Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

4
votes
0answers
123 views

Configuring Synology NAS as freeIPA client

I'm attempting to deploy freeIPA in my company. The network is quite simple: < 10 FC20 (and FC21 beta) desktops < 5 FC20 servers (including the one with freeIPA) 1 Synology NAS DS1813+ (DSM ...
4
votes
0answers
178 views

CentOS requires entering password twice for sudo, login

At every login or sudo prompt, the server always rejects the password when it is first supplied, but accepts it the second time. I found this thread which describes what seems to be the same problem, ...
3
votes
0answers
202 views

Kerberos, .k5login and sudo

Background: I am using a Debian 7 system which I have integrated with an LDAP+Kerberos system using libnss-ldap, libpam-krb5 and nscd. I have modified sudoers to permit an LDAP group the right to sudo ...
3
votes
0answers
210 views

How do I download the avatar image from an Active Directory server?

I'm using the ldapsearch.exe binary that was installed along with an Oracle client. It took awhile to tease out the arguments that it wanted, but I'm able to successfully connect to AD and parse out ...
2
votes
0answers
14 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
2
votes
0answers
278 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
2
votes
0answers
62 views

Are External LDAP referrals similar to a DNS Recursive or non recursive entry?

I'm very familiar with DNS, but less so with LDAP. In DNS I have the ability to delegate the CPU and IO load of referral chasing a given DNS query... or I can set norecurse and have the client ...
2
votes
0answers
1k views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
2
votes
0answers
343 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
2
votes
0answers
173 views

configuration CAS with LDAP active Directory

I am using CAS server version 3.5.2 and after I configured it to connect to an LDAP server I got this message. Anyone have a clue about what is happening? My LDAP server is pfeserver.pfe.dz ...
2
votes
0answers
186 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
2
votes
0answers
1k views

LDAP over SSL Unsuccessful on 2003 DC, Working on 2008 R2 DC in Same Domain

I have a publicly signed UCC for LDAP over SSL in a test domain. It contains the Server Authentication OID Extension and works fine on a 2008 R2 DC in the same domain. The CSR was generated on the ...
2
votes
0answers
59 views

How can I force a schema replacement operation in LDAP

I am using ApacheDS. I have created a custom schema such that it is in its own container under schema. When I make changes to the LDIF file and re-import it, I keep getting errors indicating that the ...
2
votes
0answers
245 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
2
votes
0answers
184 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
2
votes
0answers
72 views

Restricted LDAP mimic server backed on SQL

I may not be an expert on the subject, but it seems to me that 99% of any LDAP server installation is used only to provide user authentication credentials and nothing more. Given this restricted ...
2
votes
0answers
54 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
2
votes
0answers
344 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
534 views

Troubleshooting Redmine performance

I've got a Redmine instance (Bitnami Stack) that's unusually slow. Because I'm just trying to get to the bottom of this, I have some theories which I'd like to discuss here. So, if anybody has any ...
2
votes
0answers
56 views

Auxiliary class

I try to modify an AD schema, adding a custom auxiliary class in user (Cn=MyName,CN=Users,DC=xxx,DC=yyy) With adsiedit when the new object window pops-up to add the class, I can only select ...
2
votes
0answers
683 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
2
votes
0answers
175 views

Reviewboard/LDAP groups

I'm curious if anyone has a solution for sync'ing RB and LDAP groups? I want to manage user/group data in LDAP and have those changes propagate to RB. The RB API doesn't allow creation/modification ...
2
votes
0answers
193 views

LDAP authentication for Trixbox

I have a trixbox IP PBX for a 700 user company and currently it is a painful process for managing user names & passwords. I wanted to use LDAP authentication for connecting to Trixbox so that ...
2
votes
0answers
1k views

Domain Admins do not have Administrative rights on Windows Server 2008 using Samba PDC

Members of Domain Admin using CentOS Directory Server as backend do not have Admin rights in Windows Server 2008. I have joined the domain, see that the users are populated, and can login using LDAP ...
2
votes
0answers
2k views

TLS (STARTTLS) Failure After 10.6 Upgrade to Open Directory Master

Environment: Mac OS X 10.6.3 install/import of a MacOS X 10.5.8 Open Directory Master server. After that upgrade, LDAP+TLS fails on our MacOS X 10.5, 10.6, CentOS, Debian, and FreeBSD clients ...
1
vote
0answers
20 views

Nagios 3.2.3 Core web interface login via LDAP using full names for username

First off I've never done any Nagios or LDAP configuration in the past and I've been sort of dumped into this as is so often the case so forgive my inevitable ignorance regarding these things but I've ...
1
vote
0answers
17 views

delay in ACK packets for ldap abandon request

we have migrated from an openldap server on linux to a DirX on windows 2008. The ldap server und normal serch request behaves as expected. However with some applications (weblogic deployed webapps) ...
1
vote
0answers
15 views

Configuring openldap/PHP LDAP against “signed” LDAP connections with Active Directory

This may sound like a stupid question, and maybe it's already been answered, but I can't find a definitive answer anywhere, so I thought I'd ask. When someone enables "Domain controller: LDAP server ...
1
vote
0answers
79 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
1
vote
0answers
19 views

PhpMyAdmin and auth_ldap plugin

I have a need to authenticate MySQL users from an LDAP source using the community edition of MySQL Server 5.5. The auth_ldap plugin has been compiled from source ...
1
vote
0answers
114 views

Ubuntu server + Samba + PAM + Apple OpenDirectory

Due to various reasons, we are looking to migrate our file servers from OS X Server 10.9 over to a true Samba implementation running on Ubuntu 14.04LTS. We have Ubuntu up and running with Samba ...
1
vote
0answers
105 views

Centos client authenticate against zentyal DC via ldap

I have a bit of a problem. 3 months ago we deployed a zentyal dc on my workplace because it was a good way of authenticating both windows, linux and mac against the same server. I got authentication ...
1
vote
0answers
47 views

How cache OpenLDAP Meta database (for use with Websphere Application Server)?

I have configured Meta database directory on OpenLDAP server for two different Active Diretories and it's work. But now I'd like set cache for this OpenLDAP, but I don't know how. From my slapd.conf ...
1
vote
0answers
21 views

Enable SSL in Apache Directory Studio

I'm trying to enable SSL in Apache Directory Studio. You can see I've enabled LDAPS Server and also configured the SSLKeystore. Now, when in do a ldapsearch from my terminal command. I get this ...
1
vote
0answers
36 views

Apache resetting LDAP requests and hanging

I've got Apache 2.2.15 running under CentOS 6.5. The module mod_authnz_ldap is being used to authenticate against a Microsoft AD server. Here's the LDAP config in Apache: AuthType Basic ...
1
vote
0answers
26 views

Gitlab userPrincipalName without Domain

I've to use the userPrincipalName instead of the default sAMAccountName in all applications which are integrated to AD because we've login-names > 20 characters which isn't supported by ...
1
vote
0answers
147 views

LDAP authentication, pam_mkhomedir and NFS automounted homes

We currently have a setup (running on Ubuntu 12.04.5 LTS) with mixed LDAP/NIS authentication and automounted home directories from several servers (with the auto.home map distributed over NIS). ...
1
vote
0answers
84 views

LDAP user's NFS files are mapped to nogroup (user ID mapped correctly)

In my office environment, I have set up multiple Ubuntu machines with LDAP authentication using the LDAP & NFSv4 server hostS. The LDAP/NFS server hostS exports the /home directory for all users ...
1
vote
0answers
60 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
1
vote
0answers
196 views

Mini mac server returning:- attribute “entryCSN” index delete failure

I have an Open Directory(OD) server running on OSX 10.8.5. I have software connecting to it (a web interface) which is searching the LDAP for users. So I run the query on the web app, and look in ...
1
vote
0answers
38 views

Where are the attributes for room mailbox stored?

I'm using Exchange 2007 and I've created a room mailbox. I want to know where the settings of the room mailbox are stored? What are the attributes used to store room mailbox information? Are they ...
1
vote
0answers
502 views

allow Windows 2012 AD users to ssh into a linux computer

I have a Windows Server 2012 R2 running as a domain controller. I also have a Debian 7.2 server (running Webmin 1.6) which I would like to give users ssh access to using their domain accounts. On the ...
1
vote
0answers
110 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
1
vote
0answers
180 views

LDAP + NFS + automount home directories permissions issue

When an LDAP user logs into the system they have incorrect permissions to their home directory. LDAP and NFS services exist on the same server. The directory shows the correct ownership / ...
1
vote
0answers
26 views

bind-sdb does not query for wildcard entry

I have successfully set up Bild with LDAP on a Fedora VM. The Problem is, bind-sdb simply does not query wildcard entries. When I do: nslookup doesnotexist.example.com. 127.0.0.1 The LDAP server ...
1
vote
0answers
357 views

Disabling LDAP Signing on Windows PDC in Local Policy

I just tripped over my own feet it seems. Playing around on a Windows 2008 R2 server (set up as domain controller), I was intrigued by certain warning event (event id 2886) which says: "To enhance ...
1
vote
0answers
98 views

Groups with local and LDAP users

I'm exploring the idea of authenticating users on some RHEL 6.4 boxes using LDAP. I'm using sssd with an LDAP provider, and setting the nsswitch.conf file to use sss for passwd/shadow/group. How can ...
1
vote
0answers
403 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
0answers
159 views

Routing LDAP traffic from Application server to Proxy to internet

I've included a drawing so you get an idea how it would work. (Red = LDAP connections , Blue = HTTP / AJP in the backend) Problem: We want to connect our customer application server to an LDAP of ...
1
vote
0answers
63 views

Connect an LDAP realm with an AD domain, with the same name?

The situation is a separate group has created an LDAP domain. We'll call it foo.bar. (fyi, none of these are connected in any way to the Internet) They also have a Windows domain and renamed it to ...