Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
2k views

OpenLDAP Administrative limit exeeded

I know there are limits in LDAP queries, therefore I setup a user without limits. But even so I'm facing "Administrative Limit exceeded" error. I include below an extract of the database ...
1
vote
1answer
520 views

RHEL 5.8 LDAP pam_groupdn customisation

I have a given LDAP-Server I want to use for User Authentication on my Red Hat Enterprise Linux 5.8 Server. I got the connection to the LDAP-Server working and I'm able to Login to the Linux Server by ...
0
votes
0answers
78 views

MMC Cert Manager Plug-in is making LDAP connection to external site, why?

I'm trying to figure out what is causing 5 of my servers to attempt to connect to an external LDAP server. I inherited these servers when another employee left the company. As far as I know these ...
1
vote
1answer
3k views

OpenLDAP: pwdChangedTime attribute isn't created after changing the password?

I'm going to integrate the check_mk's Multisite with OpenLDAP. After configuring the LDAP connector, I get the following error when opening the "Users & Contacts" page: Error executing sync hook ...
0
votes
1answer
106 views

Network filesystem won't mount at boot

We are running a lab network with a centralized file server. I recently installed Linux Mint on a new client computer and set up LDAP for user management and network folders through the fstab. When ...
0
votes
1answer
459 views

“Unable to get term attr: Invalid argument” while trying to SCP

I have to set up two LDAP servers for replication. My problem is that when i want to copy the master-slapd's database files with scp command i get the next message after typing in the account's ...
0
votes
3answers
508 views

validate only one user with pam ldap and nslcd

I want only user "theuser" to login to this host. I have tried the following in nslcd.conf: pam_authz_search (&(objectClass=posixAccount)(IsActive=TRUE)(uid=theuser)) but all can login. If ...
2
votes
1answer
781 views

LDAP expired SSL certificate

The SLL certificate on the LDAP server expired recently, making it impossible to ssh into other Linux machines who relay strictly on LDAP. Being a self-signed certificate, my understanding is that it ...
1
vote
1answer
192 views

LDAP-Google Apps exclusion list

I'm trying to set-up synchronization between my OpenLDAP server and Google Apps. There are some users accounts already created in Google Apps which are not in my OpenLDAP server. That accounts are ...
1
vote
2answers
984 views

LDIF: Modify attr if exists; Add if not exists

Is there a way to do one of the following in an LDIF file? Ignore error (attr not found) when trying to delete an attribute Or: If attribute exists, modify it If it doesn't exist, add it
3
votes
1answer
399 views

How Do I Change the Active DIrectory Auditing Events Maximum?

We recently starting testing the ADAudit tool and turned on some new auditing features in AD. I have an LDAP Modify action in a custom program I've written that updates very large memberships for ...
3
votes
1answer
66 views

sudo failing even though ownership and modes set correctly

I am getting the dreaded sudo: must be setuid root error even though the executable in /usr/bin/sudo has ownership root:root and mode 4755 (-rwsr-xr-x). /etc/sudoers is mode 440. My user is in sudoers ...
-1
votes
1answer
48 views

User is not deleting from LDAP Container

I have created a new user in .ldif file and it get appeared in the LDAP container also but later, when I deleted the user from .ldif file, that user is still appearing in LDAP container. I'm using ...
2
votes
1answer
958 views

LDIFDE command returns “Invalid Parameter: Bad argument '-r'”

I am running the following command in an attempt to export all of the groups from my domain. ldifde -f export_Groups_NO_Members.ldf -s XXX -d "dc=XXX,dc=XXX,dc=XXX" -p subtree –r ...
2
votes
1answer
844 views

ldap prevent brute force

The title should be self explanatory but more in detail I'm looking for a way to protect the ldap from LAN brute force attacks. It would be fine to prevent password guessing by locking a password for ...
5
votes
2answers
16k views

“no global superior knowledge” while adding a country

I must add an organizationalunit like this into a freshly installed OpenLDAP (on Ubuntu 12.04) : dn: ou=MYREGION, ou=MYAPP, ou=GROUPS, o=myorganization, c=fr ou: MYREGION objectClass: top ...
1
vote
4answers
403 views

PAM LDAP authentication restriction

I have integrated PAM with LDAP authentication. Q- how to restrict login for some users to some Linux servers. For example- we have integrated 100 Linux servers in the Org with PAM LDAP auth and we ...
0
votes
1answer
1k views

Copying Groups and Membership From One Domain to Another

I created a test domain and copied the OU structure and user accounts to it from my existing domain using ldifde as described in the KB below. Unfortunately, this did not copy the groups, or the ...
2
votes
0answers
86 views

Restricted LDAP mimic server backed on SQL

I may not be an expert on the subject, but it seems to me that 99% of any LDAP server installation is used only to provide user authentication credentials and nothing more. Given this restricted ...
1
vote
1answer
222 views

Able to access non-secure LDAP over port 636

I have enabled LDAPS in my Windows AD environment. Using LDP.exe, I am able to connect to the server in question on port 636 with the SSL option both checked and unchecked. Does that mean that ...
2
votes
0answers
54 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
0
votes
3answers
14k views

How to change expired LDAP user password under linux?

can somebody give an advice how to change the LDAP password already expired? I have an LDAP user and the password for this user is expired: # su user You are required to change your password ...
1
vote
1answer
3k views

OS X Server with Open Directory and Network Configuration

I am trying to use a Mac Mini as an Open Directory domain, however it fails on the Open Directory Setup. The exact error from the log is a below: Server[308]: An error occurred while configuring ...
2
votes
1answer
2k views

Search an LDAP tree with a wildcard for a node level?

Given an LDAP tree (AD in my case), is there a way of searching with a wildcard at a specific level in the tree? i.e. I'm wondering if there's an equivalent way of searching LDAP in the same way ...
2
votes
1answer
667 views

Unable to connect QNAP NAS ldap to Domino server

We've just bought a QNAP 419 NAS to the office and for simplicity I'd like to authenticate using LDAP from our Domino server. qnap ldap auth demands the following settings: Base DN Root DN ...
3
votes
1answer
1k views

Linux (Ubuntu vs CentOS) LDAP Client for 389-ds - password policy

389-ds on Ubuntu 12.04 server up and running. Enabled Fine-grained password policies and User must change password after reset for the whole tree. Created test user afterwards. Login from CentOS ...
3
votes
1answer
615 views

CentOS Directory Server - Changing Password via LDAP Modify, passing in old password

This might be a bit odd, as I've had no success finding a solution thus far. This is installed in CentOS 5.8, and using CentOS-Directory/8.2.8 B2012.041.1227. Simply, I am using an application which ...
3
votes
3answers
785 views

Unified Authentication between Windows AD and Linux LDAP Server

Does anyone know of a solution that would allow me to do user account synchronization between Windows Active Directory and an LDAP Server hosted on a Linux Server? I'm currently looking at FreeIPA ...
12
votes
2answers
10k views

Configure OpenLDAP with TLS=required

Nowadays, OpenLDAP needs to be configured with ldapmodify cn=config, as describe here. But nowhere I can find how you configure it to only accept TLS traffic. I just confirmed that our server accepts ...
1
vote
0answers
358 views

Can't make updates with LDAP from Linux box to Windows AD

I have a webapp (built using Zend Framework - PHP) that runs on a Linux environment which needs to authenticate against Active Directory on a Windows server. So far my webapp can authenticate with ...
2
votes
1answer
376 views

Define aliases for users in a LDAP directory

We have in our company multiple directories (Active Directory, Domino, OpenDS). Domino (and it seems AD) give the ability to have multiple logins for the same user (aliases). Is there a way to achieve ...
10
votes
2answers
17k views

How to get ldapsearch on Scientific Linux?

How do I get the ldapsearch on Scientific Linux? I am trying to find the ldapsearch client for Scientific Linux but cannot find how to install the client in order to do LDAP queries.
0
votes
2answers
200 views

Private Git repo using Smart HTTP with LDAP authentification

I've been crawling the interwebz and getting my hands dirty for the last few days, but I can't seem to make it all work together. I managed to get a HTTP repo working with Ubuntu 10.04 over Smart ...
-2
votes
1answer
317 views

Trying to get MYLDAPAdmin working on Scientific Linux [closed]

I am trying to get MYLDAPAdmin working on Scientific Linux. I downloaded it and installed it but I am getting the following message. It looks like my PHP is not setup for LDAP. Can someone help me? ...
1
vote
1answer
2k views

Postfix: LDAP not working (warning: dict_ldap_lookup: Search base not found: 32: No such object)

I set up LDAP access with postfix. ldapsearch -D "cn=postfix,ou=users,ou=system,[domain]" -w postfix -b "ou=users,ou=people,[domain]" -s sub "(&(objectclass=inetOrgPerson)(mail=[mailaddr]))" ...
1
vote
1answer
155 views

How to hide ldap password in ejabberd

I have recently started using ejabberd and I am setting up the ldap module. There is a line {ldap_password, "secret"}. Where it is asking for my ldap password in plain text is there a way of hiding ...
0
votes
1answer
123 views

Apache LDAP with local groups

I have a server that currently uses htpasswd to authenticate users. I'm migrating to using LDAP, but my LDAP server is only for user authentication, not allowing me to add groups. I still need to ...
0
votes
1answer
33 views

Removeing LDAP group

I've removed the user from the LDAP server and now I would like to remove the group however I'm not sure about the proper command for this. The command that was used to remove the user: ldapdelete ...
0
votes
1answer
152 views

Is it a good practice use LDAP for auth in a public webapp beside the app DB?

Internet app needs to be really secure. So LDAP for auth got into the game. Instead doing the traditional db with users table, we want to authenticate agains a LDAP server. How good/bad you think it ...
1
vote
0answers
61 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
1
vote
2answers
225 views

Active Directory LDS classes: what's the difference?

I'm creating some AD LDS objects. In AD I'm prompted with this window. What's the difference between 'container' and 'group'? Is there a web resource that lists the difference? I haven't been able ...
0
votes
1answer
104 views

LDAP configuration parameter, what does “?one” mean?

I am configuring the Debian package nsslib-ldap and am wondering about one of the configuration options. The config file I'm editing is called 'libnss-ldap.conf'. The line in question is: ...
1
vote
2answers
1k views

RHEL 5/CentOS 5 - sshd becomes unresponsive

I have a number of CentOS 5.x and RHEL 5.x systems whose SSH daemons become unresponsive. This prevents remote logins. The typical error from the connecting side is: $ ssh db1 db1 : ...
2
votes
2answers
428 views

SVN Active Directory authentication with ProxyPass redirect in the mix

We have a BitNami SVN stack running on a Windows machine which holds our SVN repository. It's set up to authenticate against our AD server and uses authz to control rights. We need to be able to ...
1
vote
3answers
961 views

LDAP Bind request failing

I have a Windows Server 2008 R2 Active Directory domain controller with domain madhurmoss.com I have a Linux box which is trying to connect to LDAP (389) on above box, which is failing. Upon ...
1
vote
1answer
7k views

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 ...
0
votes
1answer
621 views

phpldapadmin interface won't produce Samba SID number

I am trying to create a new user group within the phpldapadmin interface. Under the Samba SID entry it gives me two boxes side by seide with the following: ...
2
votes
4answers
8k views

How to add new attribute to an existing LDAP user objects

I want to add mail attribute to the existing ldap users. I think, its possible with using ldapmodify but not sure how. I have done that using phpldapadmin web GUI manually, but I have like more than ...
3
votes
2answers
2k views

How to add admin users in 389 LDAP, fedora directory server

I want to create couple of Admin users who have access to create/delete users on a particular group/Organization Unit. For example, User: uid=testadmin, ou=people, dc=my,dc=net Should have access ...
1
vote
1answer
57 views

Root being controlled by ARD

I run an educational lab of 20 iMacs, all running Mac OS 10.7.5(11G63) with ARD version 3.6.2. My server and all of the iMacs run Lion. I seem to have crossed something and now my root user is being ...