Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
1answer
2k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
3
votes
2answers
41 views

When does an ACCOUNTDISABLE value in userAccountControl *not* correspond to a disabled mailbox?

We are querying a number (dozens) of LDAP servers (mostly Active Directory, but not exclusively) to determine which mailboxes are active, for the purpose of a mail gateway/forwarding application. We ...
2
votes
3answers
2k views

How avoid to write the password in the configuration file of SVN?

I am configuring the server SVN Collabnet (v1.5.6.1 for Solaris 10). I succeeded to use the ldap server for SVN authentication. How avoid to write a non encrypted password (XXXXX, here) in the ...
1
vote
0answers
15 views

Configuring openldap/PHP LDAP against “signed” LDAP connections with Active Directory

This may sound like a stupid question, and maybe it's already been answered, but I can't find a definitive answer anywhere, so I thought I'd ask. When someone enables "Domain controller: LDAP server ...
1
vote
0answers
79 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
0
votes
2answers
821 views

LDAP authentication apache 2.2 error 500

This is my LDAP configuration in Apache2.2.x Order deny,allow AuthType Basic AuthName "Test" AuthBasicProvider ldap AuthLDAPURL "ldap://dc1.domain.com:389/DC=domain,DC=com?sAMAccountName" ...
0
votes
1answer
992 views

cannot add ldap group to system local user

I have an ldap server with users and groups. Also, another server that is using the first one for the accounts. Users from ldap can login to the second server. I can add groups to the users in ldap. ...
1
vote
2answers
183 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
0
votes
0answers
54 views

nslcd fails to connect to ldap server

Hey guys I searched a bit on stackexchange but could find help for my problem. I'm trying to integrating LDAP authentication on a centos 7 client, but I can't get it working, and I can't find out ...
1
vote
1answer
1k views

Automounting home directories using LDAP in ArchLinux

I have managed to set up an OpenLDAP server that runs ArchLinux. I can now log in from the client (also ArchLinux) using the LDAP users. Now i want to mount the home directories over the network... I ...
1
vote
2answers
1k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
0
votes
1answer
102 views

ldapsearch returns result, but getent does not

I am setting up a fresh CentOS 7 server to and need to setup LDAP authentication i.e. there already exists a server that authenticates users, which we use for other GNU/Linux servers. For instance, ...
1
vote
0answers
18 views

PhpMyAdmin and auth_ldap plugin

I have a need to authenticate MySQL users from an LDAP source using the community edition of MySQL Server 5.5. The auth_ldap plugin has been compiled from source ...
0
votes
0answers
109 views

bugzilla authenticate with kerberos + ldap + SSO

I want to set up bugzilla with SSO, i cannot find any good documentation on how to do this. I have managed to set up ldap login which works fine. now I have set up kerberos on apache which works fine, ...
0
votes
1answer
25 views

JBoss - Not working the next day

We are having a problem, our JBoss EAP 6.3 cluster (2 nodes in domain mode + Apache) on a Centos OS, is not working after a period of inactivity (night). Its connected to an ldap. We do login, ...
0
votes
0answers
17 views

Apache HTTP Server LDAP authentication with netgroups

Is it possible to do a group authentication in Apache HTTP Server ("Require ldap-group") but instead of a normal (posix) ldap group to use a netgroup?
2
votes
1answer
3k views

Couldn't drop privileges: User is missing UID (see mail_uid setting)

I'm hoping I can use some help. I'm configuring dovecot_ldap, but I can't seem to be able to get dovecot to authenticate the ldap user. Below is my config and log info: hosts = 192.168.128.45:3268 ...
2
votes
1answer
75 views

openssl s_client ignoring custom root CA certificate in /usr/share/ca-certificates

I've set up an Active Directory server and configured LDAP-over-SSL, which works fine for machines on the domain, however because it's using certificates provisioned by AD's Certificate Services it ...
0
votes
1answer
3k views

TLS: hostname does not match CN in peer certificate

im trying to connect LDAP over StartTLS but Im stuck with an issue. I've followed step by step this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-tls and LDAP it's ...
-1
votes
3answers
49 views

ldap. What is binddn_passwd [closed]

I installed Nginx with LDAP, it works. But I can't understand the purpose of "binddn" and "binddn_passwd" ldap_server dc1 { url ...
5
votes
4answers
2k views

Login using Active Directory in Linux using Kerberos 5

I have a problem with setting up auth for users on Linux (Fedora Core 15 to be exact) using Active Directory on Windows 2008 Server with installed support for UNIX systems. I've successfully setup ...
0
votes
1answer
47 views

Freeradius LDAP through AP

I need help with a connection to RADIUS throught Access Point LevelOne EAP-110. I configured RADIUS + LDAP, tried with radiusd -X I get this message: radtest fsobarzo ********** localhost 100 ...
1
vote
1answer
188 views

WebLogic 10.3.2 LDAP Authentication failure after Domain Controller Patch MS14-066 (KB2992611)

I have configured a LDAP authenticator in my WebLogic 10.3.2 domain. Login worked until the domain controller was patched with MS14-066 (KB2992611). Domain Controller OS is Win Server2008R2 (x64). ...
1
vote
1answer
34 views

Using sssd ldap access filter DENY based on group?

I am currently using sssd.conf to only allow login for ldap users that are in a specific group. I would like to do the opposite and DENY login based on group membership of a user, while allowing all ...
0
votes
1answer
37 views

Does Active Directory alone is not enough to secure hadoop?

I am trying to secure Hadoop environment installed in windows. So basically I started to analyse how to secure a Unix-based hadoop cluster. Have gone through various links related to Kerberos and ...
1
vote
2answers
197 views

openldap timeout causes server to slow down

Running into an issue with openldap I've never had much success to tackle. We run openldap on another machine on its own vlan. Now if that ldap server dies anything that accesses uid or gid seems to ...
3
votes
1answer
29 views

Chasing referrals in Ldap

I'm currently improving a program featuring an ldap integration. This ldap integration is currently not able to handle ldap referrals. I do understand, that i will gen entries back that will hold the ...
0
votes
0answers
85 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
4
votes
1answer
568 views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
8
votes
6answers
7k views

Use LDAP for MySQL authentication?

We run a couple dozen different MySQL servers for our users. These use the free/Open Source version of MySQL, not the commercial version. Managing the Account Passwords on these servers is painful. ...
0
votes
1answer
32 views

LDAP passthrough authentication. testsaslauthd fails only with ldaps

I am trying to set up an OpenLDAP passthrough authentication to another server. When I do testsaslauthd with simple ldap:// the test works fine. When I try with ldaps:// it fails. ...
1
vote
0answers
104 views

Centos client authenticate against zentyal DC via ldap

I have a bit of a problem. 3 months ago we deployed a zentyal dc on my workplace because it was a good way of authenticating both windows, linux and mac against the same server. I got authentication ...
0
votes
1answer
4k views

Windows Server 2008 R2 Active Directory Web Services won't start with SSL

I am running a Windows 2008 R2 server as a PDC. I've installed the ADWS and I'm trying to get SSL support running but I'm experiencing the following error: Source: ADWS EventID: 1400 Active ...
0
votes
1answer
31 views

Only allow ldap users to connect to Inspircd

I've set up Inspircd for our IT shop and I'm trying to configure it to be closed except for LDAP users. I used ./configure --enable-extras=m_ldapauth.cpp and I configured the LDAP module in ...
1
vote
1answer
31 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
2
votes
1answer
49 views

Understanding LDAP traffic with ActiveDirectory

In looking at LDAP traffic through Wireshark I was curious to understand the conversation between the a windows client and Active Directory. Each conversation would vary to less than 80k bytes. But ...
0
votes
0answers
72 views

LDAP query to obtain distinguished name of a list of users

Hi im working on a migration process on which we are migrating users from one server to another domain controller. Right now I have a list of users I migrated, but I also got another of them I didnt. ...
1
vote
0answers
109 views

Ubuntu server + Samba + PAM + Apple OpenDirectory

Due to various reasons, we are looking to migrate our file servers from OS X Server 10.9 over to a true Samba implementation running on Ubuntu 14.04LTS. We have Ubuntu up and running with Samba ...
0
votes
0answers
57 views

openLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04

I have installed an ldap server in Ubuntu 12.04 using the tutorial https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-server-installation. First time everything went fine but had ...
0
votes
1answer
21 views

Does LDAP allow User Permission at Application Level?

Following is the scenario in the picture, We have one server at back and five other servers (running 5+ applications). We are developing LDAP instead of basic Database authentication rule in which we ...
1
vote
2answers
16 views

Are certificates from all Active Directory domain controllers needed on client for LDAPS?

I am setting up LDAPS on our AD servers to encrypt ldap authentication between the domain and a web server using an internal CA cert. The AD servers and web server are on one side of the firewall but ...
1
vote
1answer
84 views

ldap/AD proxy: Unable to bind using sAMAccountName, but last name and first name is able to bind

I am attempting to set up a pass-through proxy to Active Directory, using ldap on Debian Wheezy. The slapd.conf file is below. I can bind just find by using lastname, first name: ldapsearch -x -h ...
1
vote
1answer
26 views

Sync GApps users to LDAP (or just passwd file)

Do you know any way to sync users from GApps to LDAP? Or, maybe, is there any tool to sync GApps users with passwd file? I know, that Google has tool to sync users from LDAP to GApps... Why I need ...
-1
votes
1answer
42 views

How to setup a group profile based for terminal server via LDAP?

I have 4 terminal server "they are clustered together." All of them have the same specs and same configuration. and have Windows Server 2008 R2 installed on them. All users are using LDAP to log in. ...
0
votes
1answer
188 views

MacOS X 10.9 Mavericks Kerberos login w/ FreeIPA

Has anyone successfully set up authentication and authorization between MacOS X and FreeIPA? An old revision of the FreeIPA documentation explains how to get it working in 10.4 and nothing in their ...
4
votes
1answer
2k views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
0
votes
1answer
45 views

can't get “memberof” to work in my OpenLDAP config

I'm trying to set up OpenLDAP on a Debian 7.7 server. While basic auth seems to work, I can't get the "memberof" overlay to work. Being new to LDAP, all that memberof config seems overly complex to ...
0
votes
1answer
24 views

Samba: per-user ip restriction

We have a Samba server with LDAP authentication running. User privileges are controlled by UNIX groups and ACL and everything works just nicely. In the future we will allow users to connect via VPN ...
1
vote
1answer
486 views

How to determine the values for an LDAP bind to a Windows Server 2012 DC? [ldap_bind: Invalid Credentials (49)]

Sigh. I have been trying for nearly 6 hours to get my Gitlab deployment to authenticate via Windows Server 2012 Essentials Active Directory LDAP. I am running Ubuntu 14.04 for my Gitlab server. ...
1
vote
2answers
1k views

How do I use ldapsearch with a cross-realm ticket?

kinit user@DOMAIN.TLD klist -afe Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: user@DOMAIN.TLD Valid starting Expires Service principal 08/04/11 13:14:53 08/05/11 ...