Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
679 views

WebLogic embedded LDAP crashes

Our production admin server (WebLogic 10.3.5 running on Solaris 10) crashes from time to time. Logs show tons of these errors (several each minute): <1-Jun-2012 2:28:34 o'clock AM EDT> ...
3
votes
1answer
3k views

Auth-Type :- Reject in RADIUS users file matches inner tunnel request but sends Access-Accept

I have WPA2 802.11x EAP authentication setup using FreeRADIUS 2.1.8 on Ubuntu 10.04.4 talking to OpenLDAP, and can successfully authenticate using PEAP/MSCHAPv2, TTLS/MSCHAPv2 and TTLS/PAP (both via ...
0
votes
1answer
809 views

Solaris 11 ldap client configuration

Im am trying to migrate some web services (like wordpress / dokuwiki), which are connected to our ldap for user authentication, from solaris 10 to solaris 11. In solaris 10, you had the possibility to ...
2
votes
0answers
58 views

Auxiliary class

I try to modify an AD schema, adding a custom auxiliary class in user (Cn=MyName,CN=Users,DC=xxx,DC=yyy) With adsiedit when the new object window pops-up to add the class, I can only select ...
0
votes
1answer
475 views

Tombstone object with Active directory

Is it possible to remove manually a tombstone object in win2008-r2 Active Directory ?
2
votes
1answer
2k views

Make Postfix search LDAP group members by UID instead of DN?

I'm creating an e-mail server with postfix (v2.7.1 on Debian 6.0) where users and groups are stored in an LDAP server. Users accounts works fine but I want to create e-mail aliases from group (any ...
0
votes
1answer
239 views

Accessing domain controller in data center

We used to have a domain controller in our local office network. Now we have moved the servers to data center and the dc is there, behind the forefront TMG firewall. In order for my office computers ...
1
vote
1answer
1k views

LDAP (slapd) ACL issue - can add but not modify entries

I have an issue with the ACL configuration of an LDAP server (slapd). The following ACL entry is active as the first rule that applies: {0}to ...
0
votes
3answers
941 views

The rights needed to change a AD LDAP password

What are the bare minimum rights you need to change an other persons LDAP password?. I'm working on a tool that allows a user to change his password. as the tool needs to be written in PHP the only ...
1
vote
2answers
2k views

Samba + LDAP: Newly created users cannot log in

I'm having a problem where users which recently were created are unable to log in, even though they have been added to the correct groups. When viewing the error logs, I'm getting these errors: ...
0
votes
1answer
914 views

Postfix relay ldap lookups and transport

I'm trying to implement postfix + policyd/amavis + dspam. The problem is that I need to do ldap lookups in order to obtain the nexthop. But at the same time I need to redirect some "email address" to ...
0
votes
2answers
2k views

How to enable LDAP auth for SFTP logins only

I currently use ActiveDirectory for authentication on my Ubuntu 10.04 servers using a tool called Centrify Express. Centrify has a custom .so file that is configured in /etc/pam.d/common-auth. I'd ...
2
votes
0answers
741 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
8
votes
6answers
9k views

Use LDAP for MySQL authentication?

We run a couple dozen different MySQL servers for our users. These use the free/Open Source version of MySQL, not the commercial version. Managing the Account Passwords on these servers is painful. ...
0
votes
1answer
443 views

Implementing LDAP with ASP.NET MVC3

I have an ASP MVC app that's supposed to be hosted on our DMZ server. What's the best practice to secure the network when connecting to the LDAP server?
3
votes
1answer
195 views

What are the differences in schemas of main directory servers?

Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
4
votes
1answer
735 views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
2
votes
1answer
655 views

How can I determine the last time an Open Directory network account was used on Mac OS X 10.7 Server?

How can I determine the last time an Open Directory network account was used? I am completing a user/group audit and am looking to identify users that have not used their network account recently.
0
votes
1answer
375 views

Using OpenLDAP's meta backend to map incoming user to someone else

I am attempting to set up an LDAP "tunnel" to work around an application that requires a configuration slightly different to my environment. I need to be able to bind as USER1 to an LDAP server & ...
1
vote
0answers
363 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
3
votes
1answer
3k views

Troubles with sssd and Active Directory Integration

I have Debian Squeeze and sssd installed. When I try to login to server by user 'alexwinner' by ssh I see in the log: (Fri May 11 18:56:03 2012) [[sssd[krb5_child[26281]]]] [get_and_save_tgt] (1): ...
0
votes
1answer
351 views

Implementing TMG over AD

I am a programmer and ask for some help to sysadmins. I've have a Wordpress system (a website) that validates users through an Active Directory, this is done by a plugin. My customer wants to protect ...
2
votes
2answers
277 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
1
vote
1answer
360 views

ActiveDirectory lastLogonTimeStamp Inactive

In joining a new company, I have inherited it's history. I find that the User and Computer Object property lastLogonTimeStamp is not available. I have checked that the AD Schema version is 2003 R2, ...
2
votes
2answers
331 views

Integration (Authn & Authz) with Active Directory in linux [closed]

I am trying to find a unified authentication scheme for linux servers to authenticate against Active Directory. Mainly these are Ubuntu and CentOS servers. What I need: Free, stable solution ...
2
votes
2answers
3k views

Where can I find more information about custom/extension attributes in Active Directory?

I want to be able use a script to write/read from extensionAttribute1-15 I was wondering where I could find more info about the size of these fields, what can be written into them. I've used google, ...
1
vote
1answer
787 views

Connecting a linux client into active directory

I have a linux server (opensuse 12.1) running OTRS 3.0.10. And a primary domain controller running Windows Server 2008R2. I've followed the howto page here and here. Obviously the Net::LDAP perl ...
1
vote
1answer
660 views

OpenLDAP on CentOS 6.2 (@ localhost)

I'm trying to configure openldap on CentOS 6.2, I'm just testing openldap on my server at home, so I don't have any DNS server and stuff like that. I already installed openldap using the following ...
2
votes
1answer
113 views

A single LDAP auth server for two companies

I run the network for a small company (mycompany.com) with 10 software developers and a laboratory (thelab.org) with 5 scientists. But the total number of people is 12, as 3 of them work both for the ...
11
votes
1answer
11k views

How Do I Install Gerrit Under Tomcat with LDAP?

I'm trying to find good instructions for installing Gerrit under Tomcat with LDAP support. I need this installed on a Windows 2008 Server, preferably. However, I can opt for Linux if not possible. ...
1
vote
1answer
1k views

Active Directory Certificate Import Successful, but LDAP Authentication Still Fails

I'm having a difficult time getting to the root of this issue. We use LDAP for authentication purposes across several services, confluence, bamboo, sonar, gerrit, etc.. Our LDAP service provider is ...
2
votes
2answers
1k views

I need to find the last user to log on to a computer from AD

OK I have over 500 desktops in my company and can confirm from the lastlogontimestamp which ones are active and which ones are not - so far so good. I now need to know who was the last user to log on ...
1
vote
0answers
862 views

How to configure LDAP client to authenticate against ApacheDS?

I am playing with LDAP lately and trying to authenticate against ApacheDS. I am unable to setup my Ubuntu client to print the LDAP users list (getent passwd for instance). I found few tutorials on the ...
1
vote
1answer
879 views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
3
votes
1answer
2k views

Certificate problems with Apache LDAPS access

I have a Subversion server running on Ubuntu 11.04 using Apache, and I'm trying to hook the authentication up with LDAPS. I got the Apache config file set up to authenticate against LDAP (sans the S) ...
1
vote
4answers
2k views

Subversion: Apache mod_ldap - 30 seconds for first authentication

I have a problem regarding my Subversion server installation with Apache (mod_ldap and mod_authnz_ldap) and my LDAP connection to a Microsoft Active Directory I am using a CentOS5 64Bit system with ...
3
votes
2answers
195 views

Only a subset of groups available

I have installed RHEL 6.2 and configured for using LDAP with the setup utility and I can login. What is stange is that only three LDAP groups are recognized per user. It is different groups, even for ...
2
votes
2answers
2k views

Linux file ACL and secondary groups

The Problem: CentOS does not seem to look at secondary groups when using ACL's on a folder or file Scenario: CentOS 6 basic install, uses LDAP accounts to authenticate users. I am trying to setup ...
1
vote
1answer
1k views

getent passwd fails, getent group works?

I've almost got my AD integration working completely on my OpenSUSE 12.1 server. I have a OpenSUSE 11.4 system successfully integrated into our AD environment. (Meaning, we use ldap to authenticate to ...
2
votes
1answer
534 views

A unique ID number for Active Directory accounts that could be retrieved via LDAP interface

I wanted to know if there is either an auto-populated field or a field that we could populate at creation time with a unique ID number for accounts that we could query for. The reason I ask for this ...
0
votes
1answer
610 views

Two samba servers and UID,GID mappings across them

I have a samba server and just installed the second one to configure a reserve file server. It all went well and both of them successfully are on Active Directory domain (actually SAMBA 4) the ...
0
votes
1answer
2k views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
1
vote
2answers
6k views

Active Directory 4003 (INSUFF_ACCESS_RIGHTS) - LDAP: error code 50 - 00002098: SecErr: DSID-03150A45

I tried to set an attribute to another user while I was logged with my account, which is member of Domain Admins group of the Active Directory. Error while executing LDIF- [LDAP: error code 50 - ...
2
votes
1answer
113 views

ldap schema in development should it match production?

I been using LDAP for many years now and most of the firms I worked for used a development LDAP schema that was identical to the production and QA (staging) schemas. An example suffix would be: ...
1
vote
1answer
270 views

Move samba and ldap config to new machine

I'm not advanced administrator so this may be n00b question but I'll be grateful for help. I have following problem: I have to move my server (ubuntu server) from old machine to new. I have samba ...
1
vote
1answer
408 views

Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?

[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ] Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
1
vote
2answers
3k views

ActiveDirectory - LDAP query for objectCategory unexpected results

AD is at 2003 functional level, some of our DC's are running Windows Server 2003, some are 2008, some are 2008 R2. When using the following query: (objectCategory=user) I do not expect to see any ...
2
votes
1answer
858 views

Export all AD attributes and default “Range Upper” size for the User class?

I need to write approximately 1000 - 5000 characters into a user property, but I'd prefer not to edit the schema rangeUpper attribute, or create one just for my purposes. How should I research what ...
1
vote
1answer
667 views

Where is “Custom Attribute 14” in AD Schema?

I'm getting the following error when writing to Active Directory attribute 14 00002082: AtrErr: DSID-03151314, #1: 0: 00002082: DSID-03151314, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att ...
0
votes
1answer
42 views

Change the LDAP settings on a WAS from outside of the GUI

I have a virtual image of a WAS server but it can no longer access the LDAP/AD that holds the administration password as it has moved to a different network. As a result, I can't login to change the ...