Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
1answer
122 views

SSL Connect timing out during handshake (client exchange re-transmission)

We have a Java LDAP client making SSL connection to AD. Some times the connect hangs with client and server re-transmitting Client Key Exchange and ACK packets continuously as shown below and ...
2
votes
1answer
125 views

Is This Normal LDAP Behaviour In CentOS Linux?

Hello fine people! As a novice in the Linux world, I have managed to learn enough to put into production a ClearOS 5.2 server running the CentOS Linux Distro. This box serves as my Primary Domain ...
2
votes
1answer
54 views

LDAP query doesn't return all accounts with specific login

I have a Windows 2008 domain that I am querying via ldapsearch and if I use a domain administrator account I get all the users I would expect, but if I use the service account I created for this ...
1
vote
1answer
139 views

LDAP and DAV with AuthnProviderAlias not working

I have a working apache 2.4 config for ldap with svn <IfModule mod_ssl.c> <VirtualHost _default_:443> ... <Location /ldapsvn> DAV svn SVNParentPath ...
0
votes
1answer
64 views

disable plaintext password in ldap

I have a openldap server v3 that is storing passwords in plain text, is there anyway by which we can change the password to be stored in SSHA format by default. I use Apache DS to login to the ...
0
votes
1answer
52 views

Problems with new server accessing ldap and mail server/relay (connection timeout and can't contact)

I'm on OpenSUSE 12.3, and setup a mail relay under mail server settings (posix) via yast. I try to send a mail and get timed out: 2013-09-27T15:19:08.745282+01:00 myserver postfix/qmgr[12258]: ...
0
votes
1answer
31 views

Import TLS certificate tu use LDAPS on client machine

I installed OpenLDAP server and I configurated TLS on the same machine (CentosOS 5) . Now I would to use LDAPS from an other machine: How can I import the generated certificate? I used this to enable ...
1
vote
2answers
55 views

Password handling in Apache to remote LDAP server

I have an Apache server in which I have a website with a protected directory. Protected by basic authentication against a remove LDAP server (not on same machine). <Location ...
0
votes
2answers
81 views

Liferay and export LDAP account

I have this problem: I have enabled Liferay to import and export users from/to OpenLDAP server. When I create a user in Liferay I obtain this page: So, I have create a new user and Liferay has ...
0
votes
1answer
27 views

mod_authnz_ldap + mod_rewrite

1 internet - gate way mod_rewrite 2 localnet site+ ldap mo_authnz_ldap 192.168.0.16:80 I want to access to 192.168.0.16 when I link to example.com from internet In local authentication working ...
0
votes
0answers
41 views

Export Moodle's users to OpenLDAP

I setted the LDAP sync to import all LDAP users into Moodle (Moodle.org)...it is ok. I would to know if is possible to export a Moodle user into my LDAP server. For example: I have a new moodle user ...
0
votes
0answers
82 views

Import OS X OD users/groups to FreeNAS

Arrived in at work the other day and found a HP Micro Server sitting on my desk with a request to set it up as new network attached storage. Everything is working so far so good however I can't seem ...
0
votes
0answers
99 views

How to allow the root user to change LDAP password for normal users?

I have a LDAP-Server that is running on Debian 6.0.7 Squeeze. The LDAP-Server is used for the user authentication and the sudo management of all other virtual servers in our network. On a Debian 7 ...
0
votes
2answers
182 views

Can't query AD using Kerberos from Linux host

ldapsearch -H <URL> -b <BASE> -s sub -D <USER> -x -w <PW> works fine kinit <USER>@<REALM> ldapsearch -H <URL> -b <BASE> -s sub fails with: text: ...
1
vote
1answer
2k views

Why won't the CIFS service start?

When I try to enable the CIFS service (to use it with my OpenLDAP directory) on my FreeNAS 9.1.1, I get the message The service could not be started. In the shell of my FreeNAS, I see the ...
0
votes
0answers
44 views

How to enable TLS on OpenLDAP

I use CentosOS 5. I have a problem to enable TLS (or ssl) on OpenLDAP server. I followed this tutorial... so: I generate the cerificates; I setted the path in sladp.conf TLSCertificateFile ...
0
votes
1answer
1k views

How can I get FreeNAS to work with LDAP authentication?

I'm trying to set up a FreeNAS 9.1.1 server with CIFS shares with LDAP authentication. I've set up an OpenLDAP server, populated it with smbldap-populate, added a user account for myself and ...
3
votes
2answers
248 views

Understand PAM and NSS

In the last days I have set up some Linux system with LDAP authentication and everything works fine, but there's still something I can't really understand regarding NSS and PAM, also after a lot of ...
0
votes
1answer
364 views

Squidguard + LDAP (Active Directory) not working

I've been trying to configure a squid with squidguard and MS AD. I've successfuly linked my squid with my AD so far, but now, I want to link my squidguard with the active directory. I've followed ...
0
votes
1answer
206 views

user id mapping failing with nfs and ldap

I have a NFS4 export (from FreeBSD ZFS filesystem) with root_squash turned off (-maproot=root). Until recently I've been mounting this drive without problems on several machines (mostly Ubuntu 12.04 ...
3
votes
1answer
876 views

How to correctly ldapmodify replace olcAccess lines?

This is a part from olcDatabase={1}hdb.ldif olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=somesite,dc=com" write by * none olcAccess: ...
0
votes
0answers
18 views

OpenSUSE Won't Authenticate against OpenLDAP Server

I have an OpenBSD LDAP server for single sign on purposes, I know that its working because my Ubuntu client can authenticate against it without any issues. OpenSUSE will not authenticate against my ...
2
votes
1answer
658 views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
0
votes
1answer
71 views

Tool for LDAP performance measurement

Question Has anyone measured performance metrics (read, write, bind, anything) on directory servers? Which tool should I use (instead of writing my own shell script with ldapsearch, ldapbind and ...
0
votes
1answer
129 views

PAM: auth: pam_unix(dovecot:auth): authentication failure;

We have opnldap setup on our ubuntu server, and were getting this message for a user: auth: pam_unix(dovecot:account): account has expired (account expired) Sep 3 19:05:03 auth: ...
5
votes
3answers
755 views

Is there any way to synchronize AD users with Office 365 but still be able to edit them online?

I'm performing a migration to Office 365 from a third-party mail server (MDaemon); the local Active Directory doesn't include any Exchange server, and never had any. We will need directory ...
1
vote
2answers
114 views

Managing user and their credentials in kerberos and openldap system

I am learning to use openldap as backend database for kerberos credentials. It is good that all the programs are working with single sign on. The problem is - I can manage user from kadmin command ...
0
votes
1answer
94 views

Trouble with case-sensitive LDAP user logins to Dovecot

I asked this to the dovecot list to no avail, so will try here too. Please forgive the crosspost. I have a client running Dovecot-Postfix on Debian Squeeze. I'm using Dovecot from the Squeeze ...
2
votes
0answers
342 views

LDAP over SSL Unsuccessful on 2003 DC, Working on 2008 R2 DC in Same Domain

I have a publicly signed UCC for LDAP over SSL in a test domain. It contains the Server Authentication OID Extension and works fine on a 2008 R2 DC in the same domain. The CSR was generated on the ...
-1
votes
1answer
128 views

What are the dependencies of sssd/nscd to function?

What are the dependencies of sssd to function as an LDAP-client? What are the dependencies of nscd to function as an LDAP-client? Does sssd need openldap to function as an LDAP-client? Does nscd?
1
vote
0answers
75 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
0
votes
1answer
51 views

user privileges ldap scheme

I needed to create a user (it's already created) in my LDAP schema and want to give privileges of reading/writing to that user like if they were the admin but just for a specific subtree. The thing ...
2
votes
1answer
182 views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
2
votes
1answer
133 views

What is LDAP enumeration?

I have been working with implementing LDAP in our servers. We are using SSSD instead of nscd/nslcd to communicate with the LDAP server. One of the options in SSSD is enumeration. Enabling it solved ...
0
votes
1answer
150 views

Strange Change in ssh behavior + LDAP

We have a cluster with a front node that admits normal users and LDAP users. Two days ago the ssh show a strange behavior: The LDAP users can't login in the front node using password but, The LDAP ...
1
vote
3answers
965 views

sssd vs nslcd for RHEL-5/6

We have 50 RH-5 machines and 70 RH-6 machines. I am looking to decide what we should use for LDAP: nscd/nslcd for all RH-5/RH-6 servers nscd/nslcd for RH-5 servers, sssd for RH-6 servers sssd for ...
2
votes
1answer
1k views

What is nsswitch compat mode?

Red Hat recommended me compat mode in /etc/nsswitch.conf as one of the options to enumerate LDAP users, but later said that it's not a much-used method. nsswitch.conf passwd: files compat ...
0
votes
1answer
71 views

What are disadvantages of using nsswitch compat?

In my current LDAP set-up "getent passwd" shows all 600+ users that exist in the LDAP, not enumerating only the 20 LDAP-users that have permission to access this netgroup/server. This can be solved ...
1
vote
2answers
68 views

Getting the LDAP password from the LDAP Directory

First up, I know this question's got the potential to be downvoted and closed, nonetheless I think I will go ahead and ask it all the same because our issue is genuine enough. We have a mail server ...
-1
votes
1answer
74 views

LDAPS certificate not working with IP address

I have a certificate assigned to my Domain Controller/Certificate Authority that has no subject name assigned but has two FQDN's and and IP in the alternative names under DNS and IPv4 respectively. ...
0
votes
1answer
195 views

LDAP userPassword only works with plaintext

I have setup openLDAP server on an ubuntu machine. I am trying to test user authentication, but am running into a problem. If, in ldap, the userPassword contains a plaintext password, authentication ...
0
votes
1answer
50 views

Users seeing all other LDAP users on RHEL default behavior?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent ...
0
votes
1answer
437 views

Autofs + NFS + LDAP sudo problems

I have a setup very similar to Dan Bishop's Ubuntu 12.04 Ultimate Server Guide. I actually created a series of ansible scripts to automate this process on my github. So I have ldap+kerberos set up ...
1
vote
1answer
102 views

Ldap query on single subOU for Alfresco

this is what my ldap looks like : red.lan Groups(OU) Computers(SubOU) Printers(SubOU) Users(SubOU) Some(OU) Users(OU) SomeOther(SubOU) So, i'm trying to ...
6
votes
1answer
206 views

Need help understanding PAM directives

I have the following directives in my /etc/pam.d/sshd file on a RHEL5 box and I'm a bit confused. These directives are there to make LDAP+RADIUS+OTP work. What I'm trying to do is tell pam not to ...
0
votes
0answers
33 views

Getting numbered users which does not really exist in the LDAP Interface

I'm currently experiencing a very weird problem. I maintain the ldap interface of a software of our company and i'm only communicating to the ldap interface of AD, Domino and so on. Today with a ...
1
vote
1answer
117 views

SVN Server LDAP Authentication Error: User is not unique

I'm getting the following error when Apache (running on Solaris) tries to authenticate against LDAP for a specic user for SVN server: auth_ldap authenticate: user abc authentication failed; URI ...
0
votes
0answers
53 views

Select: Mailbox not found on login

I have an kolab mailserver running in multi domain setup. So far most of the stuff is working. I created the first additional Domain. I could login, but in roundcube it shows me: Select: Mailbox was ...
0
votes
1answer
72 views

Finding out my current LDAP server type

How can i find out if my current LDAP sever type is Standalone, Master or Replica (slave)? I am using OpenLDAP on SLES 11.
1
vote
0answers
12 views

Can the Apach AuthLDAPNURL be pointed at the root of a tree?

I have a server where I need to use Apaches AuthLDAPNURL value, but I cannot start at any specific O, OU, or DC. For whatever reason this tree has everybody in 19 Organization (O) objects, hanging ...