Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
1answer
273 views

Centos 6.5, Active directory and ldapsearch

I need to query the ldap part of an Active Directory DC from CentOS 6.5. ldapsearch allows me to do that, but I have found two bumps in the "ldapsearch" road: ldapsearch wraps long text to several ...
0
votes
0answers
48 views

389 ldap server: woes setting it up

I'd like to use a LDAP server as a centralized rolodex I'm on fedora 20 I'm following the 389 administration manual, but when I get to create a root object, I get this window from the visual console ...
0
votes
0answers
116 views

Samba create new user error: bailing out

After upgrade Ubuntu version to 12.04, an error happens, when I want to create a new user through Samba (which is connected to the ldap server): $ pdbedit -af "New User" newuser Error message: ...
3
votes
1answer
340 views

Domain Controller returns LDAP Referral for it's own domain

I have 2 domains, each with 2 Domain Controllers: company.local ad.company.com.au Both domains are in the same forest and have a bi-direction trust setup. We're migrating to the ad.company.com.au ...
5
votes
2answers
735 views

Is it generally acceptable to expose LDAP in read only mode to the Internet?

I need to support Mac clients who need to access a LDAP server to locate SMIME keys. Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
1
vote
1answer
73 views

Can Active Directory issue a LDAP redirect to another LDAP server

I have several independent LDAP servers, controlled by different entities that allow anonymous access. I would like AD to tell an LDAP query to use a different server... like recursive DNS. Is ...
1
vote
0answers
80 views

Creating users in 389 Directory Server: Autofill UID & GID

I have a 389 Directory Server cluster as ldap. I can create users using 389 management console but... When Selecting "Posix User" tab and checking "Enable Posix User Attributes" is necessary manually ...
0
votes
1answer
98 views

Why can a local root turn into any LDAP user?

I know this has been asked here before, but I am not satisfied with the answers and don't know if it's ok to revive and hijack an older question. We have workstations that authenticate users on an ...
0
votes
1answer
97 views

OpenBSD with LDAP authentication returning invalid user

I am trying to set up an OpenBSD box to use a LDAP server for authentication. I am following the directions at http://www.obfuscurity.com/2009/08/OpenBSD-as-an-LDAP-Client and for the most part they ...
0
votes
0answers
112 views

Root denied login if networking down (LDAP environment)

I would like to know why I can't login as root (ssh, sudo or su -) when my LDAP is down or when I have some outage in my network. How to reproduce the problem: - Just change your DNS to something ...
0
votes
0answers
125 views

ejabberd + ldap_filter (uidNumber greater than) is not working

I have configuration ejabberd + ldap users which works fine, unless I try to filter only users with uid greater than 1000. =INFO REPORT==== 2014-02-26 09:52:22 === D(<0.268.0>:eldap:697) : ...
-1
votes
1answer
1k views

How do I create a read only user for LDAP queries in Microsoft Active Directory?

I want to create a user that can query LDAP on my Windows 2008 R2 Active Directory. It only works with Domain Admins. I read the Account Operators group will also work. Both these have write ...
0
votes
1answer
579 views

LDAP throws Event ID 2887 warnings even after enabling “require signing”

I am running an AD LDS directory and, ever since configuring it, I have been seeing 2887 warning messages, so I have decided to follow this guide to have the server require LDAP signing. The problem ...
0
votes
1answer
955 views

Configure GIT server over HTTP using LDAP

I am quite new to GIT and overall am not very experienced in infrastructure setup. However, what I am trying to do seems to be very basic and I am not able to do it. I am trying to create a GIT ...
1
vote
1answer
278 views

ldap fail after ubuntu upgrade to 12.04

I have upgraded ubuntu from 10.4 to 12.04. After it's done, ldap service is stopped and failed to start again! Now none of other services function! :( I checked error logs and found this: Feb 22 ...
0
votes
1answer
39 views

Is it possible to configure a Linux server to use more than one LDAP target?

We have an environment that we are tasked with managing while also giving access to projects that run the applications on the servers. Some of those projects have stood up LDAP for authenticating ...
1
vote
0answers
50 views

LDAP Integration with the firewall

I am trying to integrate Sonicwall NSA2400 with AD so users can VPN with their domain credentials and able to change password if it expires. Do i need to install ADLS role and configure LDAP, or LDAP ...
0
votes
2answers
143 views

Can't login to LDAP with current Windows user

I'm trying to connect to AD server with various tools under Windows. If I provide my domain\username and password, I have no problems If I don't provide credentials, I do connect, but I have very ...
0
votes
0answers
83 views

Get only ldap user or group using getent command

I need to write an audit check, where I have to make sure users are able to login to ldap client machines with ldap credentials over ssh. Either I am going to run bash script in a for loop, or I ...
2
votes
2answers
68 views

LDAP Breaking when moving user

Since I've been working at this company we've had a very basic AD setup. Users go in the user CN and there is a few OUs for computers, like desktops and servers. Recently I've been planning a more ...
0
votes
1answer
219 views

Can't synchronize the user group in TeamCity

0 user and group synchronized Below are my ldap log and settings. All I want to do is: 1. map the AD group "ccusers" to a group in TeamCity and create all users in that group. 2. Or add all users in ...
4
votes
1answer
960 views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
1
vote
1answer
805 views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
0
votes
1answer
117 views

Immediate logout after login

I have copied VM with Red Hat 6.4 in VMware vSphere Client, move it to another network and change configs for connecting to ldap servers. And now I have a problem with logging procedure through LDAP. ...
0
votes
0answers
220 views

Apache mod_authnz_ldap Error 500

Ubuntu 12.04 LTS Apache/2.2.22 http://server/lightsquid/ gives window with username/password request, then «500 Internal Server Error». Error rises whatever username and password were used: valid or ...
1
vote
1answer
2k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
0answers
380 views

Dovecot won't work with quota value from LDAP that include the “S” appended for size?

I have a courier-imap IMAP system backed by LDAP holding the user data. I would like to convert IMAP to dovecot, and I am able to successfully configure basic login; that is working correctly. But I ...
0
votes
1answer
884 views

LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS

SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN tl;dr: We uses a self-signed CA and we ...
0
votes
0answers
59 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
31 views

What is the purpose of the OU in authLDAPURL and what (if anything) does it do to filter authentication requests?

I'm trying to set up authentication for my Apache web server using Active Directory. I do not want to limit users based on groups or any other method other than being a valid user. I have users who ...
0
votes
0answers
112 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
1answer
28 views

Linux map usernames

We had an LDAP server which had our own groups and usernames on. Now we are moving to a centrally managed LDAP server. The users now have a different username but still have a home folder mapped to ...
1
vote
1answer
30 views

OpenLDAP user group membership integrity

In OpenLDAP a user has membership in a group. Suppose one deletes the user. In the member attribute of the group the user remains. Is this considered an integrity violation? Is there a means to ...
2
votes
2answers
355 views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
1
vote
1answer
132 views

Lotus Domino Server Integrated with corporate ldap is fetching garbage values

I am using Directory Assistance (da.nsf) to use our corporate ldap for authentication and authorization. Also for sending emails. While sending emails, i will just give the common name and the server ...
1
vote
1answer
320 views

Setting up a mail server using postfix, dovecot, mailman and ldap

I don't really have much experience with mail servers so forgive me if some of my terminology is off. First of all, here's what I'm trying to do: get user information using ldap (postfix?) ...
1
vote
1answer
1k views

How do you set password-hash for OpenLDAP?

I have the following version on Ubuntu 12.04: OpenLDAP: slapd (Sep 19 2013 22:49:31) $ buildd@batsu:/build/buildd/openldap-2.4.28/debian/build/servers/slapd OpenLDAP now offers SSHA as the default ...
0
votes
0answers
109 views

QNAP LDAP server cannot change primary user group

We are setting up a new QNAP server in our office. We have set up NFS and LDAP to share users and files in a linux only network. The LDAP is giving us some trouble. As the default user group Domain ...
0
votes
0answers
813 views

Change local password as root after configuring for MS-AD Kerberos+LDAP

I have followed this excelent post to configure Kerberos + LDAP: http://koo.fi/blog/2013/01/06/ubuntu-12-04-active-directory-authentication/ However, there are some local users used for services. When ...
0
votes
3answers
2k views

root cannot access user's home folder shared via NFS

We have a local server that exports an NFS share, used as parent directory for Linux home folders in the network. The users authenticate via LDAP (running on the same server). Authentication works ...
2
votes
0answers
178 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
2
votes
1answer
81 views

OpenVPN LDAP plugin error

I'm getting this error after (what I think is) a successful LDAP authentication: No remote address supplied to OpenVPN LDAP Plugin (OPENVPN_PLUGIN_CLIENT_CONNECT). What does this error mean? From ...
0
votes
0answers
42 views

LDAP: what's with objectClass top?

I'm trying to get my head around LDAP and have installed a test OpenLDAP server (latest version slapd 2.4.31-1+nmu2) on a Debian 7.3.0 amd64 machine. After the basic setup which is done as part of the ...
1
vote
0answers
473 views

Configuring mod_auth_sspi to find remote user

I have been trying for a while now to get mod_auth_sspi up and running to help run a Drupal Intranet. The Drupal LDAP modul and the Drupal SSO instructions https://drupal.org/node/1371478 have been ...
1
vote
1answer
41 views

Is it possible to create add people from outside the company inside AD mailinglists?

I would like to know if it is possible to add people from outside your company inside you AD so they can be added as members of different mailing lists. Clearly, I am looking for a safe way of doing ...
0
votes
1answer
225 views

NFS, Quota and LDAP

I have the following scenario in two servers with Debian: Server #1 OpenLDAP, NFS exporting /home Server #2 PAM with pam_ldap configured to authenticate against Server #1, /home directory mounted ...
0
votes
1answer
724 views

Jenkins: LDAP username/email lookup

My Jenkins LDAP configuration works fine for the user login and user details. The user John Doe can login with his username jdoe and his password. His initial user information (user/jdoe/configure) ...
0
votes
0answers
37 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
0
votes
1answer
359 views

Sonicwall TZ205w and Server 2012: Unable to authenticate via LDAP for VPN access (SSLVPN nor NetExtender)

I have been working all evening on this issue and have hit a roadblock. We have a firewall that recently was restored to a November backup, and after reconfiguration LDAP auth is toast. I researched ...
0
votes
1answer
479 views

apache mod_authnz_ldap - 500 error when blank username used

(should be tagged mod-authnz-ldap, but not enough rep) I've got Apache 2.4 running on Windows Server 2012. I've got mod_authnz_ldap working except if users put a blank username. This results in a ...