Questions tagged [ldap]

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

789 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2 votes
0 answers
1k views

haproxy & LDAP Backend with old SSL/ciphers

I try to use haproxy to proxy requests to an old LDAP server with really outdated SSL/ciphers .. but ldapsearch always returns an error: ldap_result: Can't contact LDAP server (-1) Here is my ...
ds82's user avatar
  • 21
2 votes
1 answer
789 views

How to grant to an openldap user only a specific privilege?

I would like to create an user apart from Admin user, who should have access to update password as well as create another user in openldap. I tried configuring the user with the following ldif file. ...
Phani Dadi's user avatar
2 votes
0 answers
188 views

Username collision files/ldap, both passwords accepted

Ubuntu 18.04.3 server, slapd running, LDAP auth configured with libnss-ldapd and libpam-ldapd packages (all on the same machine). Created a local user with useradd and a user in the LDAP database with ...
Lasse Kliemann's user avatar
2 votes
0 answers
248 views

AccessControlEntry (ACL/ACE) in Active Directory with LDIF

Can I add AccessControlEntry (ACL/ACE) in Active Directory with LDIF Files and ldapadd? With OpenLDAP / Oracle Directory it seems to be possible. I've tried: ## delegate Control / add ACI dn: OU=...
schmichri's user avatar
  • 387
2 votes
0 answers
478 views

Active Directory - How do you generate a DirSync cookie without crawling to completion?

My use case: I need to keep a current index of my multi-domain Active Directory. I have used an LDAP query with the LDAP paging extension to efficiently fetch all objectClass=group and objectClass=...
Nicholas DiPiazza's user avatar
2 votes
1 answer
3k views

OpenLDAP userPrincipalName as BindDN

I've setup OpenLDAP as AD proxy according to: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
Majco's user avatar
  • 21
2 votes
0 answers
344 views

On-Prem Linux LDAP server synced via LDAPS with O365 AAD DS (Without AAD Connect)?

If you have an on-prem Linux LDAP server, is it possible to sync your on-prem accounts with your O365 Azure Active Directory Domain Services? We want the O365 AAD DS to be the "source of truth" and ...
taraz's user avatar
  • 291
2 votes
0 answers
6k views

SSSD with LDAP users not able to resolve their own uid/gid names and others

I have a machine setup to authenticate users with an LDAP directory using sssd+nss+pam. At the current state any user in the directory is able to login by ssh, or with su in between user accounts, ...
karamaz0v's user avatar
2 votes
1 answer
508 views

How can I proxy multiple LDAP servers with completely different name spaces?

We are developing R/Shiny Applications on Ubuntu Server. Authentication is done via OpenLDAP on Ubuntu Server. The Shiny Server only supports one LDAP directory. Now, we have an external customer ...
Clemens's user avatar
  • 21
2 votes
0 answers
1k views

Freeradius multi-factor auth with LDAP and Yubikey

I just set up a freeradius server and would like to be able to authenticate using both the password of a ldap user and the yubico otp generated from their yubikey. It is working using the ldap ...
eli0T's user avatar
  • 110
2 votes
1 answer
1k views

Apache auth_ldap "authentication failed" only for a single user

We have a tricky problem with apache and auth_ldap against AD. Only a single user is not allowed to login, although it is in one of the allowed groups and other users of this group are allowed. When ...
JAR's user avatar
  • 179
2 votes
0 answers
1k views

Error deleting memberUid from a large LDAP group

I have an group with ~40,000 members. I'm trying to deleted a memberUid from it. This is my changeset: dn: uid=foobar,ou=People,dc=example,dc=com changetype: delete dn: cn=foobar,ou=Group,dc=...
Leo's user avatar
  • 983
2 votes
0 answers
266 views

Linux - Active Directory - autofs service

We integrated our Linux environment into our AD 2016. Now an additional request is to add autofs service, via AD, to provide to the admins (Linux-admins, DB-admins, Application-admins) their personal /...
user avatar
2 votes
0 answers
3k views

LDAP Binding Error Applying GPO's

We are starting to apply GPO's to our live domain and we are running into some problems that our test domain didn't do. All local machines are running on Windows 7 pro. When I enforce Group Policy ...
Buckeye5b's user avatar
2 votes
0 answers
3k views

All Free IPA clients unable to login

Environment: ~400 Servers enrolled in Prod IPA Prod IPA setup as Master/Master replication between two servers Around 4:40 PM yesterday users started reporting unable to login to servers via SSH. ...
Sysadmin123's user avatar
2 votes
0 answers
701 views

It is any way to add dynamic attribute to openldap user when it on group?

I'm searching way to implement automatically add some attribute and value (identical for all) in search response for user, if user is member of group (memberof overlay is enabled). For example: User ...
Ivan Mastrenko 's user avatar
2 votes
2 answers
11k views

Zimbra 8.7.1 : Connect: Unable to determine enabled services from ldap

I'm currently moving my zimbra from Ubuntu 12.04 to Ubuntu 14.04 On both sides it's a zimbra OSE 8.7.1, I already did all these steps : Backuping zimbra with specificities : include all hidden ...
Rezopac's user avatar
  • 21
2 votes
1 answer
3k views

sshd pam_ldap: ldap_simple_bind Can't contact LDAP server

Seen lots of similar post regarding my issue but none so far have really contributed to resolving the matter. I have a bunch of old RHEL 5.5 servers which I need to authenticate against an LDAP ...
djc72uk's user avatar
  • 33
2 votes
1 answer
8k views

FreeRadius, login not working when using mschap

I've been trying to make RADIUS work with Zentyal without success, I've tried logging in with an Android phone and a Windows 10 PC but none of them worked. Joining the domain using LAN works fine, ...
Elia Perantoni's user avatar
2 votes
1 answer
192 views

gnupg integration with openLDAP - ACL Error

Please could you help me resolving this error with OpenLDAP? ### ldif - To change ACL ###### # userPassword may be written only by users themselves dn: olcDatabase={1}hdb,cn=config changetype: ...
user2372925's user avatar
2 votes
1 answer
3k views

Openvas 9 LDAP Authentication

I am trying to configure Openvas 9 to use LDAP, for the login to the Greenbone software. It appears as based off of other threads, this issue with LDAP in unresolved unless I am seriously mistaken. ...
Steve G's user avatar
  • 21
2 votes
0 answers
442 views

Minimal example of extending already existing API and CLI call in FreeIPA 4

I am looking to add fields into the user definition in FreeIPA 4.4. Right now I have modified the user schema and added the fields in the Web UI for editions. Now I would like to be able to change ...
Mayeu's user avatar
  • 33
2 votes
0 answers
3k views

svn authorization via ldap/AD

have a problem here. I have a domain (AD), i need to login SVN users via AD. DC: 10.20.3.30 Svn server is on freebsd and it's not in domain Apache 2.4 AD read user: "svnr" in OU SVN. Svnr user tested ...
Archiba's user avatar
  • 21
2 votes
0 answers
2k views

Ldap over ssl not working

I have configured AD DS, DNS and AD CS in windows server 2012 R2. I have restarted machine after configured. I can able to connect with ldap on port 389 using ldp.exe. When trying to connect with ...
Kumar's user avatar
  • 161
2 votes
0 answers
652 views

LDAP attribute for image/png

Like the jpegPhoto-attribute (0.9.2342.19200300.100.1.60) of inetOrgPerson for the mime-type image/jpeg - I'm searching a LDAP-attribute for image/png. Does such a pngPhoto or pngImage exists?
mailwurf's user avatar
2 votes
1 answer
3k views

Internal Error 500 appear when use apache 2.4 with LDAP Authetication

I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server. Well ...
Leo Lau's user avatar
  • 33
2 votes
1 answer
1k views

Bad search filter - postfix, OpenLDAP, Saslauthd

I am trying to setup a mail server on Debian Jessie and have come across a problem that's doing my head in. When trying to access OpenLDAP through saslauthd via the command testsaslauthd -u user1 -p ...
silkyriver's user avatar
2 votes
0 answers
911 views

Trust a Self-Signed SSL Cert (RHEL) for LDAP over TLS

My Setup Mac OS X Server (El Capitan) as the OpenDirectory Server RHEL 6.5 connected via LDAP for authentication I have set /etc/sysconfig/authconfig on the RHEL server to "FORCELEGACY=yes" just to ...
5T4TiC's user avatar
  • 31
2 votes
1 answer
2k views

Integrating squid with active directory

I am trying to integrate squid as a web proxy for my users in active directory. I have followed the tutorial in the squid site in here. When i run the command : msktutil -c -b "CN=Administrator" -s ...
Vini7's user avatar
  • 131
2 votes
0 answers
843 views

Clustering of wildfly using apache and haproxy

There is a requirement from my boss to prepare a cluster of our application on wildfly application server. I have designed the architecture as two haproxy(for loadbalancing),two apache servers for (...
umar khan's user avatar
2 votes
0 answers
799 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
special_cheese's user avatar
2 votes
0 answers
105 views

How do I configure an AD DC to respond to LDAP binds on ldaps://?

I am working with a Windows Server 2012 R2 DC which is the acting LDAP authentication server for the domain. From both ldp.exe on the same machine and php5-ldap on a separate Ubuntu box on the ...
snoopy91's user avatar
  • 243
2 votes
0 answers
862 views

Slow response time when using ADUC utility to search a trusted domain

Current Setup: I have child 2 domains, one in America (amer.domain.com) and one in Asia (asia.domain.com) in the same forest. Both domains are connected via MPLS links. In each physical site, there ...
Fahmy Aziz's user avatar
2 votes
0 answers
1k views

How can I make Kerberos flush the credential cache when a user changes their password?

We've got a fun new issue after upgrading to OS X 10.10 client and server with Open Directory (from 10.8). When a user changes their password (using System Preferences or at the Login screen) it ...
Chris's user avatar
  • 93
2 votes
0 answers
768 views

LDAP Not working for SSH connections on ubuntu 12.04

Connecting from the client to the server: $ ssh -vvv [email protected] OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 debug1: Reading configuration data /etc/ssh_config debug1: /etc/ssh_config line 20: ...
sclarson's user avatar
  • 3,684
2 votes
0 answers
263 views

Single Sign On Solution

I'm trying to come up with a single sign on solution for a small team. I've got four applications: dokuwiki redmine svn owncloud All of these I was told by folks support LDAP, and that it was the ...
alphasierra's user avatar
2 votes
0 answers
379 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax (1.3.6.1.4.1.1466.115....
Dumitru's user avatar
  • 186
2 votes
1 answer
920 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
Maurice Perry's user avatar
2 votes
0 answers
221 views

Configuring openldap/PHP LDAP against "signed" LDAP connections with Active Directory

This may sound like a stupid question, and maybe it's already been answered, but I can't find a definitive answer anywhere, so I thought I'd ask. When someone enables "Domain controller: LDAP server ...
chrisdolby's user avatar
2 votes
0 answers
2k views

Centos client authenticate against zentyal DC via ldap

I have a bit of a problem. 3 months ago we deployed a zentyal dc on my workplace because it was a good way of authenticating both windows, linux and mac against the same server. I got authentication ...
Tomas's user avatar
  • 259
2 votes
0 answers
658 views

Apache resetting LDAP requests and hanging

I've got Apache 2.2.15 running under CentOS 6.5. The module mod_authnz_ldap is being used to authenticate against a Microsoft AD server. Here's the LDAP config in Apache: AuthType Basic ...
dirtside's user avatar
  • 1,621
2 votes
0 answers
405 views

Are External LDAP referrals similar to a DNS Recursive or non recursive entry?

I'm very familiar with DNS, but less so with LDAP. In DNS I have the ability to delegate the CPU and IO load of referral chasing a given DNS query... or I can set norecurse and have the client ...
makerofthings7's user avatar
2 votes
1 answer
5k views

Disabling LDAP Signing on Windows PDC in Local Policy

I just tripped over my own feet it seems. Playing around on a Windows 2008 R2 server (set up as domain controller), I was intrigued by certain warning event (event id 2886) which says: "To enhance ...
Golmaal's user avatar
  • 310
2 votes
0 answers
965 views

configuration CAS with LDAP active Directory

I am using CAS server version 3.5.2 and after I configured it to connect to an LDAP server I got this message. Anyone have a clue about what is happening? My LDAP server is pfeserver.pfe.dz :org....
bilalesi's user avatar
2 votes
0 answers
957 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
rimshot's user avatar
  • 111
2 votes
0 answers
4k views

Configuring mod_auth_sspi to find remote user

I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet. The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
gdhp's user avatar
  • 41
2 votes
0 answers
250 views

Samba authentication using read-only LDAP server without samba attributes

I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server. ...
AbuBakr's user avatar
  • 121
2 votes
1 answer
775 views

OpenLDAP on ArchLinux users cannot change passwd

I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
iOfWhy's user avatar
  • 31
2 votes
1 answer
3k views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
gdhp's user avatar
  • 41
2 votes
1 answer
904 views

Restrict server login via LDAP hostObject objectClass and host Attribute

How do I configure my LDAP server to allow all hosts except one? All users by default have the host: * attribute, which allows any user to login to any server. I've tried the following regex, but it ...
Rahul Patil's user avatar
  • 2,971

1
2
3 4 5
16