Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
935 views

LDAP Connection TimeOut Exception

While debugging a LDAP connection class, if I terminate the process and do not close the LDAP connection by going into finally block. From next time I am not able to connect back to the LDAP ...
1
vote
1answer
1k views

Unable to add schema in OpenLDAP using run-time configuration cn=config

I have the following ldif file which I am trying to load into openLDAP: Custom schema being created for the Monas project dn: cn=testSchemas,cn=schema,cn=config objectClass: olcSchemaConfig cn: ...
0
votes
3answers
2k views

Descriptive “constraint violation” when using passwd

Is it possible to inform the user of slightly more than just "constraint violation" when they attempt to change their password? Something like "password must be 7 or more characters", instead of ...
4
votes
1answer
754 views

How can I retrieve the LDAP server certificate for Windows 2008 and 2003 global catalog servers?

Windows Server 2008 | Windows Server 2003 I want to leverage LDAPS on a linux appliance. The vendor requires the server certificate for my Windows 2008 | Windows 2003 global catalog servers so it ...
1
vote
1answer
580 views

OpenLDAP schema location (cn=schema,cn=config) does this exist?

We're trying to get an instance of OpenLDAP up and running. I'm using ApacheDS as the browser. When I go to create my objects in the LDAP database, I see that a number of the objects and attributes ...
0
votes
1answer
2k views

LDAP: unable to enter DIT LDIF: LDAP_NO_SUCH_OBJECT error

I've finally got my LDAP server to work but now I'm having trouble constructing the DIT. The LDIF for the DIT goes as follows: dn: ou=uSocial,dc=ulyssis,dc=org ou: uSocial objectClass: top ...
1
vote
1answer
219 views

Get logon information through ldap from AD server

I want to know users logged into the domain and from which IP. I know it is possible to see by monitoring AD eventlogs. However, I want to do it without any software on AD server itself. Is it ...
2
votes
2answers
322 views

SLAPD Fails to Open TLS Certificate

I am trying to configure TLS for SLAPD, but it keeps failing with the error "TLS init def ctx failed". I was able to trace the error to the system call where the daemon tries to open the CA ...
1
vote
2answers
2k views

LDAP: how to reference to another entry?

I'm currently making a custom LDAP schema for my organisation but I can't find how to give an objectclass an attribute that allows you to refer to another entry. For example: I have an enrollment ...
1
vote
1answer
292 views

enkive mail archive ldap setup

I am trying to set up mail archiving using enkive with exchange. i have followed the installation of all the prerequisites for enkive. i run enkive with defaults and i get error in the log file Aug ...
-3
votes
2answers
178 views

Linux Domain Controller [closed]

I'm kinda new in the admin scenario. I'm looking for a good source where to study in deep what a domain is and how to manage it. The point is that I'm a tlc eng but I don't have any experience in it. ...
0
votes
1answer
6k views

Setting up LDAP connection between CentOS and Windows server 2008

I am running a virtual setup with vSphere, with two virtual machines, one running CentOS 6 and the other running Windows server 2008 The idea is to use LDAP to connect from the CentOS (as a client) ...
1
vote
0answers
966 views

Jenkins - Project based authorization + LDAP

Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration? There are several closed bug reports on the Jenkins Jira site that say users don't need ...
1
vote
1answer
559 views

How can I set up an authentication system with single instance storage of credentials and several authentication methods/interfaces?

Background: I have a collection of Linux-based servers (let's say a few dozen) that are hosted in different locations. Some servers are lone satellites while others are hosted together in the same ...
2
votes
1answer
371 views

How can I query the Full Name field in Active Directory

In Windows Server 2003 Active Directory there was no UI to access the FullName field - see this blog post for a discussion of this, and how Display Name is not the same as Full Name. In Windows ...
1
vote
1answer
176 views

ldapsearch failing to show results from custom field

Why does this ldapsearch command shows nothing: /usr/bin/ldapsearch -x -LLL -h ldapmaster.corpintra.net -b ou=people,ou=Mars,ou=Eng,dc=corpintra,dc=net '(ifxAccStatus=unlocked)' uid ifxAccStatus The ...
1
vote
1answer
232 views

LDAP does not timeout when server is down

I am currently trying to add LDAP support to supplement a file auth system. Unfortunately, I can't just phase out the file system in it's entirety because of when the LDAP server goes down. The ...
2
votes
2answers
2k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
2
votes
1answer
688 views

Samba+LDAP: Minimal permissions for sambaLMPassword/sambaNTPassword?

What are the minimum permissions for the attributes sambaLMPassword/sambaNTPassword for the the LDAP administrator account so that Samba is just enabled to use it for authentication for ldapsam ...
3
votes
2answers
439 views

After user is added to LDAP, user cannot login to SVN unless apache is restarted

System specs: LDAP: apache-ds 2.0 M7/debian squeeze SVN: subversion 1.6.5/debian Apache: 2.2 mod_svn/auth_ldap mods enabled I have successfully integrated the two systems together (LDAP and SVN). The ...
1
vote
0answers
716 views

LDAP Berkeley DB

I'm trying to configure slapd on my machine and I keep getting this error. I can recover at times using db7.7_recover but not always. I see this problem if the slapd deamon is killed for any reason. ...
1
vote
1answer
3k views

Using SSL to Encrypt LDAP Queries - Windows 2008 R2

I'm trying to secure our domain so when LDAP queries are made from another computer they are encrypted with SSL. I followed this guide even thought I am using Windows 2008 R2. I added the Active ...
2
votes
3answers
843 views

LDAP and pam without binddn and anonymous access

I am working in a large company and can use its central read-only LDAP server remotely. The LDAP server does not allow anonymous binding. In order to use this server for authentication of the users on ...
4
votes
2answers
440 views

Samba: read-only LDAP + additional local users

My server has access to a read-only LDAP where information about 99% of user accounts will reside. On my server I want to configure Samba to use LDAP for authentication. Now and then there will be ...
0
votes
1answer
68 views

Possible to include user IP within application requests to LDAP or Active Directory?

Given the following standard workflow: A user supplies a username and password to an application (ie, webmail). The application authenticates the user against LDAP or AD. LDAP or AD log the ...
4
votes
3answers
462 views

Apache multiple ldap groups

I am configuring Apache to authenticate against LDAP and require multiple groups to be present. I have done this with require statements, however I need the authentication to be successful if all ...
1
vote
0answers
326 views

CAS-Toolbox : Get Nested Group from Active Directory

We are using Cas-Toolbox for our intranet. We manage to get LDAP attribute via CAS and send it to the intranet app : <bean id="adAttribRepository" ...
1
vote
1answer
4k views

LdapErr: DSID-0C0903AA, data 52e: authenticating against AD '08 with pam_ldap

I have full admin access to the AD '08 server I'm trying to authenticate towards. The error code means invalid credentials, but I wish this was as simple as me typing in the wrong password. First ...
2
votes
0answers
945 views

LDAP groups not always mapping, Ubuntu server 12.04

Ubuntu 12.04 server, AMD64, authentication via LDAP. I'm having trouble getting the LDAP groups to map to my user account when logging in, even though 'getent group' shows the correct set of groups ...
1
vote
1answer
232 views

How can I add another naming context to my ldap server using the olc method?

I am trying to add another naming context to my ldap server using the olc, but so far I am new to this and haven't found a example explaining this. I guess I could use a tool like apacheDS but I want ...
1
vote
2answers
242 views

Should ldap client use different credentials than end user to do end user authentication?

short form: Should I use some well-known uid to authenticate a ldap client, and then other means within that client to validate the user-entered uid and pw? long form: We have a commercial .net-based ...
0
votes
1answer
572 views

Samba+LDAP acl - anonymous bind?

I have a working Samba PDC that uses OpenLDAP as backend. I am about to set up a samba proxy user and have problems writing the correct secure ACLs. I used this acl: {0}to * by ...
1
vote
1answer
4k views

Slapd service won't start, unable to open pid file

I'm trying to set up a test LDAP-server for some developers but I'm running into some trouble. service slapd start errors so I run /usr/sbin/slapd -d 1 and this gives me the following error at ...
5
votes
4answers
5k views

Setting up SSL with 389 Directory Server for LDAP authentication

I've got 389 Directory Server running on RHEL 5 with groups, users, posix etc. RHEL clients are authenticating users with LDAP - no problems, everything works perfect, but passwords are sent in ...
1
vote
1answer
285 views

Kunagi LDAP configuration problems

We recently started with Scrum at our company and we wanted to start using Kunagi to test and see how it works. So I installed the kunagi_0.23.2.deb package that I downloaded from their website, on ...
1
vote
2answers
172 views

Error getting PAM / Linux integrated with Active Directory

I'm trying to add a Linux server to a network which is controlled by AD. The aim is that users of the server will be able to authenticate against the AD domain. I have Kerberos working, but NSS / ...
1
vote
1answer
892 views

Error in openssl s_client: “data length is too long”

I have an Ubuntu 12.04 server, and I'm trying to set up Apache to authenticate using LDAPS. I ran into some problems--see my previous question, where I concluded that the certificate on the LDAP ...
3
votes
2answers
2k views

Correct options for keeping open a reverse SSH-tunnel using autossh

I have a set-up with a LDAP-sever (ldapserver) behind a strict firewall, and a webapplication running on a sever (appserver) outside that firewall that needs to authenticate using that LDAP-sever. I ...
2
votes
3answers
9k views

SVN Authentication with LDAP and Active Directory

I am having a few problems getting SVN authentication to work with LDAP / Active Directory. My SVN installation works fine, but after enabling LDAP in my apache vhost, I just can't get my users to ...
1
vote
1answer
212 views

Courier IMAP stucks after authentication in Debian

I just updated my Debian and Courier imap is not logging in anymore. Pop3 service works fine. In the logs I can see that authdaemon authenticates, but imapd gets stuck and does not return OK. Logs: ...
0
votes
2answers
217 views

how to add groupOfEntries object class to openLDAP

I am working on the design of LDAP structure, that basically should hold users and groups. There should be support for nested groups (so I thought on using groupOfNames object class) and for the ...
0
votes
1answer
707 views

Debian + ProFTPD + LDAP Incorrect Password Issue

I have the LDAP configuration configured for ProFTPD and I have modified the modules.conf file to include the LDAP module. However, every time I login with FileZilla I get 530 Login Incorrect. It ...
1
vote
0answers
252 views

Merge two samba PDC and do master slave keeping data on two servers

I need to do a very difficult thing. I have this situation: 1) server A , with zentyal as samba PDC, 500 users in his ldap. Each user has an home that is mapped to H: . Several computers are ...
0
votes
2answers
367 views

How to set up remote login and DNS resolution in a small business environment having centralized server

Dear fellow Administrators, I have a very burning issue I am still hunting an answer for. We had a maintenance involving the IT infrastructure (new computers, cabling, etc.), but we have found that ...
2
votes
1answer
1k views

Ubuntu LDAP auth - offline cache / network init speed

I have configured LDAP auth for Ubuntu using this guide. The authentication works, but I have connection problems after reboot & suspend. Although the PC is configured using a static ip, after ...
4
votes
5answers
6k views

Ubuntu 12.04 LDAP SSL self-signed cert not accepted

I'm working with Ubuntu 12.04, using OpenLDAP server. I've followed the instructions on the Ubuntu help pages and can happily connect without security. To test my connection, I'm using ldapsearch ...
2
votes
2answers
318 views

How can I jail users to their home directory with mod_userdir in Apache?

I need to make my users' home directories available to them over the web. I have LDAP authentication in place so only valid users can access the home directories but currently a valid user can access ...
0
votes
4answers
4k views

How to determine the Kerberos realm from an LDAP directory?

I have two Kerberos realms I can authenticate against. One of them I can control, and the other one is external from my point of view. I also have an internal user database in LDAP. Let's say the ...
4
votes
1answer
1k views

How do I configure Subversion Edge to use LDAP Groups for authentication?

I'd like to make use of LDAP groups in my Subversion Edge "Repository Access Rules". For example, if LDAP user smokris is a member of LDAP group dev, I'd like to be able to grant the dev group access ...
0
votes
1answer
702 views

WebLogic embedded LDAP crashes

Our production admin server (WebLogic 10.3.5 running on Solaris 10) crashes from time to time. Logs show tons of these errors (several each minute): <1-Jun-2012 2:28:34 o'clock AM EDT> ...