Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
0answers
34 views

bind-sdb does not query for wildcard entry

I have successfully set up Bild with LDAP on a Fedora VM. The Problem is, bind-sdb simply does not query wildcard entries. When I do: nslookup doesnotexist.example.com. 127.0.0.1 The LDAP server ...
1
vote
0answers
579 views

Disabling LDAP Signing on Windows PDC in Local Policy

I just tripped over my own feet it seems. Playing around on a Windows 2008 R2 server (set up as domain controller), I was intrigued by certain warning event (event id 2886) which says: "To enhance ...
1
vote
0answers
122 views

Groups with local and LDAP users

I'm exploring the idea of authenticating users on some RHEL 6.4 boxes using LDAP. I'm using sssd with an LDAP provider, and setting the nsswitch.conf file to use sss for passwd/shadow/group. How can ...
1
vote
0answers
431 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
0answers
191 views

Routing LDAP traffic from Application server to Proxy to internet

I've included a drawing so you get an idea how it would work. (Red = LDAP connections , Blue = HTTP / AJP in the backend) Problem: We want to connect our customer application server to an LDAP of ...
1
vote
0answers
71 views

Connect an LDAP realm with an AD domain, with the same name?

The situation is a separate group has created an LDAP domain. We'll call it foo.bar. (fyi, none of these are connected in any way to the Internet) They also have a Windows domain and renamed it to ...
1
vote
0answers
155 views

Creating users in 389 Directory Server: Autofill UID & GID

I have a 389 Directory Server cluster as ldap. I can create users using 389 management console but... When Selecting "Posix User" tab and checking "Enable Posix User Attributes" is necessary manually ...
1
vote
0answers
189 views

Root denied login if networking down (LDAP environment)

I would like to know why I can't login as root (ssh, sudo or su -) when my LDAP is down or when I have some outage in my network. How to reproduce the problem: - Just change your DNS to something ...
1
vote
0answers
74 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
1
vote
0answers
917 views

Configuring mod_auth_sspi to find remote user

I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet. The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
1
vote
0answers
190 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
1
vote
0answers
565 views

adamsync.exe /sync is failing with “Naming Violation”

I am trying to synchronize my AD LDS instance (localhost:50006) with AD DS entries (basically trying to get user and computer accounts from AD DS so that I can use windows security principals in my ...
1
vote
0answers
85 views

Samba authentication using read-only LDAP server without samba attributes

I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server. ...
1
vote
0answers
236 views

OpenLDAP on ArchLinux users cannot change passwd

I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
1
vote
0answers
189 views

Restrict server login via LDAP hostObject objectClass and host Attribute

How do I configure my LDAP server to allow all hosts except one? All users by default have the host: * attribute, which allows any user to login to any server. I've tried the following regex, but it ...
1
vote
0answers
58 views

Can you write an LDAP query that returns accounts modified in the previous day?

I have a system that synchronizes from a master LDAP store. The synchronization process has gotten longer and longer as our directory grows. I had to stop syncing hourly, and moved it to an overnight ...
1
vote
0answers
41 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
1
vote
0answers
157 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
1
vote
0answers
12 views

Can the Apach AuthLDAPNURL be pointed at the root of a tree?

I have a server where I need to use Apaches AuthLDAPNURL value, but I cannot start at any specific O, OU, or DC. For whatever reason this tree has everybody in 19 Organization (O) objects, hanging ...
1
vote
0answers
92 views

Which attributes does Active Directory currently use for POSIX compatibility?

In a heterogeneous environment that uses Windows Active Directory as the central directory, some attributes are essential for compatibility with Linux systems. uidNumber gidNumber gecos loginShell ...
1
vote
0answers
2k views

Samba standalone server using LDAP for authentication: SID mismatch

I'm trying to get my new samba server running for days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and >100 ...
1
vote
0answers
622 views

Samba + LDAP: user authentication works for one but not another server

I have a very frustrating problem I'm trying to solve for a few days now, maybe one of you can help me. I have two (standalone) samba servers which should authenticate the users using an LDAP server. ...
1
vote
0answers
157 views

Any reason why nsAccountLock is multi-valued?

I discovered today that the nsAccountLock attribute (used in LDAP servers such as RedHat Directory Server, 389ds, ...) is multi-valued. Link to source. I cannot think of any reason explaining why it ...
1
vote
0answers
178 views

LDAP read privileges for comupter, IIS under ApplicationPoolIdentity user

Is it possible to set up LDAP read privileges to Active Directory for computer account? If I run web application on IIS 7.5, which application pool is running under ApplicationPoolIdentity, I have ...
1
vote
0answers
235 views

postfix, dovecot, dovecot-sasl, ldap, and static UIDs for NFS-shared email storage

I'm trying to build a Ubuntu 12.04 mail server as such. Must: Auth against an existing Open-LDAP server. Storage in Maildirs on an existing NFS server, everything owned by 8:8 (mail:mail). Auth is ...
1
vote
0answers
248 views

segmentation fault trying to start ldap

My PDC using Samba 3.6 with LDAP (the latest version) works very fine as long as I use hdb as the backend. Nevertheless, I change the backend to sql I receive the following error while trying to ...
1
vote
0answers
128 views

Authentication between Windows AD and Linux LDAP Server and google APPS

I have an active directory instance hosted in a secure data center offsite. That active directory allows my sharepoint users to have authentication I have google apps for all my users in the ...
1
vote
0answers
68 views

LDAP returns “Credentials Invalid” error from service but not from IIS Web App

I have a windows service that runs under the same credential as the app pool for our web app. When I logon to the web app the LDAP authentication works fine. However, when I call an API implemented in ...
1
vote
0answers
249 views

How to allow access to members of an LDAP-group via apache?

I am trying to allow members of a certain LDAP-group into a site I'm hosting via Apache. I've read the documentaion on this, but as I have lacking LDAP skills, I could not determine how to accomplish ...
1
vote
0answers
143 views

Setting up ssh on Debian to allow some users log in with ldap

I have a server in which users can't login via ssh but can upload files by sftp. This server has an ldap database of users and ssh and sftp are configured with the ldap, so none of the ldap users ...
1
vote
0answers
254 views

Can't make updates with LDAP from Linux box to Windows AD

I have a webapp (built using Zend Framework - PHP) that runs on a Linux environment which needs to authenticate against Active Directory on a Windows server. So far my webapp can authenticate with ...
1
vote
0answers
58 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
1
vote
0answers
110 views

iPlanet Authentication provider

Good day. I have stepped into project that requires a server migration that would change the means of authentication for our CAC/PKI SSL enabled website. We are using iPlanet 7 and Oracle Directory ...
1
vote
0answers
458 views

How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package

I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package. I have used the following command to ...
1
vote
0answers
2k views

Active directory over SSL Error 81 = ldap_connect(hLdap, NULL);

I have been several day to getting AD over SSL (LDAPS) I followed exactly this guide. I have Active Directory Certifica Service installed (stand alone Root CA), I can request cert, install certs. ...
1
vote
0answers
281 views

CentOS LDAP authentication

How to configure LDAP-auth in CentOS 6? I configured it using GUI tool. Configuration looks like this : But when I logout from root and try login with user defined in LDAP - nothing happens. I ...
1
vote
0answers
507 views

CentOS PAM+LDAP login and host attribute

My system is CentOS 6.3, openldap is configured well, PAM authorization works fine. But after turning pam_check_host_attr to yes, all LDAP-auths fail with message "Access denied for this host". ...
1
vote
0answers
318 views

stunnel Haproxy ldap authentication

in our setup port 433 is handled by stunnel. After that haproxy will dispatches the request to the appropriate backend. I have managed to enable authentication in haproxy. But the users and passwords ...
1
vote
0answers
109 views

Multimaster LDAP replication on Ubuntu 11.04

I'm attempting to setup a multimaster pair on Ubuntu 11.04. I currently have a working single server which I've cloned to a 2nd server. The installed version of OpenLDAP is the default from the Ubuntu ...
1
vote
0answers
1k views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
0answers
758 views

Jenkins - Project based authorization + LDAP

Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration? There are several closed bug reports on the Jenkins Jira site that say users don't need ...
1
vote
0answers
670 views

LDAP Berkeley DB

I'm trying to configure slapd on my machine and I keep getting this error. I can recover at times using db7.7_recover but not always. I see this problem if the slapd deamon is killed for any reason. ...
1
vote
0answers
296 views

CAS-Toolbox : Get Nested Group from Active Directory

We are using Cas-Toolbox for our intranet. We manage to get LDAP attribute via CAS and send it to the intranet app : <bean id="adAttribRepository" ...
1
vote
0answers
237 views

Merge two samba PDC and do master slave keeping data on two servers

I need to do a very difficult thing. I have this situation: 1) server A , with zentyal as samba PDC, 500 users in his ldap. Each user has an home that is mapped to H: . Several computers are ...
1
vote
0answers
347 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
1
vote
0answers
827 views

How to configure LDAP client to authenticate against ApacheDS?

I am playing with LDAP lately and trying to authenticate against ApacheDS. I am unable to setup my Ubuntu client to print the LDAP users list (getent passwd for instance). I found few tutorials on the ...
1
vote
0answers
145 views

Does qmail-ldap provide functionality equivalent to the qmail validrcptto patch?

We are using qmail with the validrcptto patch to route incoming mail to our Domino server. However, that requires us to maintain the validrcptto file with the list of all allowed email addresses. ...
1
vote
0answers
260 views

Connect from iphone to LDAP on a non-standard port

I asked on superuser, it was migrate to the apple stack exchange site and it was suggested I ask here. This feels like cross posting but... I've tried a quite a few different sequences, such as ...
1
vote
0answers
178 views

Cisco ASA Dynamic Access Policies with LDAP

When setting up a Dynamic Access Policy on an ASA that is already configured to use SLDAP for authentication, can attributes other than groups be used? Say a single user?
1
vote
0answers
44 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...