Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
49 views

issues with svnserve using ldap and sasl

I am trying to setup SVN's svnserve server using ldap and sasl to authenticate users and to encrypt data but I come across the following issues: /var/log/messages error or warning when I execute ...
1
vote
1answer
91 views

Is LDAP used by Active Directory for anything if I only use Kerberos for authentication?

In my windows only domain, Kerberos is used for all authentication. The domain controllers I understand replicate & authenticate using RPC. Is LDAP used for anything else? Should I close the ...
1
vote
1answer
116 views

Allow self password change using LDAP(s) with Samba4

I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ ...
0
votes
1answer
68 views

ldap_add: Invalid DN syntax (34)

I am configuring my LDAP for roaming profiles using autofs, but when I run this command ldapadd -x -D "cn=admin,dc=example,dc=com" -W -f automount.ldif I get this error message ldap_add: Invalid ...
1
vote
0answers
39 views

LDAP at IBM XIV

I have problem with authenticating users over LDAP (Active Directory) Windows 2008 R2 on IBM XIV. After troubleshooting I've find out problems caused by polish letters in CommonName ...
1
vote
1answer
109 views

LDAP auth successful with additional characters

I have a service which uses a LDAP directory (anonymous bind) to get the users and their passwords in order to perform the authentication. The problem is that I've realized that I can login with a ...
3
votes
1answer
137 views

Rabbitmq Won't Talk to Active Directory

I have a rabbitmq server that I need to hook up to AD. Configuration is set using puppet rabbitmq module, with some minor manual changes (log level): % This file managed by Puppet % Template Path: ...
5
votes
3answers
310 views

How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?

I'm setting up OpenLDAP slapd on Ubuntu 14.04 Trusty Tahr. I want certain instances (replication etc.) that aren't users to be able to login via SASL using DIGEST-MD5 mechanism. Unlike users, they ...
0
votes
0answers
80 views

Freeradius not expanding “Calling-Station-Id” attribute in LDAP search

I'm trying to do PEAP-MSCHAPv2, then do a LDAP search to verify the user is in the correct group AND see if there MAC address is under a otherLoginWorkstation entry. If you look in the logs, ...
0
votes
0answers
16 views

Can one safely migrate a non-LDAP Gitlab to an LDAP one?

I have two Gitlab installations. One uses Gitlab's internal authentication system and the other (newer) one uses LDAP. I now want to migrate everything from the old one to the new one. Both Gitlabs ...
2
votes
1answer
52 views

OpenLDAP - How to restrict Debian login to specific groups (posixGroup)?

I'm trying to restrict login to specific LDAP groups in Debian 8. The system is configured to use OpenLDAP (PAM) as authentication method. My goal is to configure the system to allow all local users ...
0
votes
0answers
53 views

Why I cannot find ldap.conf file when I want to integrate 389-ds and samba on centos 7?

I am working on two servers, a samba server and a 389-ds server. Now I want to integrate them so that samba shares are authenticated via ldap server. I have followed instructions on ...
0
votes
0answers
49 views

postfix rejects all EMails Recipient address rejected: User unknown inlocal recipient table

Hi Together I've got a problem with my postfix server and i can't solve it. I set up a local mailserver with dovecot and postfix to receive e-mail over my own domain. It worked fine till i tried to ...
0
votes
1answer
31 views

Grant Kerberos Ticket on successfull authentication against third party password store

I am currently building a system where I would like to deploy Kerberos. However my external constraints on the user management do not allow me to authenticate the users against Kerberos itself. I do ...
0
votes
0answers
34 views

LDAP dynlist not working with syncrepl replication

I'm using syncrepl replication with one master and many slaves. I'm also using dynlist overlay. Dynlist works on the master, but not on slaves. When I run a query on master, everything works ...
0
votes
1answer
15 views

AD LDS data refreshing from script

I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account. I cannot enable syncrepl ont ...
0
votes
1answer
21 views

Apache Authenication -http request failing in sub directories

I'm running an apachev2.2 server and I am using LDAP to authenticate the root directory. The authenication works well, however my page uses php which is using the file_puts_content function to grab ...
1
vote
1answer
116 views

Export LDAP schema without data

For testing purposes, I need a copy of our LDAP server without any personal data. What is the best way, to export this from an existing OpenLDAP server? I tried ldapsearch and Apache Directory ...
1
vote
0answers
43 views

Gitlab and LDAP against CommuniGate Pro Server

I'm currently trying to make our GitLab authenticate to LDAP that is provided by CommuniGate Pro server. When using command line tests (like ldapsearch) I'm successfully authenticating and getting ...
0
votes
1answer
41 views

How to configure openldap with ldapmodify

At the beginning i would like to apologize for my english. I have to admit that i am totally beginner with ldap but i really would like to learn how to configure it. I've just installed package of ...
7
votes
2answers
332 views

SSSD rejects LDAP login with su: incorrect password

I've set up an LDAP server with user accounts. I've successfully configured a Rails application to authenticate against this LDAP server. I'm now trying to configure SSSD to authenticate against LDAP, ...
0
votes
1answer
62 views

With freeradius and PEAP-MSCHAP, how does one limit connectivity to a single group?

I feel like jumping up and down after I got FreeRadius, samba winbind, XCA w/ ECDSA certs, Active Directory, and Ubiquiti Unifi all talking together. Next problem, any valid account in ...
0
votes
1answer
77 views

How to log all Active Directory LDAP queries?

I want to debug the Windows Server 2008's LDAP and see all the LDAP search details, so I edit the Field Engineering key to 5 in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics ...
2
votes
2answers
35 views

How do I search AD Configuration partition for a given string?

I'm having an issue with installing/uninstalling an Exchange server. I suspect the server wasn't properly removed from AD and as a result I'm getting an error. (I've already wiped the machine, the ...
0
votes
1answer
38 views

Linux LDAP to Ldapadmin configuration issues

I'm learning how to setup and use OpenLDAP installed on an Ubuntu server. I executed sudo apt-get install slapd ldap-utils -y and set my ldap domain to test.mydomain.com. I can execute ldapadd ...
0
votes
1answer
47 views

How config samba to use ladp attr “userPassword” password OR config ldap when attr “userPassword” changed then “sambaNTPassword” will be changed too?

I installed samba-4.1.12-24.el7_1.x86_64 and openldap-2.4.39-7.el7.centos.x86_64 and self-service-password for ladp user change their password. I noticed self-service-password will change ldap attr ...
3
votes
0answers
45 views

I need help trying to authenticate with AD from my linux machine

I am not experienced in this, so there might be some points that I am missing. Initially I tried to setup Cyrus Mail w/ SASL for AD authentication. After several tries, it failed to work. I switched ...
1
vote
1answer
96 views

PAM with LDAP and add an exception for local user

I've successfully configured LDAP and SSH. Also I've added a requirement that user should be in admin group. That works. /etc/ldap.conf ... pam_groupdn cn=admin,ou=Groups,dc=example,dc=com ... ...
2
votes
0answers
60 views

How do I configure an AD DC to respond to LDAP binds on ldaps://?

I am working with a Windows Server 2012 R2 DC which is the acting LDAP authentication server for the domain. From both ldp.exe on the same machine and php5-ldap on a separate Ubuntu box on the ...
0
votes
2answers
128 views

SSSD for LDAP user authentication only (just bind) on Ubuntu, local databases for uid and groups

Every guide to using SSSD for LDAP authentication I've found thus far shows you how to do more than just authenticate a user, such as provide their shell, groups, etc. I don't know how to remove ...
1
vote
2answers
160 views

Cannot Login via SSH with LDAP-Account after changing default port

I changes the ssh default port on my CentOS7 installation. But I am not able to connect to the server with an ldap-account. I am getting "connection refused and the following error: Nov 16 16:43:52 ...
1
vote
1answer
121 views

How to install a trusted certificate on client machine to enable LDAP authentication?

I downloaded a TurnKey Linux OpenLDAP vm instance. It now runs in a vm. I am using this for user account authentication over a network. The client machine is a stock CentOS 7 machine. Everything on ...
0
votes
0answers
89 views

Ubuntu LDAP and NFS directory permissions

I have an issue with NFS and directory permissions using LDAP. Users that are members of a certain group cannot access a directory owned by that group (it works fine without NFS). They can access ...
0
votes
2answers
157 views

Unable to authenticate MediaWiki (on LAMP/Ubuntu) users using AD (on Windows Server 2012 R2) via LDAP

I am working in an AD domain with a single DC running Windows Server 2012 R2. On the domain's network (though not formally domain-joined) is a LAMP web server running Ubuntu Server 14.04.3 LTS. All ...
0
votes
1answer
48 views

saslauthd authentication fails for AD

I cannot get saslauthd to work with Active Directory. Here is /etc/saslauthd.conf: ldap_use_sasl: yes ldap_servers: ldap://ad.example.com ldap_search_base: OU=Users,DC=example,DC=com ldap_bind_dn: ...
0
votes
1answer
91 views

how to force ldap user to change password at first login

I have gone through the similar posts on the same question, yet couldn't find the correct answer to implement. I need to force all LDAP users to change their default password set by administrator at ...
0
votes
0answers
84 views

How to purge roaming credentials from AD user objects?

Background Due to low-budget constraints we are using roaming credentials instead of smart cards in our environment. Problem Now we have recognized that the relevant AD user attributes became ...
-1
votes
1answer
96 views

ADFS/SSO on a AWS EC2 Linux server [closed]

I have a website running on a AWS Linux EC2 instance with a Cpanel/WHM installation. Until now the website was protected by a single password, but I was asked to implement the company's Single Sign ...
1
vote
0answers
234 views

How to use SHA-256 hashed (and salted) passwords from OpenLDAP in pam_ldap?

I have hashed and salted passwords in OpenLDAP for login via PAM in Linux. The setup works when the hashes are of type SHA-1 (salted or unsalted) or plain text. In these cases everything works fine ...
1
vote
1answer
78 views

OpenLDAP configure LDAPS, restart fails

I am attempting to get ldaps working with openldap. I have a wildcard ssl certificate that was issued for this domain and have used ldapmodify to add the relevant files to cn=config as show here. ...
4
votes
0answers
36 views

Why is it common in the startup world for ssh keys to be used for authetication instead of kerberos? [closed]

My first few jobs as a linux admin had be working under some very senior admins. In all of these cases kerberos was setup for users to request a security token and gain access to company servers for ...
1
vote
1answer
296 views

Enable LDAP client in SLES 12 from command line

I want to enable / configure the LDAP client in SLES 12 without the use of the yast GUI. Before 12 (or 11 sp3 if I remember well) I used to do it with: yast2 ldap configure server="myserver" ...
0
votes
3answers
114 views

Active Directory Multi Site. Choose nearest DCs into Linux/Not-Microsoft applications

i'm having a problem using ldap based on Active Directory in a multi-site environment. Basically I have several different environments(sites) and each of them have its own dedicated couple of domain ...
0
votes
0answers
46 views

Ubuntu: Authenticating against ldapjs server

Our developers have decided to go with ldapjs for a SSO solution for most of our applications. I have been tasked with getting our Ubuntu servers to authenticate against this ldapjs server. Although I ...
0
votes
0answers
72 views

Centos LDAP server slapd stops responding until rsyslog is restarted

Have a LDAP sever running centos 6 with a fairly low amount of LDAP AUTH requests. Every couple of days the LDAP server will stop responding completely to any requests. LDAPsearch will freeze and ...
0
votes
1answer
28 views

Can I convert an internal user into LDAP user in Foreman?

I've got several users set up in Foreman 1.9, and I've just enabled LDAP authentication. I can get a new user logged in, but lots of machines are owned by older users, and there is editing history for ...
0
votes
1answer
363 views

ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1) for ldapi:/// on CentOS

(This is a follow-up to ldap_modify: Insufficient access (50) when changing password as we identified a separate issue during diagnostics.) Before modifying the cn=config LDAP database, I'm trying to ...
0
votes
1answer
23 views

Selective Apache v2.2 Authentication

I would like to modify this snippet so that connections from a certain IP subnet will be accepted without a requirement for authentication. Is this possible? TIA Shaun <Location "/rssbus"> ...
3
votes
1answer
136 views

Master is Dead - Promote LDAP Slave to Master

I have inherited an undocumented openLdap setup - one Master server with two slaves. The Master died hard last night - disc corruption - the backup was a clone system on the same server and disk - so ...
4
votes
3answers
266 views

centralized audit server solution for mutiple server management [closed]

We have dozens of Linux servers, and several developers, and each of the developer covers parts of the servers. Currently each server has an admin account, if someone want's to manage that server, ...