Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
40 views

Citrix NetScaler: Configure LDAP Authentication Server

I am trying to configure a Citrix NetScaler to do authentication with Active Directory, and trying to do so from the CLI. Looking at support forums and documentation, it looks like this can be ...
0
votes
1answer
35 views

Export IAM user accounts (with passwords) into LDAP

I have a blank LDAP account and want to import all the IAM user accounts to LDAP and keep the LDAP in sync with IAM (not the other way around using federation). Is this possible? I need a LDIF file ...
0
votes
2answers
146 views

Multiple OU User Search for OpenVPN Server with AD/LDAP Authentication

I have an OpenVPN server that authenticates against a single AD domain. Here is my auth-ldap.conf that is used with OpenVPN <LDAP> URL ldap://ad1.test.company:389,...
0
votes
0answers
75 views

nscd: nss_ldap: could not search LDAP server - server is unavaliable

I have an installation of ubuntu 14.04 and samba4 for Active Directory Today when I login with my LDAP usae has not allowed me, then update and restart the server And now i can see the next errors: ...
0
votes
1answer
44 views

How do I determine if strong key protection is enabled for a certificate private key in Server 2008 R2?

I'm trying to get a Windows Server 2008 R2 domain controller to use SSL with LDAP. I have a certificate installed, but I'm unable to connect on port 636 via ldp.exe (port 389 works just fine). I ...
1
vote
1answer
72 views

Add several new entries to LDAP fails

I can't add more than one record to LDAP. I have blank line before a new DN entry but it seems it doesn't work for some season. ldapadd -x -D cn=Manager,dc=hadoop,dc=local -w -f ldap.ldif ...
0
votes
1answer
29 views

ldap-overlay with fixed default attributes

i'm having a largish user-base (>>1000) which should be able to collectively use some sharing service. the user base is slowly but constantly changing. esp. we are not interested in privilege ...
0
votes
2answers
53 views

pam_groupdn doesn't work at all. always all users allowed to log in

i have tried to install pam, ldap on fedora23. i have configured pam.d/system-auth as follows: #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time ...
0
votes
2answers
671 views

LDAP Authentication - GLPI 0.90.1

I'm trying to integrate GLPI with Active Directory. I'm using windows XAMPP V3.2.2 and GLPI 0.90.1. While setting up the LDAP Directory, I'm getting an error "Test failed: Main server ADSrv". What am ...
0
votes
0answers
21 views

Needed permissions to read msDS-ReplLinkFailures attribute

I'm using powershell to get the value of msDS-ReplLinkFailures attribute like this: Get-ADRootDSE -Properties msDS-ReplLinkFailures This works ok if the current user is member of domain's ...
0
votes
0answers
103 views

horde 5 ldap/samba4 authentication fails “Bad search filter Parameters”

I am trying to authenticate my horde users against my samba4 active directory but I am always getting a "Bad search filter Parameters" error. Unfortunately I am not able to identify the exact problem ...
1
vote
0answers
69 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
0
votes
1answer
31 views

OpenLDAP Filtering Users that are part of Groups of Groups

LDAP Configuration: MemberOf Overlay is enabled Users are part of an organizationalUnit called People. Each user is a "memberOf" a role. For example, a user in their role at a company is a "...
0
votes
0answers
30 views

Ambari log is filled with LdapTemplate warning

I'm running: # ambari-server --version 2.1.0 Specifically, I'm running IBM Open Platform for Hadoop 4.1 FP2. I configured Ambari to use LDAP for authentication, and the LDAP authentication is ...
1
vote
0answers
62 views

Why is LDAP “memberUid” restricted to ascii, but “uid” is not?

I'm getting this error from ApacheDS (2.0.0-M21): ERR_04447_CANNOT_NORMALIZE_VALUE Cannot normalize the wrapped value ERR_04473_NOT_VALID_VALUE Not a valid value 'gu\C3\AApes' for the AttributeType '...
0
votes
0answers
117 views

Webmin authentication against LDAP

I want ultimately to authenticate Webmin user against one LDAP. I have read the page How can I make a Webmin user always use the same password as Unix?. According to this explanation, the ...
-1
votes
1answer
12 views

Unable to set ADS security on Samba DC

I've been trying to set my security as ADS for my Samba DC. Unfortunately, whenever I do, the LDAP server can no longer be found using net ads info. Below is my current smb.conf. [global] workgroup = ...
1
vote
1answer
33 views

Howto setup LDAP/Linux so when a user is deleted, its bash user session is immediately closed

Is there a way to setup OpenLDAP on a Linux (Redhat/CentOS) system so that when a user is removed from the LDAP server or he/she is removed from the "login is authorized" group, all his/her open ...
0
votes
0answers
30 views

LDAP connection string issue

Sir! please help I have a connection string extracted like this /o=First/ou=Exchange Administrative Group (EDABMHF23SPDLT)/cn=Recipients/cn=852edeadbeef354a4c8000ebaae09fdd01-Robert It doesn't ...
0
votes
0answers
45 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
68 views

issues with svnserve using ldap and sasl

I am trying to setup SVN's svnserve server using ldap and sasl to authenticate users and to encrypt data but I come across the following issues: /var/log/messages error or warning when I execute ...
1
vote
1answer
116 views

Is LDAP used by Active Directory for anything if I only use Kerberos for authentication?

In my windows only domain, Kerberos is used for all authentication. The domain controllers I understand replicate & authenticate using RPC. Is LDAP used for anything else? Should I close the ...
2
votes
1answer
198 views

Allow self password change using LDAP(s) with Samba4

I am trying to create a webapp to allow users to change their own passwords in Samba4 (perhaps, also in AD), using LDAP(s). But when I try to modify the user password using this code: dn: ........ ...
0
votes
1answer
114 views

ldap_add: Invalid DN syntax (34)

I am configuring my LDAP for roaming profiles using autofs, but when I run this command ldapadd -x -D "cn=admin,dc=example,dc=com" -W -f automount.ldif I get this error message ldap_add: Invalid ...
1
vote
0answers
54 views

LDAP at IBM XIV

I have problem with authenticating users over LDAP (Active Directory) Windows 2008 R2 on IBM XIV. After troubleshooting I've find out problems caused by polish letters in CommonName (...
1
vote
1answer
113 views

LDAP auth successful with additional characters

I have a service which uses a LDAP directory (anonymous bind) to get the users and their passwords in order to perform the authentication. The problem is that I've realized that I can login with a ...
3
votes
1answer
243 views

Rabbitmq Won't Talk to Active Directory

I have a rabbitmq server that I need to hook up to AD. Configuration is set using puppet rabbitmq module, with some minor manual changes (log level): % This file managed by Puppet % Template Path: ...
5
votes
3answers
607 views

How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?

I'm setting up OpenLDAP slapd on Ubuntu 14.04 Trusty Tahr. I want certain instances (replication etc.) that aren't users to be able to login via SASL using DIGEST-MD5 mechanism. Unlike users, they ...
0
votes
0answers
119 views

Freeradius not expanding “Calling-Station-Id” attribute in LDAP search

I'm trying to do PEAP-MSCHAPv2, then do a LDAP search to verify the user is in the correct group AND see if there MAC address is under a otherLoginWorkstation entry. If you look in the logs, ...
0
votes
0answers
21 views

Can one safely migrate a non-LDAP Gitlab to an LDAP one?

I have two Gitlab installations. One uses Gitlab's internal authentication system and the other (newer) one uses LDAP. I now want to migrate everything from the old one to the new one. Both Gitlabs ...
2
votes
1answer
59 views

OpenLDAP - How to restrict Debian login to specific groups (posixGroup)?

I'm trying to restrict login to specific LDAP groups in Debian 8. The system is configured to use OpenLDAP (PAM) as authentication method. My goal is to configure the system to allow all local users ...
0
votes
0answers
72 views

Why I cannot find ldap.conf file when I want to integrate 389-ds and samba on centos 7?

I am working on two servers, a samba server and a 389-ds server. Now I want to integrate them so that samba shares are authenticated via ldap server. I have followed instructions on http://directory....
0
votes
0answers
59 views

postfix rejects all EMails Recipient address rejected: User unknown inlocal recipient table

Hi Together I've got a problem with my postfix server and i can't solve it. I set up a local mailserver with dovecot and postfix to receive e-mail over my own domain. It worked fine till i tried to ...
0
votes
1answer
35 views

Grant Kerberos Ticket on successfull authentication against third party password store

I am currently building a system where I would like to deploy Kerberos. However my external constraints on the user management do not allow me to authenticate the users against Kerberos itself. I do ...
0
votes
0answers
46 views

LDAP dynlist not working with syncrepl replication

I'm using syncrepl replication with one master and many slaves. I'm also using dynlist overlay. Dynlist works on the master, but not on slaves. When I run a query on master, everything works normally,...
0
votes
1answer
16 views

AD LDS data refreshing from script

I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account. I cannot enable syncrepl ont ...
0
votes
1answer
24 views

Apache Authenication -http request failing in sub directories

I'm running an apachev2.2 server and I am using LDAP to authenticate the root directory. The authenication works well, however my page uses php which is using the file_puts_content function to grab ...
1
vote
1answer
308 views

Export LDAP schema without data

For testing purposes, I need a copy of our LDAP server without any personal data. What is the best way, to export this from an existing OpenLDAP server? I tried ldapsearch and Apache Directory ...
1
vote
1answer
79 views

Gitlab and LDAP against CommuniGate Pro Server

I'm currently trying to make our GitLab authenticate to LDAP that is provided by CommuniGate Pro server. When using command line tests (like ldapsearch) I'm successfully authenticating and getting ...
0
votes
1answer
49 views

How to configure openldap with ldapmodify

At the beginning i would like to apologize for my english. I have to admit that i am totally beginner with ldap but i really would like to learn how to configure it. I've just installed package of ...
7
votes
2answers
615 views

SSSD rejects LDAP login with su: incorrect password

I've set up an LDAP server with user accounts. I've successfully configured a Rails application to authenticate against this LDAP server. I'm now trying to configure SSSD to authenticate against LDAP, ...
0
votes
1answer
104 views

With freeradius and PEAP-MSCHAP, how does one limit connectivity to a single group?

I feel like jumping up and down after I got FreeRadius, samba winbind, XCA w/ ECDSA certs, Active Directory, and Ubiquiti Unifi all talking together. Next problem, any valid account in ...
0
votes
1answer
96 views

How to log all Active Directory LDAP queries?

I want to debug the Windows Server 2008's LDAP and see all the LDAP search details, so I edit the Field Engineering key to 5 in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics ...
2
votes
2answers
38 views

How do I search AD Configuration partition for a given string?

I'm having an issue with installing/uninstalling an Exchange server. I suspect the server wasn't properly removed from AD and as a result I'm getting an error. (I've already wiped the machine, the ...
0
votes
1answer
39 views

Linux LDAP to Ldapadmin configuration issues

I'm learning how to setup and use OpenLDAP installed on an Ubuntu server. I executed sudo apt-get install slapd ldap-utils -y and set my ldap domain to test.mydomain.com. I can execute ldapadd ...
0
votes
1answer
73 views

How config samba to use ladp attr “userPassword” password OR config ldap when attr “userPassword” changed then “sambaNTPassword” will be changed too?

I installed samba-4.1.12-24.el7_1.x86_64 and openldap-2.4.39-7.el7.centos.x86_64 and self-service-password for ladp user change their password. I noticed self-service-password will change ldap attr ...
3
votes
0answers
46 views

I need help trying to authenticate with AD from my linux machine

I am not experienced in this, so there might be some points that I am missing. Initially I tried to setup Cyrus Mail w/ SASL for AD authentication. After several tries, it failed to work. I switched ...
1
vote
1answer
193 views

PAM with LDAP and add an exception for local user

I've successfully configured LDAP and SSH. Also I've added a requirement that user should be in admin group. That works. /etc/ldap.conf ... pam_groupdn cn=admin,ou=Groups,dc=example,dc=com ... /...
2
votes
0answers
65 views

How do I configure an AD DC to respond to LDAP binds on ldaps://?

I am working with a Windows Server 2012 R2 DC which is the acting LDAP authentication server for the domain. From both ldp.exe on the same machine and php5-ldap on a separate Ubuntu box on the ...
0
votes
2answers
222 views

SSSD for LDAP user authentication only (just bind) on Ubuntu, local databases for uid and groups

Every guide to using SSSD for LDAP authentication I've found thus far shows you how to do more than just authenticate a user, such as provide their shell, groups, etc. I don't know how to remove ...