
641 views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
0
votes
1answer
230 views

Httpd and LDAP Authentication not working for sub-pages

I just recently installed a Nagios implementation, and I'm trying to get LDAP authentication working for httpd on Red Hat. (nagios.conf for Apache config below, sanitized of course) ScriptAlias ...
3
votes
1answer
170 views

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 ...
2
votes
1answer
278 views

Is This Normal LDAP Behaviour In CentOS Linux?

Hello fine people! As a novice in the Linux world, I have managed to learn enough to put into production a ClearOS 5.2 server running the CentOS Linux Distro. This box serves as my Primary Domain ...
0
votes
1answer
64 views

Problems with new server accessing ldap and mail server/relay (connection timeout and can't contact)

I'm on OpenSUSE 12.3, and setup a mail relay under mail server settings (posix) via yast. I try to send a mail and get timed out: 2013-09-27T15:19:08.745282+01:00 myserver postfix/qmgr[12258]: ...
0
votes
0answers
23 views

OpenSUSE Won't Authenticate against OpenLDAP Server

I have an OpenBSD LDAP server for single sign on purposes, I know that its working because my Ubuntu client can authenticate against it without any issues. OpenSUSE will not authenticate against my ...
0
votes
1answer
86 views

Finding out my current LDAP server type

How can i find out if my current LDAP sever type is Standalone, Master or Replica (slave)? I am using OpenLDAP on SLES 11.
3
votes
1answer
256 views

ldapquery an Active Directory server for users that belongs to a group named X

When I do this at the bash prompt on a CentOS 6.4 ldapsearch -LLL -H ldap://adserver.example.com -x -D someuser@example.com -w somepass -b 'OU=Users,DC=example,DC=com' ...
2
votes
1answer
347 views

Creating Samba shares across multiple servers from a single LDAP server

We have a Fedora Directory Server running LDAP, where a few hundred users exist. We need a way we can create samba shares depending on projects and limit access to these shares across multiple Linux ...
1
vote
0answers
69 views

Which attributes does Active Directory currently use for POSIX compatibility?

In a heterogeneous environment that uses Windows Active Directory as the central directory, some attributes are essential for compatibility with Linux systems. uidNumber gidNumber gecos loginShell ...
0
votes
1answer
40 views

Using autobind without LDAPI

I am trying to automate the installation of my OpenLDAP servers. Currently packages get installed (openldap-clients, openldap-servers) and started with their default configurations. I have a LDIF ...
0
votes
1answer
70 views

Split authentication and NSS lookups for users and groups to different servers

I've asked this question previously: Multiple Bind and base DNs in ldap.conf Since that previous question was answered in the negative, I'm looking for other options such as splitting authentication ...
0
votes
2answers
283 views

PAM LDAP configuration for non-local user authentication

I have a requirement to allow non-local user accounts to be logged in via LDAP authentication. Meaning, the user that is trying to login is allowed access, if the user account exists in LDAP server ...
0
votes
1answer
182 views

Multiple Bind and base DNs in ldap.conf

I have multiple LDAP servers and different user groups in each. I want to authenticate using both LDAP servers which have different base DNs. Is it possible to put in multiple bind and base DN values ...
1
vote
0answers
84 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
1
vote
1answer
146 views

linux ldap authentication set gid to uid

I'm setting up ldap authentication with sssd for a linux server. everything works fine. however, the users from the ldap server have a default group User. which is, uid=10001 (larry), gid= 20001 ...
8
votes
1answer
1k views

IPA vs just LDAP for Linux boxes - looking for a comparison

There are few (~30) Linux (RHEL) boxes and I'm looking for centralized and easy managed solution, mostly for control user accounts. I'm familiar with LDAP, and I deployed a pilot of IPA ver2 from Red ...
0
votes
0answers
1k views

Samba standalone server using LDAP for authentication: SID mismatch

I'm trying to get my new samba server running for days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and >100 ...
2
votes
2answers
181 views

Is there way to detect and track the changes made to OpenLDAP

I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc. I'm wondering is there a way to track changes made to LDAP ...
0
votes
1answer
196 views

How can I map existing LDAP users to users in a different LDAP server?

We set up some Linux machines to use our company's LDAP server for authentication. We were then acquired by another company, and they want us to use their LDAP server and retire the old one. But the ...
0
votes
1answer
212 views

Why all LDAP user passwords are incorrectly imported? And can't be modified?

First of all I am new to OpenLDAP setup. I have followed instructions coming from: HowToForge.com linux openldap setup #root dn: dc=localhost,dc=com dc: localhost objectClass: dcObject objectClass: ...
0
votes
0answers
79 views

Apache to accept a (corrupt) certificate without a Subject?

I am using .htaccess to ask for a username and passphrase which authenticates against LDAP. The problem is, that the certificate is corrupt, and so Apache of course won't allow users to login. As ...
1
vote
1answer
2k views

Open LDAP and ActiveDirectory synchronization

I have been searching on google for a while to find out the best way to synchronize the user database between OpenLDAP and an ActiveDirectory, but with not a clear results ! What i want to achieve ...
0
votes
1answer
235 views

restarting authconfig changes order of my /etc/nsswitch.conf

Here is my nsswitch.conf: passwd: files ldap sss shadow: files ldap sss group: files sss When I restart authconfig, it removes ldap from passwd, shadow, and group. Here's my ...
1
vote
0answers
188 views

How to allow access to members of an LDAP-group via apache?

I am trying to allow members of a certain LDAP-group into a site I'm hosting via Apache. I've read the documentaion on this, but as I have lacking LDAP skills, I could not determine how to accomplish ...
0
votes
1answer
1k views

LDAP client on Fedora 18

I'm trying to get Fedora 18 to use LDAP for groups and users. I've installed the package nss_ldap and run authconfig-gtk to configure the appropriate settings. I have verified that the server is up ...
0
votes
1answer
244 views

How to start 389 Directory Server at boot

How do I configure 389 Directory Server to start automatically during boot? I am using Fedora 18 and 389 DS version 1.3.0.2, build 2013.017.28. There does not seem to be any recent documentation on ...
3
votes
4answers
1k views

Does Samba 4 come with an internal LDAP server?

Does Samba include capability to create an internal LDAP server? I am using Samba version 4.0.3 on Fedora 18, and it is installed from the package manager. How do I go about setting up the internal ...