Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

2
votes
1answer
3k views

ldap-authentication without sambaSamAccount on linux smb/cifs server (e.g. samba)

i'm currently running samba-3.5.6 on a debian/wheezy host to act as the fileserver for our department's w32-clients. authentication is done via OpenLDAP, where each user-dn has an ...
4
votes
4answers
4k views

Using slapcat to backup LDAP

I'm running an OpenLDAP directory on a Debian server, using the hdb backend. I've been wondering about backups, and did som reading on the net. Slapcat seems to be the way to go, but I keep seeing ...
5
votes
2answers
324 views

Distinguish Between Users and Service Accounts in Active Directory

Question Is there a "correct" / standard way to distinguish Service Accounts from User Accounts in AD? More Info In certain scenarios we have systems running under AD Credentials (i.e. under a ...
2
votes
1answer
2k views

Linux LDAP query to AD : missing group members

Two different Linux servers (CentOS & Ubuntu) on my LAN cannot see certain members of an AD group when performing an LDAP query. We're setting up a software appliance which can use LDAP for ...
2
votes
1answer
1k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
2
votes
2answers
2k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
0
votes
0answers
80 views

OwnCloud on Synology-NAS should use OpenDirectory-Server (LDAP)

I got a little problem: I want to configure LDAP with OwnCloud. The LDAP-Service is my OS X Open Directory-Server. OwnCloud runs on Synology DS214play. Well, I got the domain bureau.example.com ...
0
votes
1answer
1k views

ldapsearch returns result, but getent does not

I am setting up a fresh CentOS 7 server to and need to setup LDAP authentication i.e. there already exists a server that authenticates users, which we use for other GNU/Linux servers. For instance, ...
3
votes
1answer
111 views

GitLab Active Directory authentication: no results and no authentication

I'm trying to set up LDAP authentication with GitLab (version 7.12.2 installed on Ubuntu 14.04 amd64 on a VM, Omnibus set up). I've edited my gitlab.rb file to look like the following: ...
0
votes
1answer
79 views

LDAP Authentication on Apache denies valid credentials

I'm trying to link my LDAP with an Apache 2.4 server dedicated to my SVN repositories, so I use the Apache mods dav_svn and authnz_ldap. The LDAP works properly on its own. I could manage to bind the ...
4
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
1
vote
1answer
195 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
1
vote
2answers
1k views

cannot add ldap group to system local user

I have an ldap server with users and groups. Also, another server that is using the first one for the accounts. Users from ldap can login to the second server. I can add groups to the users in ldap. ...
1
vote
1answer
180 views

Groups with local and LDAP users

I'm exploring the idea of authenticating users on some RHEL 6.4 boxes using LDAP. I'm using sssd with an LDAP provider, and setting the nsswitch.conf file to use sss for passwd/shadow/group. How can ...
0
votes
0answers
20 views

Cant connect to newly installed LDAP server from ADSIEdit

I'm an LDAP newb learning by the seat of my pants. I installed AD LDS Role (LDAP) on a Windows Server 2012 R2 server. I created a partition with the context name CN=LDAPPartition, DC=subdomain, ...
0
votes
2answers
254 views

Linux-SSSD: always getting incorrect password when su'ing to domain users, but why?

I've built a new Linux environment at my work place. I've configured sssd and bound it to one of the Active Directory domains of the company. I can tell that the sssd is partially working, let me ...
0
votes
0answers
40 views

Unable to load Cert into OpenLDAP userCertificate attribute

I having troubles to add particular cert into userCertificate attribute (DER encoded certificate) in standard scheme of openldap-servers-2.4.39-3.el7.x86_64 running on Centos7 Slapd uses: include ...
-1
votes
1answer
6k views

How do I create a read only user for LDAP queries in Microsoft Active Directory for a PHP query program?

I want to create a user that can query LDAP on my Windows 2008 R2 Active Directory. It only works with Domain Admins. I read the Account Operators group will also work. Both these have write rights, ...
1
vote
1answer
42 views

A way to update the plain text password to ssha in Open ldap for 400K Users

Is there any command/extension available to update the "userPassword" attribute from a user object in LDAP server to SSHA hashed passsword from plain text? we found that users in LADP are stored in ...
0
votes
2answers
2k views

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is ...
0
votes
0answers
43 views

getent doesn't show netgroup from LDAP server

I followed this tutorial to migrate NIS to a new FreeBSD LDAP Server. However after I do all steps, in my test client, getent doesn't show netgroup normally from LDAP Server: $ getent netgroup ...
9
votes
5answers
12k views

Linux + Active directory authentication + only letting certain groups login

I have some linux boxes that use Windows Active Directory authentication, that works just fine (Samba + Winbind). What I would like to do now though is only allow certain people or certain groups to ...
0
votes
1answer
35 views

LDAP group access controls

I'm trying to set up our LDAP server so that members of the pwmadmins group can change people's passwords for them. To be more specific, we have PWM for Tomcat set up and are trying to let pwmadmins ...
0
votes
0answers
20 views

What does Samba need from LDAP for a valid account?

I have inherited an OpenLDAP system, coupled to a FreeNAS and it is quite a headache to create users all the time. I just want to create a user that can access its own homes share. I have a working ...
0
votes
0answers
39 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
0
votes
1answer
28 views

Populate “Lab” Domain via LDAP

I have a lab environment where I need to own Active Directory Services/DNS/DHCP/etc at work. I have a pseudo "production" environment in this lab that has everything from vCenters to Jenkins to VDI ...
0
votes
0answers
32 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
3
votes
2answers
5k views

Override LDAP shell

I have a LDAP server and a predefined shell (bash) set in it. But there are some machine on which I want a different shell to be used whenever user login to that instead of the shell stored in LDAP. ...
1
vote
1answer
29 views

Adding more than one DIT

I have posted this question in dba.stackexchange.com but it is considered off-topic and people suggest that I should post it here so I am posting it here. I have an openldap server up and running on ...
2
votes
0answers
43 views

what is the the difference between all the NSS caching daemons? [closed]

I would like to see a comparison between nscd (part of glibc), unscd, nsscache, sssd and nss-pam-ldapd. Those are all the alternatives to nscd that i could find in Debian... Our setup is that we ...
0
votes
1answer
29 views

How to configure 389ds LDAP for idle user timeout

For my application till now i was using Java code for timing out the inactive user session from application. But for the purpose of upgrading it, want to use 389ds LDAP (my application is already ...
0
votes
2answers
89 views

pam_ldap user password changes using rootbinddn on Debian Jessie

When configuring pam_ldap on Debian Jessie, end user password changes are utilizing the rootbinddn, circumventing OpenLDAP's ppolicy overlay. This is allowing end users to change their passwords ...
1
vote
3answers
2k views

Is anyone using access.conf and netgroup authentication with sssd?

I want to be able to authenticate users (via ssh) to specific groups of hosts based on the users' LDAP netgroup membership. The LDAP server is dsee7. The distro is OEL 6.5 with openldap as the client. ...
-1
votes
1answer
55 views

How Do I Configure ApacheDS LDAP Like AD

I am trying to set up Apache DS to simulate my company Active Directory locally. I have created a new partition to match. I then created an ldif file to add users and groups. e.g. ##Create the root ...
1
vote
1answer
172 views

Openvas ldap authentication configuration

I'm stuck in the process of Openvas ldap authentication configuration. I use the following openvas components version from upstream: openvas libraries - 8.0.3 openvas manager - 6.0.3 (both ...
0
votes
2answers
36 views

Apache LDAPS connection to AD not working

I am trying to set up LDAPS with apache, so that users logging in to my site will be authenticated against my AD, and that this auth traffic is itself encrypted. Apache is version 2.2.15 running on ...
2
votes
4answers
4k views

LDAP Migration to new LDAP Server

I need to move my ldap server to a newer one. It is currently running on Ubuntu 7.04 server. Is there a way of backing up this server, installing a fresh openldap server on a newer Ubuntu 11.04 ...
0
votes
1answer
40 views

AD keeps local accounts from timing out?

Currently, our customer requirements say that after 60 days, the local accounts on our devices are supposed to be locked. When AD is being implemented, the local accounts are not being used (everyone ...
0
votes
1answer
130 views

Migration of LDAP and GOsa-config to new server

I have a running LDAP-server (using Ubuntu 12.04) with GOsa installed on it. Is there a way to migrate the whole database including the GOsa-config to a new server (Ubuntu 14.04)? I tried exporting ...
2
votes
1answer
4k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
1
vote
1answer
25 views

What files get modified by the authconfig?

I am trying to identify which files are edited with the following command, but can not find. authconfig --enablemd5 --enableshadow --enablecache --enablelocauthorize --enableldap --enableldapauth ...
2
votes
3answers
900 views

LDAP and pam without binddn and anonymous access

I am working in a large company and can use its central read-only LDAP server remotely. The LDAP server does not allow anonymous binding. In order to use this server for authentication of the users on ...
0
votes
1answer
57 views

Why is LDAP using servers other than those specified?

I have a linux system that is using Active Directory (2012) for LDAP lookups of users and groups. It's in a network that is connected to our main site by VPN. When the VPN goes down, all ldap ...
0
votes
2answers
64 views

Where are LDAP user's home stored

I have been goolging around LDAP these days. And I'm trying to deploy a central authentication server for quite a few ubuntu servers. After all the research, one question come to my mind. Where are ...
0
votes
1answer
2k views

Disable LDAP service in CentOS 6.3

What command needed to disable LDAP service in CentOS 6.3. I tried: authconfig --disableldap but it doesn't work. I am trying to run ISC-DHCP in my machine but it always shows Not searching ...
0
votes
1answer
40 views

pam google authenticator can't compute location of secret file

I've installed Google Authentication on all the machines in our system, and while the authentication during login works fine, our machines are producing logs that have this line over and over: ...
0
votes
0answers
117 views

How to let a user remove the pwdAccountLockedTime attribute without being an admin in ApacheDS?

I am probably going about this all wrong but there is no "Look stupid, do this..." level documentation out there that I have found. I have Apache DS v2.0.0 I have users I want some users (who I add ...
3
votes
2answers
253 views

Strange PATH when use sudoers via ldap

I have a working LDAP authentication environment. LDAP server is on ubuntu 12.04 machine while client are all centos 6.4 machines. Recently I configure sudoers in LDAP following this article ...
0
votes
0answers
63 views

LDAP Query Of All Users In Various Groups In A Specific ActiveDirectory OU

I need to configure Atlassian Crowd to query all the users in my AD server that are in various groups in a top-level OU. The DN for the OU is "OU=Atlassian,DC=NNNN,DC=com". The various groups would ...
-1
votes
2answers
33 views

Checking ldapsearch and ldapsearch -h 127.0.0.1 -Z -x in nagios [closed]

Basically I just want to ensure whether ldapsearch and ldapsearch -h 127.0.0.1 -Z -x I did some check_ldap command and it's fine but I specially want to verify ldapsearch and ldapsearch -h ...