Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
1answer
629 views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
0
votes
1answer
101 views

Immediate logout after login

I have copied VM with Red Hat 6.4 in VMware vSphere Client, move it to another network and change configs for connecting to ldap servers. And now I have a problem with logging procedure through LDAP. ...
0
votes
0answers
172 views

Apache mod_authnz_ldap Error 500

Ubuntu 12.04 LTS Apache/2.2.22 http://server/lightsquid/ gives window with username/password request, then «500 Internal Server Error». Error rises whatever username and password were used: valid or ...
1
vote
1answer
1k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
0answers
330 views

Dovecot won't work with quota value from LDAP that include the “S” appended for size?

I have a courier-imap IMAP system backed by LDAP holding the user data. I would like to convert IMAP to dovecot, and I am able to successfully configure basic login; that is working correctly. But I ...
0
votes
1answer
697 views

LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS

SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN tl;dr: We uses a self-signed CA and we ...
0
votes
0answers
51 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
30 views

What is the purpose of the OU in authLDAPURL and what (if anything) does it do to filter authentication requests?

I'm trying to set up authentication for my Apache web server using Active Directory. I do not want to limit users based on groups or any other method other than being a valid user. I have users who ...
0
votes
0answers
102 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
1answer
27 views

Linux map usernames

We had an LDAP server which had our own groups and usernames on. Now we are moving to a centrally managed LDAP server. The users now have a different username but still have a home folder mapped to ...
1
vote
1answer
29 views

OpenLDAP user group membership integrity

In OpenLDAP a user has membership in a group. Suppose one deletes the user. In the member attribute of the group the user remains. Is this considered an integrity violation? Is there a means to ...
2
votes
2answers
257 views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
1
vote
1answer
98 views

Lotus Domino Server Integrated with corporate ldap is fetching garbage values

I am using Directory Assistance (da.nsf) to use our corporate ldap for authentication and authorization. Also for sending emails. While sending emails, i will just give the common name and the server ...
1
vote
1answer
241 views

Setting up a mail server using postfix, dovecot, mailman and ldap

I don't really have much experience with mail servers so forgive me if some of my terminology is off. First of all, here's what I'm trying to do: get user information using ldap (postfix?) ...
1
vote
1answer
1k views

How do you set password-hash for OpenLDAP?

I have the following version on Ubuntu 12.04: OpenLDAP: slapd (Sep 19 2013 22:49:31) $ buildd@batsu:/build/buildd/openldap-2.4.28/debian/build/servers/slapd OpenLDAP now offers SSHA as the default ...
0
votes
0answers
98 views

QNAP LDAP server cannot change primary user group

We are setting up a new QNAP server in our office. We have set up NFS and LDAP to share users and files in a linux only network. The LDAP is giving us some trouble. As the default user group Domain ...
0
votes
0answers
586 views

Change local password as root after configuring for MS-AD Kerberos+LDAP

I have followed this excelent post to configure Kerberos + LDAP: http://koo.fi/blog/2013/01/06/ubuntu-12-04-active-directory-authentication/ However, there are some local users used for services. When ...
0
votes
3answers
2k views

root cannot access user's home folder shared via NFS

We have a local server that exports an NFS share, used as parent directory for Linux home folders in the network. The users authenticate via LDAP (running on the same server). Authentication works ...
2
votes
0answers
148 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
2
votes
1answer
62 views

OpenVPN LDAP plugin error

I'm getting this error after (what I think is) a successful LDAP authentication: No remote address supplied to OpenVPN LDAP Plugin (OPENVPN_PLUGIN_CLIENT_CONNECT). What does this error mean? From ...
0
votes
0answers
40 views

LDAP: what's with objectClass top?

I'm trying to get my head around LDAP and have installed a test OpenLDAP server (latest version slapd 2.4.31-1+nmu2) on a Debian 7.3.0 amd64 machine. After the basic setup which is done as part of the ...
0
votes
0answers
397 views

Configuring mod_auth_sspi to find remote user

I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet. The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
1
vote
1answer
39 views

Is it possible to create add people from outside the company inside AD mailinglists?

I would like to know if it is possible to add people from outside your company inside you AD so they can be added as members of different mailing lists. Clearly, I am looking for a safe way of doing ...
0
votes
1answer
185 views

NFS, Quota and LDAP

I have the following scenario in two servers with Debian: Server #1 OpenLDAP, NFS exporting /home Server #2 PAM with pam_ldap configured to authenticate against Server #1, /home directory mounted ...
0
votes
1answer
494 views

Jenkins: LDAP username/email lookup

My Jenkins LDAP configuration works fine for the user login and user details. The user John Doe can login with his username jdoe and his password. His initial user information (user/jdoe/configure) ...
0
votes
0answers
34 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
0
votes
1answer
296 views

Sonicwall TZ205w and Server 2012: Unable to authenticate via LDAP for VPN access (SSLVPN nor NetExtender)

I have been working all evening on this issue and have hit a roadblock. We have a firewall that recently was restored to a November backup, and after reconfiguration LDAP auth is toast. I researched ...
0
votes
1answer
359 views

apache mod_authnz_ldap - 500 error when blank username used

(should be tagged mod-authnz-ldap, but not enough rep) I've got Apache 2.4 running on Windows Server 2012. I've got mod_authnz_ldap working except if users put a blank username. This results in a ...
2
votes
1answer
43 views

Advantages of auxiliary classes when extending Active Directory schema

I need to add some attributes to the user class in Active Directory. I see that to do this it is either possible to add the attributes directly to the user class, or to create an auxiliary class ...
4
votes
2answers
106 views

Which field to use when authenticating against Active Directory?

Active Directory user objects include a number of fields that can be considered an identifier. The following lists some of these with their label in ADUC and their attribute name: Full Name - cn ? ...
1
vote
1answer
349 views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
0
votes
1answer
57 views

Sudo Command Alias option equivalent in OpenLDAP

I have an OpenLDAP installation that manages Sudo as well. Everytime I create a sudoers role, I have to list the commands that that sudoers role can run. This leads to a lot of repetition. Is there ...
0
votes
0answers
60 views

MOD_AUTHNZ_LDAP query failing on search query yet search works in Apache Directory Studio

I have a search issue with mod_authnz_ldap that I need help on. I need to give authentication to users in the active directory however seem to need to specify "OU=XX" in the search string. Successful ...
1
vote
0answers
107 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
0
votes
0answers
986 views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
1
vote
1answer
97 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
4
votes
2answers
46 views

Security concern for LDAP Query

Server OS = Windows Server 2008 R2 Std ( Domain Controller ) Client OS = windows XP & 7 Whenever we add Laptop / Desktop in to Domain. After that if User want to have information of Certain ...
1
vote
0answers
272 views

adamsync.exe /sync is failing with “Naming Violation”

I am trying to synchronize my AD LDS instance (localhost:50006) with AD DS entries (basically trying to get user and computer accounts from AD DS so that I can use windows security principals in my ...
1
vote
0answers
45 views

Samba authentication using read-only LDAP server without samba attributes

I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server. ...
1
vote
1answer
486 views

Automounting home directories using LDAP in ArchLinux

I have managed to set up an OpenLDAP server that runs ArchLinux. I can now log in from the client (also ArchLinux) using the LDAP users. Now i want to mount the home directories over the network... I ...
1
vote
0answers
128 views

OpenLDAP on ArchLinux users cannot change passwd

I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
0
votes
1answer
390 views

Can't login with KDM and SSSD but works fine from console

I have LDAP authentication set up with SSSD and I can login fine through console and ssh. However when I try to login through KDM it just says authentication failure... More specifically: Jan 9 ...
0
votes
1answer
129 views

OpenLDAP client configuration. Can search but cannot login?

I'm trying to set up LDAP on a Gentoo workstation to authenticate against a central server. However, I encountered some issues and I really hope you guys can help me out here :) First off, the LDAP ...
1
vote
0answers
223 views

LDAP authentication very slow on production server

We are developing a Spring MVC application which does LDAP authentication using Spring Security framework. The problem we are facing is that the authentication works just fine on our development ...
1
vote
1answer
310 views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
1
vote
2answers
779 views

SSSD ignoring ldap_access_filter

I've setup sssd and LDAP. Users authenticate and login. My problem is that sssd seems to ignore the ldap_access_filter option and allows all users to login. I've examined the logs/debug and pam_sss ...
2
votes
1answer
90 views

Strange PATH when use sudoers via ldap

I have a working LDAP authentication environment. LDAP server is on ubuntu 12.04 machine while client are all centos 6.4 machines. Recently I configure sudoers in LDAP following this article ...
-1
votes
1answer
78 views

LightSquid ldap authentication fails

I have a lightsquid server to generate reports about Internet use. It is integrated with LDAP server. I cant login in lightsquid web page. cat /var/log/apache2/error.log Thu Dec 26 13:54:04 2013] ...
0
votes
0answers
36 views

LDAP Replication

I'm trying to use LDAP Sync Replication. I must grant rights to my account replicador. This is my ldif: dn: olcDatabase={1}hdb,cn=config replace: olcAccess olcAccess: {0}to attrs = ...
1
vote
1answer
106 views

Prevent sssd from using ldap to authenticate or id specific users for chef

I'm trying to use chef to add/modify a few local user accounts. For whatever reason there are duplicate accounts in LDAP. Since the system uses sssd/pam/ldap, it sees the user as existing, but is ...