Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
2k views

Postfix using LDAP lookup works for virtual_mailbox_maps, but fails for virtual_mailbox_domains

I'm setting up a Postfix/Dovecot/LDAP server on Debian Squeeze with all virtual mailboxes (as opposed to aliases). I've successfully setup Dovecot, and have Postfix correctly looking to ldap for ...
2
votes
1answer
3k views

How to filter for Microsoft Exchange Distribution lists from general AD LDAP groups?

We are integrating an application to Active Directory groups through an LDAP handler, and we need to be able to tell apart AD groups that come from Microsoft Exchange Mail Distribution lists and the ...
1
vote
3answers
104 views

httpd ldap and file authentication error

We have SVN running via Apache httpd. For authentication we use Active Directory and if the user isn't in AD, we fallback to file authentication. This works fine, except for the error messages in case ...
0
votes
0answers
550 views

ejabberd LDAP auth and vcard access works, but search does not - why?

I've set up an ejabberd installation and configured the LDAP authentication and vcard data extraction against an ActiveDirectory global catalog server as described in the documentation. This part ...
1
vote
1answer
3k views

phpldapadmin: login as “root” admin user with UID

I have recently installed phpldapadmin on Ubuntu 12.04 LTS Srv. In the the config.php I've modified the following parameter in order to enable simple user login: ...
0
votes
1answer
456 views

How can I map existing LDAP users to users in a different LDAP server?

We set up some Linux machines to use our company's LDAP server for authentication. We were then acquired by another company, and they want us to use their LDAP server and retire the old one. But the ...
0
votes
1answer
582 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
0
votes
1answer
474 views

Kerberos + Ldap Setup not working with ssh

I have a Kerberos 5 + LDAP configuration in the same server. They both work well (I assume). Kerberos works fine when asking for a TGT. The problem comes when I try to login from client1 to ...
2
votes
1answer
3k views

How to setup SSL for Active Directory?

I have a Windows 2008 Server (Base2) machine. In Server Manager > Roles, i can see: 1. Active Directory Domain Services 2. DNS Server 3. Active Directory Certificate Services. Under Active Directory ...
1
vote
1answer
111 views

How can I tell if my LDAP authentications are using StartTLS?

I'm setting up a new OpenLDAP server on Ubuntu 12.04 with a copy of our current LDAP database. I've gotten most of the configuration down, I think, but I'm having trouble telling if the LDAP queries ...
0
votes
1answer
300 views

wso2 Governance Registry Active Directory integration unable to find valid certification path to requested target

I am attempting to set up a WSO2 Governance Registry server on RHEL5 that will integrate with our Active Directory using ldaps, but normal methods of setting up trust of the domain controllers ssl ...
1
vote
0answers
251 views

Any reason why nsAccountLock is multi-valued?

I discovered today that the nsAccountLock attribute (used in LDAP servers such as RedHat Directory Server, 389ds, ...) is multi-valued. Link to source. I cannot think of any reason explaining why it ...
1
vote
0answers
247 views

LDAP read privileges for comupter, IIS under ApplicationPoolIdentity user

Is it possible to set up LDAP read privileges to Active Directory for computer account? If I run web application on IIS 7.5, which application pool is running under ApplicationPoolIdentity, I have ...
0
votes
1answer
999 views

How to enable SSL for LDAP with Apache Directory Studio?

I am using Apache Directory Studio for testing LDAP services for an application. I am lost in configuring the LDAP with SSL. So far I've tried: Started ApacheDS with port 10389 (ldap://) and also ...
1
vote
0answers
304 views

postfix, dovecot, dovecot-sasl, ldap, and static UIDs for NFS-shared email storage

I'm trying to build a Ubuntu 12.04 mail server as such. Must: Auth against an existing Open-LDAP server. Storage in Maildirs on an existing NFS server, everything owned by 8:8 (mail:mail). Auth is ...
2
votes
1answer
5k views

LDAPsearch with SSL Centos- ldap_start_tls, ldap_bind: Cannot contact LDAP

I am working on a integrating LDAP authentication with my PHP Project deployed on a Linux platform. I successfully completed the ldapsearch from command line and from php code for NON SSL connection. ...
6
votes
3answers
10k views

sssd and ldap authentication cache

On our box running OpenSUSE 12.2 we have installed OpenLDAP and sssd daemon. We are using these two services for user authentication. Recently we created a script which creates new web-users for our ...
0
votes
1answer
134 views

I can't make sudo su on old version CentOS with LDAP

I configured many servers with the option to make "sudo su" with ldap users, and works fine. But in 2 servers (CentOS 5.7 and 5.5) this option show me an error: [user] is not in the sudoers ...
2
votes
3answers
1k views

Why is local root able to su to any LDAP user?

We have an LDAP server set up with our Active Directory. When users login to a Linux machine with LDAP client installed as root, they are able to su - into any Active Directory account without ...
1
vote
1answer
130 views

Unable to login applications using LDAP alias

We have several applications and we are able to integrate LDAP successfully. In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
1
vote
2answers
895 views

How to make samba4 use external LDAP for authN, internal LDAP for all else?

I have Samba v4.0.5 installed and running. It is running its own 'bundled' ldap service. I'm happy for it to use its own internal ldap service, but I'd like it to use an external ldap service for ...
3
votes
2answers
17k views

What is the best way to see objects attributes in Active Directory?

I can not find how to see objects attributes in Active Directory in Microsoft Management Console (MMS). Please tell me if it is possible to do it in MMS. I found the Active Directory Explorer that ...
0
votes
1answer
852 views

ldapadd works, but ldapsearch doesn't (openldap)

I use just installed Debian 6 with openldap 2.4. I have CentOS box too with openldap 2.3. I make .ldif file from centOS (working configuration) box and successfully add all entries from ldif to ...
1
vote
0answers
375 views

segmentation fault trying to start ldap

My PDC using Samba 3.6 with LDAP (the latest version) works very fine as long as I use hdb as the backend. Nevertheless, I change the backend to sql I receive the following error while trying to ...
1
vote
1answer
643 views

Apache 2.2 Ldap Authantication error 500 - AuthLDAPURL

I have an Apache server on RHEL 6 that uses our active directory for authentication, We added a new "LocationMatch" AuthLDAPURL ...
0
votes
1answer
2k views

Difference between openldap 2.3 and 2.4

There is a difference between openldap 2.3 and 2.4 - specifically with ldapmodify... If no "changetype:" line is present, the default is "add" if the -a flag is set (or if the program was invoked as ...
0
votes
1answer
685 views

The system cannot log you on now because the domain is not available

I am using two virtualbox machines, one running XUbuntu 12.4 LTs and the other running a Windows XP as a testbed for implementing a Samba-based domain. The Linux machine is my PDC and the XP machine ...
2
votes
2answers
6k views

Is there any bad thing happens if I change /etc/ldap/slapd.d/cn=config.ldif manually?

Since 2.3, OpenLDAP uses a configuration engine called slapd-config. They said that use it make all LDAP configuration can be changed on fly. This is the header of /etc/ldap/slapd.d/cn=config.ldif: ...
3
votes
1answer
279 views

How can I relate the value of one ldap attribute to the value of another?

For a variety of reasons, I've become the defacto LDAP admin at my workplace. I've been learning it on the job for about a year now. So, as I describe things, feel free to suggest better ways of doing ...
0
votes
1answer
262 views

LDAP search only returns 25 users

If I use ldapsearch on my Active Directory to bring back members of the Engineers team I only see 25 users. However in AD there are almost 50 users in Engineers. What am I doing wrong? ldapsearch -p ...
0
votes
1answer
559 views

Why all LDAP user passwords are incorrectly imported? And can't be modified?

First of all I am new to OpenLDAP setup. I have followed instructions coming from: HowToForge.com linux openldap setup #root dn: dc=localhost,dc=com dc: localhost objectClass: dcObject objectClass: ...
0
votes
1answer
4k views

Slaptest for slapd.conf fails due to an invalid path

I have just installed Openldap on Xubuntu. The slapd daemon is working and I can easily stop and start it. Nevertheless when I run a test for the configuration file slapd.conf as follows: slapdtest ...
0
votes
1answer
451 views

Simple authentication via AD over LDAP for Tomcat-hosted app

We use a central AD server for authentication, and have several different webapps that connect to it via LDAP. I'm trying to connect a simple webapp running on Tomcat 5.5 on Windows to the AD server ...
0
votes
1answer
91 views

Openldap. How to add and then re-read new attribute

I have custom schema in my ldap customContact.schema with 5 attributes Now I need to add one more attribute: # localID attributetype ( 2.16.840.1.113730.3.1.36 NAME 'localID' DESC 'Local ...
1
vote
1answer
8k views

LDAP Can't perform an authenticated bind - Windows Server 2008 R2 Using PHP/Apache

I'm having issues performing an authenticated bind against the server. The issues doesn't appear to be in code however maybe a server issue. Just so you know; LDAP is enabled in Apache/PHP I'm ...
4
votes
3answers
11k views

LDAP/ActiveDirectory BindDN syntax

I'm troubleshooting a linux-based hardware firewall for a client. This hardware firewall connects to ActiveDirectory for Single SignOn authentication. ActiveDirectory is largley just a perverted ...
0
votes
1answer
2k views

Disable LDAP service in CentOS 6.3

What command needed to disable LDAP service in CentOS 6.3. I tried: authconfig --disableldap but it doesn't work. I am trying to run ISC-DHCP in my machine but it always shows Not searching ...
-1
votes
1answer
84 views

What is LDAP used for? [closed]

I've been going over some LDAP tutorials, but I can't imagine why would i use that? I figured that it is some kind of a list of all users and usergroups, but where is it different than system users ...
2
votes
1answer
2k views

Active Directory: Thunderbird LDAP autocompletion not working with Kerberos auth

The Problem: I'm trying to configure an LDAP mail autocompletion - a built-in functionality of Mozilla Thunderbird 17.0.5 @ Windows 7 x64 in 2008R2 domain environment. The OS is a fresh, ...
0
votes
1answer
111 views

Role Based Access Control, Where Roles Change Depending on Location In Application

I am tasked with designing a new, role based access model for our system. The requirements are something to the effect of the following: A user can log in, and will have a different role depending ...
1
vote
1answer
1k views

login time attribute in eDirectory

I cannot find an attribute in our eDirectory schema that provides a record of a user's last login time, as in what is the date and time of their last login, not how long were they logged in for (don't ...
1
vote
1answer
534 views

Apache mod_ldap / mod_authnz_ldap not caching?

I have an Ubnutu 12.04 server running Apache2 that is configured as a reverse proxy. Apache has been further configured for basic authentication via LDAP. Everything is working fine, except the ...
1
vote
1answer
1k views

Secure LDAP Authentication Issue

I am using the following C# code in the code behind of a webform deployed in an ASP.NET 4 (4.0.30319) application pool on Server1 and Server2. PrincipalContext pc = new ...
1
vote
1answer
5k views

Why can't I create my first object in my Open-LDAP server?

I'm trying to set up my first LDAP server that will be used to store user accounts (for things such as mail, git server and a few other things). I managed to install the server, but I'm stuck when I ...
0
votes
1answer
179 views

OSX 10.8 w/ OpenDirectory - Admin log in as user? and switch to Admin?

I now have a OSX 10.8 workstation environment where the clients are bound to OpenDirectory on an OSX 10.6 Server and their home directories are stored on another OSX server. Two questions: Is it ...
1
vote
0answers
171 views

Authentication between Windows AD and Linux LDAP Server and google APPS

I have an active directory instance hosted in a secure data center offsite. That active directory allows my sharepoint users to have authentication I have google apps for all my users in the ...
2
votes
3answers
3k views

Managing users with puppet or ldap?

There are multiple answers that effectively say that ldap should be used instead of puppet for managing actual users. I'm inclined to agree based on a scaling perspective. Onboarding new staff members ...
2
votes
1answer
4k views

Open LDAP and ActiveDirectory synchronization

I have been searching on google for a while to find out the best way to synchronize the user database between OpenLDAP and an ActiveDirectory, but with not a clear results ! What i want to achieve ...
2
votes
1answer
204 views

How to change the default user group's name in Active Directory?

I guess this question is more like can I use a single word as the default AD user group for users (currently it is "AD\Domain Users"). If I can, I would like to use something like "users" or similar. ...
0
votes
1answer
505 views

SVN server with LDAP athentication SASL error

i'm having few problems with my SVN authentication with Active Directory. I am using CollabNet subversion server + client on a windows server 2003 box. When I try to connect to SVN from my computer I ...