Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

3
votes
2answers
5k views

Override LDAP shell

I have a LDAP server and a predefined shell (bash) set in it. But there are some machine on which I want a different shell to be used whenever user login to that instead of the shell stored in LDAP. ...
15
votes
2answers
11k views

Using LDAP as auth method for git repositories

I want to convince my boss that we should be using git for version control. He says, that it absolutely must authenticate users through our central LDAP server. I looked at the various solutions ...
8
votes
2answers
3k views

Can My Personal GMail Query A Remote LDAP Server?

I have a personal GMail account, from which I frequently send e-mail to a great many various users of a specific business. The corporation has been kind enough to provide me with the credentials to ...
2
votes
0answers
2k views

TLS (STARTTLS) Failure After 10.6 Upgrade to Open Directory Master

Environment: Mac OS X 10.6.3 install/import of a MacOS X 10.5.8 Open Directory Master server. After that upgrade, LDAP+TLS fails on our MacOS X 10.5, 10.6, CentOS, Debian, and FreeBSD clients ...
1
vote
2answers
2k views

Get-QADComputer -LdapFilter & NOT operator

I'm having issues excluding an OU from my LDAP filter $DaysAgo = (Get-Date).AddDays(-31) $ft = $DaysAgo.ToFileTime() Get-QADComputer -SizeLimit 0 -IncludeAllProperties -SearchRoot ...
3
votes
2answers
32k views

Listing group members using ldapsearch

Our corporate LDAP directory is housed on a Snow Leopard Server Open Directory setup. I'm trying to use the ldapsearch tool to export an .ldif file to import into another external LDAP server to ...
1
vote
1answer
62 views

ldap not properly resolving host

I just changed the IP address of my (openldap) ldap server and despite DNS propagating, ldap still isn't resolving the new address correctly. When I run "host myserver.com" the proper ip address is ...
61
votes
6answers
217k views

How can I figure out my LDAP connection string?

We're on a corporate network thats running active directory and we'd like to test out some LDAP stuff (active directory membership provider, actually) and so far, none of us can figure out what our ...
1
vote
1answer
584 views

LDAP Authentication woes

I have a local OpenLDAP server with a couple of users. I'm using it for development purposes, here's the ldif: #Top level - the organization dn: dc=site, dc=com dc: site description: My Organization ...
-3
votes
3answers
1k views

concrete uses of LDAP?

im new to LDAP. i wonder what are some concrete examples of using LDAP. things that are MUCH more easier to do when you got 3-7 linux computers in a small company network. one use that is very ...
2
votes
3answers
1k views

Active Directory LDAP and user issues (using apache2 for svn access)

I currently have a setup where I work that lets users use their active directory domain logins and passwords to authenticate and authorize access to Subversion. Currently I need to allow application ...
0
votes
1answer
972 views

PhpLdapAdmin - How to disable a user/uid?

Using PhpLdapAdmin, how do you disable/lock a user/uid so that it can't be used to login to anything on the network that uses LDAP?
0
votes
3answers
1k views

Super user in LDAP?

I am running 10 Linux machines that is doing different types of work. The machines are configured to use LDAP authentication so when one user is configured in slapd he can login on all the machines. ...
0
votes
1answer
569 views

where can I find list of builtin objectClasses and attributes for OpenLDAP?

where can I find the list of built-in objectClasses and attributes the OpenLDAP server ships with?
0
votes
3answers
760 views

XServe won't let me log in

After a power-failure, my Xserve won't let me log in on the login screen. I can still SSH into the box and access its other services, but the login box just shakes when I write either a local username ...
0
votes
1answer
188 views

LDAP NTLM interop

Our company uses NTLM to authenticate users. But there are a bunch of softwares with LDAP authentication support. So, is there a way to setup an LDAP server (preferably under WinNT), which can ...
0
votes
2answers
4k views

AdPrep logs show an LDAP error

What I am trying to do is transition our domain from Server 2003 Enterprise x32 to Server 2008 R2 Enterprise x64. Here is what I have done thus far. The 2003 server is a physical machine, the 2008 ...
2
votes
3answers
774 views

What's the appropriate way to upgrade Apache in RHEL?

The version of Apache shipped in RHEL 5.4 is very old. A feature I need only shipped recently. It seems Apache upstream only ships tarballs, and omits binary packages. Obviously I could build from ...
1
vote
1answer
2k views

How to set CA cert file for LDAP backend server in smbpasswd configuration

I am having a problem with smbpasswd, an LDAP backend server and SSL/TLS certificates. The client machine that I run smbpasswd on is a Debian Etch machine, and the Ldap server is Sun DS running on ...
0
votes
2answers
230 views

Same password for apache and samba with ldap?

I am experimenting with LDAP. As I see it, apache uses the Unix password field to get the credentials and samba the field that is specific for samba. I just use the LDAP server for a single server, ...
2
votes
1answer
274 views

Dealing with LDAP failure when using it for PAM/NSS?

I use a redundant pair of OpenLDAP servers for PAM auth and directory services via NSS. It's been 100% reliable so far, but nothing runs flawlessly forever. What steps should I take now so I have a ...
0
votes
1answer
379 views

recommendation on good LDAP training, preferably with concentrating on OpenLDAP [closed]

I need to bring in someone to train my team with the usage of LDAP. Any objective recommendations on a company/freelance that gives such a service? in the USA/dc
0
votes
2answers
2k views

VPN Router + LDAP/RADIUS?

I need a VPN-capable router, preferably with a web interface, that should be able to authenticate against my LDAP server which is behind the router. I'm utterly unable to configure that setup for the ...
0
votes
2answers
3k views

LDAP (slapd) creating users with access to specific trees

I am setting up a CentOS server with Virtualmin and Postfix, and I am trying to use LDAP to store unix users, groups, Postfix aliases and virtual domains. I am following the instructions from Webmin's ...
1
vote
2answers
2k views

Configure ApacheDS 1.5 with accessControlEnabled=true for authenticated access

I need to set up an apacheDS instance. I am using standalone 1.5.5 on Linux. I have removed the example partition and added two of my own, each with their own suffixes. I have imported LDIFs for ...
0
votes
2answers
168 views

Active Directory or Mac configuration. Where to look?

I m a student at a university. There is a computer lab which has Mac computers. There is citrix account which is kinda VPN to school network. There is putty in citrix applications. When i use putty ...
5
votes
2answers
7k views

How to handle nested groups in LDAP

I am total LDAP newbie and I am just researching if I can use it for my next project or better stay away from it. The project will depend heavily on the concept of nested groups and I frequently need ...
2
votes
2answers
2k views

LDAP Connection String for Python-LDAP

I'm using Windows SBS 2008, and am creating an internal webapp and would like to authenticate with my LDAP server. What is the best method for determining what connection string I should use? I'm ...
3
votes
2answers
728 views

What Defines an AD Object as “Inactive”

I am going to be using some DSQUERY/DSMOVE scripts to clean up my AD Domin. One option is to move inactive objects to a OU that has restrictive GPOs applied to it. Something like: DSQUERY computer ...
1
vote
2answers
162 views

How many nodes/records can I have at the top level of an OpenLdap server

I have installed openLdap. Created one top record/node and some others below that. Can I create another top record? I am trying to achieve the same effect of creating several DBs on one sql server (or ...
5
votes
2answers
2k views

Active Directory and Apple's Workgroup Manager

I thought I'd share my experiences here. I work for a small business with only ~20 users. I wanted the ability to use managed client preferences to assign things like the software update server. ...
6
votes
4answers
1k views

Free calendar server? [closed]

I am looking for free calendar server who can authenticate to LDAP server. I want our users to use thunderbird lightning with calendar server. We have mail server with devcot and squirlmail for ...
4
votes
5answers
5k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
2
votes
2answers
720 views

Snow Leopard Hangs when Using OpenLDAP on Linux for Authentication

We have a new iMac on Snow Leopard authenticating against an OpenLDAP directory. Homes are on (automounted) NFSv3 (Linux, kernel-server). NFS seems to work pretty well (if a bit slow, but we don't ...
2
votes
2answers
5k views

Switching to LDAP over SSL for Active Directory

On our active directory server, I would like to enable LDAP over SSL as per this: http://support.microsoft.com/kb/321051. I am wondering, once this is set up, will LDAP still be listening on the ...
1
vote
1answer
2k views

Securing userPassword access with OpenLDAP in RHEL

I have set up an OpenLDAP server on RHEL 5.4, and am configuring other servers to authenticate against it. I have both ldap with StartTLS and ldaps configured and working. On my client machines, my ...
1
vote
1answer
5k views

Why won't my Apache ldap authentication work (Password Mismatch)?

I think I have my .conf file settings correct, but it seems that I can't validate my password. I know the password is correct because I've logged in with it. Looking at the Apache logs, it looks as ...
6
votes
2answers
3k views

apache auth: combination of LDAP and htpasswd

We're using Apache with mod_svn to serve the subversion repo. Apache is hooked to an LDAP server so all users can use their domain passwords. For the build machine to be able to checkout, I want to ...
0
votes
2answers
314 views

ldap ldif how to add

Having this initialization ldif dn: dc=localhost,dc=localdomain changetype: add objectclass: dcObject objectclass: organization o: My Example dc: localhost dn: cn=Manager,dc=localhost,dc=localdomain ...
4
votes
5answers
560 views

Can I get AD to authenticate via another LDAP server?

I need to set up an AD. The larger organisation I'm in has its own LDAP service which handles authentication and some other details. I would like to get AD to use that LDAP info just for ...
10
votes
3answers
8k views

Restricting account logins using LDAP and PAM

I was hoping some PAM/LDAP gurus may be able to help me out here. I've recently set up an LDAP directory on Ubuntu Server to hold accounts for both my clients (for use with web-based systems) and ...
0
votes
3answers
3k views

Secure ldap problem [closed]

I have tried to config my openldap to have secure connection by using openssl on Debian5. By the way, I got trouble during the below command. ldap:/etc/ldap# slapd -h 'ldap:// ldaps://' -d1 ...
4
votes
4answers
4k views

Using slapcat to backup LDAP

I'm running an OpenLDAP directory on a Debian server, using the hdb backend. I've been wondering about backups, and did som reading on the net. Slapcat seems to be the way to go, but I keep seeing ...
3
votes
1answer
960 views

How to move SharePoint authentication from AD to LDAP without breaking user profiles?

We have a bunch of users in a local Active Directory OU that access the SharePoint portal. We've just added LDAP authentication and pointed it at the organisation's global LDAP server, so out AD ...
4
votes
3answers
8k views

How can I proxy multiple LDAP servers, and still have grouping of users on the proxy?

I have 2 problems that I'm hoping to find a common solution to. First, I need to find a way to have multiple LDAP servers (Windows AD's across multiple domains) feed into a single source for ...
4
votes
2answers
2k views

Keep AD Group Synced in OpenLDAP with POSIX Account Augmentation

What's the most obvious way of achieving the following: The site has an working AD infrastructure and certain parts of the infrastructure are tightly coupled GNU/Linux machines where people from the ...
3
votes
4answers
4k views

Apache LDAP authentication (mod_auth_ldap) on MacOS Server (10.5)

A - Is there a LDAP authentication module (mod_auth_ldap) for the version of Apache that comes built into MacOS Server 10.5? (I'm pretty sure no, but maybe someone compiled one.) B - If not, can it ...
1
vote
0answers
487 views

Secure authenticating in squid without Samba

Situation: I have a Squid server (3.0) and a LDAP server and the network setup looks like this: Internet | | | Users ...
5
votes
3answers
1k views

LDAP Users Home Directories

I'm trying to setup linux login via an LDAP server. I have everything working except setting the user's home directory. There is no parameter in the LDAP database that I can map to the ...
2
votes
1answer
129 views

Samba: weird GIDs added in LDAP

I have installed the samba server (3.4.0, Ubuntu) with ldapsam environment and suddenly a logged user is automatically added to grups 10002, 10003 and 10005. This is bad as incidentally these gid's ...