Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
0answers
316 views

OpenLDAP, SASL and non-cleartext password storage

I'm working on a setup where postfix and cyrus-imap do proxy authorization against openldap (my setup is here http://1nw.eu/!cD ). I love this solution, it's a lot more elegant that using saslauthd. ...
1
vote
1answer
652 views

How to determine the most recent Active Directory login time in a timely manner?

I have a security requirement that after my application logs in a user, it should display the date and time of the user's most recent previous login. The Active Directory replicated ...
0
votes
1answer
843 views

Can OS X Lion Server users be authenticated to an external LDAP server and also have access to Profile Manager?

I am researching whether the Profile Manager included in Apple's Lion Server edition is a viable option to use to manage iOS devices OTA in our organization. While going through the documentation for ...
7
votes
2answers
3k views

Search AD by GUID

How do I search Active Directory for objects by GUID? In other words, what would be a good way to find what objects belong to specified GUIDs?
5
votes
2answers
2k views

Network authentication + roaming home directory - which technology should I look into using?

I'm looking into software which provides a user with a single identity across multiple computers. That is, a user should have the same permissions on each computer, and the user should have access to ...
4
votes
1answer
388 views

openldaps wildcard certificate not accepted

my wildcard certificate doesn't get accepted with ldap 2.4.23. when i try to connect i get the following error: TLS certificate verification: subject: ...
3
votes
1answer
2k views

mod_authnz_ldap + Active Directory = Apache Stalls

I know there are other posts on this issue, but the symptoms are quite a bit different from the few other threads I've reviewed already. I have Apache 2.2 installed and I'm trying to get the LDAP ...
1
vote
1answer
125 views

search sharepoint with ldap query

I think the answer is no, but I haven't been satisfied with my marathon google searches today. I have several stand alone devices (MFP, phone system, etc) that can search an LDAP directory for ...
3
votes
2answers
879 views

Account lockout in Ubuntu

I am trying to implement account lockout for Ubuntu systems using pam_tally. The login should be disabled for certain interval on 3 invalid login attempts. This should happen for both system and LDAP ...
8
votes
2answers
615 views

What the heck is really going on in these Lion LDAP vulnerability reports?

Just read a Slashdot thread on LDAP brokenness on OSX. Can anyone explain exactly what is being secured by OpenLDAP and why anything other than data stored on a Lion machine might be at risk? A quote ...
0
votes
2answers
117 views

Cannot authenticate to 10.6 server

I have an OS X 10.6. server that I have created 400 users accounts on. It is configured as an Open Directory Master - Home Accounts were created with LDAP and can I see the Home Accounts on the share ...
1
vote
1answer
2k views

Persuading openldap to work with SSL on Ubuntu with cn=config

I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance. I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
0
votes
1answer
387 views

centos 5.x and ldap failover

I am having trouble with LDAP authentication fail-over. We currently have two CentOS-DS directory servers working in a multi-master setup. One Server per site. Normally, logins process fine. ...
5
votes
1answer
755 views

Apache authentication against LDAP fails for passwords with umlauts

When authenticating against LDAP (Active Directory, Server 2008) from an Apache server I get the following message in the error log: authentication failure for "/": Password Mismatch This only ...
3
votes
2answers
1k views

Multiline data list (ldif file) manipulation with awk or other tool

I'm trying to manipulate an ldif file with multiple entries. My purpose is to parse this existing ldif file, extracting the "givenName" and "sn" attributes, so to generate a "mail" attribute. I was ...
1
vote
1answer
5k views

LDAP password information update failed: Insufficient access (50)

This problem is similar to this, except that in this case, it is not working. :( So far, I have this set as the ACL: access to ...
0
votes
1answer
89 views

Is it an error in AD LDAP database if an employee registered twice: as PersonClass and as PersonClass+UserClass

Browsing an AD LDAP Database, I noticed that some employees registered twice: once as objectClass=Person, and another one as objectClass=Persond and objectClass=User. In other words, two records in ...
1
vote
1answer
227 views

In which cases is ObjectSid-Attribute missing for persons in ActiveDirectory?

While trying to get users by ObjectSid, I discover that some person-Object does not have this Attribute. I'm wondering if this is a common case or an error in our directory. The reason because I want ...
2
votes
3answers
21k views

How to get (AD) LDAP person entry by SID?

Given the SID of a user or a group, how can I find a LDAP object that belongs to it? LDAP Server ist Active Directory (Windows Server 2008). A LDAP query String would be useful.
1
vote
1answer
746 views

Sudo ldap with FQDN instead of short hostname

At my workplace, we're using sudo-ldap to provide sudo privileges across the network from a centralised store. We do this based on the username plus the hostname they're running sudo on, e.g.: ...
0
votes
2answers
135 views

Ldap ssh authentication is super slow… any way to speed it up?

I am running OpenSUSE. Here is the output of ssh -vvv: OpenSSH_5.8p1, OpenSSL 1.0.0c 2 Dec 2010 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug2: ...
4
votes
3answers
517 views

Can nss/pam ldap send password to ldap server already hashed?

I have nss & pam configured so that I can authenticate linux users via LDAP against my companies AD server. All works fine except password are sent in plain text. For reasons out of my control our ...
2
votes
4answers
9k views

Centos 6 Linux and nss-pam-ldapd

I am trying get centos 6 to authenticate against ldap (active directory to be specific) I am a bit confuse though because after installing nss-pam-ldapd I see several files that appear to be the same ...
1
vote
1answer
1k views

How do I use ldapsearch with a cross-realm ticket?

kinit user@DOMAIN.TLD klist -afe Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: user@DOMAIN.TLD Valid starting Expires Service principal 08/04/11 13:14:53 08/05/11 ...
0
votes
1answer
503 views

Returning first match only with OpenLDAP slapd-meta backend?

I have OpenLDAP configured to act as a metadirectory in front of three different backends: database meta uri "ldap://ldap1.example.com/ou=domain1,o=combined" uri ...
1
vote
3answers
1k views

LDAP Account Expiry Script Help

I need to find a way of automatically notifying LDAP account users as to when their passwords will expire and also force them to change their passwords. I am fairly new to LDAP.I am running openldap ...
7
votes
5answers
3k views

Cannot join Win7 workstations to Win2k8 domain

I am trying to connect a Windows 7 Ultimate machine to a Windows 2k8 domain and it's not working. I get this error: Note: This information is intended for a network administrator. If you are not ...
0
votes
1answer
3k views

Automounting AFP Share For OpenDirectory Users (Mac Lion Server)

We're moving all our Mac's from local logins to OpenDirectory logins in an effort to keep everything secure and to also solve issues we have with a Tiger server buggering permissions on an AFP shared ...
0
votes
2answers
2k views

Cyrus on CentOS with sasl / pam / ldap

SASL/PAM/LDAP is driving me crazy... that's what I read a lot when googling for problems in this area, and what I experience myself :-S I'm trying to get Cyrus imap working for virtual hosting on ...
0
votes
1answer
851 views

Weird LDAP search results behaviour

I am building Google Directory sync from our domain to our Google apps account. I am trying to search for all users in a specific Distribution Group: GoogleAppsActiveUsers. I am using Windows 2003 R2 ...
1
vote
2answers
3k views

Binding to LDAP using SSL keeps failing - Windows Server 2008

Our script continues to fail whenever attempting to bind to LDAP (active directory) using SSL, I am stumped. We can successfully connect using the unsecured method, but we are attempting to perform ...
0
votes
1answer
731 views

Troubleshooting a failed Samba/LDAP authentication

This is really a more general question, but I am asking it in a specific context. How do you troubleshoot failed Samba/LDAP logins/authentications? I am in the process of learning Samba/LDAP. I ...
2
votes
1answer
146 views

IE, FireFox LDAP issues

We have an intranet site, with no known updates pushed to the server over the weekend. This morning, when attempting to validate with LDAP credentials via single sign on in IE, we receive Access ...
2
votes
1answer
547 views

Ldap Authentication for Windows Standalone Servers

I have an LDAP server Novell eDirectory in my Environment through which has the user data. In my Environment i have set of Windows and Linux servers. I need to use this LDAP As the Authentication ...
9
votes
7answers
3k views

There's got to be a FOSS web-based LDAP password reset app out there, right? [closed]

It seems like every shop that uses LDAP at some point has to cobble together something to let users reset their passwords without bothering the IT staff. The workflow almost always looks like: User ...
0
votes
1answer
515 views

Can't connect to Samba/LDAP share, no obvious error

I just did an initial Samba/LDAP configuration on a Debian Squeeze system. I added a single user to an ldap directory and installed libnss-ldap. I can now successfully login to the system using the ...
2
votes
4answers
3k views

LDAP: attribute 'givenName' is not allowed

OK, so I am learning and configuring openLDAP for the first time based partly on this tutorial: http://www.rjsystems.nl/en/2100-d6-openldap-provider.php I am trying to add a sample user, but I think ...
0
votes
1answer
738 views

Unable to Create LDAP User's Home Directory

I have a Fedora Linux server, connected to LDAP, and I can't log in to it as my normal user. I can still log in as root, but even then, I can't create my normal user's home directory. LDAP is ...
-1
votes
2answers
92 views

LDAP Integration [closed]

I want to be able to offer people who use my website, integration with their in-house authentication system (LDAP, I guess, since I don't want to limit it to a solution that only works for Windows ...
4
votes
4answers
11k views

Is my AD already an LDAP server?

I have installed an LDAP browser, to try and browse my AD information (this is part of enabling Google Directory Sync process). however, I keep getting a connection error (using port: 19389). the ...
1
vote
1answer
722 views

Windows 2008R2 blocks outbound LDAP for non-admins?

I've got a Windows 2008R2 terminal server with ~30 users on it. It's joined to a Samba-based domain. During the login script, we connect directly to the LDAP server to pull out certain profile ...
5
votes
3answers
9k views

Does joining a Lion Open Directory with Windows actually work?

According to https://help.apple.com/advancedserveradmin/mac/10.7/#apd52648A71-571A-433C-81A8-2A7792333F22 it's possible to join a Lion Open Directory using a Windows machine, making it think it's ...
0
votes
1answer
194 views

WSS 3.0 Forms Authentification for RoleManager

I'm trying to set up Forms Authentification with LDAP in SharePoint 2007 (WSS 3.0). I made it to the point where I can see users with prefix ad:<username> but I'm having trouble to get ...
0
votes
0answers
237 views

NIS authentication : not using UNIX properties

I used this tutorial to authenticate a Debian machine with an active directory, and it worked like a charm. Now, I setup a NIS after I configured my Debian machine. I configured some UNIX attributes ...
0
votes
1answer
101 views

Create an entry in openldap

I installed openldap on windows 7. I started the server fine. I added an entry in init.ldif file. How can add this entry to the server. What is the exact command to do so. Also, I would like to know ...
0
votes
1answer
2k views

How do I change the administrator username for authenticating to Mac OS X LDAPv3 directory?

We're a small company, and our IT manager is leaving. We trying to change all of the passwords for extra security and the administrator name for authenticating to the LDAP directory is his username ...
0
votes
1answer
715 views

Configured Linux Machine to Authenticate to LDAP But not working

I am Using Cent Os Operating System and i need to configure LDAP Authentication for this machine. I have configured the ldap client using using authconfig-tui command. And i have cross checked the ...
0
votes
2answers
6k views

ldapadd/ldapmodify: clarifications needed about these comamnds

The ldapmodify man page states that: The default for ldapmodify is to modify existing entries Yet when I try to import an LDIF file with ldapmodify I get the below error: ldapmodify: modify ...
0
votes
2answers
5k views

ldap_add: Constraint violation (19)

I'm having issues importing users with ldapadd and ldif files. The error I'm getting is: ldap_add: Constraint violation (19) additional info: structuralObjectClass: no user modification allowed The ...
0
votes
1answer
110 views

Downloading entire contents of Active Directory

Is there a way I can download the entire Active Directory. I know I could write script to crawl each and every user's entry that are linked in the hierarchy. But that would be very inefficient. I ...