Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
0answers
114 views

Routing LDAP traffic from Application server to Proxy to internet

I've included a drawing so you get an idea how it would work. (Red = LDAP connections , Blue = HTTP / AJP in the backend) Problem: We want to connect our customer application server to an LDAP of ...
1
vote
1answer
97 views

After upgrading openssl, unable to bind to server: Can't contact LDAP server

It was working like this, in /etc/openldap/ldap.conf URI ldap://127.0.0.1/ BASE dc=example,dc=com TLS_REQUEST never TLS_CACERTDIR /etc/pki/tls/certs I was able to connect our secured ldap server. ...
1
vote
0answers
53 views

Connect an LDAP realm with an AD domain, with the same name?

The situation is a separate group has created an LDAP domain. We'll call it foo.bar. (fyi, none of these are connected in any way to the Internet) They also have a Windows domain and renamed it to ...
0
votes
1answer
94 views

Where do I specify the Bind DN and password for sss+ldap?

I'm trying sssd for LDAP authentication, and while it can show user IDs with the id command, getent group and getent passwd do not show LDAP names, and while I can chown files to ldap users, they ls ...
1
vote
1answer
33 views

Net::FTP Perl module hangs

So, I'm running Perl 5.8.8 on a RHEL5.2 system. I recently moved the LDAP source for authentication, and now I'm having issues with Net::FTP. Authentication works with the new LDAP source perfectly. ...
0
votes
1answer
113 views

OpenLDAP cannot add new schema

I'm trying to add new schema to my OpenLDAP server. The version of slapd is 2.4.23. I'm using Debian 6. If I understood it well, slapd 2.4+ uses OLC configuration with (cn=config) by default for this ...
3
votes
2answers
203 views

Why do I need to create symbolic links for certificates?

Other than noticing something like this: yourid@linuxtpf:~/certificates> ls -l lrwxrwxrwx 1 yourid users 9 2009-04-07 18:06 50a694ac.0 -> cert2.pem #<-- was missing lrwxrwxrwx 1 yourid ...
0
votes
0answers
40 views

Hostname aliases in LDAP and phpLDAPadmin

What is the best method of storing multiple hostname aliases in LDAP? Currently, the hosts file I wish to migrate has many entries such as 172.24.3.54 workstation114.example.net wks114 exphost3 ...
0
votes
0answers
63 views

OpenLDAP+pam_ldap+ppolicy does not notify user that they are blocked

We have an OpenLDAP server configured to use the password policy overlay in order to lock users when they reach a certain number of failed password attempts. This is working perfectly but when a ...
-2
votes
1answer
237 views

Loganalyzer LDAP

Iv installed Loganalyzer and now im trying to configure to authenticate with LDAP. And i have the following in loganalyzer config.php file: $CFG['UserDBEnabled'] = true; $CFG['UserDBServer'] = ...
0
votes
0answers
83 views

Cannot authenticate as diradmin - OS X Server 10.6 Workgroup Manager

As far as I can tell, not an uncommon problem: when I try to authenticate as 'diradmin' in Workgroup Manager for /LDAPv3/127.0.0.1 it fails with a login problem: "The login information is not valid ...
1
vote
2answers
75 views

Account name changes

The way we currently handle account name changes is quite cumbersome and wondering if there is an easier way to go about things. Name change request comes through and we create a new AD account, ...
1
vote
1answer
169 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
0
votes
1answer
42 views

389 directory server - password not recognized

I have installed "389 directory server" on a CentOS6.5 server, with the setup-ds-admin.pl script. Then added 2 users from the '389-console', to "People" (setting their password from the GUI). Now I'm ...
0
votes
2answers
179 views

Managing Linux user accounts + Samba + more

I have a network of about 3-6 CentOS servers, with about 5-10 users (currently, and near future). I'm looking for a solution for centralized managements of users. My requirements from it are: Linux ...
0
votes
1answer
48 views

Adding win7 shared folders to *nix domain?

I have a CentOS 6.x/ NIS based network from which I need to start sharing some folders to Win7 machines. I've installed Samba on a test system but can't seem to get the trick of having the Win7 ...
1
vote
1answer
266 views

How to debug SASL authentication via LDAP towards active directory

I am trying to configure SASL running on Centos 6.5 to allow authentication towards the corporate active directory server. The end goal is to authenticate access to some subversion repos which are ...
0
votes
1answer
61 views

Authenticating Apache HTTPd against Active Directory

We're using Apache 2.2.12 to authenticate against one Active Directory domain using a .htaccess configuration file. Our current configuration is: AuthBasicProvider ldap AuthType Basic AuthName "AD ...
0
votes
1answer
223 views

Centos 6.5, Active directory and ldapsearch

I need to query the ldap part of an Active Directory DC from CentOS 6.5. ldapsearch allows me to do that, but I have found two bumps in the "ldapsearch" road: ldapsearch wraps long text to several ...
0
votes
0answers
36 views

389 ldap server: woes setting it up

I'd like to use a LDAP server as a centralized rolodex I'm on fedora 20 I'm following the 389 administration manual, but when I get to create a root object, I get this window from the visual console ...
0
votes
0answers
95 views

Samba create new user error: bailing out

After upgrade Ubuntu version to 12.04, an error happens, when I want to create a new user through Samba (which is connected to the ldap server): $ pdbedit -af "New User" newuser Error message: ...
3
votes
1answer
215 views

Domain Controller returns LDAP Referral for it's own domain

I have 2 domains, each with 2 Domain Controllers: company.local ad.company.com.au Both domains are in the same forest and have a bi-direction trust setup. We're migrating to the ad.company.com.au ...
5
votes
2answers
729 views

Is it generally acceptable to expose LDAP in read only mode to the Internet?

I need to support Mac clients who need to access a LDAP server to locate SMIME keys. Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
1
vote
1answer
57 views

Can Active Directory issue a LDAP redirect to another LDAP server

I have several independent LDAP servers, controlled by different entities that allow anonymous access. I would like AD to tell an LDAP query to use a different server... like recursive DNS. Is ...
1
vote
0answers
55 views

Creating users in 389 Directory Server: Autofill UID & GID

I have a 389 Directory Server cluster as ldap. I can create users using 389 management console but... When Selecting "Posix User" tab and checking "Enable Posix User Attributes" is necessary manually ...
0
votes
1answer
83 views

Why can a local root turn into any LDAP user?

I know this has been asked here before, but I am not satisfied with the answers and don't know if it's ok to revive and hijack an older question. We have workstations that authenticate users on an ...
0
votes
1answer
57 views

OpenBSD with LDAP authentication returning invalid user

I am trying to set up an OpenBSD box to use a LDAP server for authentication. I am following the directions at http://www.obfuscurity.com/2009/08/OpenBSD-as-an-LDAP-Client and for the most part they ...
0
votes
0answers
92 views

Root denied login if networking down (LDAP environment)

I would like to know why I can't login as root (ssh, sudo or su -) when my LDAP is down or when I have some outage in my network. How to reproduce the problem: - Just change your DNS to something ...
0
votes
0answers
94 views

ejabberd + ldap_filter (uidNumber greater than) is not working

I have configuration ejabberd + ldap users which works fine, unless I try to filter only users with uid greater than 1000. =INFO REPORT==== 2014-02-26 09:52:22 === D(<0.268.0>:eldap:697) : ...
-1
votes
1answer
639 views

How do I create a read only user for LDAP queries in Microsoft Active Directory?

I want to create a user that can query LDAP on my Windows 2008 R2 Active Directory. It only works with Domain Admins. I read the Account Operators group will also work. Both these have write ...
0
votes
1answer
396 views

LDAP throws Event ID 2887 warnings even after enabling “require signing”

I am running an AD LDS directory and, ever since configuring it, I have been seeing 2887 warning messages, so I have decided to follow this guide to have the server require LDAP signing. The problem ...
0
votes
1answer
602 views

Configure GIT server over HTTP using LDAP

I am quite new to GIT and overall am not very experienced in infrastructure setup. However, what I am trying to do seems to be very basic and I am not able to do it. I am trying to create a GIT ...
1
vote
1answer
190 views

ldap fail after ubuntu upgrade to 12.04

I have upgraded ubuntu from 10.4 to 12.04. After it's done, ldap service is stopped and failed to start again! Now none of other services function! :( I checked error logs and found this: Feb 22 ...
0
votes
1answer
35 views

Is it possible to configure a Linux server to use more than one LDAP target?

We have an environment that we are tasked with managing while also giving access to projects that run the applications on the servers. Some of those projects have stood up LDAP for authenticating ...
1
vote
0answers
44 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
0
votes
2answers
111 views

Can't login to LDAP with current Windows user

I'm trying to connect to AD server with various tools under Windows. If I provide my domain\username and password, I have no problems If I don't provide credentials, I do connect, but I have very ...
0
votes
0answers
76 views

Get only ldap user or group using getent command

I need to write an audit check, where I have to make sure users are able to login to ldap client machines with ldap credentials over ssh. Either I am going to run bash script in a for loop, or I ...
2
votes
2answers
58 views

LDAP Breaking when moving user

Since I've been working at this company we've had a very basic AD setup. Users go in the user CN and there is a few OUs for computers, like desktops and servers. Recently I've been planning a more ...
0
votes
1answer
168 views

Can't synchronize the user group in TeamCity

0 user and group synchronized Below are my ldap log and settings. All I want to do is: 1. map the AD group "ccusers" to a group in TeamCity and create all users in that group. 2. Or add all users in ...
3
votes
1answer
602 views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
1
vote
1answer
581 views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
0
votes
1answer
97 views

Immediate logout after login

I have copied VM with Red Hat 6.4 in VMware vSphere Client, move it to another network and change configs for connecting to ldap servers. And now I have a problem with logging procedure through LDAP. ...
0
votes
0answers
165 views

Apache mod_authnz_ldap Error 500

Ubuntu 12.04 LTS Apache/2.2.22 http://server/lightsquid/ gives window with username/password request, then «500 Internal Server Error». Error rises whatever username and password were used: valid or ...
1
vote
1answer
1k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
0answers
308 views

Dovecot won't work with quota value from LDAP that include the “S” appended for size?

I have a courier-imap IMAP system backed by LDAP holding the user data. I would like to convert IMAP to dovecot, and I am able to successfully configure basic login; that is working correctly. But I ...
0
votes
1answer
662 views

LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS

SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN tl;dr: We uses a self-signed CA and we ...
0
votes
0answers
48 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
30 views

What is the purpose of the OU in authLDAPURL and what (if anything) does it do to filter authentication requests?

I'm trying to set up authentication for my Apache web server using Active Directory. I do not want to limit users based on groups or any other method other than being a valid user. I have users who ...
0
votes
0answers
97 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
1answer
27 views

Linux map usernames

We had an LDAP server which had our own groups and usernames on. Now we are moving to a centrally managed LDAP server. The users now have a different username but still have a home folder mapped to ...