Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

4
votes
5answers
541 views

Can I get AD to authenticate via another LDAP server?

I need to set up an AD. The larger organisation I'm in has its own LDAP service which handles authentication and some other details. I would like to get AD to use that LDAP info just for ...
10
votes
3answers
8k views

Restricting account logins using LDAP and PAM

I was hoping some PAM/LDAP gurus may be able to help me out here. I've recently set up an LDAP directory on Ubuntu Server to hold accounts for both my clients (for use with web-based systems) and ...
0
votes
3answers
3k views

Secure ldap problem [closed]

I have tried to config my openldap to have secure connection by using openssl on Debian5. By the way, I got trouble during the below command. ldap:/etc/ldap# slapd -h 'ldap:// ldaps://' -d1 ...
4
votes
4answers
4k views

Using slapcat to backup LDAP

I'm running an OpenLDAP directory on a Debian server, using the hdb backend. I've been wondering about backups, and did som reading on the net. Slapcat seems to be the way to go, but I keep seeing ...
3
votes
1answer
950 views

How to move SharePoint authentication from AD to LDAP without breaking user profiles?

We have a bunch of users in a local Active Directory OU that access the SharePoint portal. We've just added LDAP authentication and pointed it at the organisation's global LDAP server, so out AD ...
3
votes
3answers
7k views

How can I proxy multiple LDAP servers, and still have grouping of users on the proxy?

I have 2 problems that I'm hoping to find a common solution to. First, I need to find a way to have multiple LDAP servers (Windows AD's across multiple domains) feed into a single source for ...
4
votes
2answers
2k views

Keep AD Group Synced in OpenLDAP with POSIX Account Augmentation

What's the most obvious way of achieving the following: The site has an working AD infrastructure and certain parts of the infrastructure are tightly coupled GNU/Linux machines where people from the ...
3
votes
4answers
4k views

Apache LDAP authentication (mod_auth_ldap) on MacOS Server (10.5)

A - Is there a LDAP authentication module (mod_auth_ldap) for the version of Apache that comes built into MacOS Server 10.5? (I'm pretty sure no, but maybe someone compiled one.) B - If not, can it ...
1
vote
0answers
486 views

Secure authenticating in squid without Samba

Situation: I have a Squid server (3.0) and a LDAP server and the network setup looks like this: Internet | | | Users ...
5
votes
3answers
1k views

LDAP Users Home Directories

I'm trying to setup linux login via an LDAP server. I have everything working except setting the user's home directory. There is no parameter in the LDAP database that I can map to the ...
2
votes
1answer
127 views

Samba: weird GIDs added in LDAP

I have installed the samba server (3.4.0, Ubuntu) with ldapsam environment and suddenly a logged user is automatically added to grups 10002, 10003 and 10005. This is bad as incidentally these gid's ...
0
votes
1answer
429 views

Import LDIF file to external server

As a follow-up to my previous question, which I've resolved part of, what we're trying to do now is take an exported .ldif file of the "Users" container on our OS X Server and import it into a ...
0
votes
2answers
1k views

LDAP based virtual domain set-up for Dovecot

I have a Postfix + Dovecot daemon combo setup on a mail server (let's call it server M), that supports virtual domains and user look-ups to a LDAP server (let's call it server D). Right now, I've ...
0
votes
3answers
817 views

Replicate portion of an LDAP directory to external server

We're in the process of setting up a Jabber server on Amazon EC2 right now, and we'd like to have our internal users authenticate via LDAP so we don't have to create/manage a separate set of user ...
3
votes
1answer
3k views

LDAP Authentication for multiple AD Domains

I have 3 full trust domains (2 child and one root). I need to use LDAP to allow authntication for domain users. The trick is that I need the application to use an AD server for the child domain BUT ...
1
vote
2answers
2k views

MS Active Directory as a simple LDAP server

I need to test an application that uses an LDAP store to authenticate users. We need to POC this app with multiple LDAP providers (OpenLDAP, Sun LDAP, Tivoli Directory Server, Microsoft AD etc). Is ...
5
votes
1answer
700 views

Special characters in ssh usernames

I've got a few users configured on LDAP, and would like them to be able to connect to a Linux machine via SSH using those users and password on the LDAP directory. However, there are 2 issues I do not ...
1
vote
3answers
638 views

Which LDAP on Linux

There are some packages and a lot of people use OpenLDAP but I also read that there are a lot of problems with it so I'm a bit confused. I have red hat and I was wondering what the best solution for ...
1
vote
4answers
257 views

Is open ldap a good solution to a centralized way to authenticate users on a web site?

Is open ldap a good solution to a centralized way to authenticate users on a web site? Was it build in the web in mind?
3
votes
1answer
3k views

how to configure open ldap to work on localhost

From the documentation: Use your favorite editor to edit the provided slapd.conf(5) example (usually installed as /usr/local/etc/openldap/slapd.conf) to contain a BDB database definition ...
1
vote
3answers
193 views

Centralized accounts and multiple logins

I'm thinking of setting up LDAP+NFS to handle centralized /home directories for our LAN users, but I was wondering, what would happen upon login from multiple machines with the same user? Are there ...
2
votes
2answers
2k views

Possible to search multiple AD forests with the same query?

I have two domain controllers configured with non-contiguous namespaces. There is a two-way forest trust and crossRef objects set up between domains. I can successfully execute an LDAP search for any ...
-1
votes
2answers
1k views

Disable NSS LDAP IPv6 (AAAA) lookups

Question: How can I disable inet6 AAAA queries for my LDAP server during (LDAP-backed) NSS lookups on a CentOS (RHEL) 5 machine? Background: I've servers configured to consult ldap://ldap.internal ...
2
votes
1answer
544 views

Passwd via PAM only work for LDAP

Now I'v got a working setup using PAM+LDAP over SSL but I can only passwd users in the ldap tree, any idea about how to be able to passwd every users ? Here are some conf files : ...
1
vote
1answer
16k views

PAM_LDAP error trying to bind?

I have this error when I ssh to my LDAP client using the login name on the LDAP server my LDAP client's running Ubuntu 9.10 Karmic my LDAP server is Fedora Core 4 and running Fedora Directory Server ...
2
votes
6answers
5k views

Free LDAP Client for Windows? [closed]

What is the best, free LDAP client for windows? It should be easy navigate through the directory and edit values. Ideally, bulk update of whole directory trees would be nice...
2
votes
2answers
868 views

Web front-end for directory servers (LDAP) similar to phpMySQLAdmin?

Is there some web front-end to administer LDAP servers, in a similar way as you can use phpMySQLAdmin to administer DBs?
11
votes
3answers
3k views

How can I switch an existing set of Subversion repositories to use ActiveDirectory? (svnserve/windows)

I have a set of private Subversion repositories on a Windows Server 2003 box which developers access via SVNServe over the svn:// protocol. Currently we have been using the authz and passwd files for ...
9
votes
4answers
19k views

How can I set up Redmine => Active Directory authentication?

First, I'm not an AD admin on site, but my manager has asked me to try to get my personal Redmine installation to integrate with ActiveDirectory in order to test-drive it for a larger-scale rollout. ...
1
vote
1answer
4k views

syncing LDAP directory into exchange/GAL

I have another exchange question, that I hope I find the right answer/solution to. I have an LDAP directory containing a list of contacts that exist in our CRM solution that we would like to access ...
3
votes
1answer
987 views

Users can't change passwords in Active Directory using LDAPS

We have a Linux server farm along with some Windows machines, and I finally moved us from two parallel authentication systems (using Fedora Directory Services and Active Directory) to one -- just ...
2
votes
3answers
294 views

Invalid user names when creating a LDAP account

I'm trying to set up a system where a visitor can enter any user name in a form to create a new user and in the end it gets built on LDAP directory and I'm planning that to be mapped as a UNIX account ...
3
votes
4answers
4k views

OpenLDAP Password Expiration with pwdReset=TRUE?

I have configured the ppolicy overlay for OpenLDAP to enable password policies. These things work: Password lockouts on too many failed attempts Password Change required once pwdReset=TRUE added to ...
0
votes
4answers
232 views

Linux Directory Server with existing local accounts

I've got about 50 servers running a mix of RHEL and CentOS, and they all use local authentication. We are about to get these finally under a single unit's control, and we have a slew of local ...
1
vote
2answers
3k views

Ldap database recovery after server crash

so my server crashed and my backup is a couple of weeks old :(. so.... I have the old files that can be found in /var/lib/ldap How can i recover my db, or export them in a ldif files. Tnx all ...
2
votes
1answer
3k views

Adding inetOrgPerson to account/posixAccount LDAP entries

I have a LDAP database we have been using for managing user accounts on our hosts, these entries have account and posixAccount as objectClass. Now we'd like to extend this to also use it as an adress ...
1
vote
2answers
758 views

Postfix + LDAP + Recipient Delimiter

I'm trying to get my Postfix and LDAP-backend to accept recipent delimiters (aka address extensions). The rest of the mail system is working fine, but when an email is received with an extension ...
1
vote
1answer
1k views

Extract list of users in a set of nested AD groups?

I need to get a list of all of the users who are ultimately members of an active directory group. There's a single parent group which has a few other groups as its members, and each of those groups ...
1
vote
1answer
4k views

Oracle Embedded LDAP Error

I just installed the Oracle Weblogic Server. The server start fines and I can get to the admin console and use it, but once I deploy the console I begin to get exceptions on the server and it pegs the ...
5
votes
5answers
662 views

LDAP for privilege control?

I've been wondering for a while if LDAP can be used to control user privileges. For example, if I have UNIX and web logins, is there an easy way to grant a user access to just or just UNIX (or even ...
8
votes
3answers
1k views

What good Active Directory + Exchange competition is there?

Based on this question regarding enhanced permission support in filesystems, what is the best permissions + directory and mail stack to compare against Active Directory on NTFS with Exchange? I'm ...
3
votes
2answers
280 views

What filesystem comes closest to matching NTFS for support of ACLs, and highly-granular permissioning?

It seems that most other filesystems handle the basic *nix permissions (ugo±rwx), with maybe an addition here or there. Or can be "made" to handle ACLs through the use of other tools on top of ...
0
votes
1answer
592 views

Help me configure Coldfusion MX 7 to connect to LDAPS

I need to replace two web servers with IIS 6 and Coldfusion MX Enterprise, but I'm having trouble connecting to LDAPS with the replacement servers. I followed the instructions at ...
2
votes
3answers
3k views

No Root DSE returned from OpenLDAP

I'm trying to set up an OpenLDAP server on ubuntu 9.10, which uses slapd version 2.4.18. After initializing and populating a new hdb database, everything seems OK, but I can not get the server to ...
3
votes
5answers
8k views

LDAP Authentication fails with 500 or 401 depending on bind for Apache2

I'm setting up LDAP authentication for our Subversion repository hosted through Apache on a RHEL 5 system. I run into two different issues when I try to authenticate against Active Directory. ...
1
vote
4answers
433 views

How to create a Linux Server that inherits authentication from main server?

Can I create another server that uses master server's /etc/passwd to authenticate it's users, and if I share users' homes then they can do everything they want within their home directories without ...
1
vote
1answer
670 views

CA Siteminder Installation - “super user could not be saved in the policy store”

Roadblock during CA SiteMinder Policy Server installation. I've moved past various other LDAP credential related errors, but haven't been able to find any information on this one, whatsoever. What ...
-1
votes
1answer
735 views

Apache authentication with LDAP using a FORM [closed]

I have authenticated my web site with Ldap server. Authentication is working fine. Every time i visit the web site, it pop-up's dailog box for user name and password. Now, I want to authenticate ...
2
votes
3answers
1k views

Active Directory : AdExplorer and LDAP browsers

I can access my corp AD with SysInternals' "AdExplorer" with no problems. however, when I try to use generic LDAP browser (ldp.exe in my example) to access the same AD directory I can't get the ...
1
vote
2answers
208 views

Most efficient way to retrieve a set of LDAP records?

I have a set of UIDs - let's say around 200. What is the most efficient way to retrieve all their LDAP records? The first thing that comes to mind is a query that's a big chain of ORs: ...