Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
2k views

How do I change the administrator username for authenticating to Mac OS X LDAPv3 directory?

We're a small company, and our IT manager is leaving. We trying to change all of the passwords for extra security and the administrator name for authenticating to the LDAP directory is his username ...
1
vote
1answer
1k views

Configured Linux Machine to Authenticate to LDAP But not working

I am Using Cent Os Operating System and i need to configure LDAP Authentication for this machine. I have configured the ldap client using using authconfig-tui command. And i have cross checked the ...
2
votes
3answers
14k views

ldapadd/ldapmodify: clarifications needed about these comamnds

The ldapmodify man page states that: The default for ldapmodify is to modify existing entries Yet when I try to import an LDIF file with ldapmodify I get the below error: ldapmodify: modify ...
1
vote
3answers
13k views

ldap_add: Constraint violation (19)

I'm having issues importing users with ldapadd and ldif files. The error I'm getting is: ldap_add: Constraint violation (19) additional info: structuralObjectClass: no user modification allowed The ...
1
vote
1answer
144 views

Downloading entire contents of Active Directory

Is there a way I can download the entire Active Directory. I know I could write script to crawl each and every user's entry that are linked in the hierarchy. But that would be very inefficient. I ...
2
votes
1answer
2k views

PAM, nsswitch and LDAP configuration

I have a technical and precise question about two type of configuration about LDAP, pam configuration files and nsswitch.conf. Wich is the difference between the passwd_compat configuration and the ...
8
votes
1answer
350 views

Dynamically Authenticate Apache with LDAP Based on Request String?

It is possible to use a portion of the request URI as an input into mod_authnz_ldap's Require ldap-group directive? I'm trying to dynamically check access to a bunch of different project directories, ...
1
vote
4answers
1k views

2 instances of LDAP on same server

I need to run 2 LDAP instances on the same ubuntu server which have the same structure (both writing to ou=People,dc=example,dc=org for instance) but have data which should remain separate. The 2 LDAP ...
0
votes
1answer
72 views

What is the best way to control access at the level of MySQL Client?

What is the best way to implement access control to production MySQL instances? The aim is not ban the developers from accessing the MySQL but performing LDAP authentication and audit logging of ...
1
vote
1answer
8k views

Samba + LDAP: smbclient -L localhost fails (NT_STATUS_CONNECTION_REFUSED)

I'm following Tuxnetworks tutorial, at the last line of the first part and I'm getting this error: sysadmin@samba:~$ sudo smbclient -L localhost Enter root's password: Connection to localhost failed (...
6
votes
1answer
11k views

How to manage groups and users in Jenkins

I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right. I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the ...
0
votes
1answer
1k views

Dansguardian - Allowing some user to view some websites

I have configured squid+ldap with dansguardian. Now the requirement is all the users should not get all the websites opened. Can I configure dansguardian in a such a way that it should allow only ...
2
votes
1answer
799 views

search and replace ldap attribute

I have a reasonably large set of data in an LDAP server. Some of the attributes appear in many places, and I would like to replace them. The data is not enormous, but it is enough to rule out editing ...
2
votes
2answers
10k views

Jenkins/Hudson - LDAP group *lookup* does not work

I'm trying to get Jenkins to authenticate users via our active directory groups. If I insert users they are correctly looked up. If I insert group names, they are not found. Edit: Through trial &...
3
votes
2answers
141 views

What is the term for single source authentication that is not Single Sign-On?

I've been using the term "Single Source" for authentication schemes that use a single authentication source (e.g. a single LDAP service) but are not Single Sign-on. i.e. You have to log on more than ...
0
votes
1answer
206 views

Which objectClasses are compatible for Ubuntu Ldap Authentication

I have an Ubuntu server running slapd. I've configured the same box as an ldap client. Logging into Ubuntu via LDAP works great as long as I follow these steps: Create group named 'testgroup1' ...
4
votes
1answer
1k views

Force SHA when user changes LDAP password using passwd

I'm trying to setup PAM/LDAP so that when a logged in SSH user changes their password using passwd, it encrypts the password with SHA1 before updating the LDAP entry. I have this # /etc/ldap.conf ... ...
1
vote
2answers
2k views

disallow anonymous bind in openldap [duplicate]

Folks, I have followed the instructions here http://tuxnetworks.blogspot.com/2010/06/howto-ldap-server-on-1004-lucid-lynx.html to setup my OpenLdap and its working just fine, except an anonymous user ...
9
votes
3answers
4k views

libpam-ldap or libpam-ldapd?

I'm setting up LDAP authentication on my personal VPS, and Ubuntu has two packages for the same purpose: libpam-ldap and libpam-ldapd. Which should I use?
3
votes
1answer
8k views

ldapsearch against Active Directory fails authentication + search params wrong

I am using ldapsearch from OpenLDAP tools to search our corporate Active Directory for my email and phone number. This query is a test to ensure that I can authenticate against the domain so I can ...
7
votes
3answers
495 views

Centralised Authentication - Recommendations?

I have a challenge presented before me, and that is to centralise authentication. Period. That's because me and my big mouth said I like LDAP, and anything can authenticate against it. I have pretty ...
0
votes
2answers
875 views

Error on LDAP Login - xsessions error - Session lasted less than 10 seconds

I have two machines both running CentOS 5.6 64bit. On the LDAP Machine it has a DHCP, BIND and OpenLDAP Server. LDAP is correctly configured and users can authenticate against it. Using root I ...
1
vote
1answer
1k views

ldapsearch display objectClass content

With ldapsearch I get something like this: #ldapsearch -x -b dc=my,dc=org uid=test -LLL ... displayName: Some Name uid: test .... objectClass: inetOrgPerson objectClass: posixAccount objectClass: ...
0
votes
1answer
429 views

Whats the meaning of sambaNTPassword in a machine account?

After running samba3 for quite some time I was wondering what the exact meaning of sambaNTPassword in a samba machine account in the LDAP Database is. I never set it myself (Samba must have set it, ...
0
votes
2answers
4k views

Is it necessary to synchronize users between Ubuntu client and ldap?

I posted a similar question over on super user I'm trying to configure Ubuntu to login to ldap. I've come across several related posts, but I'm still confused: How does pam_ldap find ldap users? Do ...
4
votes
2answers
2k views

NetApp FAS 2040 LDAP Win2k8R2

I am trying to get my FAS2040 to action user lookups using LDAP, below is the filer configuration options: filer> options ldap ldap.ADdomain dc1.colour.domain.local ldap.base ...
0
votes
1answer
119 views

Hosted (external firewalled) ASP.Net application to customer LDAP

Situation: I manage a hosted ASP.Net application that employs winform authentication. The application has role based security, and access control list to various assets. Multiple customer use the same ...
1
vote
0answers
333 views

How to enable LDAP with php IIS 6 and windows server 2003

I have been reading this answer and trying to understand it: How can I enable LDAP in PHP - Windows Server 2008 LDAP is not showing up with phpinfo() I installed PHP the same way as this person with ...
0
votes
2answers
1k views

Redmine LDAP authentication

I have a Mac Mini server running Snow Leopard and installed Redmine. I would now like my users to be able to authenticate against the Open Directory server, but can't get it to work. Here's how I ...
11
votes
3answers
44k views

How do you trace/debug LDAP connections against Active Directory?

I am spoiled, and have been doing most of my LDAP work with eDirectory, which has a utility called DSTrace which is lovely, and for LDAP specifically, will show you all the bind attempts, the source ...
3
votes
3answers
3k views

Is there an open-source alternative to Apple Open Directory?

On my company's network there are a small collection of iMacs. Currently they use Active Directory. We looked in to Apple Open Directory, but $500 for a copy of OSX Server (not to mention the Apple ...
1
vote
2answers
1k views

Convert linux ldapsearch to Windows dsquery

I am converting a website fro being hosted on Linux and Apache to Windows and IIS. The pages are currently written in php but new functionality will be in something along the lines of C#.net In the ...
0
votes
1answer
1k views

What would prevent me from modifying my LDAP schema?

I am trying to follow this guide to configure kerberos on my Ubuntu server. I got up the part where they want to add the new schema to my server user ldapadd I follow the instructions as they say. I ...
5
votes
4answers
3k views

Login using Active Directory in Linux using Kerberos 5

I have a problem with setting up auth for users on Linux (Fedora Core 15 to be exact) using Active Directory on Windows 2008 Server with installed support for UNIX systems. I've successfully setup ...
2
votes
2answers
3k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
3
votes
2answers
2k views

Authenticate CentOS against AD without Samba/Winbind

We currently have our CentOS 5.5 servers authenticating against our Active Directory environment (Windows 2003 R2) utilizing Samba & Winbind. It's served us well but we need something more robust ...
2
votes
4answers
5k views

LDAP Migration to new LDAP Server

I need to move my ldap server to a newer one. It is currently running on Ubuntu 7.04 server. Is there a way of backing up this server, installing a fresh openldap server on a newer Ubuntu 11.04 server,...
1
vote
1answer
2k views

LDAP (389 Directory Service) and Pacemaker with Multi-Master

I'm trying to setup a pair of LDAP servers running 389 (formerly Fedora DS) in high availability using Pacemaker with a floating IP. In addition, 389 supports multi-master replication, where all ...
6
votes
2answers
2k views

What's the default hash format / algorithm of Active Directory?

I'm wondering what format I need to put hashes in to write to userPassword via LDAP. Apache Directory Studio gives me several options, but I don't think any of them are it. Can anyone document the ...
0
votes
1answer
106 views

Why is my user prompt different than the current user logged in?

I am kinda stumped with this one. I setup an OpenLDAP server for centralized login to all of the VM servers ... and a test VBOX Ubuntu Desktop. Getting LDAP authentication to work was not terribly ...
2
votes
2answers
2k views

How to retrieve last logon/logoff time in Active Directory (ADAM)?

I need to write code (C# or Java) to retrieve user logon/logoff information from ADAM, but i'm not sure where to start or if it's even possible.
3
votes
1answer
263 views

Active Directory lookups from bound Mac without user credentials

One of my Mac boot scripts needs to grab a property from AD that is not one of the ones I can see with the built in tool called dscl, which is pretty much limited to Users, Groups, and Computer ...
2
votes
1answer
833 views

Computer not showing up in network (Samba and LDAP configuration)

For some reason I have not been able to pinpoint yet, going to Network on my Windows 7 computer, the Samba server does not show up. I have configured Samba with LDAP and managed to successfully ...
6
votes
1answer
18k views

LDAP: How to add a person to an existing group?

Using command-line (Linux) or LDIF, I could find many examples of creating a new group and defining its members, but no examples of this: How to add a user to an existing group? Let's say the person ...
3
votes
1answer
553 views

Active Directory memberOf LDAP syntax

I want to add a user (from Sun IDM to Active Directory) to more than one group. The command memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA is for only one and I want to add a second one immediatly after the ...
2
votes
2answers
2k views

OpenLDAP on Ubuntu Server 10.04

I've configured OpenLDAP following the Ubuntu guide (with some minor edits, such as setting a proper password, my own domain name, and creating a staff group instead of an example one under people) ...
2
votes
1answer
495 views

Authenticating Apache/SVN via Active Directory

I am absolutely tearing my hair out with this one, largely as a result of not being able to find any real documentation on the topic. My box is ubuntu server, and my repository is fully browsable - I ...
1
vote
1answer
13k views

LDAP Authentication though a Firewall

I have a Rails Gem that does Active Directory authentication and its test suite has quite a lot of authentication checks. When I run the test suite on our LAN everything works no problem (as one would ...
1
vote
2answers
1k views

LDAP authentication apache 2.2 error 500

This is my LDAP configuration in Apache2.2.x Order deny,allow AuthType Basic AuthName "Test" AuthBasicProvider ldap AuthLDAPURL "ldap://dc1.domain.com:389/DC=domain,DC=com?sAMAccountName" ...
0
votes
1answer
4k views

LDAP authentication apache 2.2

I am trying to install basic ldap authentication on a website on an apache 2.2 server. I put this in my /etc/apache2/apache2.conf file LoadModule ldap_module /usr/lib/apache2/modules/mod_ldap.so ...