Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
23 views

How to change the 'olcAccess' values of olcDatabase in OpenLDAP via spring-ldap?

I'm a new person of using spring-ldap-2.0.4 in order to communicate openldap, and change olcAccess values of olcDatabase via spring LDAP interface without using LDIF, I have met a difficult problem, ...
1
vote
1answer
57 views

How to only allow users and/or groups access to certain client machines that are connected to an openldap server?

I would really like to figure out how I can allow users and/or groups access to certain client machines that are all connected to an OpenLDAP server. I would like to do this whether the user is ...
0
votes
0answers
36 views

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in ...
0
votes
0answers
19 views

Gitlab ldap user filter

I need to filter out some groups from corporate ldap server to make gitlab available to most people via ldap auth. I created this filter: gitlab_rails['ldap_user_filter'] = '(&(objectCategory=...
0
votes
0answers
19 views

LDAP filter alphanumeric

Does LDAP (precisely Active Directory) allow to filter out only alpha-numeric characters? Client app crashes on some non-printable characters (like vertical tab U+000B), when trying to get AD groups ...
0
votes
0answers
89 views

Suddenly i can not join Windows clients to Samba PDC anymore

Some years ago i configured a Primary Domain Controller through Samba and LDAP (slapd) on an Ubuntu machine (13.10) at 192.168.69.203 which should be accessible by the NetBIOS name SRV1. I must note i ...
0
votes
1answer
60 views

Forcing OpenLDAP connections to use STARTTLS not allowing user to login

I have a basic OpenLDAP server running on Ubuntu 16.04LTS which authenticates users perfectly fine but I really wanted to make it more secure so I decided to use STARTTLS and How To Encrypt OpenLDAP ...
0
votes
0answers
74 views

LDAP PAM authentication: endless password change loop

I'm setting up LDAP authentication in a 'toy' environment - i.e. the LDAP server and client are on the same system, and the setup is quite simple. The system which I'm setting it up on is an up-to-...
1
vote
0answers
12 views

LDAP User switches to local user mid session

So, what's happening is I have an LDAP server and two clients: LDAP Server = Ubuntu 16.04 Headless Client 1 = Ubuntu Gnome 16.04 Client 2 = Ubuntu 16.04 (XFCE, Gnome & Unity) I have it all ...
0
votes
0answers
25 views

syncing users across docker containers

I am wondering if there is a common way to sync user accounts between docker containers. In my specific use case i would like to have a container serving a directory via netatalk (afp), another ...
0
votes
2answers
238 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
16 views

unable to delete entry.what am i missing?

Newbie question, There are 2 ldap servers i have inherited. I need to delete a user which keeps re-spawning. I was told that this is a syncrepl setup with another node. What do i need to do in order ...
1
vote
1answer
59 views

[Solved]Internal Error 500 occur when use apache 2.4 with LDAP Authetication

I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server. Well ...
1
vote
0answers
14 views

rfc2307bis LDAP schema: ipNetmaskNumber lookup for an ipHost object

I'm using Openldap for IAM, and consider using it also as a configuration management backend. The rfc2307bis schema has an ipHost class, which allows for ipHostNumber attribute, but not for the ...
1
vote
2answers
452 views

Why is the user@domain and cn=user,dc=domain not equivalent?

I've setup a Simple AD on AWS that I can finally authenticate against with LDAP. I don't understand why I was unable to use dc= which is widely suggested everywhere but am able to use @domain. ...
1
vote
0answers
19 views

LDAP attribute for image/png

Like the jpegPhoto-attribute (0.9.2342.19200300.100.1.60) of inetOrgPerson for the mime-type image/jpeg - I'm searching a LDAP-attribute for image/png. Does such a pngPhoto or pngImage exists?
0
votes
1answer
37 views

Mail Server Fails to Replicate Active Directory Users

My business recently made the jump to Active Directory, and wanted our mail server to replicate AD accounts. Both the domain controller and the mail server are running Windows Server 2012, and we're ...
4
votes
1answer
64 views

openldap user can't login when using tcsh

I would appreciate any help in the following problem: I have an openladp (2.3.39) server (Fedora 8) which authenticates users from other ldap clients (various versions of Fedora). On my attempt to ...
2
votes
1answer
74 views

Internal Error 500 appear when use apache 2.4 with LDAP Authetication

I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server. Well ...
0
votes
0answers
16 views

retrieving user information from ldap server using a client

I have setup an ldap server on a centos 7 and added a couple of ldapusers 1 and 2 to it. ldapsearch for users does return all the info. Both the server and the client are virtual machines on the ...
3
votes
1answer
103 views

Error Creating OU: Name is Already In Use

I have an OU structure for computers that looks like this: Workstations |-- Building | |-- Floor, Department, or Approximate Location ... I want to create a child OU called "3 North" in ...
0
votes
0answers
16 views

error: found a non-fatal phpLDAPAdmin Bug

i just install openldap with phpldapadmin. but when i go to monitor menu i found: is this actually something can be solved? anyone ever solve this issue before? Thanks, AnD
0
votes
1answer
114 views

how to control ldap users access using groupdn?

i am using openldap, nslcd and nss-pam-ldapd. i want to restrict users login to ldap client. i have configured this in centos6.5 without any problem using groupdn. but in centos 7, there is no ...
5
votes
1answer
134 views

LDAP not preventing disabled users from authenticating

I have an interesting situation where we have the exact same application running in a "Development" environment and another in a "Testing" environment behaving differently when authenticating with AD ...
0
votes
1answer
64 views

Proftpd different chroot for specific ldap group

I am authenticating a ProFTPD (with mod_sftp) instance with a LDAP server. I want to have the following setup: A chroot for all users to /home/ftp. (This works). Now I would like to chroot specific ...
-1
votes
1answer
41 views

How to switch user in Linux with password

I have client with LDAP authenticatation, when user1 login to client, and switch to user2 (sudo su - user2), he just login without password. I want to make switching user in client with authentication ...
0
votes
1answer
206 views

An apache error with LDAP Server on Windows Server 2008 R2

I have a trouble need your help here. I want to connect my Apache and SVN to my LDAP Server, but when I want to commit my code and I type the right password, the Apache server will show the error log ...
1
vote
1answer
72 views

Apache LDAP (Active Directory) not working

I've had some mixed success with Apache and LDAP. First, it is working.. but not entirely. So, a basic LDAP config, it looks like this: AuthLDAPBindDN "omitting this" AuthLDAPBindPassword "...
0
votes
1answer
137 views

Server 2012 stopped accepting computers joining to our domain with error 53: the network path was not found

We have Windows Server 2012 R2 Standard as our DC. Several workstations were added to our domain successfully. But then (I cannot determine what exactly could be a show-stopper) it stopped accepting ...
0
votes
1answer
49 views

ldapsearch not working

My goal is to test LDAP authentication from command line. I tried using ldapsearch for this. I'm using Centos 6.7 Even though I'm using the correct credentials, the following command fails [user@...
0
votes
1answer
41 views

Forward service records from main DNS to IPA server

I have a production DNS server (dns1.local) in Data Center environment, I build recently IPA server (ipa.example.com) that runs DNS as well in the same environment and it forwards requests to dns1....
0
votes
1answer
42 views

Kerberos and LDAP login

I want to manually login to a ldap-server. For authentication Kerberos is used. I am registered there with username and pw. kinit username@servername It works fine and a valid TGT is created which ...
0
votes
1answer
53 views

AWS ELB health check fails on LDAP authentication

I am running a Docker container through ECS. The container runs an Apache server hosting a simple web application. However, the server requires LDAP authentication to access the page. I am using a ...
1
vote
1answer
134 views

ldapsearch: Invalid credentials (49)

I am trying to authenticate against our institutional LDAP server with the command ldapsearch. My user info in LDAP is shown in the following image screenshot of LDAP browser in Apache Directory ...
4
votes
2answers
77 views

every 5th AD query is very slow, why?

I’m binding a FreeNAS box to AD for student logins to SMB mounts. That all works fine. I have a bash script that runs on the FreeNAS to build an index.html page pointing to a subdirectory of each ...
2
votes
1answer
83 views

Manually (re-)create Active Directory schema objects msExchRecipientDisplayType and msExchRecipientTypeDetails from Exchange on Samba AD

Somehow, my Active Directory has "lost" (at least) 2 objects from the schema. msExchRecipientDisplayType and msExchRecipientTypeDetails are what I need to recreate. I believe they were lost, because ...
0
votes
0answers
61 views

Trying to add user to Active Directory via ldapadd using the admin user fails with INSUFF_ACCESS_RIGHTS

This is the ldif file I'm trying add: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith displayName: John_Smith sAMAccountName: jsmith ...
1
vote
2answers
146 views

Add AD entries using ldapadd failing with “unwilling to perform”

I'm trying to add entries to an Active Directory using ldapadd. Here's my ldif file: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith ...
2
votes
1answer
86 views

LDAP: error code 50 - no write access to parent while adding user in OpenLDAP

I am trying to create a user in OpenLDAP through my Java code(which works in all of LDAP environments I have tried so far). When I tried it with OpenLDAP, I got the following error: LDAP: error code ...
2
votes
1answer
68 views

Bad search filter - postfix, OpenLDAP, Saslauthd

I am trying to setup a mail server on Debian Jessie and have come across a problem that's doing my head in. When trying to access OpenLDAP through saslauthd via the command testsaslauthd -u user1 -p ...
1
vote
2answers
63 views

openldap give group write access to subtree

I have dn: ou=people,dc=example,dc=com objectClass: organizationalUnit ou: people and group of admins for it: dn: cn=people-admins,ou=groups,dc=example,dc=com objectClass: groupOfUniqueNames cn: ...
1
vote
1answer
42 views

Can Active Directory Lightweight Directory Services corrupt or interfere with a (non-light) Active Directory installation on the same network?

I'm a programmer with a limited understanding of Active Directory. I once asked the IT manager if I could install Active Directory on my development computer and he told me definitely not as it would ...
1
vote
0answers
52 views

Active directory user password change by ldap client

I have written a LDAP client program in C. With that I am trying to authenticate against Active Directory. I have created some users in active directory and trying authenticate with my LDAP client. ...
0
votes
2answers
80 views

How to connect postgresql with LDAP user?

I have a server with postgresql-9.4 fresh install and I have another server with LDAP already installed. I want to connect postgresql with LDAP user that already exists. What's the basic ...
0
votes
0answers
49 views

slapd: Disable wildcard search on LDAP-Attribute

i run a ldap server on a ubuntu machine (apt-get install ldap ldap-utils). The ldap server provides a kind of a global address-book. Each entry provides basicly the attributes title, givenname, ...
1
vote
0answers
27 views

OU Search base in LDAP AD integration using CUCM

If i dont define an OU when creating user search bases in LDAP will it use the whole domain instead of a specific OU?
0
votes
0answers
60 views

Dovecot static user db and lda user verification

I've got dovecot set up to use a static userdb in my dovecot.conf file: userdb { driver = static args = uid=vmail gid=vmail home=/var/vmail/%u } Now I also do want to verify the users for the ...
0
votes
2answers
99 views

Build a production IPA server without integrate DNS and NTP with client

We are going to deploy a centralized authentication Linux server (RHEL6) for our RedHat/CentOS servers in Data Center environment. I made some search I believe Free IPA is the best choice since it's ...
0
votes
1answer
44 views

What is the equivalent of a windows active directory user in Openldap?

If I want to maintain a sync between active directory users with unix attributes enabled, and openldap, what would be the user's type that I have to create in openldap? I could see that a user in ...
1
vote
1answer
22 views

openldap alternative to modifying core schema syntax

I have an application that stores contacts in OpenLDAP. It uses the c attribute to store a string describing a country name. The syntax of c only allows a two-letter country code, but the application ...