Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
289 views

Sanitizing dates using sed or awk on an ldapsearch query

I'd like to pipe the output of an ldapsearch to sanitize the dates returned - I presume sed and/or awk can help with this but would appreciate a bit of help. The fixed length date format in the LDIF ...
1
vote
1answer
4k views

Use LDAP to authenticate oracle database users

I have Oracle Database 11g set up in few locations in either pure Linux/OpenLDAP, Samba/OpenLDAP environment and a full-blown Windows/AD environment. The applications that will be using those ...
1
vote
0answers
266 views

LDAP Proxy Authentication with Active Directory

I am running an application (JIRA) that uses Active Directory as its user directory. In order to connect to the DC, JIRA needs to either bind with a preconfigured username and password, or to bind ...
2
votes
1answer
570 views

Error importing sudoers ldif schema to Active Directory

As per this question, we are on the process of migrating our sudoers file to Active Directory. As per the documentation, this requires importing the schema.ActiveDirectory LDIF which comes with the ...
1
vote
1answer
417 views

apache ldap authentication taking far too long

I configured apache2.2 (CentOS 5.6) to provide ldap authentication with Active Directory. <Directory "/var/www/html"> AuthType Basic AuthName "Authenticate with domain ...
0
votes
1answer
905 views

How to install libnss-ldap in Ubuntu 10.04 without graphical interface setup?

I'm using Ubuntu 10.04. And I want to install libnss-ldap by apt-get sudo apt-get install libnss-ldap And during installation, a graphical interface setup appears. Because I want to install it on ...
-2
votes
1answer
3k views

How to install LDAP server and add a user?

I need to test that our application can connect to more than one LDAP servers. We have one working one (running on OSX server). I need to setup another one. We tried to set LDAP server on SuSE using ...
6
votes
1answer
741 views

RODC and remote site

I have a two-site domain (call them Local and Remote). Site Local has our main IT infrastructure, including two Active Directory Domain Controllers (2008R2). We're trying to set up an RODC at site ...
0
votes
1answer
521 views

AuthzSVNAccessFile for git-http-backend?

I want to host some git-Repositories. Is it possible to setup them like SVN-Repos with a central ACL-File? (Have a look at AuthzSVNAccessFile-Directive for example) Thanks, Philipp
2
votes
2answers
709 views

How to implement successive LDAP authentications on an Apache site?

I have a small Apache site which I've successfully implemented basic LDAP authentication using mod_authz_ldap. However, I am having a problem trying to implement two levels of successive ...
1
vote
1answer
871 views

ldapadd with automatic support for replace if entry already exists

I've been doing some testing with ldapadd and ldapmodify and what I noticed is: -ldapadd will fail if the entry already exists: => hdb_tool_entry_put: txn_aborted! DB_KEYEXIST: Key/data pair ...
1
vote
0answers
897 views

Password expires 45 days even though 'Password Must Change' is set to 'never' (Samba+LDAP)

Since a few months ago Samba ask each of our users to change password at log on every 45 days (the default) and I have not been able to disable it. This setup had been running for 2 years before then ...
1
vote
1answer
436 views

stdout, stderr, and what else? (going insane parsing slapadd output)

I am using slapadd to restore a backup. That backup contains 45k entries which takes a while to restore so I need to get some progress update from slapadd. Luckily for me there is the -v switch which ...
1
vote
2answers
1k views

Issue enabling accesslog overlay with Openldap 2.4.21

I'm running openldap 2.4.21 on ubuntu server 10.04 and trying to enable the accesslog overlay using the cn=config configuration style (so not slapd.conf). My main database is olcDatabase={1}hdb so I ...
0
votes
1answer
440 views

Windows 7 Group Policy to display message for login tries left before account lock

My requirement is to display the the remaining count left on the login screen when user trying to login using Windows 7 OS before account lock in case user enter invalid password. I am having Active ...
0
votes
1answer
1k views

LDAP: error code 49 - Invalid Credentials when connecting jira to Mac OS X Lion Server LDAP

I have the following setup: - LDAP Server from Mac OS X running with default configuration - JIRA Standlone installation I want to: Use LDAP for user authentication for jura username: ...
1
vote
2answers
251 views

Kerberos LDAP and Ubuntu Login

I setup Kerberos and LDAP for directory management at an institution for Ubuntu OS. I got LDAP configured correctly and Kerberos. The user's home directory is in an LDAP directory. When the user ...
6
votes
2answers
653 views

Is OpenLDAP a viable alternative to Windows LDAP?

Just a simple question; this question is not meant to attack Windows or start a flame war in anyway. I want a viable solution to the way authentication is done in Windows DC environment (LDAP) on ...
6
votes
5answers
3k views

Small, simple LDAP server as an alternative to OpenLDAP [closed]

I have taken a look at the installation and configuration instructions for the newer OpenLDAP releases and decided that it's too much work to set up for my small userbase. Basically, I only use LDAP ...
1
vote
1answer
493 views

Openldap with ppolicy

We have working installation of OpenLDAP version 2.4 which is using shadowAccount attributes. I want to enable ppolicy overlays. I have gone through the steps provided at OpenLDAP and ppolicy howto. ...
2
votes
1answer
2k views

How to import certificate for Apache + LDAPS?

I am trying to get ldaps to work through Apache 2.2.17 (Windows Server 2008). If I use ldap (plain text) my configuration works great. LDAPTrustedGlobalCert CA_DER ...
0
votes
2answers
4k views

How does LDAP handle supplementary/secondary user groups?

I've seen similar questions related to configuring Apache to authenticate via LDAP, but this basic question still has me confused. In my setup, I created users who all have the same primary GID, then ...
1
vote
1answer
186 views

redirect ldap to ldaps

Is there a way to redirect a ldap client to an LDAPS service? Like with http where you can inform a client that requests http:\\something to request https:\\something by sending a 301/302 response. ...
2
votes
1answer
1k views

Is openldap fit for large production deployments?

For about 1 year we've been using openldap on ubuntu server 10.04LTS for authenticating about 20 IT users and everything has been running fine (the operations on the LDAP server were basically limited ...
-2
votes
1answer
219 views

Progressive Company: Do you need Active Directory for a 100 person company? [closed]

We are a progressive company (about 100 employees) and would like to hear other's input. In today's XaaS/cloud world where most of the services and applications are in the cloud (file sharing, ...
2
votes
0answers
1k views

Domain Admins do not have Administrative rights on Windows Server 2008 using Samba PDC

Members of Domain Admin using CentOS Directory Server as backend do not have Admin rights in Windows Server 2008. I have joined the domain, see that the users are populated, and can login using LDAP ...
0
votes
1answer
712 views

NAS for Mac OS X Server

I'm using Mac OS X Server and want to allow the users that connect to their network accounts to store their data on a NAS drive. I want the users to connect to the Lion server as this allows for ...
6
votes
2answers
3k views

How do I update the memberOf attributes of existing objects after adding the OpenLDAP Reverse Group Membership Maintenance overlay?

This is a follow-up to this question: I added the memberof overlay to an existing OpenLDAP 2.4 server. Now I want to update the existing user objects. For new group memberships, the memberOf ...
-2
votes
3answers
265 views

Ubuntu software stack to mimic Active Directory auth

I'm going to have an Ubuntu 11.10 box in a customer's data center running a custom webapp. The customer will not have ssh access to the box, but will need authentication and authorization to access ...
0
votes
1answer
62 views

Copy Mac Server LDAP contents to OpenLDAP

Is it possible to copy all content from a Mac LDAP server (which is proprietary modified OpenLDAP). Doesn't matter if I have to do it by replication (which I think is even harder) or copying the ...
2
votes
2answers
815 views

Ubuntu mount of NFS home directories with AutoFS results in /etc/skel not being used

I am wanting a custom look for my Ubuntu 10.04 users, so things like the shutdown menu are not displayed and just having one panel at the bottom of the screen. Also removing some of the default ...
6
votes
3answers
3k views

Paging using ldapsearch

I am searching an LDAP directory that has a much larger number of results than the sizelimit currently set,500, by slapd.conf that for all intents and purposes cannot be changed) My idea was to keep ...
0
votes
2answers
2k views

LDAP: “Unacceptable log file” after db recovery

My openldap-2.4.21 server died I so checked the syslog messages and found logs reporting a corrupt db which I tried to fix by issuing: $ /usr/bin/db4.8_recover -v -h /var/lib/ldap/ Finding last valid ...
1
vote
2answers
2k views

LDAP Virtual appliance

Is there any virtual appliance that has LDAP installed, if possible based on linux? I want to test LDAP and would like to get it installed and configured in a virtual machine.
1
vote
1answer
849 views

How to keep members of a LDAP group from accessing a folder with Apache .htaccess

Using Apache 2.2.14 on Ubuntu 10.04, I am trying to protect a folder with LDAP authentication. Our LDAP server is running Novell eDirectory. All our users are in subgroups of ...
1
vote
1answer
3k views

Apache wont start with php:ldap

I just installed XAMPP 1.7.7 on Windows Server 2003 r2 and enabled the php_ldap extension in php.ini Now, when starting the service, it hangs on 'starting' Aditional info: Since XAMPP 1.7.5+ is ...
2
votes
1answer
183 views

Running Multiple LDAP trees OpenLDAP

Is it possible to have multiple seperate LDAP trees on a single LDAP server?
3
votes
4answers
325 views

How to tag former employees in LDAP structure?

I have ou=People and there I have stored our employees. I have to somehow divide them to our current employees and former employees. What I was thinking about was to create 2 groups, ...
1
vote
3answers
857 views

LDAP + TLS - different behaviour on two machines

machines: debian wheezy suse 11 commands: ldapsearch -ZZ -h ad.unsw.edu.au -x perl -we "use Net::LDAP; print Net::LDAP->new ('ad.unsw.edu.au')->start_tls(verify => 'require', capath ...
1
vote
1answer
4k views

smbpasswd: Failed to add entry for user

tl;dr Assuming a basic (but functioning) LDAP/PAM configuration, how come smbpasswd fails with this error message when I try to add an existing UNIX/LDAP user to Samba? I have a basic, but working ...
0
votes
1answer
107 views

Ideas for a technical hands-on exam [closed]

I need to come up with a technical hands-on exam for a new sysadmin position in our company as part of our recruitment process. I'm looking for ideas to make an interesting exam to both check the ...
1
vote
3answers
1k views

Cannot add custom attributes in OpenLDAP

I'd like to add custom attributes in OpenLDAP but I maybe do not understand the concept. What I've done was: I created the custom.schema attributetype ( 1.3.6.1.4.1.4203.666.100.122 NAME ( ...
4
votes
2answers
9k views

How do I get openldap on Centos 6 to write anything to it's log files

I don't get any information in my log file for openldap on my Centos 6 server. This is how i configured it. SELinux is disabled at the moment. First created a folder where I'd like to store the log ...
1
vote
1answer
487 views

Restricted account for interrogating Active Directory by LDAP

Our phone system has the ability to load its phonebook via LDAP, but it only supports non-SSL. As a result, I am planning on setting up an account that only has access to read our Active Directory ...
2
votes
2answers
2k views

How do I add olcAuditLogConfig to openldap on Centos 6

Regarding to 'man slapo-auditlog' I should just need to add the following. dn: olcOverlay=auditlog,olcDatabase={1}hdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: ...
28
votes
2answers
64k views

How do I configure LDAP on Centos 6 for user authentication in the most secure and correct way?

During the last couple of days I have been using a lot of F-words, while browsing Internet for good documentation about how to setup an LDAP-server. So far I have found none, but plenty that are less ...
1
vote
1answer
390 views

Integrate SAP GUI with microsoft ldap

What is the best way to integrate SAP login with Microsoft LDAP? I would like to make my users login to the SAP GUI with their windows Active Directory account.
-5
votes
1answer
311 views

Why is Active Directory so big and confusing? [closed]

Am I the only person who feels this way? Active Directory is a staple in business networks and it clearly provides some important services like single sign on and DNS integration and directory ...
1
vote
1answer
294 views

Best way to control access?

I have a few servers that serve different purposes (and thus different users use each) that authenticate to an LDAP server (I do not have permission to modify content on the LDAP server). What is an ...
0
votes
1answer
382 views

pam_ldap, where is the filter set?

A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further. The Bind DN is no longer empty; LDAP works with all apps except imap. ...