Questions tagged [ldap]
Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network
2,756
questions
2
votes
1
answer
232
views
Changing LDAP schema casts Confluence AD integration unoperable
I have had our instance of Atlassian Confluence configured to be integrated with our Active Directory.
In AD, all the users were being created under default Users folder in Active Directory Users ...
- 101k
1
vote
1
answer
1k
views
SSL Connect timing out during handshake (client exchange re-transmission)
We have a Java LDAP client making SSL connection to AD. Some times the connect hangs with client and server re-transmitting Client Key Exchange and ACK packets continuously as shown below and ...
- 61
7
votes
2
answers
5k
views
In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?
I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
5
votes
3
answers
17k
views
sssd vs nslcd for RHEL-5/6
We have 50 RH-5 machines and 70 RH-6 machines. I am looking to decide what we should use for LDAP:
nscd/nslcd for all RH-5/RH-6 servers
nscd/nslcd for RH-5 servers, sssd for RH-6 servers
sssd for all ...
- 33.1k
6
votes
3
answers
2k
views
freeipa ssl ldap and round robin dns
I'm trying to ask this question in a way that's answerable, but part of the issue is knowing the implications of my current situation and if there's an issue or technical debt which'll bite me further ...
- 13k
6
votes
1
answer
2k
views
Should I manage Linux Groups in LDAP on a per machine basis?
I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so:
dn: cn=shellinger,ou=groups,dc=company,dc=com
cn: shellinger
gidNumber: 5001
...
- 13k
2
votes
1
answer
2k
views
Gerrit LDAP Configuration
I am configuring gerrit over Windows server 2008 R2 along with mysql and tomcat.
I have completed installation successfully. Authentication mode is LDAP.
I am unable to login. The error is:
com....
- 131
0
votes
1
answer
768
views
Can't make libnss-ldap resolve groups in Debian
We have an (active directory) LDAP server and I'm trying to use libnss-ldap to resolve ldap users and groups. When I run 'getent passwd', all of the users are returned exactly like I'd expect. However,...
- 163
0
votes
1
answer
365
views
Change hashing password algorith in Jasig CAS
I configurated my Jasig CAS to authenticate user from LDAP.
Now, I would to change my hashing password algorith. Where, in CAS configuration, have I to configure it?
I use Jasig CAS 3.5.2 and ...
- 1,793
2
votes
1
answer
2k
views
Is This Normal LDAP Behaviour In CentOS Linux?
Hello fine people!
As a novice in the Linux world, I have managed to learn enough to put into production a ClearOS 5.2 server running the CentOS Linux Distro. This box serves as my Primary Domain ...
- 4,516
4
votes
1
answer
2k
views
LDAP query doesn't return all accounts with specific login
I have a Windows 2008 domain that I am querying via ldapsearch and if I use a domain administrator account I get all the users I would expect, but if I use the service account I created for this ...
- 134k
0
votes
1
answer
251
views
Problems with new server accessing ldap and mail server/relay (connection timeout and can't contact)
I'm on OpenSUSE 12.3, and setup a mail relay under mail server settings (posix) via yast.
I try to send a mail and get timed out:
2013-09-27T15:19:08.745282+01:00 myserver postfix/qmgr[12258]: ...
- 483
1
vote
1
answer
2k
views
disable plaintext password in ldap
I have a openldap server v3 that is storing passwords in plain text, is there anyway by which we can change the password to be stored in SSHA format by default. I use Apache DS to login to the ...
- 4,514
4
votes
1
answer
1k
views
Openfire Active Directory Trusted Domains
I'm in the process of setting up an Openfire XMPP server for intra-company communication. I have it authenticating against our local DC fine. Our company has two different offices (one in the US, ...
CommunityBot
- 1
0
votes
1
answer
96
views
Import TLS certificate tu use LDAPS on client machine
I installed OpenLDAP server and I configurated TLS on the same machine (CentosOS 5) . Now I would to use LDAPS from an other machine: How can I import the generated certificate?
I used this to enable ...
- 155
1
vote
2
answers
1k
views
Password handling in Apache to remote LDAP server
I have an Apache server in which I have a website with a protected directory. Protected by basic authentication against a remove LDAP server (not on same machine).
<Location "/mywebapp/...
- 3,488
0
votes
1
answer
123
views
mod_authnz_ldap + mod_rewrite
1 internet - gate way mod_rewrite
2 localnet site+ ldap mo_authnz_ldap 192.168.0.16:80
I want to access to 192.168.0.16 when I link to example.com from internet
In local authentication working ...
- 1,715
1
vote
2
answers
21k
views
How do I get a server-side count on an LDAP query from Sun Java System Directory Server?
I wish to count the number of objects returned from a query (but I do not need the actual objects themselves) from Sun Java System Directory Server 5.2.
E.g., if I want to find all people with ...
CommunityBot
- 1
1
vote
1
answer
14k
views
How can I get FreeNAS to work with LDAP authentication?
I'm trying to set up a FreeNAS 9.1.1 server with CIFS shares with LDAP authentication.
I've set up an OpenLDAP server, populated it with smbldap-populate, added a user account for myself and ...
- 4,667
1
vote
1
answer
7k
views
Why won't the CIFS service start?
When I try to enable the CIFS service (to use it with my OpenLDAP directory) on my FreeNAS 9.1.1, I get the message
The service could not be started.
In the shell of my FreeNAS, I see the ...
- 4,667
0
votes
1
answer
2k
views
Tool for LDAP performance measurement
Question
Has anyone measured performance metrics (read, write, bind, anything) on directory servers? Which tool should I use (instead of writing my own shell script with ldapsearch, ldapbind and ...
- 303
1
vote
2
answers
783
views
Managing user and their credentials in kerberos and openldap system
I am learning to use openldap as backend database for kerberos credentials. It is good that all the programs are working with single sign on.
The problem is - I can manage user from kadmin command ...
- 2,157
1
vote
1
answer
1k
views
Trouble with case-sensitive LDAP user logins to Dovecot
I asked this to the dovecot list to no avail, so will try here too. Please forgive the crosspost.
I have a client running Dovecot-Postfix on Debian Squeeze. I'm using Dovecot from the Squeeze ...
- 4,879
2
votes
0
answers
3k
views
LDAP over SSL Unsuccessful on 2003 DC, Working on 2008 R2 DC in Same Domain
I have a publicly signed UCC for LDAP over SSL in a test domain. It contains the Server Authentication OID Extension and works fine on a 2008 R2 DC in the same domain. The CSR was generated on the ...
- 508
1
vote
0
answers
599
views
How to create LDAP bind account in Centos/RedHat that allows me to search by [email protected]
I am creating an LDAP directory and searching by the full DN shows the proper results.
$ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind
I want / need to be able to search using the email ...
- 306
-1
votes
1
answer
2k
views
What are the dependencies of sssd/nscd to function?
What are the dependencies of sssd to function as an LDAP-client?
What are the dependencies of nscd to function as an LDAP-client?
Does sssd need openldap to function as an LDAP-client? Does nscd?
- 4,634
0
votes
1
answer
481
views
user privileges ldap scheme
I needed to create a user (it's already created) in my LDAP schema and want to give privileges of reading/writing to that user like if they were the admin but just for a specific subtree.
The thing ...
- 16
2
votes
1
answer
4k
views
Using external email addresses to authenticate with ldap
I understand that if you try to authenticate with an email address e.g. [email protected], ldap assumes there is a user "me" in a domain "server.com" (i.e DC=com,DC=server) in the ldap directory.
I ...
CommunityBot
- 1
0
votes
1
answer
2k
views
Strange Change in ssh behavior + LDAP
We have a cluster with a front node that admits normal users and LDAP users. Two days ago the ssh show a strange behavior:
The LDAP users can't login in the front node using password
but, The LDAP ...
- 2,157
2
votes
1
answer
3k
views
What is LDAP enumeration?
I have been working with implementing LDAP in our servers. We are using SSSD instead of nscd/nslcd to communicate with the LDAP server.
One of the options in SSSD is enumeration. Enabling it solved ...
- 29.1k
6
votes
1
answer
2k
views
Need help understanding PAM directives
I have the following directives in my /etc/pam.d/sshd file on a RHEL5 box and I'm a bit confused. These directives are there to make LDAP+RADIUS+OTP work. What I'm trying to do is tell pam not to ...
- 33.1k
10
votes
1
answer
26k
views
What is nsswitch compat mode?
Red Hat recommended me compat mode in /etc/nsswitch.conf as one of the options to enumerate LDAP users, but later said that it's not a much-used method.
nsswitch.conf
passwd: files compat
...
- 5,321
0
votes
1
answer
2k
views
What are disadvantages of using nsswitch compat?
In my current LDAP set-up "getent passwd" shows all 600+ users that exist in the LDAP, not enumerating only the 20 LDAP-users that have permission to access this netgroup/server.
This can be solved ...
CommunityBot
- 1
1
vote
1
answer
3k
views
LDAP userPassword only works with plaintext
I have setup openLDAP server on an ubuntu machine. I am trying to test user authentication, but am running into a problem. If, in ldap, the userPassword contains a plaintext password, authentication ...
- 303
2
votes
2
answers
15k
views
Getting the LDAP password from the LDAP Directory
First up, I know this question's got the potential to be downvoted and closed, nonetheless I think I will go ahead and ask it all the same because our issue is genuine enough.
We have a mail server ...
- 7,443
-1
votes
1
answer
4k
views
LDAPS certificate not working with IP address
I have a certificate assigned to my Domain Controller/Certificate Authority that has no subject name assigned but has two FQDN's and and IP in the alternative names under DNS and IPv4 respectively. ...
1
vote
1
answer
776
views
Ldap query on single subOU for Alfresco
this is what my ldap looks like :
red.lan
Groups(OU)
Computers(SubOU)
Printers(SubOU)
Users(SubOU)
Some(OU)
Users(OU)
SomeOther(SubOU)
So, i'm ...
- 63
0
votes
1
answer
870
views
Finding out my current LDAP server type
How can i find out if my current LDAP sever type is Standalone, Master or Replica (slave)?
I am using OpenLDAP on SLES 11.
- 25.3k
0
votes
1
answer
155
views
Users seeing all other LDAP users on RHEL default behavior?
We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent passwd"...
- 1,243
0
votes
1
answer
2k
views
Autofs + NFS + LDAP sudo problems
I have a setup very similar to Dan Bishop's
Ubuntu 12.04 Ultimate Server Guide.
I actually created a series of ansible scripts to automate this process on my github.
So I have ldap+kerberos set up ...
- 103
3
votes
1
answer
2k
views
Linux (Ubuntu vs CentOS) LDAP Client for 389-ds - password policy
389-ds on Ubuntu 12.04 server up and running. Enabled Fine-grained password policies and User must change password after reset for the whole tree. Created test user afterwards.
Login from CentOS ...
- 310
1
vote
1
answer
962
views
SVN Server LDAP Authentication Error: User is not unique
I'm getting the following error when Apache (running on Solaris) tries to authenticate against LDAP for a specic user for SVN server:
auth_ldap authenticate: user abc authentication failed; URI
/...
- 2,185
6
votes
3
answers
22k
views
How come all LDAP users are shown with getent passwd?
We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers.
When I type "getent ...
CommunityBot
- 1
0
votes
1
answer
328
views
After cert replacement, Apache servers on Centos can't ldaps auth
I run a bunch of servers, some run Ubuntu 12.04, and some run Centos 6.3 . Recently, the self-signed SSL certificate on my ldap server expired, so I generated a new one, and distributed it to all the ...
CommunityBot
- 1
1
vote
0
answers
21
views
Can the Apach AuthLDAPNURL be pointed at the root of a tree?
I have a server where I need to use Apaches AuthLDAPNURL value, but I cannot start at any specific O, OU, or DC. For whatever reason this tree has everybody in 19 Organization (O) objects, hanging ...
- 2,185
0
votes
1
answer
381
views
Using autobind without LDAPI
I am trying to automate the installation of my OpenLDAP servers.
Currently packages get installed (openldap-clients, openldap-servers) and started with their default configurations.
I have a LDIF ...
- 963
4
votes
1
answer
8k
views
ldapquery an Active Directory server for users that belongs to a group named X
When I do this at the bash prompt on a CentOS 6.4
ldapsearch -LLL -H ldap://adserver.example.com -x -D [email protected] -w somepass -b 'OU=Users,DC=example,DC=com' '(&(objectClass=person)(...
- 24.8k
0
votes
1
answer
1k
views
LDAP queries for local users
Recently, in the company where I work, we have had a general system crash and we are figuring out the causes. Our machines are configured for LDAP authentication plus some local users in some of them. ...
- 1,090
1
vote
2
answers
913
views
How can I allow users to change their local passwords?
We use an LDAP-server, but we also use local accounts.
[jdoe@tst-03 ~]$ passwd
Changing password for user jdoe.
Changing password for jdoe.
(current) UNIX password:
Enter login(LDAP) password:
This ...
- 4,033
3
votes
1
answer
843
views
Puppet: Enumerating all users within a group
Is there any way to enumerate an array of all users within a group within Puppet, either as a fact or something so I can do something like this?
$users = enumusers('wheel')
each($users) |$user| {
...
- 44.9k