Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
0answers
32 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
0
votes
0answers
31 views

User-Password is not sent with RADIUS request

I am trying to get my router wifi to authenticate the username and password from an LDAP database on my ubuntu server. I followed the steps mentioned in this tutorial: ...
0
votes
2answers
1k views

LDAP authentication apache 2.2 error 500

This is my LDAP configuration in Apache2.2.x Order deny,allow AuthType Basic AuthName "Test" AuthBasicProvider ldap AuthLDAPURL "ldap://dc1.domain.com:389/DC=domain,DC=com?sAMAccountName" ...
0
votes
1answer
2k views

LDAP client on Ubuntu 14.04 LTS server

I am setting up an LDAP client on Ubuntu 14.04 server and can't seem to be able to logon. I see an error in the auth.log that says unknown user. I installed packages: ldap-auth-client ...
0
votes
0answers
17 views

Needed permissions to read msDS-ReplLinkFailures attribute

I'm using powershell to get the value of msDS-ReplLinkFailures attribute like this: Get-ADRootDSE -Properties msDS-ReplLinkFailures This works ok if the current user is member of domain's ...
0
votes
0answers
41 views

horde 5 ldap/samba4 authentication fails “Bad search filter Parameters”

I am trying to authenticate my horde users against my samba4 active directory but I am always getting a "Bad search filter Parameters" error. Unfortunately I am not able to identify the exact problem ...
0
votes
2answers
191 views

Integrate Squid Kerberos auth and Squidguard ldapusersearch into AD

I'm having trouble with Squid Kerberos auth and the Squidguard ldapusersearch that I use to apply ACLs by Active Directory groups membership. The problem is : Squid and Squidguard see my user as : ...
2
votes
2answers
2k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
0
votes
1answer
27 views

OpenLDAP Filtering Users that are part of Groups of Groups

LDAP Configuration: MemberOf Overlay is enabled Users are part of an organizationalUnit called People. Each user is a "memberOf" a role. For example, a user in their role at a company is a ...
0
votes
1answer
3k views

LDAP+SAMBA login issues

I'm on a clean Ubuntu 13.10 install and I've just installed and configured openldap+samba. While I'm trying to configure a domain controller plus user shares. In order to ease LDAP management I've ...
1
vote
1answer
7k views

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 ...
0
votes
2answers
2k views

Where do I specify the Bind DN and password for sss+ldap?

I'm trying sssd for LDAP authentication, and while it can show user IDs with the id command, getent group and getent passwd do not show LDAP names, and while I can chown files to ldap users, they ls ...
1
vote
2answers
1k views

Getting list of users indirectly members of an AD group through LDAP

I'm having a bit of a problem with LDAP search that should specify whether a user is a member of a given AD group or not (recursively). Basically, what I'm doing is issue a LDAP search with the ...
0
votes
0answers
7 views

Ambari log is filled with LdapTemplate warning

I'm running: # ambari-server --version 2.1.0 Specifically, I'm running IBM Open Platform for Hadoop 4.1 FP2. I configured Ambari to use LDAP for authentication, and the LDAP authentication is ...
0
votes
0answers
16 views

Webmin authentication against LDAP

I want ultimately to authenticate Webmin user against one LDAP. I have read the page How can I make a Webmin user always use the same password as Unix?. According to this explanation, the ...
1
vote
0answers
18 views

Why is LDAP “memberUid” restricted to ascii, but “uid” is not?

I'm getting this error from ApacheDS (2.0.0-M21): ERR_04447_CANNOT_NORMALIZE_VALUE Cannot normalize the wrapped value ERR_04473_NOT_VALID_VALUE Not a valid value 'gu\C3\AApes' for the AttributeType ...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
0
votes
1answer
1k views

LDAP port forwarding or proxy

I am trying to find a way to locally access an OID server (via LDAP) that is usually only accessible from my app's staging server. I have login credentials for the staging box. I do not have login ...
9
votes
3answers
22k views

Some systems cannot connect to ldap via ldaps, but others can, is it the wildcard cert?

When trying to make ldaps connections to my Novel eDirectory 8.8 server, sometimes I have to put TLS_REQCERT never in the client servers ldap.conf file. Obviously, this is a bad idea. The command I ...
3
votes
1answer
4k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
1
vote
2answers
3k views

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is ...
-1
votes
1answer
7 views

Unable to set ADS security on Samba DC

I've been trying to set my security as ADS for my Samba DC. Unfortunately, whenever I do, the LDAP server can no longer be found using net ads info. Below is my current smb.conf. [global] workgroup = ...
1
vote
1answer
22 views

Howto setup LDAP/Linux so when a user is deleted, its bash user session is immediately closed

Is there a way to setup OpenLDAP on a Linux (Redhat/CentOS) system so that when a user is removed from the LDAP server or he/she is removed from the "login is authorized" group, all his/her open ...
0
votes
0answers
23 views

LDAP connection string issue

Sir! please help I have a connection string extracted like this /o=First/ou=Exchange Administrative Group (EDABMHF23SPDLT)/cn=Recipients/cn=852edeadbeef354a4c8000ebaae09fdd01-Robert It doesn't ...
0
votes
1answer
22 views

ldap_add: Invalid DN syntax (34)

I am configuring my LDAP for roaming profiles using autofs, but when I run this command ldapadd -x -D "cn=admin,dc=example,dc=com" -W -f automount.ldif I get this error message ldap_add: Invalid ...
5
votes
3answers
156 views

How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?

I'm setting up OpenLDAP slapd on Ubuntu 14.04 Trusty Tahr. I want certain instances (replication etc.) that aren't users to be able to login via SASL using DIGEST-MD5 mechanism. Unlike users, they ...
0
votes
0answers
23 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
28 views

issues with svnserve using ldap and sasl

I am trying to setup SVN's svnserve server using ldap and sasl to authenticate users and to encrypt data but I come across the following issues: /var/log/messages error or warning when I execute ...
1
vote
1answer
74 views

Configurable ftp-proxy with LDAP authentication

I am looking for solution for following situation. I have bunch of ftp account (many servers) and many users. They need access to that servers. I don't want to give every user passwords to every ...
1
vote
1answer
67 views

Is LDAP used by Active Directory for anything if I only use Kerberos for authentication?

In my windows only domain, Kerberos is used for all authentication. The domain controllers I understand replicate & authenticate using RPC. Is LDAP used for anything else? Should I close the ...
5
votes
3answers
351 views

When setting up OpenLDAP for the first time, what are some things to keep in mind?

I'm in the process of reading up on documentation and setting up OpenLDAP to handle authentication throughout my network, for email, web services, user accounts, any anything else that I could throw ...
1
vote
0answers
39 views

Allow self password change using LDAP(s) with Samba4

I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ ...
1
vote
1answer
107 views

LDAP auth successful with additional characters

I have a service which uses a LDAP directory (anonymous bind) to get the users and their passwords in order to perform the authentication. The problem is that I've realized that I can login with a ...
1
vote
0answers
26 views

LDAP at IBM XIV

I have problem with authenticating users over LDAP (Active Directory) Windows 2008 R2 on IBM XIV. After troubleshooting I've find out problems caused by polish letters in CommonName ...
2
votes
1answer
1k views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
3
votes
1answer
54 views

Rabbitmq Won't Talk to Active Directory

I have a rabbitmq server that I need to hook up to AD. Configuration is set using puppet rabbitmq module, with some minor manual changes (log level): % This file managed by Puppet % Template Path: ...
0
votes
0answers
22 views

Freeradius not expanding “Calling-Station-Id” attribute in LDAP search

I'm trying to do PEAP-MSCHAPv2, then do a LDAP search to verify the user is in the correct group AND see if there MAC address is under a otherLoginWorkstation entry. If you look in the logs, ...
0
votes
0answers
11 views

Can one safely migrate a non-LDAP Gitlab to an LDAP one?

I have two Gitlab installations. One uses Gitlab's internal authentication system and the other (newer) one uses LDAP. I now want to migrate everything from the old one to the new one. Both Gitlabs ...
1
vote
1answer
41 views

OpenLDAP - How to restrict Debian login to specific groups (posixGroup)?

I'm trying to restrict login to specific LDAP groups in Debian 8. The system is configured to use OpenLDAP (PAM) as authentication method. My goal is to configure the system to allow all local users ...
0
votes
1answer
29 views

Grant Kerberos Ticket on successfull authentication against third party password store

I am currently building a system where I would like to deploy Kerberos. However my external constraints on the user management do not allow me to authenticate the users against Kerberos itself. I do ...
0
votes
0answers
37 views

Why I cannot find ldap.conf file when I want to integrate 389-ds and samba on centos 7?

I am working on two servers, a samba server and a 389-ds server. Now I want to integrate them so that samba shares are authenticated via ldap server. I have followed instructions on ...
0
votes
0answers
25 views

postfix rejects all EMails Recipient address rejected: User unknown inlocal recipient table

Hi Together I've got a problem with my postfix server and i can't solve it. I set up a local mailserver with dovecot and postfix to receive e-mail over my own domain. It worked fine till i tried to ...
2
votes
1answer
1k views

How to have samba password changed from linux ldap client?

I have set up an ubuntu lucid LDAP+SAMBA PDC, mainly based on this article: http://ubuntuforums.org/showthread.php?t=1499753 - it works. Users can change their password by logging on to a Win Pc, and ...
5
votes
2answers
18k views

Log LDAP access of the Active directory

I am looking for a method to log ldap access of a Active Directory domain controller. I want to be able to log the username and source IP address access to both 389, and 636(encrypted). A simple ...
1
vote
1answer
107 views

Enable LDAP client in SLES 12 from command line

I want to enable / configure the LDAP client in SLES 12 without the use of the yast GUI. Before 12 (or 11 sp3 if I remember well) I used to do it with: yast2 ldap configure server="myserver" ...
0
votes
0answers
12 views

LDAP dynlist not working with syncrepl replication

I'm using syncrepl replication with one master and many slaves. I'm also using dynlist overlay. Dynlist works on the master, but not on slaves. When I run a query on master, everything works ...
0
votes
1answer
13 views

AD LDS data refreshing from script

I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account. I cannot enable syncrepl ont ...
0
votes
1answer
19 views

Apache Authenication -http request failing in sub directories

I'm running an apachev2.2 server and I am using LDAP to authenticate the root directory. The authenication works well, however my page uses php which is using the file_puts_content function to grab ...
7
votes
2answers
155 views

SSSD rejects LDAP login with su: incorrect password

I've set up an LDAP server with user accounts. I've successfully configured a Rails application to authenticate against this LDAP server. I'm now trying to configure SSSD to authenticate against LDAP, ...
1
vote
3answers
865 views

Managing Linux user accounts + Samba + more

I have a network of about 3-6 CentOS servers, with about 5-10 users (currently, and near future). I'm looking for a solution for centralized managements of users. My requirements from it are: Linux ...