Tagged Questions

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
44 views

Apache and LDAP Authentication

We are using Apache mod_authnz_ldap to authenticate users to Nagios using our LDAP Active Directory. Right now it is working with using SamAccountName. However, Nagios is using the SamAccountName as ...
-1
votes
1answer
61 views

Shared /home with NFS: chown /home/userdir to a user that doesn't exist on the server

Let's say I have a NFS /home on my server that gets mounted on boot by clients (EDIT: on their own machines -- locally), in order to have a common /home for my clients, this way they automatically ...
2
votes
1answer
681 views

LDAP authentication on CentOS 7

After upgrading to CentOS 7 it's no longer possible to login via LDAP. With CentOS 6 I used the package pam_ldap which worked fine, but now pam_ldap is no longer available for the new version of ...
1
vote
1answer
23 views

Is “dc=nomain” a in LDAP ACLs?

I'm trying to set up my first LDAP server. I can't get clients to authenticate using it even though everything seems to be working. i suspect the ACLs might be the problem since i can't see the ACLs ...
0
votes
1answer
57 views

Apache 2.4 authentication combination with LDAP and htpassword

We use Apache with mod_svn to serve our Subversion repositories. Previously we used file based authentication with AuthType Digest set. We want to move to LDAP-based authentication, but at the first ...
0
votes
1answer
43 views

LDAP Schema implemetation in existing LDAP server

I have a user defined schema ,which is to be added into the existing LDAP server. Its ldif format is: dn: cn=userControl,cn=schema,cn=config objectClass: olcSchemaConfig cn: userControl ...
0
votes
2answers
36 views

PHP configure not finding LDAP header libraries

I installed the LDAP development headers: apt-get install libldb-dev This added a few ldap headers: root@crunchbang:/usr/include# ls -la ldap* -rw-r--r-- 1 root root 9466 Apr 23 2013 ldap_cdefs.h ...
0
votes
1answer
67 views

Set up LDAP on Redmine with Zimbra LDAP

I'm trying to enable LDAP authentication for a Redmine installation. My LDAP Server is the one provided by Zimbra, and I'm perfectly sure that it works good (I use LDAP also for ownCloud server, in ...
1
vote
0answers
15 views

Gitlab userPrincipalName without Domain

I've to use the userPrincipalName instead of the default sAMAccountName in all applications which are integrated to AD because we've login-names > 20 characters which isn't supported by ...
1
vote
1answer
193 views

phpldapadmin not being able to connect to LDAP server using ldaps

Update I have been able to reproduce the problem in a smaller scale using a simple php script that attempts an LDAP bind. From that script I got more debug output which lets me identify the actual ...
0
votes
1answer
32 views

LDAP configuration for Mac server

We just migrated our php webapps to a new web server (Mac OS X 10.9.5). We are having trouble with ldap logins to the webapps. We are able to successfully connect to a remote ldap server, but when we ...
0
votes
0answers
25 views

Early tear down of communication

I have an application which performs an LDAP search which works in one domain but not in the other, when analyzing the packets sent between the application server and the domain controller being ...
-1
votes
3answers
76 views

how do I change 1000 user passwords using ldap? [closed]

I have 1000 users I need to change the password for to a known password for a migration tool (groupwise to exchange). I do not have any of the existing password. How do I change the password for 1000 ...
2
votes
1answer
44 views

Is dual directory integrations possible with Windows?

In the Mac world, you can integrate OS X systems with dual directories so that OS X looks towards Active Directory for authentication and OpenLDAP for OS X managed preferences. Is the following ...
0
votes
1answer
26 views

how do you query your existing ldap parameters?

ldapsearch -A locked my computer up and upchucked about 3000 unnecessary lines (not one clearly had the information I was looking for). Is their a quick summary search that will upchuck your ou, dn, ...
0
votes
1answer
14 views

LDAP config for Novell export

I am trying to export the email userlist from groupwise via the consoleOne export tool.. In the tool, they ask for some basic LDAP parameters that make little sense in the GUI (I dislike GUIs). ...
1
vote
2answers
144 views

Getting list of users indirectly members of an AD group through LDAP

I'm having a bit of a problem with LDAP search that should specify whether a user is a member of a given AD group or not (recursively). Basically, what I'm doing is issue a LDAP search with the ...
1
vote
0answers
101 views

LDAP authentication, pam_mkhomedir and NFS automounted homes

We currently have a setup (running on Ubuntu 12.04.5 LTS) with mixed LDAP/NIS authentication and automounted home directories from several servers (with the auto.home map distributed over NIS). ...
0
votes
1answer
131 views

Can't contact LDAP server (with ldaps) in Docker

I'm trying to do a ldapsearch like this : ldapsearch -x -D "uid=username,ou=people,dc=example" -w passw0rd -H ldaps://example.com "(objectClass=example)" But it's giving me this error : ...
0
votes
1answer
48 views

389 Directory Server - Multiple Domains

I have multiple business that i would like to authenticate to a single server for SSO. I am using 389 directory server and have already split each domain into it's own respective OU. I would like to ...
0
votes
1answer
56 views

FreeIPA/389 DS userPassword

I am connecting to FreeIPA LDAP (386 Directory Server) as admin. I can find a user, and add the userPassword attribute like #!RESULT OK #!CONNECTION ldap://freeipa1.localdomain:389 #!DATE ...
2
votes
2answers
446 views

pam_ldap and ldaps can't contact ldap server

I'm trying to allow authentication via LDAP on a CentOS host system. But I always get a Can't contact LDAP server error from pam_ldap. The LDAP server is pingable and authentication works perfectly ...
0
votes
0answers
94 views

SSH login with LDAP users over NSLCD works after restarting server

I have a working nslcd setup running on many servers. I distributed this config to many servers almost all of which are working without problems. However I forgot to install libnss-ldapd and ...
0
votes
2answers
46 views

How to configure OpenLDAP server and test using Apache HTTPD

I am using CentOS 6. I found a great article on how to install and configure OpenLDAP on CentOS 6, and I found some other great documentation here on how to configure LDAP to work on Apache HTTPD (I ...
0
votes
0answers
95 views

Root and child domain authentication through one LDAP path

I have a webapp and in the web.config file, there is an LDAP path to allow AD token lookup for users to login. The app also requires users to be in a specific group to login. In my case red\appadmins ...
0
votes
0answers
20 views

Restricting proxy access to certain ldap users

I'd like to restrict access to a squid proxy server to certain ldap users. Since the ldap backend I use is zimbra, I intruduced a new Class of Service simply called squidusers and use that for the ...
0
votes
1answer
39 views

How to create additonal Organizational Units (ou) with zimbra

How can I create more ous or change existing ous with zimbra (preferably the web administration frontend). Is there a zimlet available? Or is is maybe best practise to use additional Classes of ...
0
votes
1answer
30 views

Error while configuring openldap with ssl

I have a certificate from Digicert and I have added the keys to the bdb config file. The rest of the LDAP setup works fine except the SSL part. I have added a Mozilla certificate store as well, but i ...
0
votes
1answer
60 views

Password complexity on clients authenticating via openldap

We have a bunch of linux servers authenticating via an ldap server. We have set a password complexity policy on the ldap server. However, the local system policy overrides the policy set on the ldap ...
8
votes
2answers
468 views

Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?

We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most. Thus, we are installing: a wiki (dokuwiki) ...
0
votes
1answer
43 views

Intranet AD login for External Website

Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
1
vote
0answers
62 views

LDAP user's NFS files are mapped to nogroup (user ID mapped correctly)

In my office environment, I have set up multiple Ubuntu machines with LDAP authentication using the LDAP & NFSv4 server hostS. The LDAP/NFS server hostS exports the /home directory for all users ...
0
votes
1answer
63 views

Issues with LDAP authentication over SSL (ldaps)

I'm trying to setup an LDAP server with ldaps support. The server is hosted on ec2 and it has a domain name on route 53. I got an SSL certificate for the route 53 domain (say example.com). When i try ...
0
votes
1answer
27 views

red hat directory 9 / 389 directory server - Do duplicate invalid passwords count toward the lockout policy?

I have been looking at Red Hat's Directory server 9 (aka 389 directory server). One thing I was looking to find out was how account lockouts are handled if the same invalid password is repeated over ...
0
votes
1answer
20 views

Configuring different read and write targets for OpenLDAP

I have a new piece of infrastructure (a simple LDAP web service) that will be a drop-in replacement for something that currently exists in production. The backend OpenLDAP server will not be upgraded ...
0
votes
1answer
147 views

MacOS X 10.9 Mavericks Kerberos login w/ FreeIPA

Has anyone successfully set up authentication and authorization between MacOS X and FreeIPA? An old revision of the FreeIPA documentation explains how to get it working in 10.4 and nothing in their ...
1
vote
0answers
50 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
1
vote
2answers
143 views

How can I log on my linux machine with my Active Directory credentials?

I'm on a windows computer RDPing to a RHEL 7 Server. I now want to be able to log into that server using my windows domain credentials(over SSH, preferably RDP too but not necessary). Here's what I ...
1
vote
1answer
122 views

Postfix Splitting Domain to Separate Mailstores using LDAP

I'm investigating a new mail setup to replace Exchange in our organization using Cyrus-IMAP, Postfix and Perdition IMAP proxy server. I'm running into issues dealing with sending emails to different ...
0
votes
1answer
40 views

FreeIPA krb5.conf has example.com entries

I have installed and reinstalled FreeIPA ipa-server-3.0.0-37.el6.x86_64 on a fully updated OEL 6.5 server a couple (3) times now and even if I destroy the existing /etc/krb5.conf file and reinstall ...
0
votes
1answer
102 views

389-ds and openldap client setup

I am working towards a proof concept: I have installed 389-dc on centos and enabled ssl via a self-signed certificate. (after a lot of reading) I can see the port 636 is listening on the centos ...
0
votes
0answers
36 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
0
votes
1answer
160 views

Limit access on Apache 2.4 to ldap group

I've upgraded from Ubuntu 12.04 LTS to 14.04 LTS, and suddenly, my Apache 2.4 (previous: Apache 2.2) now lets everybody in to my virtual host, which is unfortunate :-). What am I doing wrong? ...
0
votes
0answers
11 views

LDAP: Extend database using referral

My company uses an off-site LDAP server to handle authentication. I'm currently working on a local VPN for my branch that needs to use the off-site LDAP to check user's usernames and passwords, but I ...
1
vote
1answer
45 views

Are there any ldap proxy servers that can supplement the results from the main ldap server?

We have a central ldap server that authenticates and provides authorization information about users in our institution. I am looking for a LDAP Proxy that supplement the central LDAP server to support ...
-1
votes
2answers
101 views

RHEL 6.5 and LDAP

I am trying to connect our Active directory server to brand new RHEL 6.5 server. I want to authenticate users using AD credentials, but I want to restrict that only certain users can login, I don't ...
0
votes
0answers
141 views

Freenas & LDAP Multiple User Groups Not Taking Affect

we are using, Freenas 9.2.1.7 which communicates with LDAP to control file permission. We have Windows users in multiple groups. Some belong to Finance as their primary group and Admin as another ...
0
votes
1answer
59 views

phpldapadmin uidNumber stopped auto-updating on new user creation

We are having an issue that just started this morning. It seems our phpldapadmin (1.2.04) interface has stopped auto-incrementing the uidNumber on new user creation. Basically we are stuck at ...
0
votes
3answers
43 views

executing commands when user first logs in

So I use webmin to create ldap user. I then manually create public_html folder, and set quota for newly created home folder. Is there a way such that I can execute commands when user first logs in or ...
0
votes
0answers
60 views

Way to authenticate against Active Directory but without direct access to it?

So I'm in an interesting situation. I have an application that only supports authentication via LDAP on my network and client with active directory on their network. We have a secure VPN tunnel ...