Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
1answer
139 views

ldap fail after ubuntu upgrade to 12.04

I have upgraded ubuntu from 10.4 to 12.04. After it's done, ldap service is stopped and failed to start again! Now none of other services function! :( I checked error logs and found this: Feb 22 ...
0
votes
1answer
30 views

Is it possible to configure a Linux server to use more than one LDAP target?

We have an environment that we are tasked with managing while also giving access to projects that run the applications on the servers. Some of those projects have stood up LDAP for authenticating ...
1
vote
0answers
40 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
0
votes
2answers
91 views

Can't login to LDAP with current Windows user

I'm trying to connect to AD server with various tools under Windows. If I provide my domain\username and password, I have no problems If I don't provide credentials, I do connect, but I have very ...
0
votes
0answers
68 views

Get only ldap user or group using getent command

I need to write an audit check, where I have to make sure users are able to login to ldap client machines with ldap credentials over ssh. Either I am going to run bash script in a for loop, or I ...
2
votes
2answers
50 views

LDAP Breaking when moving user

Since I've been working at this company we've had a very basic AD setup. Users go in the user CN and there is a few OUs for computers, like desktops and servers. Recently I've been planning a more ...
0
votes
1answer
110 views

Can't synchronize the user group in TeamCity

0 user and group synchronized Below are my ldap log and settings. All I want to do is: 1. map the AD group "ccusers" to a group in TeamCity and create all users in that group. 2. Or add all users in ...
3
votes
1answer
335 views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
1
vote
1answer
385 views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
0
votes
1answer
69 views

Immediate logout after login

I have copied VM with Red Hat 6.4 in VMware vSphere Client, move it to another network and change configs for connecting to ldap servers. And now I have a problem with logging procedure through LDAP. ...
0
votes
0answers
127 views

Apache mod_authnz_ldap Error 500

Ubuntu 12.04 LTS Apache/2.2.22 http://server/lightsquid/ gives window with username/password request, then «500 Internal Server Error». Error rises whatever username and password were used: valid or ...
1
vote
1answer
816 views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
0answers
222 views

Dovecot won't work with quota value from LDAP that include the “S” appended for size?

I have a courier-imap IMAP system backed by LDAP holding the user data. I would like to convert IMAP to dovecot, and I am able to successfully configure basic login; that is working correctly. But I ...
0
votes
1answer
477 views

LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS

SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN tl;dr: We uses a self-signed CA and we ...
0
votes
0answers
34 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
27 views

What is the purpose of the OU in authLDAPURL and what (if anything) does it do to filter authentication requests?

I'm trying to set up authentication for my Apache web server using Active Directory. I do not want to limit users based on groups or any other method other than being a valid user. I have users who ...
0
votes
0answers
79 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
1answer
24 views

Linux map usernames

We had an LDAP server which had our own groups and usernames on. Now we are moving to a centrally managed LDAP server. The users now have a different username but still have a home folder mapped to ...
1
vote
1answer
28 views

OpenLDAP user group membership integrity

In OpenLDAP a user has membership in a group. Suppose one deletes the user. In the member attribute of the group the user remains. Is this considered an integrity violation? Is there a means to ...
2
votes
2answers
131 views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
1
vote
1answer
79 views

Lotus Domino Server Integrated with corporate ldap is fetching garbage values

I am using Directory Assistance (da.nsf) to use our corporate ldap for authentication and authorization. Also for sending emails. While sending emails, i will just give the common name and the server ...
1
vote
1answer
185 views

Setting up a mail server using postfix, dovecot, mailman and ldap

I don't really have much experience with mail servers so forgive me if some of my terminology is off. First of all, here's what I'm trying to do: get user information using ldap (postfix?) ...
1
vote
1answer
608 views

How do you set password-hash for OpenLDAP?

I have the following version on Ubuntu 12.04: OpenLDAP: slapd (Sep 19 2013 22:49:31) $ buildd@batsu:/build/buildd/openldap-2.4.28/debian/build/servers/slapd OpenLDAP now offers SSHA as the default ...
0
votes
0answers
73 views

QNAP LDAP server cannot change primary user group

We are setting up a new QNAP server in our office. We have set up NFS and LDAP to share users and files in a linux only network. The LDAP is giving us some trouble. As the default user group Domain ...
0
votes
0answers
324 views

Change local password as root after configuring for MS-AD Kerberos+LDAP

I have followed this excelent post to configure Kerberos + LDAP: http://koo.fi/blog/2013/01/06/ubuntu-12-04-active-directory-authentication/ However, there are some local users used for services. When ...
0
votes
3answers
1k views

root cannot access user's home folder shared via NFS

We have a local server that exports an NFS share, used as parent directory for Linux home folders in the network. The users authenticate via LDAP (running on the same server). Authentication works ...
2
votes
0answers
113 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
2
votes
1answer
51 views

OpenVPN LDAP plugin error

I'm getting this error after (what I think is) a successful LDAP authentication: No remote address supplied to OpenVPN LDAP Plugin (OPENVPN_PLUGIN_CLIENT_CONNECT). What does this error mean? From ...
0
votes
0answers
38 views

LDAP: what's with objectClass top?

I'm trying to get my head around LDAP and have installed a test OpenLDAP server (latest version slapd 2.4.31-1+nmu2) on a Debian 7.3.0 amd64 machine. After the basic setup which is done as part of the ...
0
votes
0answers
322 views

Configuring mod_auth_sspi to find remote user

I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet. The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
1
vote
1answer
35 views

Is it possible to create add people from outside the company inside AD mailinglists?

I would like to know if it is possible to add people from outside your company inside you AD so they can be added as members of different mailing lists. Clearly, I am looking for a safe way of doing ...
0
votes
1answer
135 views

NFS, Quota and LDAP

I have the following scenario in two servers with Debian: Server #1 OpenLDAP, NFS exporting /home Server #2 PAM with pam_ldap configured to authenticate against Server #1, /home directory mounted ...
0
votes
1answer
254 views

Jenkins: LDAP username/email lookup

My Jenkins LDAP configuration works fine for the user login and user details. The user John Doe can login with his username jdoe and his password. His initial user information (user/jdoe/configure) ...
0
votes
0answers
31 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
0
votes
1answer
213 views

Sonicwall TZ205w and Server 2012: Unable to authenticate via LDAP for VPN access (SSLVPN nor NetExtender)

I have been working all evening on this issue and have hit a roadblock. We have a firewall that recently was restored to a November backup, and after reconfiguration LDAP auth is toast. I researched ...
0
votes
1answer
248 views

apache mod_authnz_ldap - 500 error when blank username used

(should be tagged mod-authnz-ldap, but not enough rep) I've got Apache 2.4 running on Windows Server 2012. I've got mod_authnz_ldap working except if users put a blank username. This results in a ...
2
votes
1answer
39 views

Advantages of auxiliary classes when extending Active Directory schema

I need to add some attributes to the user class in Active Directory. I see that to do this it is either possible to add the attributes directly to the user class, or to create an auxiliary class ...
4
votes
2answers
78 views

Which field to use when authenticating against Active Directory?

Active Directory user objects include a number of fields that can be considered an identifier. The following lists some of these with their label in ADUC and their attribute name: Full Name - cn ? ...
1
vote
1answer
224 views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
0
votes
1answer
46 views

Sudo Command Alias option equivalent in OpenLDAP

I have an OpenLDAP installation that manages Sudo as well. Everytime I create a sudoers role, I have to list the commands that that sudoers role can run. This leads to a lot of repetition. Is there ...
0
votes
0answers
48 views

MOD_AUTHNZ_LDAP query failing on search query yet search works in Apache Directory Studio

I have a search issue with mod_authnz_ldap that I need help on. I need to give authentication to users in the active directory however seem to need to specify "OU=XX" in the search string. Successful ...
1
vote
0answers
81 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
0
votes
0answers
630 views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
1
vote
1answer
82 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
4
votes
2answers
45 views

Security concern for LDAP Query

Server OS = Windows Server 2008 R2 Std ( Domain Controller ) Client OS = windows XP & 7 Whenever we add Laptop / Desktop in to Domain. After that if User want to have information of Certain ...
1
vote
0answers
218 views

adamsync.exe /sync is failing with “Naming Violation”

I am trying to synchronize my AD LDS instance (localhost:50006) with AD DS entries (basically trying to get user and computer accounts from AD DS so that I can use windows security principals in my ...
1
vote
0answers
39 views

Samba authentication using read-only LDAP server without samba attributes

I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server. ...
1
vote
1answer
235 views

Automounting home directories using LDAP in ArchLinux

I have managed to set up an OpenLDAP server that runs ArchLinux. I can now log in from the client (also ArchLinux) using the LDAP users. Now i want to mount the home directories over the network... I ...
1
vote
0answers
107 views

OpenLDAP on ArchLinux users cannot change passwd

I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
0
votes
1answer
296 views

Can't login with KDM and SSSD but works fine from console

I have LDAP authentication set up with SSSD and I can login fine through console and ssh. However when I try to login through KDM it just says authentication failure... More specifically: Jan 9 ...