Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
145 views

Using autobind without LDAPI

I am trying to automate the installation of my OpenLDAP servers. Currently packages get installed (openldap-clients, openldap-servers) and started with their default configurations. I have a LDIF ...
0
votes
1answer
10k views

Windows Server 2008 R2 Active Directory Web Services won't start with SSL

I am running a Windows 2008 R2 server as a PDC. I've installed the ADWS and I'm trying to get SSL support running but I'm experiencing the following error: Source: ADWS EventID: 1400 Active ...
2
votes
0answers
124 views

How can I force a schema replacement operation in LDAP

I am using ApacheDS. I have created a custom schema such that it is in its own container under schema. When I make changes to the LDIF file and re-import it, I keep getting errors indicating that the ...
1
vote
3answers
761 views

Reset Mac OS X Workstation After Logout

I'm setting up a computer lab in a private school. All the students have LDAP login credentials and they stored all their files on separate shared servers. After the student logs out, I would like the ...
-1
votes
1answer
111 views

Configure Jenkins for LDAP failover [closed]

I was wondering if anyone has successfully configured Jenkins with two LDAP servers so if one server fails, it will query the other server?
1
vote
1answer
639 views

LDAP export attributes based on a different schema or import only valid attributes

I'm trying to export LDAP data from a Zimbra schema into a basic OpenLDAP schema. Obviously the Zimbra schema has much more attributes than the basic OpenLDAP. My question is if there is a way of: ...
0
votes
1answer
168 views

Split authentication and NSS lookups for users and groups to different servers

I've asked this question previously: Multiple Bind and base DNs in ldap.conf Since that previous question was answered in the negative, I'm looking for other options such as splitting authentication ...
0
votes
2answers
830 views

PAM LDAP configuration for non-local user authentication

I have a requirement to allow non-local user accounts to be logged in via LDAP authentication. Meaning, the user that is trying to login is allowed access, if the user account exists in LDAP server ...
0
votes
1answer
567 views

Multiple Bind and base DNs in ldap.conf

I have multiple LDAP servers and different user groups in each. I want to authenticate using both LDAP servers which have different base DNs. Is it possible to put in multiple bind and base DN values ...
0
votes
1answer
304 views

Configure LDAP for SUDO Support on Ubuntu Server 12.04

I'm running into some issues finishing my LDAP install. I used the following article to try the sudoers schema configured: http://ubuntuforums.org/showthread.php?t=1421998 When I run ldapadd -x -D ...
2
votes
0answers
385 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, John,ou=users,ou=others,dc=company,dc=...
3
votes
1answer
239 views

How to securely connect to multiple different LDAPS servers (Debian)

I'm trying to connect to multiple different LDAPS servers. A lot of the documentation I've seen recommends setting TLS_REQCERT never, but that strikes me as horribly unsecure to not verify the ...
0
votes
1answer
416 views

Difference to connect to LDAP by BindDn or by username

We have an application which can only connect to a LDAP (AD) by using the BindDn. When I try to connect from the server which host the application using a simple LDAP client (LDAPAdmin) it connects ...
1
vote
1answer
2k views

could not stat config file “slapd.conf” to add entries to LDAP

I got a problem when I adding some entries in LDAP slapadd -l /etc/openldap/root.ldif -f slapd.conf -d 10 slapadd -l /etc/openldap/people.ldif -f slapd.conf -d 10 slapadd -l /etc/openldap/testuser....
1
vote
1answer
295 views

OpenLDAP Change core schema

Is it possible to change core schema (cn={0}core,cn=schema,cn=config)? In lpadmodify im getting Insufficient access (50) though i'm using olcRootDn from olcDatabase={0}config. Apache DS just went ...
2
votes
1answer
514 views

How to specify a username in ldapsearch tool?

I'm new to ldap. I need to specify username in plaintext with some parameter without any sasl. So this command gonna give you some search results, but it always empty cause there's no authorization: ...
2
votes
2answers
84 views

Does LDAP fit the role of a user database for an application?

I (my company) run a webservice that integrates pieces of few entreprisey-level software. Most of them offer different type of authentication but all offers at least LDAP. I was wondering if storing ...
1
vote
1answer
232 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
1
vote
1answer
402 views

ssh login with multiple LDAP bases

I have an OpenLDAP directory with two different doamins (DN's) What I would like to do is allow the users to access the machines with ssh and their LDAP account. This worked fine when I only had one ...
1
vote
2answers
4k views

Upgrading to Debian 7: Postfix Auth fails

I'm upgrading various Debian 6 servers to Debian 7. There are a few minor issues, but this one is a show stopper. On Debian, Postfix runs in a chrooted environment. That environment is setup ...
1
vote
1answer
365 views

linux ldap authentication set gid to uid

I'm setting up ldap authentication with sssd for a linux server. everything works fine. however, the users from the ldap server have a default group User. which is, uid=10001 (larry), gid= 20001 (...
1
vote
2answers
1k views

How can I force folders created in a subdirectory to be owned by a user's secondary group?

I have setup a Samba share on Ubuntu 12.04 for our finance team, and they access it via Windows 7 and Mac OS X. They mount the share using their LDAP credentials. All of our LDAP users have "employees"...
1
vote
1answer
3k views

CentOS 6 SSSD SSH/Console Login Issues

I'm new to SSSD but I think I've configured it correctly considering id {ldap user} returns the expected uid and gid values for multiple test users. I'm using two CentOS 6.4 servers as test machines. ...
2
votes
0answers
170 views

Is there an OpenLDAP web frontend that allows users to edit custom fields? [closed]

We are currently using a custom perl based frontend for our OpenLDAP user portal, and it's proving tricky to port over to a new server. I've setup phpLDAPadmin on the new server, but it doesn't appear ...
0
votes
1answer
292 views

Disable OpenLDAP replication

I set up openldap replication so that if my primary LDAP server were to die, I would have another LDAP server ready to use just in case. I used the directions on Ubuntu's site to set up the ...
13
votes
1answer
6k views

IPA vs just LDAP for Linux boxes - looking for a comparison

There are few (~30) Linux (RHEL) boxes and I'm looking for centralized and easy managed solution, mostly for control user accounts. I'm familiar with LDAP, and I deployed a pilot of IPA ver2 from Red ...
1
vote
1answer
4k views

how to configure pGina LDAP plugin

I have a project in which I have to authentificate clients from differents computers using an LDAP server. Do simulate that I have installed virtualbox in my PC and run two virtual machines, one with ...
4
votes
1answer
3k views

Samba standalone server using LDAP for authentication: SID mismatch

I'm trying to get my new samba server running for days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and >100 ...
0
votes
1answer
70 views

Moving user accounts and data from NFS server to local server

I'm pretty new to Enterprise Linux administration, and I need to find the best way to move user accounts and their /home directories to a new server. The current setup uses NFS to mount the /home and /...
0
votes
1answer
1k views

lighttpd mod_auth using LDAP

I've setup lighttpd to use an ldap backend like so: auth.debug = 2 auth.backend = "htdigest" auth.backend.ldap.hostname = "ldap.xxxxx.com" auth.backend.ldap.base-dn = "ou=active,ou=employees,ou=...
0
votes
1answer
107 views

LDAP URL example: is it possible / correct to use only the domain without the hostname?

We have an application which connects to an Active Directory (MS) using LDAP protocol. We give usually the following parameters: ldapUrl = ldap://myserver.mydomain.ext:389 ldapBaseDn = ...
12
votes
4answers
2k views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
2
votes
2answers
550 views

Is there way to detect and track the changes made to OpenLDAP

I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc. I'm wondering is there a way to track changes made to LDAP ...
0
votes
1answer
406 views

LDAP showing too many users and groups on Linux clients

We are hosting LDAP on a Solaris server and using 150 Solaris clients and 50 Linux clients. Users and groups have a list of netgroups (server hostnames) that they are able to access. This means that a ...
12
votes
2answers
52k views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ~]...
1
vote
1answer
825 views

Error while setting up ldap replication

I'm trying to set up LDAP replication according to the directions on Ubuntu's site. I went through all the directions for setting up the provider without any trouble. But when I try to set up the ...
0
votes
1answer
1k views

VLAN and Active Directory: complementary or substitute? [closed]

I recently encountered a network design that heavily implements VLANs but does not make use of a dedicated identity and access management system such as Active Directory or OpenLDAP. And yet another ...
1
vote
0answers
849 views

Samba + LDAP: user authentication works for one but not another server

I have a very frustrating problem I'm trying to solve for a few days now, maybe one of you can help me. I have two (standalone) samba servers which should authenticate the users using an LDAP server. ...
1
vote
3answers
1k views

Setting up OpenAM to use OpenLDAP as DataStore

I am at the moment trying to configure an OpenAM installation to use an OpenLDAP as DataStore; is it possible to do it? I have seen some tips about configuring OpenLDAP (as in this tutorial) but this ...
1
vote
1answer
2k views

“The trust relationship between this workstation and the primary domain failed”

I mangage a Primary Domain Controller (Samba+LDAP) with 60PC. But 3-4 PC can't login to domain with error: The trust relationship between this workstation and the primary domain failed. 56-57 ...
6
votes
3answers
12k views

Active Directory authentication load balancing and failover

For applications that authenticate against an Active Directory DC, obviously it would be best to just point them to the main domain DNS record rather than a specific DC for failover, load balancing, ...
0
votes
1answer
2k views

Postfix using LDAP lookup works for virtual_mailbox_maps, but fails for virtual_mailbox_domains

I'm setting up a Postfix/Dovecot/LDAP server on Debian Squeeze with all virtual mailboxes (as opposed to aliases). I've successfully setup Dovecot, and have Postfix correctly looking to ldap for ...
2
votes
1answer
3k views

How to filter for Microsoft Exchange Distribution lists from general AD LDAP groups?

We are integrating an application to Active Directory groups through an LDAP handler, and we need to be able to tell apart AD groups that come from Microsoft Exchange Mail Distribution lists and the ...
1
vote
3answers
104 views

httpd ldap and file authentication error

We have SVN running via Apache httpd. For authentication we use Active Directory and if the user isn't in AD, we fallback to file authentication. This works fine, except for the error messages in case ...
0
votes
0answers
569 views

ejabberd LDAP auth and vcard access works, but search does not - why?

I've set up an ejabberd installation and configured the LDAP authentication and vcard data extraction against an ActiveDirectory global catalog server as described in the documentation. This part ...
1
vote
1answer
3k views

phpldapadmin: login as “root” admin user with UID

I have recently installed phpldapadmin on Ubuntu 12.04 LTS Srv. In the the config.php I've modified the following parameter in order to enable simple user login: $servers->('login','bind_pass','...
0
votes
1answer
480 views

How can I map existing LDAP users to users in a different LDAP server?

We set up some Linux machines to use our company's LDAP server for authentication. We were then acquired by another company, and they want us to use their LDAP server and retire the old one. But the ...
0
votes
1answer
599 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
0
votes
1answer
502 views

Kerberos + Ldap Setup not working with ssh

I have a Kerberos 5 + LDAP configuration in the same server. They both work well (I assume). Kerberos works fine when asking for a TGT. The problem comes when I try to login from client1 to ...
2
votes
1answer
3k views

How to setup SSL for Active Directory?

I have a Windows 2008 Server (Base2) machine. In Server Manager > Roles, i can see: 1. Active Directory Domain Services 2. DNS Server 3. Active Directory Certificate Services. Under Active Directory ...