Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

5
votes
3answers
3k views

What permissions are needed to do an LDAP bind to an Active Directory Server

What permissions are needed to perform an LDAP bind to an active directory server? I have a central domain (call it MAIN) that has two-way trusts to domains in other forests (call then REMOTE and ...
6
votes
1answer
5k views

Seamless SSO with Kerberos, IE, Firefox, LDAP Active Directory

Alias /students /var/www/students <Location /students> KrbServiceName HTTP KrbMethodNegotiate On KrbMethodK5Passwd On KrbSaveCredentials off KrbAuthRealms DOMAIN.LOCAL Krb5KeyTab ...
1
vote
2answers
4k views

Apache SSO with Active Directory and providing authorization based on groups

I'm using rhel5 running a LAMP stack to create an intranet with. I'm attempting to achieve SSO with users on our network using IE and Firefox. Using the following module I'm able to successfully do ...
0
votes
1answer
3k views

Ubuntu LDAP Make Home Directory

I recently asked a question here about getting Ubuntu to authenticate via LDAP against an OS X server. The good news is, I got it to work and the clients are now authenticating, but my problem now is ...
0
votes
1answer
2k views

SugarCRM - Can't login using LDAP after password change

We're using SugarCRM community edition 5.2.0f (Build 5688 running on OpenSuSE 11.1), and have the LDAP stuff set up so that users can log in with their AD credentials by contacting our DC (Server ...
3
votes
6answers
865 views

Slow IE8 Start-up due to LDAP DNS queries

Recently (in the last few days), my installation of IE8 has been taking 15 to 20 seconds to load my home page. Specifically, the sequence of events (as reported by WireShark) is:- Browser issues a ...
1
vote
3answers
2k views

Open Source proxy authentication using multiple LDAP

I am working on setting up new web proxies at my job. We were initialy planning on buying Blue Coat proxys but the economic downturn came along and we're not buying them anymore... The great feature ...
0
votes
2answers
3k views

How to disable anonymous access on LDAP

I need to secure my LDAP server and am not quite sure the best way to go about it. I am running Debian "Lenny", and using OpenLDAP (slapd). I notice that if I run: ldapsearch -x -W -b ...
0
votes
2answers
2k views

version of ldap installed - one liner

I am using LDAP which is installed in a solaris machine. To check the version of LDAP i go to /ldap and check the version installed as if it is version 5 then there is a directory of the name v5.0 and ...
0
votes
1answer
1k views

apache authentication using forms

I am having issues trying to get users to authenticate against apache using mod____auth____ldap. What I would like is for users to authenticate using a form rather than the default dialog box that ...
3
votes
2answers
6k views

How do I migrate user-accounts from OpenLDAP to Active-Directory?

We want to migrate our user-accounts from OpenLDAP to Active-Directory without changing the passwords and such. The users shouldn't notice the difference against which server they're authenticating ...
4
votes
5answers
4k views

LDAP over SSL/TLS working for everything but login on Ubuntu

I have gotten OpenLDAP with SSL working on a test box with a signed certificate. I can use an LDAP tool on a Windows box to view the LDAP over SSL (port 636). But when I run dpkg-reconfigure ...
1
vote
4answers
115 views

Is there service management software in existence that meets these needs?

I work in an IT dept. at a higher ed. institution. Because the department is small and the infrastructure simple, managing all the services we offer out to the school (like LDAP, AD, various DBMS', ...
10
votes
1answer
29k views

LDAP authentication for SonicWALL VPN

I'm trying to configure my SonicWALL to allow LDAP authentication for VPN users. I've done this before with another device, and I remember it being pretty simple. But I can't get it to work this ...
7
votes
4answers
1k views

Giant active directory deployment vs giant Sun LDAP

At work we're in the early phases of an identity management project. This is all in the context of higher ed where we have a couple thousand faculty / staff and about twenty thousand students. Has ...
1
vote
3answers
3k views

OS X Mounting Samba shares using logon script - Using Open LDAP

Is it possible to mount a Samba share at logon using a standard OS X logon script, when using an Open LDAP directory for authentication? Obviously you can get the username from the $1 variable, but ...
1
vote
2answers
269 views

Configure minimum character requirement for wildcard searches on OpenLDAP

I've seen OpenLDAP directories that have a minimum character requirement for queries on the LDAP directory and I want to set that up on mine. For example, the following search fails: (uid=*) and ...
0
votes
3answers
2k views

Ubuntu OS X LDAP Authentication

I just followed this guide on how to setup Ubuntu to authenticate with an Mac OS X 10.4 server. I followed the guide 100% and was left with the ability to see users by running getent passwd and ...
4
votes
9answers
3k views

Password Self-serve Active Directory via LAMP environment

I would like to be able to change active directory passwords via a Linux/Apache based webpage. This would be a self serve web page for the user. I have SSL-LDAP setup on the Active Directory to make ...
1
vote
2answers
6k views

Open LDAP Authentication - How to verify userPassword without bind?

What I am doing... Trying to implement single-sign-on for our organization’s all machines, blogs, wiki’s, CRM, HRM, project management tools, SVN, etc, etc... We have OpenLDAP installed and ...
0
votes
1answer
558 views

How do I patch Berkeley DB 4.7.25 for use with OpenLDAP?

According to the OpenLDAP documentation, I'm supposed to patch Berkeley DB. I've got Berkeley DB installed already, and I've found the patch files, but what do I do with them? They don't appear to be ...
0
votes
1answer
117 views

LDAP assign user CRUD privs within a certain DN

I'm using ApacheDS and ApacheDS studio. I've written a system that uses Spring-LDAP to manage users and groups. The LDAP account used to read/write groups is admin. The system needs to be deployed ...
4
votes
2answers
10k views

How Do I Configure OpenLDAP to use MySQL (Ubuntu 9.04)?

My intention is to make a MySQL table of Customer Contact Information available to Outlook/Thunderbird clients as an Address Book (via LDAP). I'm aware that OpenLDAP has a MySQL backend option, but I ...
1
vote
2answers
912 views

How Do I Know if the “back-sql” Option Was Compiled into OpenLDAP?

I've install openLDAP from the Ubuntu repository. How do I know if it includes the "back-sql" option?
2
votes
5answers
501 views

Centralized password management for multiple server applications

I'm trying to find the easiest/best way to manage a handful of users (four, right now) and authorization to multiple applications on my Fedora server right now. I'd like there to be one password per ...
13
votes
1answer
9k views

LDAP Structure: dc=example,dc=com vs o=Example

I am relatively new to LDAP, and have seen two types of examples of how to set up your structure. One method is to have the base being: dc=example,dc=com while other examples have the base being ...
3
votes
2answers
4k views

LDAP query on linux against AD returns groups with no members

I am using LDAP+kerberos to authenticate against Active Directory on Windows 2003 R2. My krb5.conf and ldap.conf appear to be correct (according to pretty much every sample I found on the 'net). I ...
0
votes
2answers
129 views

How could I digitally sign LDAP data?

How could I digitally sign LDAP data? I want to make an LDAP request from a user machine to a proxy server that then relays the request to an LDAP server. The LDAP server would then respond with the ...
1
vote
2answers
756 views

Integrate LDAP into NIS

I have the task to implement a LDAP service for the typical use cases: User authentication, storing more information on users, storing information on machines, etc. Currently, we have a working NIS ...
4
votes
1answer
402 views

What are best practices to store delegated permissions in OpenLDAP?

My network's core user database is managed by OpenLDAP. Recently we need to introduce a possibility for one user to act on second user's behalf. As all application-related rights and permissions are ...
1
vote
1answer
187 views

controlling access to multiple websites using apache and acls

My scenario is this. We have a machine that acts as an employee portal giving access to a few web based applications. What we would like to do is control user access to these applications using a ...
8
votes
1answer
388 views

Starting openLDAP

I work as a sysadmin in a company and i am required to Deploy openLDAP. I have read a lot of materials but i really can't figure out where to start. First about the company: Services: Email: every ...
1
vote
3answers
25k views

Active Directory GPO which forbidds user to change proxy settings in IE?

Hi Today I installed an Astaro Web Gateway (Proxy appliance) in an Active Directory enviroment. I made a GPO to force the ad users to sent http traffic to the appliance and not to thier default ...
1
vote
4answers
8k views

How to reboot LDAP service in win2k?

I'm trying to view a user in LDAP which was recently added to a Windows 2000 Active Directory Service. I'm not seeing the user when I query LDAP, and I'm guessing I need to reboot the service. Any ...
1
vote
3answers
4k views

How to check windows domain user status?

I have a server running windows 2000 right now, will upgrade to 2003 pretty soon. Is there a way to check the user status and pc status? For example, If the user is idle If the PC is locked How ...
7
votes
6answers
4k views

Active Directory OU design for <500 users, 4 locations

We are looking to add some logical structure to our (Win 2003) AD hierarchy. We have a single domain and around 500 users. All users and computers are currently organized into one OU. All security ...
1
vote
3answers
734 views

Single user returns mulitple entries for LDAP query

After asking this question, I had an LDAP query that looked like this: (&(cn=*)(networkAddress=*)(objectClass=user)) However, if a user has multiple cn's, they are returned multiple times. Is ...
1
vote
2answers
347 views

AD: Lookup NT-style name using distinguishedname

From the commandline,how can I look up an NT-style name using a distinguished name? That is, I want to put in "CN=Alice Smith,OU=Head Office,DC=Cyberdyne,DC=local" and get out "CYBERDYNE\ASmith" ...
2
votes
2answers
762 views

One computer cannot authenticate to TFS or Exchange

I have several computers... only one of which cannot authenticate to either my exchange or TFS server. (2 of the computers are at my home trying to connect to our exchange/tfs server at work, one of ...
1
vote
1answer
6k views

How do you configure a NetApp Filer to use LDAP for username/password/uid?

We have a NetApp Filer, and want to access it via Samba/CIFS, and have it use the username/password/uid available in our OpenLDAP server. We already do this successfully with Samba 3 against OpenLDAP, ...
3
votes
6answers
669 views

Looking for Exchange alternatives for email, calendar and directory serivices [closed]

I am look into what LDAP is and how it works in regards to a Mail Client. My question is how does LDAP work? I understand that LDAP is: A directory set of objects with attributes organized in a ...
6
votes
8answers
4k views

Best practices or experience with company wide Username policies and resolving duplicates

I am a programmer with an application that needs to be integrated into the new company wide Active Directory login scheme. This means changing all the usernames in our system to use the new scheme. ...
2
votes
2answers
2k views

OpenLDAP Invalid Credentials

I'm setting up an OpenLDAP server to authenticate users in a domain on Ubuntu 9.04. What's interesting/strange is that in the newest version of openldap for Ubuntu, the default is not to use the ...
2
votes
2answers
1k views

Cygwin sshd and LDAP authentication

Is it possible to configure sshd installed via cygwin on WinXP to use LDAP for user authentication? If so, where can I find a howto guide to do this?
5
votes
3answers
2k views

Retrieve operational attributes from OpenLDAP

I've been having trouble trying to find some good documentation on how to retrieve operational attributes from OpenLDAP. I would like to retrieve the base distinguished name of an LDAP server by ...
2
votes
2answers
2k views

Using Linux & Open LDAP for a Mac Network

I'm looking for resources/suggestions/experience on administering a medium sized network of Macs (300ish) using Open LDAP on Linux rather than using Open or Active Directory. Would like the following ...
1
vote
3answers
1k views

Multiple login names for a single user in linux using LDAP server authentication

There are some 30 systems (standalone PCs) in my lab and nearly 200 students who will be using it. Each system has an account called USER whose password is 123456 which is known to those 200 people. ...
0
votes
3answers
570 views

Web front-end to administering users/groups with smbldap

I'm using smbldap tools on an Ubuntu Hardy infrastructure, and I'd like to be able to provide a web front-end for non-technical users to manipulate users and group membership. Does such a beast ...
1
vote
3answers
433 views

ldap allows only one login per user id

i am newbie with openldap, i would like to store user name and password a in ldap system. How can i ensure that each login can be only login on one machine at any one time? "my application should ...
2
votes
4answers
690 views

Small and medium business: user and workstation management with Debian Linux

I'm looking into building a more unified user and workstation management system and I thought it would be a good idea to ask others how they have solved the apparent issues. I would use LDAP for user ...