Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
4 views

Winbind increase idmap range

i have a computing cluster running and use likewise for connecting all machines to the AD. I want to add new machines using ldapsam. My issue is, that it seems to only offer idmap ranges from "idmap ...
0
votes
1answer
24 views

FreeIPA - remove user password

I have created a user in FreeIPA. He has been assigned a password and SSH key. I want him to leave only SSH key. Is there a way, how to remove password??
1
vote
0answers
33 views

What would cause an Active Directory connection attempt to a workstation?

I'm trying to troubleshoot a freezing issue with our git server. We're running Atlassian Stash on a dedicated Windows Server 2012 R2 Standard virtual machine. The server will sometimes (a few times ...
1
vote
1answer
48 views

Limiting SSH users in LDAP to only one command on an SSH bastion

I have a private network of Centos 7 servers. Each of the servers can only be reached via an SSH bastion. Furthermore, all of these servers use SSSD to authenticate SSH users' keys against an LDAP ...
1
vote
1answer
47 views

Setting shell for SSH directory users on a per-group basis in SSSD

I have a network of Centos 7 machines hosting sshd, each of which is configured to lookup a user's public keys in an LDAP directory for ssh authentication. Furthermore, all ssh users that have access ...
0
votes
0answers
67 views

CentOS7 ldap client not authenticating with ldap server

I am using ApacheDS which was a breeze to setup thanks to the apacheds mailing list. I am able to retrieve ldapsearch results, however, I am not able to get anything by doing a:"getent passwd ". ...
0
votes
0answers
59 views

PAM - Ignore local user, if LDAP-connection works

I have configured some SLED10SP1 (not allowed to update) machines to use LDAP for user authentication. Because SLED10 doesn't have official packages for pam_ccreds or sssd, I have to find a way to ...
0
votes
0answers
112 views

How to Setup IIS 7 and LDAP Authentication

Hi IIS and LDAP Experts! I will need to configure IIS 7 so that when a user go to my intranet website it will popup a login box asking for the user to enter his/her intranet ID and password which is ...
0
votes
1answer
63 views

How can I use an objectCategory attribute on slapd?

I am a bloody LDAP newbie. I have managed to set up slapd (which is part of OpenLDAP) with LAM as a frontend and have successfully configured several services to connect to it for user/group ...
0
votes
1answer
13 views

krb5 / ldap: realm name match with directory namingContext

In order to store krb5 principal entries on LDAP, is the LDAP naming context (root basename) required to match the realm name? principals of the realm HQ.EXAMPLE.ORG can be stored in the ...
0
votes
0answers
35 views

why a user account with /bin/false shell in directory server is asking for membership in groups?

Firstly, we use ldap for user authentication. I have accidentally deleted a person account(his loginShell is /bin/false)from our directory server(sun DS7) running on red hat enterprise linux, although ...
0
votes
1answer
120 views

libnss-mysql gone in Jessie?

I was happily using libpam-ldap and libnss-mysql (authenticating clients directly against LDAP, with NSS data such as UID/GID/home dir kept in a mysql database). Now I tried to install Jessie on ...
0
votes
1answer
23 views

Mutiple OUs in Win2k8 pGina configuration

I have pGina installed to a Windows Server 2008 box that is using a RHDS LDAP for authentication. So far I have it working so that if we use only one organizational unit and do not care about ...
0
votes
1answer
108 views

Authenticate SMB connections on OpenBSD using Active Directory

I have an OpenBSD box that is being used primarily as an SFTP server. Some users running windows need the ability to map a share from this server using SMB. Rather than setting up individual accounts ...
1
vote
1answer
19 views

Will adding a new objectClass in ldap get replicated?

I have a ldap setup with one master and two replicas created using this tutorial https://help.ubuntu.com/lts/serverguide/openldap-server.html#openldap-server-replication . If I add a new/custom ...
0
votes
1answer
23 views

Create a new objectClass in order to add a custom attribute to an existing objectClass

Long titles ask for short answers :) I have a ldap server with the default schemas. Under some organizational unit I have entries that have the structural objectClass person and another two clasess ...
1
vote
1answer
42 views

nscd works when strace is attaching to the process

I have a server where I am running nslcd to query an AD server, and use it for authorization, and this is working as expected. Now, I introduced nscd to reduce the load on the AD servers. The results ...
0
votes
0answers
45 views

pam_access nisnetgroup with nested posixgroup

We have pam_access enabled and correctly allowed/denying users based on the rules in place. One such rule looks up LDAP backed NIS groups + : @hostname-granted : ALL Putting tuples in ldap work for ...
0
votes
2answers
134 views

Importing database in LDAP creates error

I have exported my database using the following function slapcat > ldif While I am importing database in other LDAP server it creates error. I am using the following function slapadd -l ldif. ...
2
votes
0answers
44 views

Slow response time when using ADUC utility to search a trusted domain

Current Setup: I have child 2 domains, one in America (amer.domain.com) and one in Asia (asia.domain.com) in the same forest. Both domains are connected via MPLS links. In each physical site, there ...
0
votes
1answer
56 views

How to list uid of all the users of LDAP?

I get list of all the users of LDAP using the following command ldapsearch -x -LLL uid=* > result. The result of the following command results in following format dn: ...
5
votes
5answers
145 views

Filter LDAP user through PAM so it appears to not exist at all

In our corporate environment long ago some wiz decided to put the user "mysql" into LDAP. The account is disabled: $ sudo su - mysql This account is currently not available. ...but it's id still ...
-2
votes
1answer
71 views

Unable to create Home Directory for LDAP Login

I have linked my server with LDAP for ssh login. I get the Following error while logging in using ssh. Could not chdir to home directory /home/ldap/sharukhk: No such file or directory ...
3
votes
0answers
166 views

Active directory filter to get all users on several AD locations without using groups

I'm required to use AD for authorization to some online tools to ease software development across three countries in a big international company. The tools AD/LDAP section have one line to specify a ...
1
vote
1answer
193 views

Java application authentication using Active Directory

I am working on a third party Java application for which I need to authenticate its users using Active Directory. This application is hosted on RHEL 6.5, and uses LDAP to authenticate with Windows ...
0
votes
1answer
32 views

slapd configuration for back-sql: how to traslate examples from slapd.conf to slapd.d

I'm trying to configure slapd with back-sql (specifically postgresql backend). All documents I found (Postgresq LDAP Howto seems to be more complete) are related to old configuration that use ...
0
votes
4answers
586 views

Sync non-AD LDAP instance with Office365 / Azure AD

We have a non-AD LDAP environment that we wish to sync our with our o365 Azure AD directory. Is this currently possible with DirSync AAD Sync or similar?
0
votes
1answer
107 views

Migrate from Windows Server 2008 Active Directory to Samba4

I'd like to migrate from Windows Server 2008 Active Directory to Samba4 AD as our primary domain server. An hour of Googling has not landed me any clear recipes for doing a migration and it is ...
0
votes
1answer
38 views

How can I limit a ldap query to just a few OUs ? LDAP bind to a domain user account

For LDAP queries I created a special account (domain user) located in : OU=work, CN=do, CN=apropos, CN=tev How can I restrict the read permission of this account to just: OU=trouble, OU=now, CN=do, ...
1
vote
2answers
429 views

Configure Gitlab to use FreeIPA as LDAP server

I'm running in ran into a bit of a trouble and I don't seem to be able to fix it. Please follow the scenario bellow: I have two servers: ONE (10.0.3.10): Ubuntu based, having Gitlab (as deb ...
1
vote
0answers
57 views

How can I make Kerberos flush the credential cache when a user changes their password?

We've got a fun new issue after upgrading to OS X 10.10 client and server with Open Directory (from 10.8). When a user changes their password (using System Preferences or at the Login screen) it ...
0
votes
0answers
27 views

Yast authentication server configuration: Global settings empty

I try to enable TLS/SSL for my LDAP-Server on a SLES12. So I enabled LDAP over SSL (ldaps) in Yast > Authentication Server Configuration > Startup Configuration. Fine so far. But when it comes ...
0
votes
0answers
29 views

LDAP troubleshooting

We have a Windows SBS 2011 which sometimes responds slowly to access requests. I'm troubleshooting performance issues fro a while, and now i want to know if there is any problem with the AD, LDAP ...
0
votes
1answer
38 views

Store OpenLDAP connection on a php session with cookies [closed]

Só I have a ldap server that should be managed via php, I can modify anything in Apache,OpenLDAP or php. But as this site already covered I can't store a LDAP connection in a _SESSION variable on ...
0
votes
1answer
186 views

Slaptest, bad configuration file

I have been struggling to start LDAP server and I am failing miserably at it, from journalctl -xn I it clearly say bad configuration files!, but there are three configuration files, but what is ...
0
votes
1answer
77 views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ...
4
votes
1answer
154 views

svnserve+sasl+ldap : saslauthd not contacted?

I am trying to authenticate subversion users against sasl+ldap. Other questions about this problem seem to be related to earlier versions of subversion, or sasldb authentication. lsb_release -a No ...
0
votes
0answers
40 views

olcRequires: difference between authz and bind (with olcDisallows: bind_anon)?

With OpenLDAP, what is the difference between: olcDisallows: bind_anon oldRequires: bind and: olcRequires: authc It seems to me that both configurations would require the client to authenticate ...
0
votes
1answer
21 views

How to add Organisations to LDAP via LDIF?

I want to initially add a couple of organisations. So I created an organisations.ldif in order to add them via ldapadd -Q -Y EXTERNAL -H ldapi:/// -W -f organisations.ldif My file looks like this ...
0
votes
0answers
10 views

RETCODE OpenLDAP overlay configuration

I am looking for various ways to disable Simple Paged Search results on OpenLDAP. Somehow, my attempts to disable paged searches by disabling it in contiguration using olcSizeLimit or olcLimits ...
1
vote
0answers
188 views

Open Directory Password Change Issues on OS X Server 10.10

I'm having a problem with 50+ workstations (10.9 and 10.10) when a user changes their OD password (either at the OS X login screen or the System Preferences). The password change updates on the ...
0
votes
0answers
51 views

OpenLDAP & Posix Groups/Account configuration

with following configuration I am not able to add POSIX users/groups to the LDAP server. If some can educate me about significance of dc in this case, is it FQDN that I mentioned when I created ...
1
vote
1answer
34 views

migrate debian 8 user (SHA512 encrypted with $6 tag) to LDAP

I have a problem with migrating local user from debian 8 to LDAP. As you know debian 6 and above use SHA512 as standard user password encryption. in the shadow file it shows the password with "$6" ...
0
votes
1answer
488 views

SSSD & LDAP authentication

I’m currently working on deploying openldap and SSSD for authentication. When I try to id a user that is stored within ldap I get the response no such user. The user has been added to LDAP correctly ...
-1
votes
1answer
39 views

LDAP down - exim down

I need some ideas here: Centos 5 with ldap authentication loses exim functionality once the ldap server becomes unavailable (in the logfile I can see it just hangs once receives "rcpt to:") , any ...
0
votes
0answers
34 views

disable simple paged results control support

Trying to make my client, originally developed for OpenLDAP, also compatible with Oracle DSEE. Oracle DSEE is missing support for simple paged results, which the client code uses. Yet, ODSEE supports ...
0
votes
1answer
210 views

(Zimbra)OpenLDAP SSHA512

So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology. So my boss wanted me to create an OpenLDAP Database, and ...
0
votes
1answer
290 views

Tortoise SVN: Initial connect timeout

I have a problem when connecting Tortoise SVN to my SVN server. The first connect seems to run into a timeout (SVN hangs about 20 seconds) and the second (automatic) try works instantly. I.e. every ...
0
votes
0answers
201 views

Set Up OpenVPN with Ldap support on CentOS7

We are trying to set up OpenVPN with ldap support via openvpn-auth-ldap on CentOS7. The EPEL repository is not listing openvpn-auth-ldap anymore for CentOS7. For CentOS6, there was a working relase. ...
0
votes
1answer
67 views

FreeIPA (LDAP): Refuse auth for users with expired password

I have a FreeIPA used mostly as an LDAP in many local web services. Unfortunatly LDAP authorizes users to login to 3-rd party applications even when user's password is expired (including first random ...