Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
37 views

Using LDAP attribute to get Home Directory for SFTP connection in RedHat 7.0.3

We need to outsource the authentification on a SFTP server to use an existing LDAP. the connection to this server will be done by (user/password) via LDAP, and the home directory of the user must be ...
2
votes
2answers
20 views

Do all LDAP servers have anonymous access?

I need to configure programmatic ldap authentication in an application. But I'd rather not hardcode passwords anywhere. So it would be very convenient if ldap servers all have anonymous access for ...
1
vote
1answer
43 views

Is this LDAP filter valid syntax?

I'm configuring AD authentication for a product that wants to query AD for groups. This query is finding nothing and the vendor has provided this (objectClass=group)(objectClass=groupOfNames)(...
0
votes
1answer
91 views

LDAP: Fetch users under a OU using ad explorer

I'm using adexplorer to query an LDAP directory. I would like to fetch all users that have a certain OU in their DN. So I tried: The results returns an OU, even though I picked class:user. How do I ...
0
votes
1answer
125 views

how to join centos 7 to samba domain?

In my office, we use samba domain + ldap. I already join some Windows 7 machines, but now I need to join CentOS 7 to that domain. How can I do that? Below are steps that I already did: install nss-...
1
vote
1answer
96 views

Unable to enable LDAP authentication on GPFS / Spectrum Scale file system

I have setup a GPFS / Spectrum Scale cluster on 2 RHEL7 nodes. On that cluster I have created a filesystem. I want to enable LDAP based authentication with kerberos so that I can NFSv4 ACLs to ...
0
votes
1answer
84 views

Linux SMB Server + PAM: How to give LDAP users permissions?

I have a Linux Mint SMB server set up the default way (i.e. the way it comes from apt-get), so I have this set: passdb backend = tdbsam I have LDAP correctly configured with PAM (and user logins ...
0
votes
0answers
37 views

Linux SMB Server authenticating against OS X Server Directory

I have a Linux Mint server and I'm trying to get its Samba server to use authentication from an OS X Open Directory server. Currently, the smb.conf file is unchanged from the default except for this ...
2
votes
1answer
132 views

Integrating squid with active directory

I am trying to integrate squid as a web proxy for my users in active directory. I have followed the tutorial in the squid site in here. When i run the command : msktutil -c -b "CN=Administrator" -s ...
0
votes
0answers
54 views

solutions to filter traffic with group based rules

I have a 25 computer network with 1 pfsense box (with squid installed) and 1 openLDAP server configured & working , 70% of the network is wired the rest is password protected wireless. Right now ...
0
votes
1answer
199 views

Opensource alternative to MS Active Directory

As part of an undergoing IT infrastructure building, I need to implement LDAP directory using opensource communities backed solution. I'm not pretty sure about Openldap and Samba. Do they offer ...
3
votes
1answer
42 views

Any way to query LDAP binds on domain controller?

I'm working on planning a DC rebuild, and I'm trying to be as thorough as possible before demoting the old one. Is there any way to view all LDAP connections to a DC either by source IP or hostname?
0
votes
1answer
26 views

LDAP host changed. Can no longer login to Jenkins to reconfigure

I set up Jenkins with LDAP sign in. Everything worked fine. Now our IT department changed the LDAP host address, and therefore I can no longer sign in to Jenkins in order to change the LDAP host ...
0
votes
0answers
13 views

What happens using SASL plaintext on an openldap server on the server side?

I have an OpenLDAP server and I use SASL with the login authentication mechanism. My user passwords are securely hashed and stored within my LDAP database. I understand that the login credentials are ...
0
votes
0answers
26 views

Single LDAP Query that returns usernames starting with “X” on multiple different containers

I have an assignment to send a daily report of users starting with "X" (or whatever) on multiple different containers (ContainerA, ContainerB, ContainerC). I could simply create a Saved Query for ...
4
votes
2answers
189 views

Do Linux servers using AD/Kerberos for authentication/authorization need computer accounts?

I am confused about whether Linux servers using Active Directory (AD) and Kerberos need computer accounts created? Does the Linux server as a machine need to join and AD domain and in doing so have a ...
0
votes
0answers
26 views

Copy specific entries from Active Directory to Openldap

I am handpicking some entries from Active directory and I want to populate it to openldap. The entries are somethings like dn, cn, unix attirbutes like uid, gid, memberrOf, manager, phonenumber, etc. ...
0
votes
0answers
44 views

LDAP Cassandra OpsCenter Configuration With AD

I have an OpsCenter that I need to connect to AD. The relevant configuration below: [authentication] enabled = True authentication_method = LDAP audit_pattern = ldaplog [ldap] server_host = ldap....
1
vote
0answers
84 views

Clustering of wildfly using apache and haproxy

There is a requirement from my boss to prepare a cluster of our application on wildfly application server. I have designed the architecture as two haproxy(for loadbalancing),two apache servers for (...
0
votes
1answer
44 views

Error trying to enable LDAP with kerberos authentication with GPFS

I have 3 RHEL7 nodes with GPFS / Spectrum Scale 4.2.0.0 installed. The 3 nodes have been setup with GPFS as a cluster with a GPFS filesystem created. I am trying enable LDAP based authentication ...
0
votes
0answers
28 views

do not allow multiple sessions if user have different IPs

I am running Red Hat Enterprise Linux 6.6 and for authentication we use LDAP authentication. We have running application on a server (doesn't really matter which one it is) and the way application ...
0
votes
1answer
77 views

ldapadd returns Type or value exists

I'm trying to add groups to the my LDAP DB from a ldif file. But I can not to do it becuase ldapadd returns ldap_add: Type or value exists (20). $ ldapadd -x -W -v -D "cn=directory manager" -f ...
2
votes
0answers
27 views

can identify and authenticate an ldap user in one of two distinct, separate domains?

Most people configure PAM and NSS ldap modules to point to ldap servers that handles a single search base as defined in pam_ldap.conf or libnss-ldap.conf. The man pages do not describe any option to ...
0
votes
0answers
77 views

Automout user home directories with ldap

I know this question has been asked earlier. I am still not able to solve this error. Scenario: When user will login to ldap server its home directory will change to /home/guests/username My ...
0
votes
1answer
27 views

Allow LDAP Authentication (or connection)

I'm trying to make a webapp that authenticate throw a LDAP Server. But i get this error: ldap_bind(): Unable to bind to server: Can't contact LDAP server And when i try this command: ldapwhoami -...
0
votes
0answers
13 views

LDAP OU Integration

I am trying to integrate jboss 5 with AD.The users in the users OU are authenticated but users of the rest of OUs are not authenticating.The settings in login-config.xml are as follows; <...
0
votes
0answers
17 views

Allow or disallow some users login in Dovecot based in their network

I have a server running dovecot with IMAP and LDAP authentification. All works as expected, however I would want to let some users to access the mail server from outside and other to access from the ...
0
votes
0answers
29 views

Migrate logcal windows users to FreeIPA ones

We have several Windows machine (running 7, 8, and 10, but that should not be relevant) with local users. Most of those local users are the same login name but might have different UID/GID based on ...
1
vote
0answers
41 views

Migrate logcal linux users to FreeIPA ones

We have several Linux machine (running various versions of Fedora and CentOS, but that should not be relevant) with local users. Most of those local users are the same login name but might have ...
0
votes
2answers
452 views

openldap TLS error -8179:Peer's Certificate issuer is not recognized

tl;dr Does this error mean that I need to find my company's ldap server's public certificate and install it, or that my company's ldap server needs to install my public cert? If the former, how can I ...
-2
votes
1answer
12 views

Samba and windows2008 AD,ldap works for windows,not for samba [closed]

The situation Two server one slackware with latest samba 4.3 another windows with windows2008R2 From a linux client i did ldapsearch -vvv -d 100 -b dc=server,dc=prov -H ldap://server.prov CN="...
0
votes
0answers
30 views

How to get rid of unexpected nslcd related messages caused by resolvconf?

I'm on a Ubuntu 12.04 based system. Our system is setup to use nslcd to allow LDAP authentication. In syslog we see lines like this: /var/log/syslog.1:Dec 20 06:25:11 T53-1014-014 nslcd[1496]: [...
0
votes
0answers
20 views

How to set initial user password in openldap?

I am new in setting up LDAP server. I have configured Openldap server and able to add test users from LDIF file. The LDIF file has username and password for each user. Now for the real part, I have ...
0
votes
1answer
38 views

Citrix NetScaler: Configure LDAP Authentication Server

I am trying to configure a Citrix NetScaler to do authentication with Active Directory, and trying to do so from the CLI. Looking at support forums and documentation, it looks like this can be ...
0
votes
1answer
35 views

Export IAM user accounts (with passwords) into LDAP

I have a blank LDAP account and want to import all the IAM user accounts to LDAP and keep the LDAP in sync with IAM (not the other way around using federation). Is this possible? I need a LDIF file ...
0
votes
2answers
135 views

Multiple OU User Search for OpenVPN Server with AD/LDAP Authentication

I have an OpenVPN server that authenticates against a single AD domain. Here is my auth-ldap.conf that is used with OpenVPN <LDAP> URL ldap://ad1.test.company:389,...
0
votes
0answers
62 views

nscd: nss_ldap: could not search LDAP server - server is unavaliable

I have an installation of ubuntu 14.04 and samba4 for Active Directory Today when I login with my LDAP usae has not allowed me, then update and restart the server And now i can see the next errors: ...
0
votes
1answer
37 views

How do I determine if strong key protection is enabled for a certificate private key in Server 2008 R2?

I'm trying to get a Windows Server 2008 R2 domain controller to use SSL with LDAP. I have a certificate installed, but I'm unable to connect on port 636 via ldp.exe (port 389 works just fine). I ...
1
vote
1answer
49 views

Add several new entries to LDAP fails

I can't add more than one record to LDAP. I have blank line before a new DN entry but it seems it doesn't work for some season. ldapadd -x -D cn=Manager,dc=hadoop,dc=local -w -f ldap.ldif ...
0
votes
1answer
25 views

ldap-overlay with fixed default attributes

i'm having a largish user-base (>>1000) which should be able to collectively use some sharing service. the user base is slowly but constantly changing. esp. we are not interested in privilege ...
0
votes
2answers
49 views

pam_groupdn doesn't work at all. always all users allowed to log in

i have tried to install pam, ldap on fedora23. i have configured pam.d/system-auth as follows: #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time ...
0
votes
2answers
557 views

LDAP Authentication - GLPI 0.90.1

I'm trying to integrate GLPI with Active Directory. I'm using windows XAMPP V3.2.2 and GLPI 0.90.1. While setting up the LDAP Directory, I'm getting an error "Test failed: Main server ADSrv". What am ...
0
votes
0answers
21 views

Needed permissions to read msDS-ReplLinkFailures attribute

I'm using powershell to get the value of msDS-ReplLinkFailures attribute like this: Get-ADRootDSE -Properties msDS-ReplLinkFailures This works ok if the current user is member of domain's ...
0
votes
0answers
99 views

horde 5 ldap/samba4 authentication fails “Bad search filter Parameters”

I am trying to authenticate my horde users against my samba4 active directory but I am always getting a "Bad search filter Parameters" error. Unfortunately I am not able to identify the exact problem ...
1
vote
0answers
62 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
0
votes
1answer
29 views

OpenLDAP Filtering Users that are part of Groups of Groups

LDAP Configuration: MemberOf Overlay is enabled Users are part of an organizationalUnit called People. Each user is a "memberOf" a role. For example, a user in their role at a company is a "...
0
votes
0answers
26 views

Ambari log is filled with LdapTemplate warning

I'm running: # ambari-server --version 2.1.0 Specifically, I'm running IBM Open Platform for Hadoop 4.1 FP2. I configured Ambari to use LDAP for authentication, and the LDAP authentication is ...
1
vote
0answers
58 views

Why is LDAP “memberUid” restricted to ascii, but “uid” is not?

I'm getting this error from ApacheDS (2.0.0-M21): ERR_04447_CANNOT_NORMALIZE_VALUE Cannot normalize the wrapped value ERR_04473_NOT_VALID_VALUE Not a valid value 'gu\C3\AApes' for the AttributeType '...
0
votes
0answers
93 views

Webmin authentication against LDAP

I want ultimately to authenticate Webmin user against one LDAP. I have read the page How can I make a Webmin user always use the same password as Unix?. According to this explanation, the ...
-1
votes
1answer
11 views

Unable to set ADS security on Samba DC

I've been trying to set my security as ADS for my Samba DC. Unfortunately, whenever I do, the LDAP server can no longer be found using net ads info. Below is my current smb.conf. [global] workgroup = ...