Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network
6
votes
0answers
252 views
DHCP - strange issues (DDNS and IP Pools)
At my company I have encountered a strange dhcp server issue. Actually there are 2 issues.
The first one is, in one of my ip pools I use deny unknown-clients statement, but if I create a host ...
2
votes
0answers
84 views
How do I download the avatar image from an Active Directory server?
I'm using the ldapsearch.exe binary that was installed along with an Oracle client. It took awhile to tease out the arguments that it wanted, but I'm able to successfully connect to AD and parse out ...
2
votes
0answers
154 views
Mapping User and Group Ownership through LDAP
I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
2
votes
0answers
43 views
How do i map group to set of groups, and then filter by one of them?
I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows.
I'm on phase of designing my directory, ...
2
votes
0answers
399 views
Linux (Ubuntu vs CentOS) LDAP Client for 389-ds - password policy
389-ds on Ubuntu 12.04 server up and running. Enabled Fine-grained password policies and User must change password after reset for the whole tree. Created test user afterwards.
Login from CentOS ...
2
votes
0answers
144 views
issue with heimdal kerberos in ldap backend
I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
67 views
How to add more multiple CA certificates to LDAP client
I'm having trouble with adding a 2nd LDAP server into the client configuration. If I configure the client to use just either one, it works fine. So I'm sure both CA certificates work.
I have tried ...
2
votes
0answers
185 views
Troubleshooting Redmine performance
I've got a Redmine instance (Bitnami Stack) that's unusually slow. Because I'm just trying to get to the bottom of this, I have some theories which I'd like to discuss here. So, if anybody has any ...
2
votes
0answers
89 views
Overriding Debian default groups from LDAP
This is a thing that has always bothered me: how am I best to handle Debian standard groups for LDAP users?
Debian has a number of groups defined by default, e.g. plugdev, audio, cdrom and so on. ...
2
votes
0answers
97 views
Configure DB2 LDAP authentication
I want to configure LDAP auth in DB2. From IBM docs I learned that first I need to configure LDAP authentication in operating system. But in documentation described old way of configuring LDAP for ...
2
votes
0answers
134 views
LDAP authentication for Trixbox
I have a trixbox IP PBX for a 700 user company and currently it is a painful process for managing user names & passwords.
I wanted to use LDAP authentication for connecting to Trixbox so that ...
2
votes
0answers
656 views
Domain Admins do not have Administrative rights on Windows Server 2008 using Samba PDC
Members of Domain Admin using CentOS Directory Server as backend do not have Admin rights in Windows Server 2008. I have joined the domain, see that the users are populated, and can login using LDAP ...
2
votes
0answers
149 views
Dynamically Authenticate Apache with LDAP Based on Request String?
It is possible to use a portion of the request URI as an input into mod_authnz_ldap's Require ldap-group directive?
I'm trying to dynamically check access to a bunch of different project directories, ...
2
votes
0answers
729 views
Performance comparison between LDAP servers
Has anyone ever compared different LDAP servers? I am currently planning to upgrade ADAM to another server, and I'd like to know how do they perform.
Currently the options that I am researching are:
...
2
votes
0answers
2k views
TLS (STARTTLS) Failure After 10.6 Upgrade to Open Directory Master
Environment: Mac OS X 10.6.3 install/import of a MacOS X 10.5.8 Open Directory Master server. After that upgrade, LDAP+TLS fails on our MacOS X 10.5, 10.6, CentOS, Debian, and FreeBSD clients ...
1
vote
0answers
22 views
Any reason why nsAccountLock is multi-valued?
I discovered today that the nsAccountLock attribute (used in LDAP servers such as RedHat Directory Server, 389ds, ...) is multi-valued.
Link to source.
I cannot think of any reason explaining why it ...
1
vote
0answers
21 views
postfix, dovecot, dovecot-sasl, ldap, and static UIDs for NFS-shared email storage
I'm trying to build a Ubuntu 12.04 mail server as such.
Must:
Auth against an existing Open-LDAP server.
Storage in Maildirs on an existing NFS server, everything owned by 8:8 (mail:mail).
Auth is ...
1
vote
0answers
24 views
Cache LDAP users from Server 2008 to Ubuntu
Is there a way to cache user creds from a Windows Server 2008 to a Ubuntu server?
We have 2 internal Active Directory servers on Windows Server 2008 and we have many different applications that use ...
1
vote
0answers
43 views
segmentation fault trying to start ldap
My PDC using Samba 3.6 with LDAP (the latest version) works very fine as long as I use hdb as the backend. Nevertheless, I change the backend to sql I receive the following error while trying to ...
1
vote
0answers
20 views
Apache 2.2 Ldap Authantication error 500 - AuthLDAPURL
I have an Apache server on RHEL 6 that uses our active directory for authentication,
We added a new "LocationMatch"
AuthLDAPURL ...
1
vote
0answers
61 views
Authentication between Windows AD and Linux LDAP Server and google APPS
I have an active directory instance hosted in a secure data center offsite. That active directory allows my sharepoint users to have authentication
I have google apps for all my users in the ...
1
vote
0answers
38 views
LDAP returns “Credentials Invalid” error from service but not from IIS Web App
I have a windows service that runs under the same credential as the app pool for our web app. When I logon to the web app the LDAP authentication works fine. However, when I call an API implemented in ...
1
vote
0answers
65 views
How to allow access to members of an LDAP-group via apache?
I am trying to allow members of a certain LDAP-group into a site I'm hosting via Apache. I've read the documentaion on this, but as I have lacking LDAP skills, I could not determine how to accomplish ...
1
vote
0answers
56 views
Restricted LDAP mimic server backed on SQL
I may not be an expert on the subject, but it seems to me that 99% of any LDAP server installation is used only to provide user authentication credentials and nothing more.
Given this restricted ...
1
vote
0answers
73 views
Can't make updates with LDAP from Linux box to Windows AD
I have a webapp (built using Zend Framework - PHP) that runs on a Linux environment which needs to authenticate against Active Directory on a Windows server.
So far my webapp can authenticate with ...
1
vote
0answers
1k views
Kerberos broken when upgrading Snow Leopard Server to Mountain Lion
I work for a small company where there's no dedicated system admin. I was tasked with upgrading our file and calendar server to 10.8, which I did by upgrading the OS then installing the server tools ...
1
vote
0answers
658 views
Couldn't drop privileges: User is missing UID (see mail_uid setting)
I'm hoping I can use some help.
I'm configuring dovecot_ldap, but I can't seem to be able to get dovecot to authenticate the ldap user.
Below is my config and log info:
hosts = 192.168.128.45:3268
...
1
vote
0answers
67 views
iPlanet Authentication provider
Good day. I have stepped into project that requires a server migration that would change the means of authentication for our CAC/PKI SSL enabled website. We are using iPlanet 7 and Oracle Directory ...
1
vote
0answers
208 views
How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package
I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package.
I have used the following command to ...
1
vote
0answers
489 views
Active directory over SSL Error 81 = ldap_connect(hLdap, NULL);
I have been several day to getting AD over SSL (LDAPS)
I followed exactly this guide. I have Active Directory Certifica Service installed (stand alone Root CA), I can request cert, install certs.
...
1
vote
0answers
193 views
CentOS LDAP authentication
How to configure LDAP-auth in CentOS 6?
I configured it using GUI tool. Configuration looks like this :
But when I logout from root and try login with user defined in LDAP - nothing happens. I ...
1
vote
0answers
323 views
CentOS PAM+LDAP login and host attribute
My system is CentOS 6.3, openldap is configured well, PAM authorization works fine.
But after turning pam_check_host_attr to yes, all LDAP-auths fail with message "Access denied for this host".
...
1
vote
0answers
126 views
stunnel Haproxy ldap authentication
in our setup port 433 is handled by stunnel. After that haproxy will dispatches the request to the appropriate backend.
I have managed to enable authentication in haproxy. But the users and passwords ...
1
vote
0answers
149 views
Apache LDAP auth: denied all time
There is my config (httpd 2.4):
<AuthnProviderAlias ldap zzzldap>
LDAPReferrals Off
AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)"
AuthLDAPBindDN ...
1
vote
0answers
95 views
Multimaster LDAP replication on Ubuntu 11.04
I'm attempting to setup a multimaster pair on Ubuntu 11.04. I currently have a working single server which I've cloned to a 2nd server. The installed version of OpenLDAP is the default from the Ubuntu ...
1
vote
0answers
244 views
Jenkins - Project based authorization + LDAP
Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration?
There are several closed bug reports on the Jenkins Jira site that say users don't need ...
1
vote
0answers
226 views
LDAP Berkeley DB
I'm trying to configure slapd on my machine and I keep getting this error. I can recover at times using db7.7_recover but not always. I see this problem if the slapd deamon is killed for any reason.
...
1
vote
0answers
131 views
CAS-Toolbox : Get Nested Group from Active Directory
We are using Cas-Toolbox for our intranet.
We manage to get LDAP attribute via CAS and send it to the intranet app :
<bean id="adAttribRepository" ...
1
vote
0answers
496 views
LDAP groups not always mapping, Ubuntu server 12.04
Ubuntu 12.04 server, AMD64, authentication via LDAP. I'm having trouble getting the LDAP groups to map to my user account when logging in, even though 'getent group' shows the correct set of groups ...
1
vote
0answers
143 views
Merge two samba PDC and do master slave keeping data on two servers
I need to do a very difficult thing.
I have this situation:
1) server A , with zentyal as samba PDC, 500 users in his ldap. Each user has an home that is mapped to H: . Several computers are ...
1
vote
0answers
39 views
Auxiliary class
I try to modify an AD schema, adding a custom auxiliary class in user (Cn=MyName,CN=Users,DC=xxx,DC=yyy)
With adsiedit when the new object window pops-up to add the class, I can only select ...
1
vote
0answers
382 views
Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)
I'm setting up an application to authenticate to Open Directory using LDAP.
Open Directory stores groups in RFC 2307 posixGroups format, like this:
cn: mygroup
objectClass: top
objectClass: ...
1
vote
0answers
186 views
openldap + active directory + nested groups + nss
I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing
nss_base_passwd ...
1
vote
0answers
112 views
Reviewboard/LDAP groups
I'm curious if anyone has a solution for sync'ing RB and LDAP groups? I want to manage user/group data in LDAP and have those changes propagate to RB. The RB API doesn't allow creation/modification ...
1
vote
0answers
393 views
How to configure LDAP client to authenticate against ApacheDS?
I am playing with LDAP lately and trying to authenticate against ApacheDS. I am unable to setup my Ubuntu client to print the LDAP users list (getent passwd for instance). I found few tutorials on the ...
1
vote
0answers
344 views
Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP
Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)?
...
1
vote
0answers
157 views
Connect from iphone to LDAP on a non-standard port
I asked on superuser, it was migrate to the apple stack exchange site and it was suggested I ask here.
This feels like cross posting but...
I've tried a quite a few different sequences, such as ...
1
vote
0answers
359 views
“Password Server: Stopped” on Mac OS Lion Server. Stops with error -1 during startup
Since I've restored the Open Directory from an archive because my Server crashed and the DB was corrupt. The password server does not start anymore.
The log looks like this:
Feb 14 2012 21:41:20 ...
1
vote
0answers
104 views
Cisco ASA Dynamic Access Policies with LDAP
When setting up a Dynamic Access Policy on an ASA that is already configured to use SLDAP for authentication, can attributes other than groups be used? Say a single user?
1
vote
0answers
40 views
Specify attribute's minimum length
I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam.
I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
