Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
2answers
3k views

Binding to LDAP using SSL keeps failing - Windows Server 2008

Our script continues to fail whenever attempting to bind to LDAP (active directory) using SSL, I am stumped. We can successfully connect using the unsecured method, but we are attempting to perform ...
0
votes
1answer
687 views

Troubleshooting a failed Samba/LDAP authentication

This is really a more general question, but I am asking it in a specific context. How do you troubleshoot failed Samba/LDAP logins/authentications? I am in the process of learning Samba/LDAP. I ...
2
votes
1answer
140 views

IE, FireFox LDAP issues

We have an intranet site, with no known updates pushed to the server over the weekend. This morning, when attempting to validate with LDAP credentials via single sign on in IE, we receive Access ...
2
votes
1answer
521 views

Ldap Authentication for Windows Standalone Servers

I have an LDAP server Novell eDirectory in my Environment through which has the user data. In my Environment i have set of Windows and Linux servers. I need to use this LDAP As the Authentication ...
9
votes
7answers
3k views

There's got to be a FOSS web-based LDAP password reset app out there, right? [closed]

It seems like every shop that uses LDAP at some point has to cobble together something to let users reset their passwords without bothering the IT staff. The workflow almost always looks like: User ...
0
votes
1answer
476 views

Can't connect to Samba/LDAP share, no obvious error

I just did an initial Samba/LDAP configuration on a Debian Squeeze system. I added a single user to an ldap directory and installed libnss-ldap. I can now successfully login to the system using the ...
1
vote
4answers
3k views

LDAP: attribute 'givenName' is not allowed

OK, so I am learning and configuring openLDAP for the first time based partly on this tutorial: http://www.rjsystems.nl/en/2100-d6-openldap-provider.php I am trying to add a sample user, but I think ...
0
votes
1answer
674 views

Unable to Create LDAP User's Home Directory

I have a Fedora Linux server, connected to LDAP, and I can't log in to it as my normal user. I can still log in as root, but even then, I can't create my normal user's home directory. LDAP is ...
-1
votes
2answers
91 views

LDAP Integration [closed]

I want to be able to offer people who use my website, integration with their in-house authentication system (LDAP, I guess, since I don't want to limit it to a solution that only works for Windows ...
4
votes
4answers
10k views

Is my AD already an LDAP server?

I have installed an LDAP browser, to try and browse my AD information (this is part of enabling Google Directory Sync process). however, I keep getting a connection error (using port: 19389). the ...
1
vote
1answer
714 views

Windows 2008R2 blocks outbound LDAP for non-admins?

I've got a Windows 2008R2 terminal server with ~30 users on it. It's joined to a Samba-based domain. During the login script, we connect directly to the LDAP server to pull out certain profile ...
5
votes
3answers
9k views

Does joining a Lion Open Directory with Windows actually work?

According to https://help.apple.com/advancedserveradmin/mac/10.7/#apd52648A71-571A-433C-81A8-2A7792333F22 it's possible to join a Lion Open Directory using a Windows machine, making it think it's ...
0
votes
1answer
186 views

WSS 3.0 Forms Authentification for RoleManager

I'm trying to set up Forms Authentification with LDAP in SharePoint 2007 (WSS 3.0). I made it to the point where I can see users with prefix ad:<username> but I'm having trouble to get ...
0
votes
0answers
235 views

NIS authentication : not using UNIX properties

I used this tutorial to authenticate a Debian machine with an active directory, and it worked like a charm. Now, I setup a NIS after I configured my Debian machine. I configured some UNIX attributes ...
0
votes
1answer
99 views

Create an entry in openldap

I installed openldap on windows 7. I started the server fine. I added an entry in init.ldif file. How can add this entry to the server. What is the exact command to do so. Also, I would like to know ...
0
votes
1answer
2k views

How do I change the administrator username for authenticating to Mac OS X LDAPv3 directory?

We're a small company, and our IT manager is leaving. We trying to change all of the passwords for extra security and the administrator name for authenticating to the LDAP directory is his username ...
0
votes
1answer
704 views

Configured Linux Machine to Authenticate to LDAP But not working

I am Using Cent Os Operating System and i need to configure LDAP Authentication for this machine. I have configured the ldap client using using authconfig-tui command. And i have cross checked the ...
0
votes
2answers
5k views

ldapadd/ldapmodify: clarifications needed about these comamnds

The ldapmodify man page states that: The default for ldapmodify is to modify existing entries Yet when I try to import an LDIF file with ldapmodify I get the below error: ldapmodify: modify ...
0
votes
1answer
5k views

ldap_add: Constraint violation (19)

I'm having issues importing users with ldapadd and ldif files. The error I'm getting is: ldap_add: Constraint violation (19) additional info: structuralObjectClass: no user modification allowed The ...
0
votes
1answer
109 views

Downloading entire contents of Active Directory

Is there a way I can download the entire Active Directory. I know I could write script to crawl each and every user's entry that are linked in the hierarchy. But that would be very inefficient. I ...
0
votes
0answers
186 views

Jira: Handling multiple LDAP Organizational Units in 4.3

I'm in the process of upgrading my company's Jira instance to the latest version 4.3.4. In previous versions of Jira we've been able to intergrate with LDAP just fine, by using a baseDN in the ...
0
votes
1answer
784 views

PAM, nsswitch and LDAP configuration

I have a technical and precise question about two type of configuration about LDAP, pam configuration files and nsswitch.conf. Wich is the difference between the passwd_compat configuration and the ...
6
votes
1answer
230 views

Dynamically Authenticate Apache with LDAP Based on Request String?

It is possible to use a portion of the request URI as an input into mod_authnz_ldap's Require ldap-group directive? I'm trying to dynamically check access to a bunch of different project directories, ...
1
vote
4answers
644 views

2 instances of LDAP on same server

I need to run 2 LDAP instances on the same ubuntu server which have the same structure (both writing to ou=People,dc=example,dc=org for instance) but have data which should remain separate. The 2 LDAP ...
0
votes
1answer
65 views

What is the best way to control access at the level of MySQL Client?

What is the best way to implement access control to production MySQL instances? The aim is not ban the developers from accessing the MySQL but performing LDAP authentication and audit logging of ...
0
votes
1answer
3k views

Samba + LDAP: smbclient -L localhost fails (NT_STATUS_CONNECTION_REFUSED)

I'm following Tuxnetworks tutorial, at the last line of the first part and I'm getting this error: sysadmin@samba:~$ sudo smbclient -L localhost Enter root's password: Connection to localhost failed ...
5
votes
1answer
3k views

How to manage groups and users in Jenkins

I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right. I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the ...
0
votes
1answer
621 views

Dansguardian - Allowing some user to view some websites

I have configured squid+ldap with dansguardian. Now the requirement is all the users should not get all the websites opened. Can I configure dansguardian in a such a way that it should allow only ...
1
vote
1answer
354 views

search and replace ldap attribute

I have a reasonably large set of data in an LDAP server. Some of the attributes appear in many places, and I would like to replace them. The data is not enormous, but it is enough to rule out editing ...
0
votes
0answers
1k views

How to migrate OSX Open Directory users/passwords from 10.5 --> 10.6 using slapcat and mkpassdb

I have an OSX 10.5 Leopard Server Open Directory master. I have an OSX 10.6 Snow Leopard Server Open Directory master into which I want to migrate all users. Stipulate that I don't want to use the ...
1
vote
2answers
5k views

Jenkins/Hudson - LDAP group *lookup* does not work

I'm trying to get Jenkins to authenticate users via our active directory groups. If I insert users they are correctly looked up. If I insert group names, they are not found. Edit: Through trial ...
3
votes
2answers
114 views

What is the term for single source authentication that is not Single Sign-On?

I've been using the term "Single Source" for authentication schemes that use a single authentication source (e.g. a single LDAP service) but are not Single Sign-on. i.e. You have to log on more than ...
0
votes
1answer
188 views

Which objectClasses are compatible for Ubuntu Ldap Authentication

I have an Ubuntu server running slapd. I've configured the same box as an ldap client. Logging into Ubuntu via LDAP works great as long as I follow these steps: Create group named 'testgroup1' ...
2
votes
1answer
890 views

Force SHA when user changes LDAP password using passwd

I'm trying to setup PAM/LDAP so that when a logged in SSH user changes their password using passwd, it encrypts the password with SHA1 before updating the LDAP entry. I have this # /etc/ldap.conf ... ...
1
vote
2answers
1k views

disallow anonymous bind in openldap [duplicate]

Folks, I have followed the instructions here http://tuxnetworks.blogspot.com/2010/06/howto-ldap-server-on-1004-lucid-lynx.html to setup my OpenLdap and its working just fine, except an anonymous user ...
4
votes
3answers
2k views

libpam-ldap or libpam-ldapd?

I'm setting up LDAP authentication on my personal VPS, and Ubuntu has two packages for the same purpose: libpam-ldap and libpam-ldapd. Which should I use?
1
vote
1answer
3k views

ldapsearch against Active Directory fails authentication + search params wrong

I am using ldapsearch from OpenLDAP tools to search our corporate Active Directory for my email and phone number. This query is a test to ensure that I can authenticate against the domain so I can ...
6
votes
3answers
401 views

Centralised Authentication - Recommendations?

I have a challenge presented before me, and that is to centralise authentication. Period. That's because me and my big mouth said I like LDAP, and anything can authenticate against it. I have pretty ...
0
votes
2answers
607 views

Error on LDAP Login - xsessions error - Session lasted less than 10 seconds

I have two machines both running CentOS 5.6 64bit. On the LDAP Machine it has a DHCP, BIND and OpenLDAP Server. LDAP is correctly configured and users can authenticate against it. Using root I ...
1
vote
1answer
519 views

ldapsearch display objectClass content

With ldapsearch I get something like this: #ldapsearch -x -b dc=my,dc=org uid=test -LLL ... displayName: Some Name uid: test .... objectClass: inetOrgPerson objectClass: posixAccount objectClass: ...
0
votes
1answer
334 views

Whats the meaning of sambaNTPassword in a machine account?

After running samba3 for quite some time I was wondering what the exact meaning of sambaNTPassword in a samba machine account in the LDAP Database is. I never set it myself (Samba must have set it, ...
0
votes
2answers
3k views

Is it necessary to synchronize users between Ubuntu client and ldap?

I posted a similar question over on super user I'm trying to configure Ubuntu to login to ldap. I've come across several related posts, but I'm still confused: How does pam_ldap find ldap users? Do ...
3
votes
2answers
2k views

NetApp FAS 2040 LDAP Win2k8R2

I am trying to get my FAS2040 to action user lookups using LDAP, below is the filer configuration options: filer> options ldap ldap.ADdomain dc1.colour.domain.local ldap.base ...
0
votes
1answer
81 views

Hosted (external firewalled) ASP.Net application to customer LDAP

Situation: I manage a hosted ASP.Net application that employs winform authentication. The application has role based security, and access control list to various assets. Multiple customer use the same ...
1
vote
0answers
286 views

How to enable LDAP with php IIS 6 and windows server 2003

I have been reading this answer and trying to understand it: How can I enable LDAP in PHP - Windows Server 2008 LDAP is not showing up with phpinfo() I installed PHP the same way as this person with ...
0
votes
2answers
1k views

Redmine LDAP authentication

I have a Mac Mini server running Snow Leopard and installed Redmine. I would now like my users to be able to authenticate against the Open Directory server, but can't get it to work. Here's how I ...
7
votes
3answers
17k views

How do you trace/debug LDAP connections against Active Directory?

I am spoiled, and have been doing most of my LDAP work with eDirectory, which has a utility called DSTrace which is lovely, and for LDAP specifically, will show you all the bind attempts, the source ...
3
votes
3answers
2k views

Is there an open-source alternative to Apple Open Directory?

On my company's network there are a small collection of iMacs. Currently they use Active Directory. We looked in to Apple Open Directory, but $500 for a copy of OSX Server (not to mention the Apple ...
1
vote
2answers
741 views

Convert linux ldapsearch to Windows dsquery

I am converting a website fro being hosted on Linux and Apache to Windows and IIS. The pages are currently written in php but new functionality will be in something along the lines of C#.net In the ...
0
votes
1answer
1k views

What would prevent me from modifying my LDAP schema?

I am trying to follow this guide to configure kerberos on my Ubuntu server. I got up the part where they want to add the new schema to my server user ldapadd I follow the instructions as they say. I ...