Questions tagged [ldap]
Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network
789
questions with no upvoted or accepted answers
2
votes
0
answers
1k
views
haproxy & LDAP Backend with old SSL/ciphers
I try to use haproxy to proxy requests to an old LDAP server with really outdated SSL/ciphers .. but ldapsearch always returns an error:
ldap_result: Can't contact LDAP server (-1)
Here is my ...
2
votes
1
answer
789
views
How to grant to an openldap user only a specific privilege?
I would like to create an user apart from Admin user, who should have access to update password as well as create another user in openldap. I tried configuring the user with the following ldif file. ...
2
votes
0
answers
188
views
Username collision files/ldap, both passwords accepted
Ubuntu 18.04.3 server, slapd running, LDAP auth configured with libnss-ldapd and libpam-ldapd packages (all on the same machine). Created a local user with useradd and a user in the LDAP database with ...
2
votes
0
answers
248
views
AccessControlEntry (ACL/ACE) in Active Directory with LDIF
Can I add AccessControlEntry (ACL/ACE) in Active Directory with LDIF Files and ldapadd? With OpenLDAP / Oracle Directory it seems to be possible.
I've tried:
## delegate Control / add ACI
dn: OU=...
2
votes
0
answers
478
views
Active Directory - How do you generate a DirSync cookie without crawling to completion?
My use case: I need to keep a current index of my multi-domain Active Directory.
I have used an LDAP query with the LDAP paging extension to efficiently fetch all objectClass=group and objectClass=...
2
votes
1
answer
3k
views
OpenLDAP userPrincipalName as BindDN
I've setup OpenLDAP as AD proxy according to:
https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD
Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
2
votes
0
answers
344
views
On-Prem Linux LDAP server synced via LDAPS with O365 AAD DS (Without AAD Connect)?
If you have an on-prem Linux LDAP server, is it possible to sync your on-prem accounts with your O365 Azure Active Directory Domain Services?
We want the O365 AAD DS to be the "source of truth" and ...
2
votes
0
answers
6k
views
SSSD with LDAP users not able to resolve their own uid/gid names and others
I have a machine setup to authenticate users with an LDAP directory using sssd+nss+pam.
At the current state any user in the directory is able to login by ssh, or with su in between user accounts, ...
2
votes
1
answer
508
views
How can I proxy multiple LDAP servers with completely different name spaces?
We are developing R/Shiny Applications on Ubuntu Server. Authentication is done via OpenLDAP on Ubuntu Server. The Shiny Server only supports one LDAP directory. Now, we have an external customer ...
2
votes
0
answers
1k
views
Freeradius multi-factor auth with LDAP and Yubikey
I just set up a freeradius server and would like to be able to authenticate using both the password of a ldap user and the yubico otp generated from their yubikey.
It is working using the ldap ...
2
votes
1
answer
1k
views
Apache auth_ldap "authentication failed" only for a single user
We have a tricky problem with apache and auth_ldap against AD. Only a single user is not allowed to login, although it is in one of the allowed groups and other users of this group are allowed.
When ...
2
votes
0
answers
1k
views
Error deleting memberUid from a large LDAP group
I have an group with ~40,000 members. I'm trying to deleted a memberUid from it.
This is my changeset:
dn: uid=foobar,ou=People,dc=example,dc=com
changetype: delete
dn: cn=foobar,ou=Group,dc=...
2
votes
0
answers
266
views
Linux - Active Directory - autofs service
We integrated our Linux environment into our AD 2016. Now an additional request is to add autofs service, via AD, to provide to the admins (Linux-admins, DB-admins, Application-admins) their personal /...
2
votes
0
answers
3k
views
LDAP Binding Error Applying GPO's
We are starting to apply GPO's to our live domain and we are running into some problems that our test domain didn't do.
All local machines are running on Windows 7 pro.
When I enforce Group Policy ...
2
votes
0
answers
3k
views
All Free IPA clients unable to login
Environment:
~400 Servers enrolled in Prod IPA
Prod IPA setup as Master/Master replication between two servers
Around 4:40 PM yesterday users started reporting unable to login to servers via SSH. ...
2
votes
0
answers
701
views
It is any way to add dynamic attribute to openldap user when it on group?
I'm searching way to implement automatically add some attribute and value (identical for all) in search response for user, if user is member of group (memberof overlay is enabled).
For example:
User ...
2
votes
2
answers
11k
views
Zimbra 8.7.1 : Connect: Unable to determine enabled services from ldap
I'm currently moving my zimbra from Ubuntu 12.04 to Ubuntu 14.04
On both sides it's a zimbra OSE 8.7.1, I already did all these steps :
Backuping zimbra with specificities :
include all hidden ...
2
votes
1
answer
3k
views
sshd pam_ldap: ldap_simple_bind Can't contact LDAP server
Seen lots of similar post regarding my issue but none so far have really contributed to resolving the matter.
I have a bunch of old RHEL 5.5 servers which I need to authenticate against an LDAP ...
2
votes
1
answer
8k
views
FreeRadius, login not working when using mschap
I've been trying to make RADIUS work with Zentyal without success, I've tried logging in with an Android phone and a Windows 10 PC but none of them worked.
Joining the domain using LAN works fine, ...
2
votes
1
answer
192
views
gnupg integration with openLDAP - ACL Error
Please could you help me resolving this error with OpenLDAP?
### ldif - To change ACL ######
# userPassword may be written only by users themselves
dn: olcDatabase={1}hdb,cn=config
changetype: ...
2
votes
1
answer
3k
views
Openvas 9 LDAP Authentication
I am trying to configure Openvas 9 to use LDAP, for the login to the Greenbone software.
It appears as based off of other threads, this issue with LDAP in unresolved unless I am seriously mistaken.
...
2
votes
0
answers
442
views
Minimal example of extending already existing API and CLI call in FreeIPA 4
I am looking to add fields into the user definition in FreeIPA 4.4.
Right now I have modified the user schema and added the fields in the Web UI for editions.
Now I would like to be able to change ...
2
votes
0
answers
3k
views
svn authorization via ldap/AD
have a problem here.
I have a domain (AD), i need to login SVN users via AD.
DC: 10.20.3.30
Svn server is on freebsd and it's not in domain
Apache 2.4
AD read user: "svnr" in OU SVN.
Svnr user tested ...
2
votes
0
answers
2k
views
Ldap over ssl not working
I have configured AD DS, DNS and AD CS in windows server 2012 R2. I have restarted machine after configured.
I can able to connect with ldap on port 389 using ldp.exe.
When trying to connect with ...
2
votes
0
answers
652
views
LDAP attribute for image/png
Like the jpegPhoto-attribute (0.9.2342.19200300.100.1.60) of inetOrgPerson for the mime-type image/jpeg - I'm searching a LDAP-attribute for image/png.
Does such a pngPhoto or pngImage exists?
2
votes
1
answer
3k
views
Internal Error 500 appear when use apache 2.4 with LDAP Authetication
I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server.
Well ...
2
votes
1
answer
1k
views
Bad search filter - postfix, OpenLDAP, Saslauthd
I am trying to setup a mail server on Debian Jessie and have come across a problem that's doing my head in.
When trying to access OpenLDAP through saslauthd via the command
testsaslauthd -u user1 -p ...
2
votes
0
answers
911
views
Trust a Self-Signed SSL Cert (RHEL) for LDAP over TLS
My Setup
Mac OS X Server (El Capitan) as the OpenDirectory Server
RHEL 6.5 connected via LDAP for authentication
I have set /etc/sysconfig/authconfig on the RHEL server to "FORCELEGACY=yes" just to ...
2
votes
1
answer
2k
views
Integrating squid with active directory
I am trying to integrate squid as a web proxy for my users in active directory. I have followed the tutorial in the squid site in here. When i run the command :
msktutil -c -b "CN=Administrator" -s ...
2
votes
0
answers
843
views
Clustering of wildfly using apache and haproxy
There is a requirement from my boss to prepare a cluster of our application on wildfly application server.
I have designed the architecture as two haproxy(for loadbalancing),two apache servers for (...
2
votes
0
answers
799
views
How to search based on custom attribute?
I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
2
votes
0
answers
105
views
How do I configure an AD DC to respond to LDAP binds on ldaps://?
I am working with a Windows Server 2012 R2 DC which is the acting LDAP authentication server for the domain.
From both ldp.exe on the same machine and php5-ldap on a separate Ubuntu box on the ...
2
votes
0
answers
862
views
Slow response time when using ADUC utility to search a trusted domain
Current Setup: I have child 2 domains, one in America (amer.domain.com) and one in Asia (asia.domain.com) in the same forest. Both domains are connected via MPLS links.
In each physical site, there ...
2
votes
0
answers
1k
views
How can I make Kerberos flush the credential cache when a user changes their password?
We've got a fun new issue after upgrading to OS X 10.10 client and server with Open Directory (from 10.8).
When a user changes their password (using System Preferences or at the Login screen) it ...
2
votes
0
answers
768
views
LDAP Not working for SSH connections on ubuntu 12.04
Connecting from the client to the server:
$ ssh -vvv [email protected]
OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011
debug1: Reading configuration data /etc/ssh_config
debug1: /etc/ssh_config line 20: ...
2
votes
0
answers
263
views
Single Sign On Solution
I'm trying to come up with a single sign on solution for a small team. I've got four applications:
dokuwiki
redmine
svn
owncloud
All of these I was told by folks support LDAP, and that it was the ...
2
votes
0
answers
379
views
LDAP fixed length string attribute
I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax (1.3.6.1.4.1.1466.115....
2
votes
1
answer
920
views
Red Hat 6.6, OpenLDAP, ldaps not responding
I'm having a hard time migrating our openldap installation from Debian to RedHat.
Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
2
votes
0
answers
221
views
Configuring openldap/PHP LDAP against "signed" LDAP connections with Active Directory
This may sound like a stupid question, and maybe it's already been answered, but I can't find a definitive answer anywhere, so I thought I'd ask.
When someone enables "Domain controller: LDAP server ...
2
votes
0
answers
2k
views
Centos client authenticate against zentyal DC via ldap
I have a bit of a problem. 3 months ago we deployed a zentyal dc on my workplace because it was a good way of authenticating both windows, linux and mac against the same server. I got authentication ...
2
votes
0
answers
658
views
Apache resetting LDAP requests and hanging
I've got Apache 2.2.15 running under CentOS 6.5. The module mod_authnz_ldap is being used to authenticate against a Microsoft AD server. Here's the LDAP config in Apache:
AuthType Basic
...
2
votes
0
answers
405
views
Are External LDAP referrals similar to a DNS Recursive or non recursive entry?
I'm very familiar with DNS, but less so with LDAP.
In DNS I have the ability to delegate the CPU and IO load of referral chasing a given DNS query... or I can set norecurse and have the client ...
2
votes
1
answer
5k
views
Disabling LDAP Signing on Windows PDC in Local Policy
I just tripped over my own feet it seems.
Playing around on a Windows 2008 R2 server (set up as domain controller), I was intrigued by certain warning event (event id 2886) which says:
"To enhance ...
2
votes
0
answers
965
views
configuration CAS with LDAP active Directory
I am using CAS server version 3.5.2 and after I configured it to connect to an LDAP server I got this message. Anyone have a clue about what is happening? My LDAP server is pfeserver.pfe.dz
:org....
2
votes
0
answers
957
views
Set Linux GID based on LDAP OU in ldap.conf
In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
2
votes
0
answers
4k
views
Configuring mod_auth_sspi to find remote user
I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet.
The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
2
votes
0
answers
250
views
Samba authentication using read-only LDAP server without samba attributes
I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server.
...
2
votes
1
answer
775
views
OpenLDAP on ArchLinux users cannot change passwd
I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
2
votes
1
answer
3k
views
$_SERVER['REMOTE_USER'] not found using LDAP SSO
Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
2
votes
1
answer
904
views
Restrict server login via LDAP hostObject objectClass and host Attribute
How do I configure my LDAP server to allow all hosts except one? All users by default have the host: * attribute, which allows any user to login to any server. I've tried the following regex, but it ...