Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
54 views

How to change OpenLDAP core attributes

Specifically, I need to add ORDERING caseIgnoreOrderingMatch to the givenName and surname attributes. I had hoped there was some way to do this using ldapmodify but the following is not working for me ...
0
votes
1answer
48 views

LDAPs using Anonymous Access to AD forest

There is a problem related to AD which I cannot understand what configuration is missing to fix the issue. I have two DCs: testa and testb and both contain AD. I'm logged in to testa and I'm trying ...
3
votes
2answers
178 views

Is the whenChanged Active Directory attribute editable?

I've been searching for tools to change Active Directory object attributes, and I noticed the tools and articles and found so far are explicitly not mentioning capability to edit the whenChanged ...
0
votes
1answer
277 views

postgresql LDAP authentication

I am trying to give an LDAP authentication to my postgresql database. Here is my pg_hba.conf config file local all all md5 local all postgres md5 host all all 0.0.0.0/0 ldap ...
1
vote
1answer
96 views

How do I enable nis schema in apacheDS?

I'm having difficulty figuring out how to enable the nis schema in apacheDS (I want to be able to use the posixGroup and posixAccount classes).
0
votes
1answer
82 views

Capturing LDAPS traffic with tcpdump

I have an app server that authenticates against Active Directory using LDAPS. I am connecting to the AD server over port 636. I'm trying to troubleshoot/debug some performance issues and am beginning ...
0
votes
0answers
33 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
0
votes
0answers
112 views

ldapsearch throws me a login fail (invalid credentials (49))

I'm starting with LDAP and trying to configure all in this tutorial step by step: http://wiki.openiam.com/pages/viewpage.action?pageId=7635198 But when I'm in 10th step: ldapsearch -h localhost -D ...
1
vote
1answer
88 views

LDAP authentication using RADIUS server

I have a RADIUS server with a custom authentication method. I have a Mysql-Database with passwords of a Django CMS which are hashed in PBKDF2_SHA256, so I had to write a custom authentication script. ...
0
votes
0answers
50 views

LDAP & IMAP - force users to password change

I need to force users to password change (passwords stored in LDAP) - but most of them use only mail clients to read mail (via IMAP) - is there any way i can force a password change during mail ...
0
votes
2answers
1k views

Installation OpenLDAP on CentOS 7

I'm following this OpenLDAP step by step tutorial: http://www.server-world.info/en/note?os=CentOS_7&p=openldap&f=1 Important: I'm working on CentOS 7 But when in the first part I try to start ...
0
votes
1answer
94 views

pam_check_host_attr not working properly

Disclaimer: I'm new to ldap, so hopefully I haven't done anything majorly wrong! Aim: To centralise user credentials and restrict client login to certain machines. I have a barebones openLDAP server ...
1
vote
0answers
20 views

Setting environment variables based on passing Require directive

I finally succeed on configuring Apache as a SPNEGO reverse proxy for my app, and I'm using the AUTHORIZE_SAMACCOUNTNAME, AUTHORIZE_CN and AUTHORIZE_MAIL to figure out some information about the ...
0
votes
0answers
44 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
1answer
52 views

perl print ldap tree hierarchy at command line

Is there a way to print a tree like view of an existing ldap directory at the command line with perl? Like the 'tree' command does with files/directories, but for ldap?
5
votes
1answer
2k views

SSH key authentication using LDAP

In short: Would like a way to do SSH key authentication via LDAP. Problem: We use LDAP (slapd) for directory services and we've recently moved to using our own AMI for building instances. The ...
1
vote
0answers
79 views

Nagios 3.2.3 Core web interface login via LDAP using full names for username

First off I've never done any Nagios or LDAP configuration in the past and I've been sort of dumped into this as is so often the case so forgive my inevitable ignorance regarding these things but I've ...
0
votes
1answer
50 views

Unable to connect to server via LDAPS

I'm running OpenLDAP on an up-to-date Debian box. I'm trying to run a simple command: ldapsearch -x -h <<IP>>:636 -D cn=<<BASE DN>> -d1 and I get this output: ldap_create ...
2
votes
0answers
20 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
0
votes
0answers
72 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
2
votes
1answer
141 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
1
vote
1answer
192 views

git-http-backend and LDAP authentication, push error: requested URL returned error: 401 Authorization Required

My setup OS: debian git: v 1.7.10 apache (with suexec mode enabled) configuration with git-http-backend and LDAP authorization to git repos which works for clone operations, but not working for push ...
1
vote
0answers
57 views

delay in ACK packets for ldap abandon request

we have migrated from an openldap server on linux to a DirX on windows 2008. The ldap server und normal serch request behaves as expected. However with some applications (weblogic deployed webapps) ...
2
votes
1answer
37 views

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all ...
1
vote
1answer
28 views

Official name for AD/LDAP targets

Say I have an AD user called flimflam that is "located" at OU=System, DC=fizzbuzz, DC=myorg, DC=com: What is the technical/appropriate verbiage for OU=System, DC=fizzbuzz, DC=myorg, DC=com? Location? ...
3
votes
2answers
96 views

When does an ACCOUNTDISABLE value in userAccountControl *not* correspond to a disabled mailbox?

We are querying a number (dozens) of LDAP servers (mostly Active Directory, but not exclusively) to determine which mailboxes are active, for the purpose of a mail gateway/forwarding application. We ...
1
vote
0answers
46 views

Configuring openldap/PHP LDAP against “signed” LDAP connections with Active Directory

This may sound like a stupid question, and maybe it's already been answered, but I can't find a definitive answer anywhere, so I thought I'd ask. When someone enables "Domain controller: LDAP server ...
6
votes
1answer
315 views

Configuring Synology NAS as freeIPA client

I'm attempting to deploy freeIPA in my company. The network is quite simple: < 10 FC20 (and FC21 beta) desktops < 5 FC20 servers (including the one with freeIPA) 1 Synology NAS DS1813+ (DSM ...
1
vote
0answers
116 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
0
votes
0answers
40 views

Apache HTTP Server LDAP authentication with netgroups

Is it possible to do a group authentication in Apache HTTP Server ("Require ldap-group") but instead of a normal (posix) ldap group to use a netgroup?
0
votes
1answer
622 views

ldapsearch returns result, but getent does not

I am setting up a fresh CentOS 7 server to and need to setup LDAP authentication i.e. there already exists a server that authenticates users, which we use for other GNU/Linux servers. For instance, ...
2
votes
1answer
474 views

openssl s_client ignoring custom root CA certificate in /usr/share/ca-certificates

I've set up an Active Directory server and configured LDAP-over-SSL, which works fine for machines on the domain, however because it's using certificates provisioned by AD's Certificate Services it ...
-1
votes
3answers
122 views

ldap. What is binddn_passwd [closed]

I installed Nginx with LDAP, it works. But I can't understand the purpose of "binddn" and "binddn_passwd" ldap_server dc1 { url ...
0
votes
1answer
91 views

Does Active Directory alone is not enough to secure hadoop?

I am trying to secure Hadoop environment installed in windows. So basically I started to analyse how to secure a Unix-based hadoop cluster. Have gone through various links related to Kerberos and ...
1
vote
1answer
120 views

Using sssd ldap access filter DENY based on group?

I am currently using sssd.conf to only allow login for ldap users that are in a specific group. I would like to do the opposite and DENY login based on group membership of a user, while allowing all ...
0
votes
1answer
284 views

Freeradius LDAP through AP

I need help with a connection to RADIUS throught Access Point LevelOne EAP-110. I configured RADIUS + LDAP, tried with radiusd -X I get this message: radtest fsobarzo ********** localhost 100 ...
1
vote
3answers
1k views

NSLCD only connects to LDAP server in debug mode

Hey guys I searched a bit on stackexchange but could find help for my problem. I'm trying to integrating LDAP authentication on a centos 7 client, but I can't get it working, and I can't find out ...
0
votes
0answers
198 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
1
vote
1answer
320 views

WebLogic 10.3.2 LDAP Authentication failure after Domain Controller Patch MS14-066 (KB2992611)

I have configured a LDAP authenticator in my WebLogic 10.3.2 domain. Login worked until the domain controller was patched with MS14-066 (KB2992611). Domain Controller OS is Win Server2008R2 (x64). ...
0
votes
1answer
84 views

LDAP passthrough authentication. testsaslauthd fails only with ldaps

I am trying to set up an OpenLDAP passthrough authentication to another server. When I do testsaslauthd with simple ldap:// the test works fine. When I try with ldaps:// it fails. ...
3
votes
1answer
101 views

Chasing referrals in Ldap

I'm currently improving a program featuring an ldap integration. This ldap integration is currently not able to handle ldap referrals. I do understand, that i will gen entries back that will hold the ...
0
votes
1answer
117 views

Only allow ldap users to connect to Inspircd

I've set up Inspircd for our IT shop and I'm trying to configure it to be closed except for LDAP users. I used ./configure --enable-extras=m_ldapauth.cpp and I configured the LDAP module in ...
1
vote
1answer
76 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
2
votes
1answer
102 views

Understanding LDAP traffic with ActiveDirectory

In looking at LDAP traffic through Wireshark I was curious to understand the conversation between the a windows client and Active Directory. Each conversation would vary to less than 80k bytes. But ...
1
vote
0answers
399 views

Ubuntu server + Samba + PAM + Apple OpenDirectory

Due to various reasons, we are looking to migrate our file servers from OS X Server 10.9 over to a true Samba implementation running on Ubuntu 14.04LTS. We have Ubuntu up and running with Samba ...
3
votes
1answer
125 views

Debian staff group causes problems

We have an (old and grown) infrastructure of linux machines (mostly debian). For user authentication we use LDAP where we have defined several groups with different access rights. Unluckily one of ...
1
vote
0answers
319 views

Centos client authenticate against zentyal DC via ldap

I have a bit of a problem. 3 months ago we deployed a zentyal dc on my workplace because it was a good way of authenticating both windows, linux and mac against the same server. I got authentication ...
0
votes
1answer
64 views

Does LDAP allow User Permission at Application Level? [duplicate]

Following is the scenario in the picture, We have one server at back and five other servers (running 5+ applications). We are developing LDAP instead of basic Database authentication rule in which we ...
1
vote
2answers
20 views

Are certificates from all Active Directory domain controllers needed on client for LDAPS?

I am setting up LDAPS on our AD servers to encrypt ldap authentication between the domain and a web server using an internal CA cert. The AD servers and web server are on one side of the firewall but ...
0
votes
1answer
44 views

JBoss - Not working the next day

We are having a problem, our JBoss EAP 6.3 cluster (2 nodes in domain mode + Apache) on a Centos OS, is not working after a period of inactivity (night). Its connected to an ldap. We do login, ...