Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
29 views

Ldap with cloud application

I was wondering if you guys could help me, I'm trying to use ldap to connect with our AD but the settings on the cloud app seem to fail. How do you set up ldap with external servers? Is there some ...
0
votes
0answers
214 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
1
vote
0answers
499 views

allow Windows 2012 AD users to ssh into a linux computer

I have a Windows Server 2012 R2 running as a domain controller. I also have a Debian 7.2 server (running Webmin 1.6) which I would like to give users ssh access to using their domain accounts. On the ...
3
votes
1answer
100 views

Expensive LDAP queries from Workstations

Troubleshooting high LSASS process on a DC found expensive queries originating from a few workstations. Each query is as follows: Visited Entries: 1Million+ Returned Entries: <50 (most of the ...
3
votes
0answers
201 views

Kerberos, .k5login and sudo

Background: I am using a Debian 7 system which I have integrated with an LDAP+Kerberos system using libnss-ldap, libpam-krb5 and nscd. I have modified sudoers to permit an LDAP group the right to sudo ...
6
votes
2answers
405 views

Manage SSH Users with MySQL backend

is there a possibility to use a (mysql) Database to manage SSH login credentials instead of /etc/passwd ? I know I could use ldap but I only want simple user management and ldap seems a little bit ...
0
votes
0answers
103 views

Debian nfs-client shows nobody:nogroup

i have a running ldap-server, which works well with my webserver. Now i tried to get the nfs-server running with my a MySQL server. I (think) i did the same things like on my webserver configuration. ...
3
votes
1answer
170 views

Apache LDAP Authentication with AD Subgroup

I am trying to authenticate using an Active Directory User on a Website running on Apache. My Setup Active Directory: User "steven" is a member of the group "staff". User "cindy" is a member of the ...
1
vote
1answer
347 views

Can HP m476dn MFP be configured to lookup email from AD/LDAP

I am considering to buy HP m476dn MFP. Going through the specs it is no clear if the device can lookup for email address from the LDAP server. What I would like is to be able to send scans via email ...
0
votes
1answer
61 views

Mixed domain: how to setup password referral

I'm working with a mixture of linux and windows servers and am hoping to use AD to tie in to a centralized LDAP authentication process. I recently installed a Windows 2012 R2 server as a domain ...
0
votes
1answer
60 views

ldapsearch from root succeeds, but doesn't succeed when base is not root

I have a ou which looks like this ou=abcd,ou=ou1,ou=ou2,dc=mydomain,dc=com The ou has a property called 'l' which has a value pqrs. I do the following search ldapsearch -x -b "dc=mydomain,dc=com" ...
7
votes
1answer
348 views

Good practices regarding discontinued software in production (OpenDS)?

How bad is it to use OpenDS, which is not actively maintained, and had the last patch in 2010, and require JDK6(which is also obsolete) in a production environment? (Although at the backend and not ...
0
votes
1answer
919 views

restrict ssh access to host using sssd and LDAP

I need to restrict ssh access to hosts based on the user's LDAP group membership. I want to do this using sssd's ldap_access_filter feature. Here's my sssd.conf file: [sssd] config_file_version = 2 ...
0
votes
0answers
13 views

Is it possible to cache LDAP responses from referrals in other servers in AD?

I have a LDAP server that is called from a number of sites that each have their own (isolated) instance of AD Directory Services. Is it possible to cache an LDAP query, and response, in a local ADDS ...
2
votes
1answer
80 views

Can ADFS access other user's information?

I need to implement a company website that would be accessed from the outside of the company. It is required that the users are able to login with the same credentials as they access the company ...
0
votes
0answers
127 views

Unable to use custom attribute in Apache DS LDAP

I am new to LDAP and stuff, and I am struggling with adding new attributes to the schema. I created a new objectclass with some custom attributes as done here. Exported it to an LDIF file, and ...
2
votes
0answers
1k views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
1
vote
1answer
121 views

Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox

I want to connect liferay to zimbra in Virtual Box and I need to fill this form : ![Capture of liferay try to connect to ldap in VB] http://i.stack.imgur.com/cUOuV.png I got the url and password ...
0
votes
1answer
46 views

LDAP Groups in authconfig

In my authconfig setup, I always use : --ldapbasedn='ou=users,o=Directory' I thought by using: --ldapbasedn='o=Directory' groups would also be included, but no luck. My LDAP schema looks ...
0
votes
1answer
190 views

issue with master and slave ldap configuration

I am configuring master and slave ldap configuration. Initially I installed LDAP in Master machine and also installed on slave machine apt-get install -y slapd ldap-utils while installing LDAP ...
4
votes
1answer
511 views

How to get Active Directory domain objectGUID anonymously

As an authenticated Active Directory user, I can run this to get the domain GUID (objectGUID): dsquery * "DC=lab,DC=local" -scope base -attr objectguid I can use this command in Linux to get the ...
1
vote
0answers
110 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
0
votes
1answer
84 views

Why is my samba domain user created by a bash script behave differently from one created manually?

I have a samba server which is using LDAP as its backend. The PDC is working as expected as long as I create the users manually. This means that if I use the following command to create a new user, I ...
1
vote
3answers
165 views

Is it possible to have non-replicated data on an LDAP consumer?

I've read all the available documentation, the Mastering OpenLDAP book, and like a zillion mail-list posts but I haven't found a way to make such scenario possible. I see several use cases for this ...
1
vote
0answers
180 views

LDAP + NFS + automount home directories permissions issue

When an LDAP user logs into the system they have incorrect permissions to their home directory. LDAP and NFS services exist on the same server. The directory shows the correct ownership / ...
0
votes
0answers
37 views

How to make a role with all permissions on Ldap?

I'm working with Open Ldap and want to make a role which has all permissions. I mean if I make a new permission on the future, the role should automatically has that permission and no need to add the ...
1
vote
0answers
25 views

bind-sdb does not query for wildcard entry

I have successfully set up Bild with LDAP on a Fedora VM. The Problem is, bind-sdb simply does not query wildcard entries. When I do: nslookup doesnotexist.example.com. 127.0.0.1 The LDAP server ...
0
votes
0answers
46 views

Apache rewrite logged in username

I have included a git server in which users logs in with their username and password. By using the Basic Authentication, user are able to login without adding the domain (like DOMAIN\username). Here ...
0
votes
0answers
109 views

bugzilla authenticate with kerberos + ldap + SSO

I want to set up bugzilla with SSO, i cannot find any good documentation on how to do this. I have managed to set up ldap login which works fine. now I have set up kerberos on apache which works fine, ...
0
votes
0answers
75 views

LDAP sync between Win2008 and Cisco Unified Call Manager

I have a VOIP environment with Win 2008 as a primary LDAP server. However, before I setup Cisco Unified Call Manager to get LDAP sync from Win 2008, previous administrator has created users in CUCM ...
1
vote
2answers
183 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
1
vote
1answer
199 views

Using LDAP/Active Directory with PIN based authentication

We'd like to integrate our service with LDAP, but because of hardware constraints, we're only allow 4 digit user ids and passwords. What would be the best practice for performing such an ...
1
vote
2answers
99 views

How to disable password change for openldap user?

Considering possible solutions for some improvements I run into this theoretical question and I couldn't find a satisfying answer. Some of you may have first-hand experience with this in practice, so ...
0
votes
1answer
444 views

Apache 2.4 with PHP 5.5, LDAP in PHP not working

I'm working with a server running Debian 7.4 and it's currently running PHP 5.5.12 and Apache 2.2.22. I'm attempting to upgrade to Apache 2.4.9 so that I can enable Perfect Forward Secrecy. I ...
0
votes
1answer
257 views

LDAP query to search for the active user in a particular container

I am trying to configure ldap sync in Alfresco 4.2e. I am able to authenticate the users but I am unable to sync the users. I am using ldapadmin browser to check the tree of the active directory ...
1
vote
1answer
2k views

Pfsense+squid LDAP search filter error

Just installed pfsense and squid on a spare machine. I am trying to get Squid to authenticate AD users via LDAP. First I tried this: ...
1
vote
0answers
357 views

Disabling LDAP Signing on Windows PDC in Local Policy

I just tripped over my own feet it seems. Playing around on a Windows 2008 R2 server (set up as domain controller), I was intrigued by certain warning event (event id 2886) which says: "To enhance ...
0
votes
2answers
118 views

view all possible attributes of an objectClass for LDAP

I'm scripting some ldap automation and have reached a slight hangup. Basically, I want to check if an attribute being added to an entry actually exists within a given objectClass before I try to add ...
0
votes
1answer
735 views

CentOS/Redhat: Systemwide aliases when logging in through LDAP/sssd

I've asked this question in the Centos Support forum, but we didn't found a solution for it (https://www.centos.org/forums/viewtopic.php?f=13&t=46101#p196728) When logging in through LDAP/sssd, ...
0
votes
1answer
196 views

Add group/user on OpenLDAP

I am setting up OpenLDAP for the first time, on RHEL6 and using Puppet to do the initial install/configuration. I believe the configuration uses the slapd.d rather than slapd.conf method. Basically, ...
-1
votes
1answer
338 views

OpenLDAP modify member is not allowed

I am Struggeling with my LDAP attributes. I already created a few test users and groups, but I am unable to add users to the groups. #!DATE 2014-05-22T11:48:16.324 #!ERROR [LDAP: error code 65 - ...
0
votes
3answers
53 views

Possible to refer to a user in AD without the full LDAP path?

I have an application that needs to authenticate (log in as) a particular user. The vendor says they need to hard-code the full DN of the user to make this occur. It's been a while since I looked at ...
2
votes
0answers
343 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
0
votes
1answer
72 views

OpenLDAP on Ubuntu 13.10

I've configured OpenLDAP following the Ubuntu guide (with some minor edits, such as setting a proper password, my own domain name, and creating a staff group instead of an example one under people) ...
1
vote
1answer
156 views

Dovecot + OpenLDAP

I am trying to get dovecot 2.0.19 authenticate users via LDAP (OpenLDAP 2.4.28) and using Wireshark to debug the process. It looks like the basic configuration of dovecot is fine, but it doesn't pull ...
2
votes
0answers
173 views

configuration CAS with LDAP active Directory

I am using CAS server version 3.5.2 and after I configured it to connect to an LDAP server I got this message. Anyone have a clue about what is happening? My LDAP server is pfeserver.pfe.dz ...
1
vote
0answers
96 views

Groups with local and LDAP users

I'm exploring the idea of authenticating users on some RHEL 6.4 boxes using LDAP. I'm using sssd with an LDAP provider, and setting the nsswitch.conf file to use sss for passwd/shadow/group. How can ...
0
votes
2answers
167 views

Difference between LDAP Search and Virtual List View

An member server has some application using service account to query active directory for users and groups. I am using LDP to connect/bind and do queries using LDP.exe , "Bind" works succesfully with ...
0
votes
1answer
468 views

VBS Scripting - Access LDAP User object with samAccountName

I am trying to write a VBScript that meets 2 requirements: It unlocks a user's account. It can do so and reference the user using the samAccountName. #1 works. However, the below script I have ...
2
votes
1answer
168 views

How can I force a mac mobile account user to be logged out or locked out when their LDAP account is disabled?

I have a FREEIPA LDAP server and a Mavericks Client. I have bound my Mac to my ldap and created a mobile account. What I want is when someone is disabled it logs out the user or locks the screen.