Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
40 views

Samba create new user error: bailing out

After upgrade Ubuntu version to 12.04, an error happens, when I want to create a new user through Samba (which is connected to the ldap server): $ pdbedit -af "New User" newuser Error message: ...
3
votes
1answer
51 views

Domain Controller returns LDAP Referral for it's own domain

I have 2 domains, each with 2 Domain Controllers: company.local ad.company.com.au Both domains are in the same forest and have a bi-direction trust setup. We're migrating to the ad.company.com.au ...
5
votes
2answers
692 views

Is it generally acceptable to expose LDAP in read only mode to the Internet?

I need to support Mac clients who need to access a LDAP server to locate SMIME keys. Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
1
vote
1answer
24 views

Can Active Directory issue a LDAP redirect to another LDAP server

I have several independent LDAP servers, controlled by different entities that allow anonymous access. I would like AD to tell an LDAP query to use a different server... like recursive DNS. Is ...
1
vote
0answers
24 views

Creating users in 389 Directory Server: Autofill UID & GID

I have a 389 Directory Server cluster as ldap. I can create users using 389 management console but... When Selecting "Posix User" tab and checking "Enable Posix User Attributes" is necessary manually ...
2
votes
1answer
301 views

Unable to connect QNAP NAS ldap to Domino server

We've just bought a QNAP 419 NAS to the office and for simplicity I'd like to authenticate using LDAP from our Domino server. qnap ldap auth demands the following settings: Base DN Root DN ...
0
votes
2answers
81 views

Liferay and export LDAP account

I have this problem: I have enabled Liferay to import and export users from/to OpenLDAP server. When I create a user in Liferay I obtain this page: So, I have create a new user and Liferay has ...
0
votes
1answer
19 views

OpenBSD with LDAP authentication returning invalid user

I am trying to set up an OpenBSD box to use a LDAP server for authentication. I am following the directions at http://www.obfuscurity.com/2009/08/OpenBSD-as-an-LDAP-Client and for the most part they ...
1
vote
0answers
37 views

Why can a local root turn into any LDAP user?

I know this has been asked here before, but I am not satisfied with the answers and don't know if it's ok to revive and hijack an older question. We have workstations that authenticate users on an ...
10
votes
4answers
8k views

Does Nginx support LDAP authentication?

Hey Does nginx support ldap authentication? I have just migrated from apache and would like to move all of my authentications which are based on openldap and mod_auth_ldap to nginx. Let me know if ...
0
votes
0answers
43 views

Root denied login if networking down (LDAP environment)

I would like to know why I can't login as root (ssh, sudo or su -) when my LDAP is down or when I have some outage in my network. How to reproduce the problem: - Just change your DNS to something ...
0
votes
1answer
48 views

Can't synchronize the user group in TeamCity

0 user and group synchronized Below are my ldap log and settings. All I want to do is: 1. map the AD group "ccusers" to a group in TeamCity and create all users in that group. 2. Or add all users in ...
0
votes
1answer
77 views

LDAP throws Event ID 2887 warnings even after enabling “require signing”

I am running an AD LDS directory and, ever since configuring it, I have been seeing 2887 warning messages, so I have decided to follow this guide to have the server require LDAP signing. The problem ...
0
votes
0answers
21 views

ejabberd + ldap_filter (uidNumber greater than) is not working

I have configuration ejabberd + ldap users which works fine, unless I try to filter only users with uid greater than 1000. =INFO REPORT==== 2014-02-26 09:52:22 === D(<0.268.0>:eldap:697) : ...
-1
votes
1answer
43 views

How do I create a read only user for LDAP queries in Microsoft Active Directory?

I want to create a user that can query LDAP on my Windows 2008 R2 Active Directory. It only works with Domain Admins. I read the Account Operators group will also work. Both these have write ...
1
vote
1answer
53 views

ldap fail after ubuntu upgrade to 12.04

I have upgraded ubuntu from 10.4 to 12.04. After it's done, ldap service is stopped and failed to start again! Now none of other services function! :( I checked error logs and found this: Feb 22 ...
0
votes
1answer
21 views

Is it possible to configure a Linux server to use more than one LDAP target?

We have an environment that we are tasked with managing while also giving access to projects that run the applications on the servers. Some of those projects have stood up LDAP for authenticating ...
1
vote
0answers
24 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
0
votes
2answers
39 views

Can't login to LDAP with current Windows user

I'm trying to connect to AD server with various tools under Windows. If I provide my domain\username and password, I have no problems If I don't provide credentials, I do connect, but I have very ...
0
votes
0answers
28 views

Get only ldap user or group using getent command

I need to write an audit check, where I have to make sure users are able to login to ldap client machines with ldap credentials over ssh. Either I am going to run bash script in a for loop, or I ...
2
votes
2answers
36 views

LDAP Breaking when moving user

Since I've been working at this company we've had a very basic AD setup. Users go in the user CN and there is a few OUs for computers, like desktops and servers. Recently I've been planning a more ...
3
votes
1answer
53 views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
1
vote
1answer
89 views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
3
votes
1answer
121 views

How to add more multiple CA certificates to LDAP client

I'm having trouble with adding a 2nd LDAP server into the client configuration. If I configure the client to use just either one, it works fine. So I'm sure both CA certificates work. I have tried ...
0
votes
0answers
58 views

Apache mod_authnz_ldap Error 500

Ubuntu 12.04 LTS Apache/2.2.22 http://server/lightsquid/ gives window with username/password request, then «500 Internal Server Error». Error rises whatever username and password were used: valid or ...
3
votes
3answers
5k views

phpldapadmin installation

I have an LDAP server runs on: ldap://129.168.0.117:389 or ldap://roshd.org:389 where roshd.org = 129.168.0.117 I have this configuration in config.php in phpldapadmin: $servers = new Datastore(); ...
3
votes
0answers
205 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
0
votes
1answer
96 views

apache mod_authnz_ldap - 500 error when blank username used

(should be tagged mod-authnz-ldap, but not enough rep) I've got Apache 2.4 running on Windows Server 2012. I've got mod_authnz_ldap working except if users put a blank username. This results in a ...
2
votes
1answer
2k views

Kerberos broken when upgrading Snow Leopard Server to Mountain Lion

I work for a small company where there's no dedicated system admin. I was tasked with upgrading our file and calendar server to 10.8, which I did by upgrading the OS then installing the server tools ...
0
votes
0answers
72 views

Dovecot won't work with quota value from LDAP that include the “S” appended for size?

I have a courier-imap IMAP system backed by LDAP holding the user data. I would like to convert IMAP to dovecot, and I am able to successfully configure basic login; that is working correctly. But I ...
1
vote
1answer
163 views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
1answer
148 views

LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS

SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN tl;dr: We uses a self-signed CA and we ...
2
votes
2answers
59 views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
2
votes
0answers
100 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
0
votes
0answers
14 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
19 views

What is the purpose of the OU in authLDAPURL and what (if anything) does it do to filter authentication requests?

I'm trying to set up authentication for my Apache web server using Active Directory. I do not want to limit users based on groups or any other method other than being a valid user. I have users who ...
0
votes
0answers
23 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
1answer
22 views

Linux map usernames

We had an LDAP server which had our own groups and usernames on. Now we are moving to a centrally managed LDAP server. The users now have a different username but still have a home folder mapped to ...
1
vote
1answer
85 views

Setting up a mail server using postfix, dovecot, mailman and ldap

I don't really have much experience with mail servers so forgive me if some of my terminology is off. First of all, here's what I'm trying to do: get user information using ldap (postfix?) ...
1
vote
1answer
47 views

Lotus Domino Server Integrated with corporate ldap is fetching garbage values

I am using Directory Assistance (da.nsf) to use our corporate ldap for authentication and authorization. Also for sending emails. While sending emails, i will just give the common name and the server ...
0
votes
0answers
47 views

QNAP LDAP server cannot change primary user group

We are setting up a new QNAP server in our office. We have set up NFS and LDAP to share users and files in a linux only network. The LDAP is giving us some trouble. As the default user group Domain ...
1
vote
2answers
558 views

LINUX LDAP Domain with roaming profiles

I would like to set up a linux LDAP domain using Ubuutu as my client side. Currently i have an LDAP server setup and users can authenticate through the LDAP Server. But how to create to roaming ...
-1
votes
2answers
821 views

Authenticat users with LDAP and Apache 2.4

i would like to setup a LDAP Authentication with Apache 2.4. LDAP Sever is a Windows 2008. My .htaccess looks like: AuthType Basic AuthName "Login" AuthBasicProvider ldap AuthLDAPBindDN ...
0
votes
0answers
63 views

Change local password as root after configuring for MS-AD Kerberos+LDAP

I have followed this excelent post to configure Kerberos + LDAP: http://koo.fi/blog/2013/01/06/ubuntu-12-04-active-directory-authentication/ However, there are some local users used for services. When ...
0
votes
3answers
447 views

root cannot access user's home folder shared via NFS

We have a local server that exports an NFS share, used as parent directory for Linux home folders in the network. The users authenticate via LDAP (running on the same server). Authentication works ...
0
votes
1answer
61 views

Jenkins: LDAP username/email lookup

My Jenkins LDAP configuration works fine for the user login and user details. The user John Doe can login with his username jdoe and his password. His initial user information (user/jdoe/configure) ...
2
votes
0answers
47 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
1
vote
1answer
68 views

linux ldap authentication set gid to uid

I'm setting up ldap authentication with sssd for a linux server. everything works fine. however, the users from the ldap server have a default group User. which is, uid=10001 (larry), gid= 20001 ...
0
votes
2answers
88 views

Accidentally disabled the administrator account on IPA server

I'm running ipa-server on Centos 6. I was going through the users disabling accounts and accidentally disabled the "administrator" account. Now I have no access to do anything. Is there any way to ...
2
votes
1answer
32 views

OpenVPN LDAP plugin error

I'm getting this error after (what I think is) a successful LDAP authentication: No remote address supplied to OpenVPN LDAP Plugin (OPENVPN_PLUGIN_CLIENT_CONNECT). What does this error mean? From ...