Questions tagged [ldap]
Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network
2,749
questions
18
votes
1
answer
19k
views
IPA vs just LDAP for Linux boxes - looking for a comparison
There are few (~30) Linux (RHEL) boxes and I'm looking for centralized and easy managed solution, mostly for control user accounts. I'm familiar with LDAP, and I deployed a pilot of IPA ver2 from Red ...
1
vote
1
answer
9k
views
how to configure pGina LDAP plugin
I have a project in which I have to authentificate clients from differents computers using an LDAP server. Do simulate that I have installed virtualbox in my PC and run two virtual machines, one with ...
7
votes
1
answer
12k
views
Samba standalone server using LDAP for authentication: SID mismatch
I'm trying to get my new samba server running for days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup:
OpenLDAP 2.4.21 server with ~15 groups and >100 ...
0
votes
1
answer
254
views
Moving user accounts and data from NFS server to local server
I'm pretty new to Enterprise Linux administration, and I need to find the best way to move user accounts and their /home directories to a new server. The current setup uses NFS to mount the /home and /...
1
vote
1
answer
2k
views
lighttpd mod_auth using LDAP
I've setup lighttpd to use an ldap backend like so:
auth.debug = 2
auth.backend = "htdigest"
auth.backend.ldap.hostname = "ldap.xxxxx.com"
auth.backend.ldap.base-dn = "ou=active,ou=employees,ou=...
0
votes
1
answer
1k
views
LDAP URL example: is it possible / correct to use only the domain without the hostname?
We have an application which connects to an Active Directory (MS) using LDAP protocol.
We give usually the following parameters:
ldapUrl = ldap://myserver.mydomain.ext:389
ldapBaseDn = ...
17
votes
4
answers
9k
views
Managing access to multiple linux system
A searched for answers but have found nothing on here...
Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
3
votes
2
answers
3k
views
Is there way to detect and track the changes made to OpenLDAP
I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc.
I'm wondering is there a way to track changes made to LDAP ...
0
votes
1
answer
739
views
LDAP showing too many users and groups on Linux clients
We are hosting LDAP on a Solaris server and using 150 Solaris clients and 50 Linux clients. Users and groups have a list of netgroups (server hostnames) that they are able to access. This means that a ...
54
votes
4
answers
270k
views
How do I authenticate with LDAP via the command line?
The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues.
[root@tst-01 ~]...
1
vote
1
answer
2k
views
Error while setting up ldap replication
I'm trying to set up LDAP replication according to the directions on Ubuntu's site. I went through all the directions for setting up the provider without any trouble. But when I try to set up the ...
0
votes
1
answer
4k
views
VLAN and Active Directory: complementary or substitute? [closed]
I recently encountered a network design that heavily implements VLANs but does not make use of a dedicated identity and access management system such as Active Directory or OpenLDAP. And yet another ...
1
vote
0
answers
2k
views
Samba + LDAP: user authentication works for one but not another server
I have a very frustrating problem I'm trying to solve for a few days now, maybe one of you can help me.
I have two (standalone) samba servers which should authenticate the users using an LDAP server. ...
1
vote
3
answers
2k
views
Setting up OpenAM to use OpenLDAP as DataStore
I am at the moment trying to configure an OpenAM installation to use an OpenLDAP as DataStore; is it possible to do it? I have seen some tips about configuring OpenLDAP (as in this tutorial) but this ...
1
vote
1
answer
3k
views
"The trust relationship between this workstation and the primary domain failed"
I mangage a Primary Domain Controller (Samba+LDAP) with 60PC. But 3-4 PC can't login to domain with error:
The trust relationship between this workstation and the primary
domain failed.
56-57 PC ...
8
votes
4
answers
35k
views
Active Directory authentication load balancing and failover
For applications that authenticate against an Active Directory DC, obviously it would be best to just point them to the main domain DNS record rather than a specific DC for failover, load balancing, ...
0
votes
1
answer
5k
views
Postfix using LDAP lookup works for virtual_mailbox_maps, but fails for virtual_mailbox_domains
I'm setting up a Postfix/Dovecot/LDAP server on Debian Squeeze with all virtual mailboxes (as opposed to aliases). I've successfully setup Dovecot, and have Postfix correctly looking to ldap for ...
2
votes
1
answer
6k
views
How to filter for Microsoft Exchange Distribution lists from general AD LDAP groups?
We are integrating an application to Active Directory groups through an LDAP handler, and we need to be able to tell apart AD groups that come from Microsoft Exchange Mail Distribution lists and the ...
1
vote
3
answers
152
views
httpd ldap and file authentication error
We have SVN running via Apache httpd. For authentication we use Active Directory and if the user isn't in AD, we fallback to file authentication. This works fine, except for the error messages in case ...
1
vote
0
answers
971
views
ejabberd LDAP auth and vcard access works, but search does not - why?
I've set up an ejabberd installation and configured the LDAP authentication and vcard data extraction against an ActiveDirectory global catalog server as described in the documentation. This part ...
2
votes
1
answer
9k
views
phpldapadmin: login as "root" admin user with UID
I have recently installed phpldapadmin on Ubuntu 12.04 LTS Srv.
In the the config.php I've modified the following parameter in order to enable simple user login:
$servers->('login','bind_pass','...
0
votes
1
answer
2k
views
How can I map existing LDAP users to users in a different LDAP server?
We set up some Linux machines to use our company's LDAP server for authentication. We were then acquired by another company, and they want us to use their LDAP server and retire the old one. But the ...
1
vote
2
answers
2k
views
ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu
We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password.
When we ...
0
votes
1
answer
2k
views
Kerberos + Ldap Setup not working with ssh
I have a Kerberos 5 + LDAP configuration in the same server.
They both work well (I assume). Kerberos works fine when asking for a TGT.
The problem comes when I try to login from client1 to ...
2
votes
1
answer
17k
views
How to setup SSL for Active Directory?
I have a Windows 2008 Server (Base2) machine.
In Server Manager > Roles, i can see:
1. Active Directory Domain Services
2. DNS Server
3. Active Directory Certificate Services.
Under Active Directory ...
1
vote
1
answer
516
views
How can I tell if my LDAP authentications are using StartTLS?
I'm setting up a new OpenLDAP server on Ubuntu 12.04 with a copy of our current LDAP database. I've gotten most of the configuration down, I think, but I'm having trouble telling if the LDAP queries ...
0
votes
1
answer
540
views
wso2 Governance Registry Active Directory integration unable to find valid certification path to requested target
I am attempting to set up a WSO2 Governance Registry server on RHEL5 that will integrate with our Active Directory using ldaps, but normal methods of setting up trust of the domain controllers ssl ...
1
vote
0
answers
336
views
LDAP read privileges for comupter, IIS under ApplicationPoolIdentity user
Is it possible to set up LDAP read privileges to Active Directory for computer account?
If I run web application on IIS 7.5, which application pool is running under ApplicationPoolIdentity, I have ...
0
votes
1
answer
6k
views
How to enable SSL for LDAP with Apache Directory Studio?
I am using Apache Directory Studio for testing LDAP services for an application. I am lost in configuring the LDAP with SSL.
So far I've tried:
Started ApacheDS with port 10389 (ldap://) and also ...
1
vote
0
answers
539
views
postfix, dovecot, dovecot-sasl, ldap, and static UIDs for NFS-shared email storage
I'm trying to build a Ubuntu 12.04 mail server as such.
Must:
Auth against an existing Open-LDAP server.
Storage in Maildirs on an existing NFS server, everything owned by 8:8 (mail:mail).
Auth is ...
4
votes
1
answer
16k
views
LDAPsearch with SSL Centos- ldap_start_tls, ldap_bind: Cannot contact LDAP
I am working on a integrating LDAP authentication with my PHP Project deployed on a Linux platform. I successfully completed the ldapsearch from command line and from php code for NON SSL connection.
...
13
votes
6
answers
45k
views
sssd and ldap authentication cache
On our box running OpenSUSE 12.2 we have installed OpenLDAP and sssd daemon. We are using these two services for user authentication. Recently we created a script which creates new web-users for our ...
0
votes
1
answer
290
views
I can't make sudo su on old version CentOS with LDAP
I configured many servers with the option to make "sudo su" with ldap users, and works fine.
But in 2 servers (CentOS 5.7 and 5.5) this option show me an error:
[user] is not in the sudoers file....
3
votes
3
answers
5k
views
Why is local root able to su to any LDAP user?
We have an LDAP server set up with our Active Directory. When users login to a Linux machine with LDAP client installed as root, they are able to su - into any Active Directory account without ...
1
vote
1
answer
242
views
Unable to login applications using LDAP alias
We have several applications and we are able to integrate LDAP successfully.
In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
1
vote
2
answers
3k
views
How to make samba4 use external LDAP for authN, internal LDAP for all else?
I have Samba v4.0.5 installed and running. It is running its own 'bundled' ldap service. I'm happy for it to use its own internal ldap service, but I'd like it to use an external ldap service for ...
6
votes
2
answers
45k
views
What is the best way to see objects attributes in Active Directory?
I can not find how to see objects attributes in Active Directory in Microsoft Management Console (MMS).
Please tell me if it is possible to do it in MMS.
I found the Active Directory Explorer that ...
0
votes
1
answer
3k
views
ldapadd works, but ldapsearch doesn't (openldap)
I use just installed Debian 6 with openldap 2.4. I have CentOS box too with openldap 2.3.
I make .ldif file from centOS (working configuration) box and successfully add all entries from ldif to Debian'...
1
vote
0
answers
1k
views
segmentation fault trying to start ldap
My PDC using Samba 3.6 with LDAP (the latest version) works very fine as long as I use hdb as the backend. Nevertheless, I change the backend to sql I receive the following error while trying to ...
1
vote
1
answer
2k
views
Apache 2.2 LDAP Authentication Error 500 - AuthLDAPURL
I have an Apache server on RHEL 6 that uses our active directory for authentication and when we added a new "LocationMatch"
AuthLDAPURL ldap://ad.company.com/DC=ad,DC=company,DC=com?samaccountname?...
1
vote
1
answer
7k
views
Difference between openldap 2.3 and 2.4
There is a difference between openldap 2.3 and 2.4 - specifically with ldapmodify...
If no "changetype:" line is present, the default is "add" if the -a flag is set (or if the program was invoked as ...
0
votes
1
answer
1k
views
The system cannot log you on now because the domain is not available
I am using two virtualbox machines, one running XUbuntu 12.4 LTs and the other running a Windows XP as a testbed for implementing a Samba-based domain. The Linux machine is my PDC and the XP machine ...
4
votes
2
answers
12k
views
Is there any bad thing happens if I change /etc/ldap/slapd.d/cn=config.ldif manually?
Since 2.3, OpenLDAP uses a configuration engine called slapd-config. They said that use it make all LDAP configuration can be changed on fly.
This is the header of /etc/ldap/slapd.d/cn=config.ldif:
#...
3
votes
1
answer
437
views
How can I relate the value of one ldap attribute to the value of another?
For a variety of reasons, I've become the defacto LDAP admin at my workplace. I've been learning it on the job for about a year now. So, as I describe things, feel free to suggest better ways of doing ...
0
votes
1
answer
339
views
LDAP search only returns 25 users
If I use ldapsearch on my Active Directory to bring back members of the Engineers team I only see 25 users. However in AD there are almost 50 users in Engineers. What am I doing wrong?
ldapsearch -p ...
0
votes
1
answer
827
views
Why all LDAP user passwords are incorrectly imported? And can't be modified?
First of all I am new to OpenLDAP setup. I have followed instructions coming from:
HowToForge.com linux openldap setup
#root
dn: dc=localhost,dc=com
dc: localhost
objectClass: dcObject
objectClass: ...
0
votes
1
answer
11k
views
Slaptest for slapd.conf fails due to an invalid path
I have just installed Openldap on Xubuntu. The slapd daemon is working and I can easily stop and start it. Nevertheless when I run a test for the configuration file slapd.conf as follows:
slapdtest -...
0
votes
1
answer
1k
views
Simple authentication via AD over LDAP for Tomcat-hosted app
We use a central AD server for authentication, and have several different webapps that connect to it via LDAP.
I'm trying to connect a simple webapp running on Tomcat 5.5 on Windows to the AD server ...
0
votes
1
answer
201
views
Openldap. How to add and then re-read new attribute
I have custom schema in my ldap customContact.schema with 5 attributes
Now I need to add one more attribute:
# localID
attributetype ( 2.16.840.1.113730.3.1.36
NAME 'localID'
DESC 'Local ...
3
votes
1
answer
18k
views
LDAP Can't perform an authenticated bind - Windows Server 2008 R2 Using PHP/Apache
I'm having issues performing an authenticated bind against the server. The issues doesn't appear to be in code however maybe a server issue.
Just so you know;
LDAP is enabled in Apache/PHP
I'm ...