Questions tagged [ldap]

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

Filter by
Sorted by
Tagged with
18 votes
1 answer
19k views

IPA vs just LDAP for Linux boxes - looking for a comparison

There are few (~30) Linux (RHEL) boxes and I'm looking for centralized and easy managed solution, mostly for control user accounts. I'm familiar with LDAP, and I deployed a pilot of IPA ver2 from Red ...
Vitaly Karasik DevOps's user avatar
1 vote
1 answer
9k views

how to configure pGina LDAP plugin

I have a project in which I have to authentificate clients from differents computers using an LDAP server. Do simulate that I have installed virtualbox in my PC and run two virtual machines, one with ...
webNeat's user avatar
  • 133
7 votes
1 answer
12k views

Samba standalone server using LDAP for authentication: SID mismatch

I'm trying to get my new samba server running for days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and >100 ...
Phil's user avatar
  • 81
0 votes
1 answer
254 views

Moving user accounts and data from NFS server to local server

I'm pretty new to Enterprise Linux administration, and I need to find the best way to move user accounts and their /home directories to a new server. The current setup uses NFS to mount the /home and /...
Ricky-Rose's user avatar
1 vote
1 answer
2k views

lighttpd mod_auth using LDAP

I've setup lighttpd to use an ldap backend like so: auth.debug = 2 auth.backend = "htdigest" auth.backend.ldap.hostname = "ldap.xxxxx.com" auth.backend.ldap.base-dn = "ou=active,ou=employees,ou=...
Honus Wagner's user avatar
0 votes
1 answer
1k views

LDAP URL example: is it possible / correct to use only the domain without the hostname?

We have an application which connects to an Active Directory (MS) using LDAP protocol. We give usually the following parameters: ldapUrl = ldap://myserver.mydomain.ext:389 ldapBaseDn = ...
рüффп's user avatar
17 votes
4 answers
9k views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
Swartz's user avatar
  • 304
3 votes
2 answers
3k views

Is there way to detect and track the changes made to OpenLDAP

I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc. I'm wondering is there a way to track changes made to LDAP ...
B14D3's user avatar
  • 5,258
0 votes
1 answer
739 views

LDAP showing too many users and groups on Linux clients

We are hosting LDAP on a Solaris server and using 150 Solaris clients and 50 Linux clients. Users and groups have a list of netgroups (server hostnames) that they are able to access. This means that a ...
ujjain's user avatar
  • 4,033
54 votes
4 answers
270k views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ~]...
ujjain's user avatar
  • 4,033
1 vote
1 answer
2k views

Error while setting up ldap replication

I'm trying to set up LDAP replication according to the directions on Ubuntu's site. I went through all the directions for setting up the provider without any trouble. But when I try to set up the ...
ricksebak's user avatar
0 votes
1 answer
4k views

VLAN and Active Directory: complementary or substitute? [closed]

I recently encountered a network design that heavily implements VLANs but does not make use of a dedicated identity and access management system such as Active Directory or OpenLDAP. And yet another ...
fajar's user avatar
  • 111
1 vote
0 answers
2k views

Samba + LDAP: user authentication works for one but not another server

I have a very frustrating problem I'm trying to solve for a few days now, maybe one of you can help me. I have two (standalone) samba servers which should authenticate the users using an LDAP server. ...
Phil's user avatar
  • 81
1 vote
3 answers
2k views

Setting up OpenAM to use OpenLDAP as DataStore

I am at the moment trying to configure an OpenAM installation to use an OpenLDAP as DataStore; is it possible to do it? I have seen some tips about configuring OpenLDAP (as in this tutorial) but this ...
DiegoPiacc's user avatar
1 vote
1 answer
3k views

"The trust relationship between this workstation and the primary domain failed"

I mangage a Primary Domain Controller (Samba+LDAP) with 60PC. But 3-4 PC can't login to domain with error: The trust relationship between this workstation and the primary domain failed. 56-57 PC ...
Quang Nguyen's user avatar
8 votes
4 answers
35k views

Active Directory authentication load balancing and failover

For applications that authenticate against an Active Directory DC, obviously it would be best to just point them to the main domain DNS record rather than a specific DC for failover, load balancing, ...
Derrick's user avatar
  • 165
0 votes
1 answer
5k views

Postfix using LDAP lookup works for virtual_mailbox_maps, but fails for virtual_mailbox_domains

I'm setting up a Postfix/Dovecot/LDAP server on Debian Squeeze with all virtual mailboxes (as opposed to aliases). I've successfully setup Dovecot, and have Postfix correctly looking to ldap for ...
jaydisc's user avatar
  • 489
2 votes
1 answer
6k views

How to filter for Microsoft Exchange Distribution lists from general AD LDAP groups?

We are integrating an application to Active Directory groups through an LDAP handler, and we need to be able to tell apart AD groups that come from Microsoft Exchange Mail Distribution lists and the ...
dukeofgaming's user avatar
1 vote
3 answers
152 views

httpd ldap and file authentication error

We have SVN running via Apache httpd. For authentication we use Active Directory and if the user isn't in AD, we fallback to file authentication. This works fine, except for the error messages in case ...
JohanKees's user avatar
  • 131
1 vote
0 answers
971 views

ejabberd LDAP auth and vcard access works, but search does not - why?

I've set up an ejabberd installation and configured the LDAP authentication and vcard data extraction against an ActiveDirectory global catalog server as described in the documentation. This part ...
vwegert's user avatar
  • 131
2 votes
1 answer
9k views

phpldapadmin: login as "root" admin user with UID

I have recently installed phpldapadmin on Ubuntu 12.04 LTS Srv. In the the config.php I've modified the following parameter in order to enable simple user login: $servers->('login','bind_pass','...
Eric Periard's user avatar
0 votes
1 answer
2k views

How can I map existing LDAP users to users in a different LDAP server?

We set up some Linux machines to use our company's LDAP server for authentication. We were then acquired by another company, and they want us to use their LDAP server and retire the old one. But the ...
Scott Matthews's user avatar
1 vote
2 answers
2k views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
Dima L.'s user avatar
  • 121
0 votes
1 answer
2k views

Kerberos + Ldap Setup not working with ssh

I have a Kerberos 5 + LDAP configuration in the same server. They both work well (I assume). Kerberos works fine when asking for a TGT. The problem comes when I try to login from client1 to ...
hecstevez's user avatar
2 votes
1 answer
17k views

How to setup SSL for Active Directory?

I have a Windows 2008 Server (Base2) machine. In Server Manager > Roles, i can see: 1. Active Directory Domain Services 2. DNS Server 3. Active Directory Certificate Services. Under Active Directory ...
Jasper's user avatar
  • 297
1 vote
1 answer
516 views

How can I tell if my LDAP authentications are using StartTLS?

I'm setting up a new OpenLDAP server on Ubuntu 12.04 with a copy of our current LDAP database. I've gotten most of the configuration down, I think, but I'm having trouble telling if the LDAP queries ...
zymhan's user avatar
  • 1,382
0 votes
1 answer
540 views

wso2 Governance Registry Active Directory integration unable to find valid certification path to requested target

I am attempting to set up a WSO2 Governance Registry server on RHEL5 that will integrate with our Active Directory using ldaps, but normal methods of setting up trust of the domain controllers ssl ...
ioscode's user avatar
  • 136
1 vote
0 answers
336 views

LDAP read privileges for comupter, IIS under ApplicationPoolIdentity user

Is it possible to set up LDAP read privileges to Active Directory for computer account? If I run web application on IIS 7.5, which application pool is running under ApplicationPoolIdentity, I have ...
Fanda's user avatar
  • 188
0 votes
1 answer
6k views

How to enable SSL for LDAP with Apache Directory Studio?

I am using Apache Directory Studio for testing LDAP services for an application. I am lost in configuring the LDAP with SSL. So far I've tried: Started ApacheDS with port 10389 (ldap://) and also ...
Ashwin's user avatar
  • 173
1 vote
0 answers
539 views

postfix, dovecot, dovecot-sasl, ldap, and static UIDs for NFS-shared email storage

I'm trying to build a Ubuntu 12.04 mail server as such. Must: Auth against an existing Open-LDAP server. Storage in Maildirs on an existing NFS server, everything owned by 8:8 (mail:mail). Auth is ...
user145837's user avatar
4 votes
1 answer
16k views

LDAPsearch with SSL Centos- ldap_start_tls, ldap_bind: Cannot contact LDAP

I am working on a integrating LDAP authentication with my PHP Project deployed on a Linux platform. I successfully completed the ldapsearch from command line and from php code for NON SSL connection. ...
prashantsunkari's user avatar
13 votes
6 answers
45k views

sssd and ldap authentication cache

On our box running OpenSUSE 12.2 we have installed OpenLDAP and sssd daemon. We are using these two services for user authentication. Recently we created a script which creates new web-users for our ...
Seth Rayer's user avatar
0 votes
1 answer
290 views

I can't make sudo su on old version CentOS with LDAP

I configured many servers with the option to make "sudo su" with ldap users, and works fine. But in 2 servers (CentOS 5.7 and 5.5) this option show me an error: [user] is not in the sudoers file....
madrikeka's user avatar
3 votes
3 answers
5k views

Why is local root able to su to any LDAP user?

We have an LDAP server set up with our Active Directory. When users login to a Linux machine with LDAP client installed as root, they are able to su - into any Active Directory account without ...
Steven's user avatar
  • 63
1 vote
1 answer
242 views

Unable to login applications using LDAP alias

We have several applications and we are able to integrate LDAP successfully. In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
Geo's user avatar
  • 575
1 vote
2 answers
3k views

How to make samba4 use external LDAP for authN, internal LDAP for all else?

I have Samba v4.0.5 installed and running. It is running its own 'bundled' ldap service. I'm happy for it to use its own internal ldap service, but I'd like it to use an external ldap service for ...
Jon Detert's user avatar
6 votes
2 answers
45k views

What is the best way to see objects attributes in Active Directory?

I can not find how to see objects attributes in Active Directory in Microsoft Management Console (MMS). Please tell me if it is possible to do it in MMS. I found the Active Directory Explorer that ...
Michael's user avatar
  • 597
0 votes
1 answer
3k views

ldapadd works, but ldapsearch doesn't (openldap)

I use just installed Debian 6 with openldap 2.4. I have CentOS box too with openldap 2.3. I make .ldif file from centOS (working configuration) box and successfully add all entries from ldif to Debian'...
gooamoko's user avatar
  • 163
1 vote
0 answers
1k views

segmentation fault trying to start ldap

My PDC using Samba 3.6 with LDAP (the latest version) works very fine as long as I use hdb as the backend. Nevertheless, I change the backend to sql I receive the following error while trying to ...
alibaba's user avatar
  • 427
1 vote
1 answer
2k views

Apache 2.2 LDAP Authentication Error 500 - AuthLDAPURL

I have an Apache server on RHEL 6 that uses our active directory for authentication and when we added a new "LocationMatch" AuthLDAPURL ldap://ad.company.com/DC=ad,DC=company,DC=com?samaccountname?...
Eran Chetzroni's user avatar
1 vote
1 answer
7k views

Difference between openldap 2.3 and 2.4

There is a difference between openldap 2.3 and 2.4 - specifically with ldapmodify... If no "changetype:" line is present, the default is "add" if the -a flag is set (or if the program was invoked as ...
Eirik Toft's user avatar
0 votes
1 answer
1k views

The system cannot log you on now because the domain is not available

I am using two virtualbox machines, one running XUbuntu 12.4 LTs and the other running a Windows XP as a testbed for implementing a Samba-based domain. The Linux machine is my PDC and the XP machine ...
alibaba's user avatar
  • 427
4 votes
2 answers
12k views

Is there any bad thing happens if I change /etc/ldap/slapd.d/cn=config.ldif manually?

Since 2.3, OpenLDAP uses a configuration engine called slapd-config. They said that use it make all LDAP configuration can be changed on fly. This is the header of /etc/ldap/slapd.d/cn=config.ldif: #...
HVNSweeting's user avatar
3 votes
1 answer
437 views

How can I relate the value of one ldap attribute to the value of another?

For a variety of reasons, I've become the defacto LDAP admin at my workplace. I've been learning it on the job for about a year now. So, as I describe things, feel free to suggest better ways of doing ...
David R.'s user avatar
  • 637
0 votes
1 answer
339 views

LDAP search only returns 25 users

If I use ldapsearch on my Active Directory to bring back members of the Engineers team I only see 25 users. However in AD there are almost 50 users in Engineers. What am I doing wrong? ldapsearch -p ...
David Mathis's user avatar
0 votes
1 answer
827 views

Why all LDAP user passwords are incorrectly imported? And can't be modified?

First of all I am new to OpenLDAP setup. I have followed instructions coming from: HowToForge.com linux openldap setup #root dn: dc=localhost,dc=com dc: localhost objectClass: dcObject objectClass: ...
Michael Mao's user avatar
0 votes
1 answer
11k views

Slaptest for slapd.conf fails due to an invalid path

I have just installed Openldap on Xubuntu. The slapd daemon is working and I can easily stop and start it. Nevertheless when I run a test for the configuration file slapd.conf as follows: slapdtest -...
alibaba's user avatar
  • 427
0 votes
1 answer
1k views

Simple authentication via AD over LDAP for Tomcat-hosted app

We use a central AD server for authentication, and have several different webapps that connect to it via LDAP. I'm trying to connect a simple webapp running on Tomcat 5.5 on Windows to the AD server ...
IVR Avenger's user avatar
0 votes
1 answer
201 views

Openldap. How to add and then re-read new attribute

I have custom schema in my ldap customContact.schema with 5 attributes Now I need to add one more attribute: # localID attributetype ( 2.16.840.1.113730.3.1.36 NAME 'localID' DESC 'Local ...
Pavel Zdarov's user avatar
3 votes
1 answer
18k views

LDAP Can't perform an authenticated bind - Windows Server 2008 R2 Using PHP/Apache

I'm having issues performing an authenticated bind against the server. The issues doesn't appear to be in code however maybe a server issue. Just so you know; LDAP is enabled in Apache/PHP I'm ...
Matt's user avatar
  • 71

1
33 34
35
36 37
55