0
votes
1answer
24 views

Ldap with cloud application

I was wondering if you guys could help me, I'm trying to use ldap to connect with our AD but the settings on the cloud app seem to fail. How do you set up ldap with external servers? Is there some ...
1
vote
1answer
298 views

Pfsense+squid LDAP search filter error

Just installed pfsense and squid on a spare machine. I am trying to get Squid to authenticate AD users via LDAP. First I tried this: ...
1
vote
0answers
71 views

Disabling LDAP Signing on Windows PDC in Local Policy

I just tripped over my own feet it seems. Playing around on a Windows 2008 R2 server (set up as domain controller), I was intrigued by certain warning event (event id 2886) which says: "To enhance ...
0
votes
1answer
312 views

LDAP throws Event ID 2887 warnings even after enabling “require signing”

I am running an AD LDS directory and, ever since configuring it, I have been seeing 2887 warning messages, so I have decided to follow this guide to have the server require LDAP signing. The problem ...
4
votes
2answers
45 views

Security concern for LDAP Query

Server OS = Windows Server 2008 R2 Std ( Domain Controller ) Client OS = windows XP & 7 Whenever we add Laptop / Desktop in to Domain. After that if User want to have information of Certain ...
3
votes
1answer
114 views

Active Directory LDAPS Somehow Holding on to the Expired Certificate

Windows Server 2008 Non-R2, 64bit. It's an AD domain controller. It uses a third party certificate (not AD CS and autoenrollment) in its Computer\Personal store to enable LDAP over SSL. I obtained ...
3
votes
2answers
162 views

Unable to Delete User Object in AD windows server 2008

OS - Window Server 2008 ( Domain Controller ) One User Object in AD is Creating Problem as well as i am unable to delete it manually also. Please see the below Error. In Event viewer i am getting ...
2
votes
1answer
77 views

LDAP query doesn't return all accounts with specific login

I have a Windows 2008 domain that I am querying via ldapsearch and if I use a domain administrator account I get all the users I would expect, but if I use the service account I created for this ...
2
votes
1answer
328 views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
-1
votes
1answer
102 views

LDAPS certificate not working with IP address

I have a certificate assigned to my Domain Controller/Certificate Authority that has no subject name assigned but has two FQDN's and and IP in the alternative names under DNS and IPv4 respectively. ...
1
vote
0answers
47 views

Cache LDAP users from Server 2008 to Ubuntu

Is there a way to cache user creds from a Windows Server 2008 to a Ubuntu server? We have 2 internal Active Directory servers on Windows Server 2008 and we have many different applications that use ...
0
votes
1answer
1k views

LDAP Can't perform an authenticated bind - Windows Server 2008 R2 Using PHP/Apache

I'm having issues performing an authenticated bind against the server. The issues doesn't appear to be in code however maybe a server issue. Just so you know; LDAP is enabled in Apache/PHP I'm ...
2
votes
2answers
2k views

How to get LDAP connection string for my ActiveDirectory

I am trying to get Grails LDAP plugin to work with my Active Directory. The plugin requires a lot of things which I'm not really familiar with as I don't know much about Active Directory. Here are ...
13
votes
1answer
122 views

What does “DEL:” mean in the DistinguishedName of an AD Object?

Sorry -- I'm not really a Windows System Admin, just trying to slam through some LDAP interactions in Java. I'm finding a ton of objects with "DEL:" in the distinguishedName. Are these orphaned ...
0
votes
0answers
68 views

MMC Cert Manager Plug-in is making LDAP connection to external site, why?

I'm trying to figure out what is causing 5 of my servers to attempt to connect to an external LDAP server. I inherited these servers when another employee left the company. As far as I know these ...
3
votes
1answer
228 views

How Do I Change the Active DIrectory Auditing Events Maximum?

We recently starting testing the ADAudit tool and turned on some new auditing features in AD. I have an LDAP Modify action in a custom program I've written that updates very large memberships for ...
0
votes
1answer
536 views

Copying Groups and Membership From One Domain to Another

I created a test domain and copied the OU structure and user accounts to it from my existing domain using ldifde as described in the KB below. Unfortunately, this did not copy the groups, or the ...
1
vote
2answers
152 views

Active Directory LDS classes: what's the difference?

I'm creating some AD LDS objects. In AD I'm prompted with this window. What's the difference between 'container' and 'group'? Is there a web resource that lists the difference? I haven't been able ...
1
vote
0answers
1k views

Active directory over SSL Error 81 = ldap_connect(hLdap, NULL);

I have been several day to getting AD over SSL (LDAPS) I followed exactly this guide. I have Active Directory Certifica Service installed (stand alone Root CA), I can request cert, install certs. ...
1
vote
1answer
107 views

Can Windows LDAP-synch Access Post Windows 2000 User Names?

Here is my question. Can LDAP reference the current Active Directory user name rather than the Pre-Windows 2000 name? Here are the details of the question. We have a new Windows 2008 Server R2 ...
0
votes
1answer
2k views

How to disallow LDAP anonymous binding for Windows server 2008

I have a Windows server 2008 server under domain and security scan found out that LDAP anonymous binding is allowed. So i need to disable the anonymous binding for my domain. I have found a way to do ...
0
votes
1answer
1k views

Changing Active Directory password over LDAP using passwd/ldappasswd/Samba

I am trying to change the Active Directory (on a Windows 2008 server) from a CentOS 6.2 machine over openLDAP. I have tried passwd, ldappasswd and trying to see if I can do it with Samba without the ...
4
votes
1answer
375 views

How can I retrieve the LDAP server certificate for Windows 2008 and 2003 global catalog servers?

Windows Server 2008 | Windows Server 2003 I want to leverage LDAPS on a linux appliance. The vendor requires the server certificate for my Windows 2008 | Windows 2003 global catalog servers so it ...
1
vote
2answers
889 views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
8
votes
1answer
8k views

How Do I Install Gerrit Under Tomcat with LDAP?

I'm trying to find good instructions for installing Gerrit under Tomcat with LDAP support. I need this installed on a Windows 2008 Server, preferably. However, I can opt for Linux if not possible. ...
2
votes
2answers
798 views

I need to find the last user to log on to a computer from AD

OK I have over 500 desktops in my company and can confirm from the lastlogontimestamp which ones are active and which ones are not - so far so good. I now need to know who was the last user to log on ...
3
votes
5answers
1k views

How to make AD highly available for applications that use it as an LDAP service

Our situation We currently have many web applications that use LDAP for authentication. For this, we point the web application to one of our AD domain controllers using the LDAPS port (636). When we ...
0
votes
1answer
104 views

Bugzilla LDAP Server2008

Since I upgraded my domain to Windows Server 2008, the LDAP authentication in Bugzilla is failing for certain users (invalid credentials). Is there a fix for this? I am using Bugzilla 3.0. Please ...
2
votes
1answer
1k views

Connect to a Windows Server 2008R2 using php, ldap, tls fails if server has NPS service

Servers: DALCON2 (Windows 2008R2, DC, NPS) DALCON3 (Windows 2008R2, DC) DALCON-WWW (Ubuntu server) Goal: From DALCON-WWW, using adLDAP with TLS to connect to a domain controller LDAP service If ...
2
votes
2answers
448 views

Active Directory Integration over VPN

I recently started working as a network admin for a company who has 2 locations and we use a VPN to connect them. We need to set up an Active Directory and Exchange Server at the second location to be ...
2
votes
1answer
225 views

Novel eDirectory and Windows XP/Seven clients

A customer asked if it's possible to authenticate windows users (on XP or Win7 machines) against an eDirectory server to be able to open a session on a Windows 2008 server. Let me try to clarify my ...
0
votes
1answer
403 views

Windows 7 Group Policy to display message for login tries left before account lock

My requirement is to display the the remaining count left on the login screen when user trying to login using Windows 7 OS before account lock in case user enter invalid password. I am having Active ...
-5
votes
1answer
295 views

Why is Active Directory so big and confusing? [closed]

Am I the only person who feels this way? Active Directory is a staple in business networks and it clearly provides some important services like single sign on and DNS integration and directory ...
7
votes
2answers
3k views

Search AD by GUID

How do I search Active Directory for objects by GUID? In other words, what would be a good way to find what objects belong to specified GUIDs?
7
votes
5answers
3k views

Cannot join Win7 workstations to Win2k8 domain

I am trying to connect a Windows 7 Ultimate machine to a Windows 2k8 domain and it's not working. I get this error: Note: This information is intended for a network administrator. If you are not ...
0
votes
0answers
236 views

NIS authentication : not using UNIX properties

I used this tutorial to authenticate a Debian machine with an active directory, and it worked like a charm. Now, I setup a NIS after I configured my Debian machine. I configured some UNIX attributes ...
1
vote
2answers
749 views

Convert linux ldapsearch to Windows dsquery

I am converting a website fro being hosted on Linux and Apache to Windows and IIS. The pages are currently written in php but new functionality will be in something along the lines of C#.net In the ...
2
votes
1answer
1k views

Advice on migrating from a Samba PDC

When we started our software development company, we decided to use Samba as a PDC for the few Windows workstations we had. We use Samba with OpenLDAP, and it has been a good replacement for AD for ...
9
votes
2answers
522 views

LDAP authentication: Windows Server2k3 vs. 2k8

We have around 70% linux users, all of which are configured to authenticate against Active Directory through LDAP. In order for this to work, we used the "Windows Services for Unix" under Windows ...
3
votes
2answers
546 views

What Defines an AD Object as “Inactive”

I am going to be using some DSQUERY/DSMOVE scripts to clean up my AD Domin. One option is to move inactive objects to a OU that has restrictive GPOs applied to it. Something like: DSQUERY computer ...
2
votes
7answers
13k views

How can I enable LDAP in PHP - Windows Server 2008

I've installed PHP in my Win Server 2008 using Web Platform Installer. The installation was success and I can correctly display phpinfo page from my virtual directory. How can I enable LDAP support? ...