-1
votes
2answers
37 views

RHEL 6.5 and LDAP

I am trying to connect our Active directory server to brand new RHEL 6.5 server. I want to authenticate users using AD credentials, but I want to restrict that only certain users can login, I don't ...
2
votes
0answers
53 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
0
votes
1answer
36 views

LDAP Groups in authconfig

In my authconfig setup, I always use : --ldapbasedn='ou=users,o=Directory' I thought by using: --ldapbasedn='o=Directory' groups would also be included, but no luck. My LDAP schema looks ...
0
votes
1answer
213 views

CentOS/Redhat: Systemwide aliases when logging in through LDAP/sssd

I've asked this question in the Centos Support forum, but we didn't found a solution for it (https://www.centos.org/forums/viewtopic.php?f=13&t=46101#p196728) When logging in through LDAP/sssd, ...
15
votes
4answers
1k views

Common wisdom about Active Directory authentication for Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for Linux servers and modern Windows Server operating systems (CentOS/RHEL-focused)? Over the years since my first ...
1
vote
1answer
97 views

After upgrading openssl, unable to bind to server: Can't contact LDAP server

It was working like this, in /etc/openldap/ldap.conf URI ldap://127.0.0.1/ BASE dc=example,dc=com TLS_REQUEST never TLS_CACERTDIR /etc/pki/tls/certs I was able to connect our secured ldap server. ...
1
vote
1answer
33 views

Net::FTP Perl module hangs

So, I'm running Perl 5.8.8 on a RHEL5.2 system. I recently moved the LDAP source for authentication, and now I'm having issues with Net::FTP. Authentication works with the new LDAP source perfectly. ...
0
votes
1answer
35 views

Is it possible to configure a Linux server to use more than one LDAP target?

We have an environment that we are tasked with managing while also giving access to projects that run the applications on the servers. Some of those projects have stood up LDAP for authenticating ...
3
votes
1answer
602 views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
0
votes
1answer
97 views

Immediate logout after login

I have copied VM with Red Hat 6.4 in VMware vSphere Client, move it to another network and change configs for connecting to ldap servers. And now I have a problem with logging procedure through LDAP. ...
2
votes
0answers
144 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
0
votes
0answers
124 views

Can connect to LDAP server, but cannot bind: OpenLdap error message: Can't contact LDAP server

We have a PHP application deployed on a RHEL6 machine that relies on some ldap calls to function. In particular, ldap_connect and ldap_bind are used to verify users and also to look up their details. ...
0
votes
2answers
150 views

starting Standalone LDAP Daemon, slapd

I am following THIS guide to install an ldap server. At step 9 i use: /usr/local/libexec/slapd instead of: su root -c /usr/local/libexec/slapd since i dont have access to su I get this ...
0
votes
1answer
221 views

Httpd and LDAP Authentication not working for sub-pages

I just recently installed a Nagios implementation, and I'm trying to get LDAP authentication working for httpd on Red Hat. (nagios.conf for Apache config below, sanitized of course) ScriptAlias ...
2
votes
1answer
180 views

What is LDAP enumeration?

I have been working with implementing LDAP in our servers. We are using SSSD instead of nscd/nslcd to communicate with the LDAP server. One of the options in SSSD is enumeration. Enabling it solved ...
2
votes
3answers
2k views

sssd vs nslcd for RHEL-5/6

We have 50 RH-5 machines and 70 RH-6 machines. I am looking to decide what we should use for LDAP: nscd/nslcd for all RH-5/RH-6 servers nscd/nslcd for RH-5 servers, sssd for RH-6 servers sssd for ...
2
votes
1answer
2k views

What is nsswitch compat mode?

Red Hat recommended me compat mode in /etc/nsswitch.conf as one of the options to enumerate LDAP users, but later said that it's not a much-used method. nsswitch.conf passwd: files compat ...
0
votes
1answer
98 views

What are disadvantages of using nsswitch compat?

In my current LDAP set-up "getent passwd" shows all 600+ users that exist in the LDAP, not enumerating only the 20 LDAP-users that have permission to access this netgroup/server. This can be solved ...
1
vote
2answers
75 views

Getting the LDAP password from the LDAP Directory

First up, I know this question's got the potential to be downvoted and closed, nonetheless I think I will go ahead and ask it all the same because our issue is genuine enough. We have a mail server ...
0
votes
1answer
55 views

Users seeing all other LDAP users on RHEL default behavior?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent ...
6
votes
1answer
266 views

Need help understanding PAM directives

I have the following directives in my /etc/pam.d/sshd file on a RHEL5 box and I'm a bit confused. These directives are there to make LDAP+RADIUS+OTP work. What I'm trying to do is tell pam not to ...
0
votes
1answer
584 views

Moving from nslcd to sssd on Red Hat to solve NSS MD5 issue

I have a problem with the latest version of Red Hat, nss/nscd does not accept MD5 certificates. Because of recommendations I am replacing nscd with sssd with this howto ...
5
votes
3answers
3k views

How come all LDAP users are shown with getent passwd?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When I type "getent ...
1
vote
2answers
158 views

How can I allow users to change their local passwords?

We use an LDAP-server, but we also use local accounts. [jdoe@tst-03 ~]$ passwd Changing password for user jdoe. Changing password for jdoe. (current) UNIX password: Enter login(LDAP) password: This ...
0
votes
1answer
96 views

LDAP showing too many users and groups on Linux clients

We are hosting LDAP on a Solaris server and using 150 Solaris clients and 50 Linux clients. Users and groups have a list of netgroups (server hostnames) that they are able to access. This means that a ...
4
votes
1answer
3k views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ...
1
vote
1answer
263 views

RHEL 5.8 LDAP pam_groupdn customisation

I have a given LDAP-Server I want to use for User Authentication on my Red Hat Enterprise Linux 5.8 Server. I got the connection to the LDAP-Server working and I'm able to Login to the Linux Server by ...
3
votes
1answer
806 views

Linux (Ubuntu vs CentOS) LDAP Client for 389-ds - password policy

389-ds on Ubuntu 12.04 server up and running. Enabled Fine-grained password policies and User must change password after reset for the whole tree. Created test user afterwards. Login from CentOS ...
3
votes
2answers
4k views

How to get ldapsearch on Scientific Linux?

How do I get the ldapsearch on Scientific Linux? I am trying to find the ldapsearch client for Scientific Linux but cannot find how to install the client in order to do LDAP queries.
1
vote
2answers
743 views

RHEL 5/CentOS 5 - sshd becomes unresponsive

I have a number of CentOS 5.x and RHEL 5.x systems whose SSH daemons become unresponsive. This prevents remote logins. The typical error from the connecting side is: $ ssh db1 db1 : ...
2
votes
1answer
223 views

Configure DB2 LDAP authentication

I want to configure LDAP auth in DB2. From IBM docs I learned that first I need to configure LDAP authentication in operating system. But in documentation described old way of configuring LDAP for ...
1
vote
1answer
373 views

Start TLS and 389 Directory

I'm trying to configure Start TLS on 389 Directory server, but I'm having all sorts of issues. I've been following this doc: ...
1
vote
1answer
92 views

Red Hat Directory Server and 389 Directory Server, differences

Red Hat Directory Server and 389 Directory Server are the same product? Or what is the difference between them?
3
votes
2answers
184 views

Only a subset of groups available

I have installed RHEL 6.2 and configured for using LDAP with the setup utility and I can login. What is stange is that only three LDAP groups are recognized per user. It is different groups, even for ...
1
vote
2answers
3k views

How to add LDAP user to existing group?

I'm attempting to add some of our LDAP users to a locally defined group on our RHEL server, however I get an error stating that the LDAP user is not found in /etc/passwd. What would be the best way ...
1
vote
1answer
290 views

passwd for ldap users

I'm trying to enable linux hosts to authenticate against an active directory server using port 389 and tls. I seem to have that much working, but the users cannot change their passwords via passwd. ...
1
vote
2answers
2k views

OpenLDAP RHEL 6

I've been configuring OpenLDAP on RHEL 6 and its seems you have run the following to rebuild the config dirs. I'm ok with that , but my issues is , say I want to change the server passwd , do I have ...
0
votes
2answers
1k views

Is RedHat directory server free if you have a Redhat license (RHEL 5)? [duplicate]

Possible Duplicate: Can you help me with my software licensing question? If I have a RHEL 5 server with a paid subscription do I need to purchase any licenses / keys to run Redhat ...
1
vote
1answer
4k views

Apache return 500 error with authentication by LDAP secure port (ldaps)

We have Linux RHEL6 with httpd 2.2.15, and after loged with LDAP username and password, apache return 500 error. Return this error only if you use ldaps (port 636), for ldap (port 389) works fine. ...
2
votes
3answers
764 views

What's the appropriate way to upgrade Apache in RHEL?

The version of Apache shipped in RHEL 5.4 is very old. A feature I need only shipped recently. It seems Apache upstream only ships tarballs, and omits binary packages. Obviously I could build from ...
1
vote
3answers
632 views

Which LDAP on Linux

There are some packages and a lot of people use OpenLDAP but I also read that there are a lot of problems with it so I'm a bit confused. I have red hat and I was wondering what the best solution for ...
0
votes
4answers
229 views

Linux Directory Server with existing local accounts

I've got about 50 servers running a mix of RHEL and CentOS, and they all use local authentication. We are about to get these finally under a single unit's control, and we have a slew of local ...
3
votes
5answers
7k views

LDAP Authentication fails with 500 or 401 depending on bind for Apache2

I'm setting up LDAP authentication for our Subversion repository hosted through Apache on a RHEL 5 system. I run into two different issues when I try to authenticate against Active Directory. ...
5
votes
7answers
9k views

Automated configuration of ldap authentication for RHEL5 servers

I use puppet for managing our production servers. Under rhel5 the standard way of enabling ldap is to use the authconfig tool. Which works successfully, but isn't really capable with the puppet way of ...