Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
0answers
116 views

Creating users in 389 Directory Server: Autofill UID & GID

I have a 389 Directory Server cluster as ldap. I can create users using 389 management console but... When Selecting "Posix User" tab and checking "Enable Posix User Attributes" is necessary manually ...
1
vote
0answers
63 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
1
vote
0answers
683 views

Configuring mod_auth_sspi to find remote user

I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet. The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
1
vote
0answers
155 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
1
vote
0answers
433 views

adamsync.exe /sync is failing with “Naming Violation”

I am trying to synchronize my AD LDS instance (localhost:50006) with AD DS entries (basically trying to get user and computer accounts from AD DS so that I can use windows security principals in my ...
1
vote
0answers
68 views

Samba authentication using read-only LDAP server without samba attributes

I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server. ...
1
vote
0answers
187 views

OpenLDAP on ArchLinux users cannot change passwd

I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
1
vote
0answers
324 views

LDAP authentication very slow on production server

We are developing a Spring MVC application which does LDAP authentication using Spring Security framework. The problem we are facing is that the authentication works just fine on our development ...
1
vote
0answers
159 views

Restrict server login via LDAP hostObject objectClass and host Attribute

How do I configure my LDAP server to allow all hosts except one? All users by default have the host: * attribute, which allows any user to login to any server. I've tried the following regex, but it ...
1
vote
0answers
53 views

Can you write an LDAP query that returns accounts modified in the previous day?

I have a system that synchronizes from a master LDAP store. The synchronization process has gotten longer and longer as our directory grows. I had to stop syncing hourly, and moved it to an overnight ...
1
vote
0answers
38 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
1
vote
0answers
131 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
1
vote
0answers
12 views

Can the Apach AuthLDAPNURL be pointed at the root of a tree?

I have a server where I need to use Apaches AuthLDAPNURL value, but I cannot start at any specific O, OU, or DC. For whatever reason this tree has everybody in 19 Organization (O) objects, hanging ...
1
vote
0answers
82 views

Which attributes does Active Directory currently use for POSIX compatibility?

In a heterogeneous environment that uses Windows Active Directory as the central directory, some attributes are essential for compatibility with Linux systems. uidNumber gidNumber gecos loginShell ...
1
vote
0answers
106 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
1
vote
0answers
1k views

Samba standalone server using LDAP for authentication: SID mismatch

I'm trying to get my new samba server running for days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and >100 ...
1
vote
0answers
537 views

Samba + LDAP: user authentication works for one but not another server

I have a very frustrating problem I'm trying to solve for a few days now, maybe one of you can help me. I have two (standalone) samba servers which should authenticate the users using an LDAP server. ...
1
vote
0answers
134 views

Any reason why nsAccountLock is multi-valued?

I discovered today that the nsAccountLock attribute (used in LDAP servers such as RedHat Directory Server, 389ds, ...) is multi-valued. Link to source. I cannot think of any reason explaining why it ...
1
vote
0answers
161 views

LDAP read privileges for comupter, IIS under ApplicationPoolIdentity user

Is it possible to set up LDAP read privileges to Active Directory for computer account? If I run web application on IIS 7.5, which application pool is running under ApplicationPoolIdentity, I have ...
1
vote
0answers
217 views

postfix, dovecot, dovecot-sasl, ldap, and static UIDs for NFS-shared email storage

I'm trying to build a Ubuntu 12.04 mail server as such. Must: Auth against an existing Open-LDAP server. Storage in Maildirs on an existing NFS server, everything owned by 8:8 (mail:mail). Auth is ...
1
vote
0answers
236 views

segmentation fault trying to start ldap

My PDC using Samba 3.6 with LDAP (the latest version) works very fine as long as I use hdb as the backend. Nevertheless, I change the backend to sql I receive the following error while trying to ...
1
vote
0answers
117 views

Authentication between Windows AD and Linux LDAP Server and google APPS

I have an active directory instance hosted in a secure data center offsite. That active directory allows my sharepoint users to have authentication I have google apps for all my users in the ...
1
vote
0answers
64 views

LDAP returns “Credentials Invalid” error from service but not from IIS Web App

I have a windows service that runs under the same credential as the app pool for our web app. When I logon to the web app the LDAP authentication works fine. However, when I call an API implemented in ...
1
vote
0answers
220 views

How to allow access to members of an LDAP-group via apache?

I am trying to allow members of a certain LDAP-group into a site I'm hosting via Apache. I've read the documentaion on this, but as I have lacking LDAP skills, I could not determine how to accomplish ...
1
vote
0answers
126 views

Setting up ssh on Debian to allow some users log in with ldap

I have a server in which users can't login via ssh but can upload files by sftp. This server has an ldap database of users and ssh and sftp are configured with the ldap, so none of the ldap users ...
1
vote
0answers
211 views

Can't make updates with LDAP from Linux box to Windows AD

I have a webapp (built using Zend Framework - PHP) that runs on a Linux environment which needs to authenticate against Active Directory on a Windows server. So far my webapp can authenticate with ...
1
vote
0answers
57 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
1
vote
0answers
103 views

iPlanet Authentication provider

Good day. I have stepped into project that requires a server migration that would change the means of authentication for our CAC/PKI SSL enabled website. We are using iPlanet 7 and Oracle Directory ...
1
vote
0answers
403 views

How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package

I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package. I have used the following command to ...
1
vote
0answers
2k views

Active directory over SSL Error 81 = ldap_connect(hLdap, NULL);

I have been several day to getting AD over SSL (LDAPS) I followed exactly this guide. I have Active Directory Certifica Service installed (stand alone Root CA), I can request cert, install certs. ...
1
vote
0answers
266 views

CentOS LDAP authentication

How to configure LDAP-auth in CentOS 6? I configured it using GUI tool. Configuration looks like this : But when I logout from root and try login with user defined in LDAP - nothing happens. I ...
1
vote
0answers
468 views

CentOS PAM+LDAP login and host attribute

My system is CentOS 6.3, openldap is configured well, PAM authorization works fine. But after turning pam_check_host_attr to yes, all LDAP-auths fail with message "Access denied for this host". ...
1
vote
0answers
311 views

stunnel Haproxy ldap authentication

in our setup port 433 is handled by stunnel. After that haproxy will dispatches the request to the appropriate backend. I have managed to enable authentication in haproxy. But the users and passwords ...
1
vote
0answers
108 views

Multimaster LDAP replication on Ubuntu 11.04

I'm attempting to setup a multimaster pair on Ubuntu 11.04. I currently have a working single server which I've cloned to a 2nd server. The installed version of OpenLDAP is the default from the Ubuntu ...
1
vote
0answers
1k views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
0answers
613 views

Jenkins - Project based authorization + LDAP

Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration? There are several closed bug reports on the Jenkins Jira site that say users don't need ...
1
vote
0answers
628 views

LDAP Berkeley DB

I'm trying to configure slapd on my machine and I keep getting this error. I can recover at times using db7.7_recover but not always. I see this problem if the slapd deamon is killed for any reason. ...
1
vote
0answers
267 views

CAS-Toolbox : Get Nested Group from Active Directory

We are using Cas-Toolbox for our intranet. We manage to get LDAP attribute via CAS and send it to the intranet app : <bean id="adAttribRepository" ...
1
vote
0answers
803 views

LDAP groups not always mapping, Ubuntu server 12.04

Ubuntu 12.04 server, AMD64, authentication via LDAP. I'm having trouble getting the LDAP groups to map to my user account when logging in, even though 'getent group' shows the correct set of groups ...
1
vote
0answers
218 views

Merge two samba PDC and do master slave keeping data on two servers

I need to do a very difficult thing. I have this situation: 1) server A , with zentyal as samba PDC, 500 users in his ldap. Each user has an home that is mapped to H: . Several computers are ...
1
vote
0answers
327 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
1
vote
0answers
764 views

How to configure LDAP client to authenticate against ApacheDS?

I am playing with LDAP lately and trying to authenticate against ApacheDS. I am unable to setup my Ubuntu client to print the LDAP users list (getent passwd for instance). I found few tutorials on the ...
1
vote
0answers
145 views

Does qmail-ldap provide functionality equivalent to the qmail validrcptto patch?

We are using qmail with the validrcptto patch to route incoming mail to our Domino server. However, that requires us to maintain the validrcptto file with the list of all allowed email addresses. ...
1
vote
0answers
248 views

Connect from iphone to LDAP on a non-standard port

I asked on superuser, it was migrate to the apple stack exchange site and it was suggested I ask here. This feels like cross posting but... I've tried a quite a few different sequences, such as ...
1
vote
0answers
161 views

Cisco ASA Dynamic Access Policies with LDAP

When setting up a Dynamic Access Policy on an ASA that is already configured to use SLDAP for authentication, can attributes other than groups be used? Say a single user?
1
vote
0answers
42 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
0answers
307 views

Can ApacheDS LDAP change root user name?

ApacheDS 1.5 has the following account by default. Bind dn or user: uid=admin,ou=system Bind password: secret i would like to change it to the following to avoid making changes in my code Bind dn ...
1
vote
0answers
1k views

git push over smart HTTP fails with 403

This has been driving me nuts. I'm running git 1.7.8.rc4 with Apache/2.2.14 on Lucid Ubuntu, and set up LDAP authentication. The authentication seems to be working fine, and i can pull, but i can't ...
1
vote
0answers
266 views

LDAP Proxy Authentication with Active Directory

I am running an application (JIRA) that uses Active Directory as its user directory. In order to connect to the DC, JIRA needs to either bind with a preconfigured username and password, or to bind ...
1
vote
0answers
899 views

Password expires 45 days even though 'Password Must Change' is set to 'never' (Samba+LDAP)

Since a few months ago Samba ask each of our users to change password at log on every 45 days (the default) and I have not been able to disable it. This setup had been running for 2 years before then ...