Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

2
votes
1answer
252 views

Fedora 21 pam_sss authentication failure - permission denied

We have configured a OpenLDAP server which is working fine. FreeBSD, Debian, and a WordPress plugin authenticate with no problems. We are configuring Fedora 21 with pam_sss, but we get the following ...
1
vote
2answers
51 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
1
vote
0answers
57 views

Postfix not following MX, local delivery LDAP

Before explaining the problem, this is the setup: We run 5 servers, 2 in Montevideo [Uruguay], 3 in the US, on each server we have clients (domains, mail accounts, and obviously local logins) the LDAP ...
1
vote
2answers
72 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
3
votes
0answers
78 views

SSSD process won't die

Thanks for taking the time to check out my problem. I'm currently working on an issue that has only appeared once before. Back on Jan 3rd when this first appeared we were able to reboot the server ...
1
vote
2answers
87 views

How to filter ldap user logins on linux?

I have several linux servers (ubuntu 12.04) setup to authenticate user logins over an external (to my branch office) LDAP (Novell Edirectory specifically). This is working well, however I am trying to ...
0
votes
1answer
30 views

tracking down root cause for openldap account locking

This has happened to me in the past, and I've been able to find an email client or something random like that which was over zealously trying to login with the wrong password, but for the life of me, ...
0
votes
0answers
186 views

LDAP client can connect to LDAP host but can't see LDAP users

I'm configuring LDAP on a cluster of Ubuntu 14.04 machines. I successfully set up the LDAP host using these instructions. Now I'm trying to get an LDAP client to work using these instructions. ...
2
votes
2answers
121 views

Windows Hosts DNS query for _ldap._tcp.domaincontroller, is this normal?

To make this easier to wrap my head around, here's what I'm using in my examples: deecee = my domain controller dctoo = another domain controller internal.foo.bar = the full DNSDomainName of ...
0
votes
1answer
61 views

freeradius broken after apt-get update

Ubuntu 14.04.1 LTS apt-get update /upgrade was run last night at around 10pm. This morning people are saying that they can't get into ftp and wifi because these services are auth'd by freeradius. ...
1
vote
0answers
36 views

Access denied for creating user on LDAP

I have a web application that needs to be able to create users on a LDAP. I have created a cn=intranet,dc=example,dc=com and I need it to be able to add users unside ou=People,dc=example,dc=com. So I ...
0
votes
0answers
31 views

Why does Apache hang when failing to connect to LDAP?

Environment: Centos versions: 5.11, 6.6 Apache version: 2.2 Apache hung on several of my webservers today after failing to connect to LDAP. I fixed the LDAP issue but I was wondering why Apache ...
0
votes
0answers
119 views

OpenLDAP client certificate giving “Unable to find the certificate or key necessary for authentication”

Initial setup of system I have an OpenLDAP server running on SLC6.5 and a client running Fedora 20. The server and client are both running OpenLDAP 2.4.39 which is built with Mozilla NSS as its SSL ...
0
votes
1answer
116 views

LDAP users can't ssh

When I ssh to my CentOS 6 server with root account, everything is working fine. But when I try with an LDAP user, I get permission denied. I tried logging in with root, and then su to a LDAP user, to ...
0
votes
1answer
29 views

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories?

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories? Is there an Object Class that provides ObjectSID which can be used in other directory services such as ...
1
vote
2answers
105 views

Linux Authentication with Windows 2012R2 Server (Deprecated IMU role)

I've been looking around the web trying to find a way to authenticate users on Linux with a Domain User account on a Windows 2012R2 Server. The way I've done this in the past is using the "Identity ...
0
votes
0answers
43 views

Slow sudo response

We have LDAP setup to provide information regarding sudo. The whole system works, but it takes a long time (~10 seconds) for any sudo command to return. For instance if I run strace -f -r -o ...
1
vote
2answers
193 views

Apache 500 error with no entries in error.log [duplicate]

This is on a brand new Ubuntu 14.04 Server running a standard WAMP install with Apache DAV_SVN (using LDAP Authentication) added on top of it (mapped to /svn). I was able to get everything working ...
0
votes
0answers
29 views

Why I cannot add groupOfUniqueNames to LDAP?

Hi I'm trying to add groups for then add LDAP users to them but I don't know why LDAP is not adding. Previously I added users, organizational unit, etc. Here the exmaple of ldif that I would like to ...
0
votes
1answer
43 views

OpenLDAP server not working through ldap:// protocol

I have a vanilla Scientific Linux 6.6 install (essentially RHEL 6.6) which I am trying to set up as an LDAP server. I have installed openldap-servers and started slapd with service slapd start. This ...
1
vote
1answer
42 views

Can I configure pam_ldap without configuring nss?

On my servers I have my system users provisioned with Chef and have no desire to expose any additional users to these machines. I would however like to utilize pam for the authentication backend for ...
0
votes
0answers
72 views

LDAP with TLS: connect error(-11)

I configured OpenLDAP and today I've configured the TLS for more security following these guide lines: Configure OpenLDAP with TLS=required Modifying the cn=config.ldif with config file: dn: ...
0
votes
0answers
17 views

Connect OpenLDAP to Samba in read mode?

We have Samba 3 based domain controller. The password backend for the domain is pdb/*nix users, this means that we do not have LDAP service running with Samba (I may be wrong on this one, but I do not ...
0
votes
0answers
31 views

multiple OUs in LDAPSearch

When working with Group ACL in PFSENSE+SquidGuard: In the Client-Source parameter, can I place OU and how? This is because I'm having multiple OUs with users to be added in the rule. Would the ...
0
votes
1answer
100 views

pam_mount on centos won't mount cifs

so I have this problem that pam_mount won't mount my cifs home dirs pam_mount has this in /var/log/messages: Feb 3 15:49:18 centosy nslcd[1278]: [3c9869] <passwd="tomas"> (re)loading ...
0
votes
0answers
24 views

LDAP passswd command ask 4 new password

I know there is similar question but mine is a few different as I 'm using LDAP as identification and I'm running with debian wheezy (7) When my end user is using the passwd command for changing his ...
0
votes
0answers
53 views

Migration of LDAP and GOsa-config to new server

I have a running LDAP-server (using Ubuntu 12.04) with GOsa installed on it. Is there a way to migrate the whole database including the GOsa-config to a new server (Ubuntu 14.04)? I tried exporting ...
1
vote
0answers
299 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
0
votes
0answers
125 views

Zimbra 7.1.4 disaster recovery within the LDAP service

We've a disaster in our Zimbra 7.1.4 server. The server is (was) running on a CentOS 6 box and it failed on the last friday. After doing a lot of effort to make the machine boot once again Zimbra ...
0
votes
1answer
56 views

Invalid command: 'AuthLDAPAuthoritative', perhaps misspelled

Have apache 2.2.24 running on Gentoo server. I need apache to now authenticate through windows active directory, however, on apache service restart, I am getting this error: Invalid command, ...
1
vote
0answers
19 views

Nss-pam-ldapd host based login with TLS

I have an openldap server configured and set up for linux client logins with host based authentications. All is fine except I wanted to have TLS and have found that it is not working de to a bug ...
0
votes
0answers
32 views

LDAP: Segmentation fault

I have this error when I use ldapsearch: Segmentation fault I've removed and reinstalled openldap and openldap-servers and after that, throws me this error. /var/log/messages: ldapsearch[20232]: ...
0
votes
1answer
149 views

sssd can't save user. Missing uid

I am trying to sync my Debian server using sssd. When i run the getent passwd username@domain, the user is not returned. The log says it's because i am missing an uid from the ldap lookup. However, i ...
0
votes
0answers
16 views

Debugging libnss_ldap AD synchronization

I am trying to configure my Debian server to talk to an AD. I have a connection to the LDAPs port of the AD, and i can use LDAP search to connect and retrieve results. I can also see that the getent ...
1
vote
0answers
109 views

500 Internal Server Error: Which is the issue? [closed]

I've configured openldap in my server and also installed and configured mod_ldap but the server throws me a 500 Internal Server Error if I introduce right or bad user. I don't know if it's a bad ...
0
votes
1answer
41 views

Script adding an NISMap object in Active Directory from Windows and RHEL6

I am working on using Server 2008R2 Forest to house AutoFS maps in the existing schema using NISMap and NisObject class objects. I can manually create them (and it works) with ADSIedit. I have ...
1
vote
0answers
41 views

Creating LDAP directory users with specific attrs for Dovecot email server

I have openldap-2.4.39-8.el6.x86_64 installed into my CentOS release 6.4 (Final) machine. I have another machine which I installed dovecot, and I would like to perform ldap authentication for my ...
1
vote
1answer
29 views

Querying LDAP server on UDP

I am trying to query an LDAP server (Active directory) over ldaps. The problem is that the only ports i have available (389 and 636) are UDP ports. TCP is not allowed by the firewall rules (which i ...
0
votes
0answers
39 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
1
vote
2answers
36 views

Bugzilla LDAP authentication broke after admin pw change - CentOS

Hey everyone I'm having an issue trying to get bugzilla authentication working again. I have looked all over and cant seem to find this anywhere. I am running bugzilla on a centOS server and over the ...
0
votes
0answers
86 views

AD LDS - LDAP - How to set group's rights on container

I installed AD LDS on a W2012R2. Everything is working fine. Now, I want to create new Roles, to grant to groups permissions to create/modify/delete users in a certain container. (I used this article) ...
0
votes
1answer
57 views

LDAP: getent passwd don't show my recent user addition

I don't know why getent don't show my recently LDAP user addition. ldif file: dn: uid=user1,ou=People,dc=example,dc=com uid: user1 cn: user1 objectClass: account objectClass: posixAccount ...
0
votes
1answer
521 views

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is ...
2
votes
0answers
55 views

Single Sign On Solution

I'm trying to come up with a single sign on solution for a small team. I've got four applications: dokuwiki redmine svn owncloud All of these I was told by folks support LDAP, and that it was ...
1
vote
1answer
98 views

Configure Jenkins with LDAP : parameter 'Root DN'

I am installing an LDAP server and configuring Jenkins in order to accept LDAP for authentication. In Jenkins parameters, I have a weird behavior with the parameter Root DN. Documentation says : ...
0
votes
1answer
49 views

How to change OpenLDAP core attributes

Specifically, I need to add ORDERING caseIgnoreOrderingMatch to the givenName and surname attributes. I had hoped there was some way to do this using ldapmodify but the following is not working for me ...
0
votes
1answer
44 views

LDAPs using Anonymous Access to AD forest

There is a problem related to AD which I cannot understand what configuration is missing to fix the issue. I have two DCs: testa and testb and both contain AD. I'm logged in to testa and I'm trying ...
3
votes
2answers
157 views

Is the whenChanged Active Directory attribute editable?

I've been searching for tools to change Active Directory object attributes, and I noticed the tools and articles and found so far are explicitly not mentioning capability to edit the whenChanged ...
0
votes
1answer
235 views

postgresql LDAP authentication

I am trying to give an LDAP authentication to my postgresql database. Here is my pg_hba.conf config file local all all md5 local all postgres md5 host all all 0.0.0.0/0 ldap ...
1
vote
1answer
80 views

How do I enable nis schema in apacheDS?

I'm having difficulty figuring out how to enable the nis schema in apacheDS (I want to be able to use the posixGroup and posixAccount classes).