Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

3
votes
1answer
2k views

Certificate problems with Apache LDAPS access

I have a Subversion server running on Ubuntu 11.04 using Apache, and I'm trying to hook the authentication up with LDAPS. I got the Apache config file set up to authenticate against LDAP (sans the S) ...
1
vote
4answers
2k views

Subversion: Apache mod_ldap - 30 seconds for first authentication

I have a problem regarding my Subversion server installation with Apache (mod_ldap and mod_authnz_ldap) and my LDAP connection to a Microsoft Active Directory I am using a CentOS5 64Bit system with ...
3
votes
2answers
193 views

Only a subset of groups available

I have installed RHEL 6.2 and configured for using LDAP with the setup utility and I can login. What is stange is that only three LDAP groups are recognized per user. It is different groups, even for ...
2
votes
2answers
2k views

Linux file ACL and secondary groups

The Problem: CentOS does not seem to look at secondary groups when using ACL's on a folder or file Scenario: CentOS 6 basic install, uses LDAP accounts to authenticate users. I am trying to setup ...
1
vote
1answer
1k views

getent passwd fails, getent group works?

I've almost got my AD integration working completely on my OpenSUSE 12.1 server. I have a OpenSUSE 11.4 system successfully integrated into our AD environment. (Meaning, we use ldap to authenticate to ...
2
votes
1answer
515 views

A unique ID number for Active Directory accounts that could be retrieved via LDAP interface

I wanted to know if there is either an auto-populated field or a field that we could populate at creation time with a unique ID number for accounts that we could query for. The reason I ask for this ...
0
votes
1answer
583 views

Two samba servers and UID,GID mappings across them

I have a samba server and just installed the second one to configure a reserve file server. It all went well and both of them successfully are on Active Directory domain (actually SAMBA 4) the ...
0
votes
1answer
2k views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
1
vote
2answers
5k views

Active Directory 4003 (INSUFF_ACCESS_RIGHTS) - LDAP: error code 50 - 00002098: SecErr: DSID-03150A45

I tried to set an attribute to another user while I was logged with my account, which is member of Domain Admins group of the Active Directory. Error while executing LDIF- [LDAP: error code 50 - ...
2
votes
1answer
111 views

ldap schema in development should it match production?

I been using LDAP for many years now and most of the firms I worked for used a development LDAP schema that was identical to the production and QA (staging) schemas. An example suffix would be: ...
1
vote
1answer
255 views

Move samba and ldap config to new machine

I'm not advanced administrator so this may be n00b question but I'll be grateful for help. I have following problem: I have to move my server (ubuntu server) from old machine to new. I have samba ...
1
vote
1answer
390 views

Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?

[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ] Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
1
vote
2answers
3k views

ActiveDirectory - LDAP query for objectCategory unexpected results

AD is at 2003 functional level, some of our DC's are running Windows Server 2003, some are 2008, some are 2008 R2. When using the following query: (objectCategory=user) I do not expect to see any ...
2
votes
1answer
839 views

Export all AD attributes and default “Range Upper” size for the User class?

I need to write approximately 1000 - 5000 characters into a user property, but I'd prefer not to edit the schema rangeUpper attribute, or create one just for my purposes. How should I research what ...
1
vote
1answer
642 views

Where is “Custom Attribute 14” in AD Schema?

I'm getting the following error when writing to Active Directory attribute 14 00002082: AtrErr: DSID-03151314, #1: 0: 00002082: DSID-03151314, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att ...
0
votes
1answer
42 views

Change the LDAP settings on a WAS from outside of the GUI

I have a virtual image of a WAS server but it can no longer access the LDAP/AD that holds the administration password as it has moved to a different network. As a result, I can't login to change the ...
3
votes
5answers
2k views

How to make AD highly available for applications that use it as an LDAP service

Our situation We currently have many web applications that use LDAP for authentication. For this, we point the web application to one of our AD domain controllers using the LDAPS port (636). When we ...
1
vote
1answer
130 views

How to poll the username, when having the UID?

we're using ldap with sssd for the usermanagement, so our users are not in the "/etc/passwd" Unfortunately, ps just shows the UIDs: [root@xyz ~]# id jmw uid=1582(jmw) gid=1582(jmw) groups=1582(jmw), ...
0
votes
3answers
210 views

Groups as users in LDAP

I want to group users in project users in LDAP. Lets say there are user1, user2, user3, each with a password and ssh-key. I want to group them in project1, project2. Given that user1 is member of ...
1
vote
2answers
3k views

Domino LDAP : Get email of all users in a group

I'm trying to get all the list of all users that belong to a specific group from a Domino 8 LDAP server using ldapsearch. I've tried pretty much every possible variant of the following filters with ...
1
vote
0answers
146 views

Does qmail-ldap provide functionality equivalent to the qmail validrcptto patch?

We are using qmail with the validrcptto patch to route incoming mail to our Domino server. However, that requires us to maintain the validrcptto file with the list of all allowed email addresses. ...
5
votes
5answers
2k views

Is there a simple LDAP-to-HTTP gateway out there?

We have a local LDAP directory that provides basic contact information about our user community. We would like to integrate this into some third-party hosted services that allow us to implement ...
8
votes
3answers
356 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
1
vote
1answer
866 views

Can I link proxy users from a single LDS instance to multiple domains?

I have an Active Directory Lightweight Directory Services set up. I have objects that represent users in the Active Directory (Domain_A). I have set their objectSID attribute, and users can ...
0
votes
1answer
528 views

How to compile PHP with ldap support in PHP in a Mac ports Environment?

I had originally installed the LAMP stack using Mac Ports. Another project requires me to enable LDAP support. How do I get about installing it using Mac Ports? My PHP info file has no mention of ...
3
votes
1answer
1k views

Multiples authentication methods for Postgresql

I presently use "md5" authentication for access from the lan: host all all 192.168.1.0/24 md5 I want to add ldap authentication method, so I added this line before: host ...
3
votes
1answer
430 views

Modifying Active Directory logonHours attribute over LDAP?

I need to change the logonHours attribute in Active Directory over LDAP, eg. using ldapmodify. The attribute is of type byte string. Is this possible?
-2
votes
1answer
649 views

Connecting to LDAPS with WAMP Server [closed]

What is required to get a WAMP Server to connect as a client to an LDAPS (LDAP over SSL) server? Specifically, where do LDAPS client certificates go on a WAMP Server, and what other elements need to ...
1
vote
4answers
461 views

Is it possible to configure one active directory to fallback account verification to another one?

Let's say I have two active directories: AD-1 and AD-2 and I want to obtain the following behaviour: When someone tries to do a LDAP search on the AD-2 for authentication to check AD-2 database first ...
1
vote
1answer
367 views

Guest Internet access for an hotel

First of all, thanks so much for all the help from all the techies on this site. We have to implement the ability for guests to use the internet over wireless for an hotel. When guests check into ...
0
votes
1answer
169 views

Windows 2008 Server ignoring LDAP request

I'm using Windows Server 2008 R2 and Windows NIC teaming. This is an HP server. Firewall disabled. I have 1 application which authenticates via LDAP to AD (TCP 389). (App is located in same VLAN) ...
0
votes
1answer
108 views

Bugzilla LDAP Server2008

Since I upgraded my domain to Windows Server 2008, the LDAP authentication in Bugzilla is failing for certain users (invalid credentials). Is there a fix for this? I am using Bugzilla 3.0. Please ...
2
votes
4answers
1k views

How to securely join computers in an Active Directory domain in an untrusted network?

I need to join computers to our Active Directory domain. These computers are on an untrusted network. How can I force the client computers to use secure protocols (LDAPS instead of LDAP) to join the ...
0
votes
2answers
273 views

LDAP auth in Ubuntu PAM?

I have a 64-bit Ubuntu 11.04 server I'm setting up, and I would like to configure it to use LDAP for authentication. The LDAP server happens to be an ActiveDirectory server, but I'm not trying to bind ...
0
votes
2answers
130 views

Need guidence about ldapadd

I am using centos 5.1 for configuring ldap server to authenticate my windowx xp users.In one of the tutorial I read that they are populating ldap with ese lines. ldapadd -Y EXTERNAL -H ldapi:/// -f ...
1
vote
1answer
492 views

Login Client (pGina in Window Vista) with LDAP Server (FDS)

Currently, I have setup my Fedora Directory Server (FDS) and a Windows Vista workstation (using pGina). I created several users in FDS (all under ou=People) initially. As I want to divide my users ...
0
votes
2answers
2k views

ldap.conf file and /etc/openldap/ldap.conf file ? which one to use ?

I am using centos 6 and I want to configure ldap server.I need your kind guidence regarding to ldap.conf file. Well if we explore /etc we can see a file ldap.conf and there is a folder openldap which ...
2
votes
1answer
434 views

Designing LDAP directory layout for an ISP-like organization

I administer a few servers for a small organization that offers ISP-like services to its members (webhosting, mail adressess on mutiple domains and associated IMAP accounts, Jabber accounts) and I ...
0
votes
2answers
7k views

How do I get a server-side count on an LDAP query from Sun Java System Directory Server?

I wish to count the number of objects returned from a query (but I do not need the actual objects themselves) from Sun Java System Directory Server 5.2. E.g., if I want to find all people with ...
1
vote
2answers
2k views

Can't contact LDAP server remotely from Mac

I'm trying to configure a LDAP server with some basic security parameters, including TLS and required authenticated binding. I have started the server, and can access it from localhost with the ...
1
vote
0answers
262 views

Connect from iphone to LDAP on a non-standard port

I asked on superuser, it was migrate to the apple stack exchange site and it was suggested I ask here. This feels like cross posting but... I've tried a quite a few different sequences, such as ...
2
votes
1answer
1k views

Connect to a Windows Server 2008R2 using php, ldap, tls fails if server has NPS service

Servers: DALCON2 (Windows 2008R2, DC, NPS) DALCON3 (Windows 2008R2, DC) DALCON-WWW (Ubuntu server) Goal: From DALCON-WWW, using adLDAP with TLS to connect to a domain controller LDAP service If ...
1
vote
2answers
4k views

How to add LDAP user to existing group?

I'm attempting to add some of our LDAP users to a locally defined group on our RHEL server, however I get an error stating that the LDAP user is not found in /etc/passwd. What would be the best way ...
0
votes
1answer
993 views

Apache Kerberos Authentication with LDAP Authorization: access to / failed, reason: require directives present and no Authoritative handler

I am trying to get a VirtualHost (well multiple VirutalHosts) up and running with kerberos authentication and group requirements. My latest configuration within the <Directory> directive looks ...
2
votes
2answers
1k views

LDAP authentication with Graphite

I have setup Graphite Web 0.9.9 on CentOS 6.2 x86_64 at EC2 and I'm trying to get LDAP authentication to work against 389 Directory Server. I have configured local_settings.py with: USE_LDAP_AUTH ...
14
votes
3answers
12k views

How to use Google Apps as an OD/AD/LDAP Provider

I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login. However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other ...
3
votes
2answers
14k views

is there a way to do an ldap ping? [closed]

Is there a way to ping and ldap server? I have seen ldapsearch and ldapwhoami but would appreciate something a bit more like ping. Essentially we have a bip address in front of a selection of LDAP ...
2
votes
1answer
367 views

Apache2: nested require statements within Location

I'd like to set up different LDAP authorization rules for different levels of an URL. This is the config currently used <Location /> AuthType Basic AuthName "Foo" ...
3
votes
1answer
920 views

Combine Apache authetication providers (file & LDAP)

I'm trying to combine both basic file and LDAP user authentication in an Apache .htaccess file but I can't get both methods to work simultaneously. It's either one or the other. Here's my setup: ...
1
vote
2answers
1k views

Apache2 and redundant LDAP configuration Problems

According to instructions, I have configured multiple LDAP sources for redundancy. I have found some problems with the configuration. If an ldap service is not working on the designated ldap server ...