Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
1answer
2k views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by dn="cn=...
0
votes
1answer
9k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
3
votes
2answers
1k views

LDAP authentication with Graphite

I have setup Graphite Web 0.9.9 on CentOS 6.2 x86_64 at EC2 and I'm trying to get LDAP authentication to work against 389 Directory Server. I have configured local_settings.py with: USE_LDAP_AUTH ...
0
votes
2answers
5k views

getent passwd dosen't show users of LDAP server

I have made the LDAP authentification configurations and I try to authenticate to the LDAP server on Ubuntu 14.04 TLS. This is the file nsswitch.conf : # /etc/nsswitch.conf # # Example configuration ...
6
votes
1answer
11k views

How to manage groups and users in Jenkins

I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right. I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the ...
0
votes
0answers
29 views

LDAP modify doesn't change anything

Got an issue with Active Directory LDAP and setting passwords. I'm connected through the LDAPS protocol to my AD server, and binding is successful. When attempting to set a user password, no error is ...
0
votes
0answers
19 views

How to change the 'olcAccess' values of olcDatabase in OpenLDAP via spring-ldap?

I'm a new person of using spring-ldap-2.0.4 in order to communicate openldap, and change olcAccess values of olcDatabase via spring LDAP interface without using LDIF, I have met a difficult problem, ...
0
votes
0answers
17 views

Debian Cyrus SASL LDAP Auth fails

I am in the middle of an emergency server transfer from a server I did not setup to a new piece of hardware. I am running the newest Debian with Postfix and Cyrus. I have copied over the majority of ...
1
vote
1answer
7k views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
1
vote
1answer
71 views

sAMAccountName requires DOMAIN\ to authenticate

I am trying to ingtegrate SLES with Windows Active directory server for authentication purposes. We need to use sAMAccountName as login name but its unable to bind if we didn't give DOMAIN/...
1
vote
2answers
1k views

LDAP authentication apache 2.2 error 500

This is my LDAP configuration in Apache2.2.x Order deny,allow AuthType Basic AuthName "Test" AuthBasicProvider ldap AuthLDAPURL "ldap://dc1.domain.com:389/DC=domain,DC=com?sAMAccountName" ...
0
votes
2answers
2k views

ldap query with nested group

I try to build a ldap query to MS Active Directory. I found that there is a LDAP_MATCHING_RULE_IN_CHAIN type to do so. Which results in the follow syntax: (&(sAMAccountName=Benna)(memberof:1.2....
1
vote
1answer
40 views

How to only allow users and/or groups access to certain client machines that are connected to an openldap server?

I would really like to figure out how I can allow users and/or groups access to certain client machines that are all connected to an OpenLDAP server. I would like to do this whether the user is ...
1
vote
3answers
3k views

Is anyone using access.conf and netgroup authentication with sssd?

I want to be able to authenticate users (via ssh) to specific groups of hosts based on the users' LDAP netgroup membership. The LDAP server is dsee7. The distro is OEL 6.5 with openldap as the client. ...
24
votes
5answers
16k views

Common wisdom about Active Directory authentication for Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for Linux servers and modern Windows Server operating systems (CentOS/RHEL-focused)? Over the years since my first ...
0
votes
0answers
35 views

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in ...
0
votes
1answer
2k views

LDAP client on Ubuntu 14.04 LTS server

I am setting up an LDAP client on Ubuntu 14.04 server and can't seem to be able to logon. I see an error in the auth.log that says unknown user. I installed packages: ldap-auth-client ldap-auth-...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
0
votes
1answer
1k views

SSSD & LDAP authentication

I’m currently working on deploying openldap and SSSD for authentication. When I try to id a user that is stored within ldap I get the response no such user. The user has been added to LDAP correctly ...
0
votes
0answers
17 views

Gitlab ldap user filter

I need to filter out some groups from corporate ldap server to make gitlab available to most people via ldap auth. I created this filter: gitlab_rails['ldap_user_filter'] = '(&(objectCategory=...
0
votes
1answer
60 views

Forcing OpenLDAP connections to use STARTTLS not allowing user to login

I have a basic OpenLDAP server running on Ubuntu 16.04LTS which authenticates users perfectly fine but I really wanted to make it more secure so I decided to use STARTTLS and How To Encrypt OpenLDAP ...
0
votes
2answers
137 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
83 views

Suddenly i can not join Windows clients to Samba PDC anymore

Some years ago i configured a Primary Domain Controller through Samba and LDAP (slapd) on an Ubuntu machine (13.10) at 192.168.69.203 which should be accessible by the NetBIOS name SRV1. I must note i ...
0
votes
0answers
15 views

LDAP filter alphanumeric

Does LDAP (precisely Active Directory) allow to filter out only alpha-numeric characters? Client app crashes on some non-printable characters (like vertical tab U+000B), when trying to get AD groups ...
1
vote
0answers
11 views

LDAP User switches to local user mid session

So, what's happening is I have an LDAP server and two clients: LDAP Server = Ubuntu 16.04 Headless Client 1 = Ubuntu Gnome 16.04 Client 2 = Ubuntu 16.04 (XFCE, Gnome & Unity) I have it all ...
-1
votes
2answers
475 views

Set up LDAP on Redmine with Zimbra LDAP

I'm trying to enable LDAP authentication for a Redmine installation. My LDAP Server is the one provided by Zimbra, and I'm perfectly sure that it works good (I use LDAP also for ownCloud server, in ...
0
votes
0answers
55 views

LDAP PAM authentication: endless password change loop

I'm setting up LDAP authentication in a 'toy' environment - i.e. the LDAP server and client are on the same system, and the setup is quite simple. The system which I'm setting it up on is an up-to-...
0
votes
0answers
21 views

syncing users across docker containers

I am wondering if there is a common way to sync user accounts between docker containers. In my specific use case i would like to have a container serving a directory via netatalk (afp), another ...
1
vote
2answers
281 views

Where are the attributes for room mailbox stored?

I'm using Exchange 2007 and I've created a room mailbox. I want to know where the settings of the room mailbox are stored? What are the attributes used to store room mailbox information? Are they ...
1
vote
1answer
48 views

[Solved]Internal Error 500 occur when use apache 2.4 with LDAP Authetication

I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server. Well ...
2
votes
1answer
50 views

Internal Error 500 appear when use apache 2.4 with LDAP Authetication

I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server. Well ...
0
votes
0answers
15 views

unable to delete entry.what am i missing?

Newbie question, There are 2 ldap servers i have inherited. I need to delete a user which keeps re-spawning. I was told that this is a syncrepl setup with another node. What do i need to do in order ...
5
votes
1answer
133 views

LDAP not preventing disabled users from authenticating

I have an interesting situation where we have the exact same application running in a "Development" environment and another in a "Testing" environment behaving differently when authenticating with AD ...
1
vote
0answers
11 views

rfc2307bis LDAP schema: ipNetmaskNumber lookup for an ipHost object

I'm using Openldap for IAM, and consider using it also as a configuration management backend. The rfc2307bis schema has an ipHost class, which allows for ipHostNumber attribute, but not for the ...
3
votes
0answers
952 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: apple-...
1
vote
2answers
408 views

Why is the user@domain and cn=user,dc=domain not equivalent?

I've setup a Simple AD on AWS that I can finally authenticate against with LDAP. I don't understand why I was unable to use dc= which is widely suggested everywhere but am able to use @domain. ...
1
vote
0answers
16 views

LDAP attribute for image/png

Like the jpegPhoto-attribute (0.9.2342.19200300.100.1.60) of inetOrgPerson for the mime-type image/jpeg - I'm searching a LDAP-attribute for image/png. Does such a pngPhoto or pngImage exists?
0
votes
1answer
92 views

how to control ldap users access using groupdn?

i am using openldap, nslcd and nss-pam-ldapd. i want to restrict users login to ldap client. i have configured this in centos6.5 without any problem using groupdn. but in centos 7, there is no ...
4
votes
1answer
62 views

openldap user can't login when using tcsh

I would appreciate any help in the following problem: I have an openladp (2.3.39) server (Fedora 8) which authenticates users from other ldap clients (various versions of Fedora). On my attempt to ...
2
votes
1answer
54 views

Bad search filter - postfix, OpenLDAP, Saslauthd

I am trying to setup a mail server on Debian Jessie and have come across a problem that's doing my head in. When trying to access OpenLDAP through saslauthd via the command testsaslauthd -u user1 -p ...
2
votes
4answers
681 views

Is it possible to have non-replicated data on an LDAP consumer?

I've read all the available documentation, the Mastering OpenLDAP book, and like a zillion mail-list posts but I haven't found a way to make such scenario possible. I see several use cases for this ...
2
votes
1answer
919 views

ldap prevent brute force

The title should be self explanatory but more in detail I'm looking for a way to protect the ldap from LAN brute force attacks. It would be fine to prevent password guessing by locking a password for ...
0
votes
1answer
118 views

Server 2012 stopped accepting computers joining to our domain with error 53: the network path was not found

We have Windows Server 2012 R2 Standard as our DC. Several workstations were added to our domain successfully. But then (I cannot determine what exactly could be a show-stopper) it stopped accepting ...
0
votes
0answers
14 views

retrieving user information from ldap server using a client

I have setup an ldap server on a centos 7 and added a couple of ldapusers 1 and 2 to it. ldapsearch for users does return all the info. Both the server and the client are virtual machines on the ...
1
vote
2answers
3k views

How to determine the values for an LDAP bind to a Windows Server 2012 DC? [Gitlab Omnibus 7.0.0; ldap_bind: Invalid Credentials (49)]

EDIT: This question has gotten a lot of views, and I never really came back and provided a precise, step-by-step solution. So I came back 18 months later and did that. This solution works for simple ...
0
votes
5answers
2k views

Sync non-AD LDAP instance with Office365 / Azure AD

We have a non-AD LDAP environment that we wish to sync our with our o365 Azure AD directory. Is this currently possible with DirSync AAD Sync or similar?
3
votes
1answer
78 views

Error Creating OU: Name is Already In Use

I have an OU structure for computers that looks like this: Workstations |-- Building | |-- Floor, Department, or Approximate Location ... I want to create a child OU called "3 North" in ...
0
votes
0answers
14 views

error: found a non-fatal phpLDAPAdmin Bug

i just install openldap with phpldapadmin. but when i go to monitor menu i found: is this actually something can be solved? anyone ever solve this issue before? Thanks, AnD
10
votes
4answers
10k views

Easiest way to set up LDAP for dev testing

I'm a developer for a product that integrates with LDAP for authentication. I need to set up a directory that I can test against. I'm not an expert with LDAP. To help ease the learning curve it'd be ...
4
votes
4answers
5k views

PHP configure not finding LDAP header libraries

I installed the LDAP development headers: apt-get install libldb-dev This added a few ldap headers: root@crunchbang:/usr/include# ls -la ldap* -rw-r--r-- 1 root root 9466 Apr 23 2013 ldap_cdefs.h ...