Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
1answer
86 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
4
votes
2answers
45 views

Security concern for LDAP Query

Server OS = Windows Server 2008 R2 Std ( Domain Controller ) Client OS = windows XP & 7 Whenever we add Laptop / Desktop in to Domain. After that if User want to have information of Certain ...
1
vote
0answers
230 views

adamsync.exe /sync is failing with “Naming Violation”

I am trying to synchronize my AD LDS instance (localhost:50006) with AD DS entries (basically trying to get user and computer accounts from AD DS so that I can use windows security principals in my ...
1
vote
0answers
39 views

Samba authentication using read-only LDAP server without samba attributes

I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server. ...
1
vote
1answer
260 views

Automounting home directories using LDAP in ArchLinux

I have managed to set up an OpenLDAP server that runs ArchLinux. I can now log in from the client (also ArchLinux) using the LDAP users. Now i want to mount the home directories over the network... I ...
1
vote
0answers
111 views

OpenLDAP on ArchLinux users cannot change passwd

I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
0
votes
1answer
316 views

Can't login with KDM and SSSD but works fine from console

I have LDAP authentication set up with SSSD and I can login fine through console and ssh. However when I try to login through KDM it just says authentication failure... More specifically: Jan 9 ...
0
votes
1answer
108 views

OpenLDAP client configuration. Can search but cannot login?

I'm trying to set up LDAP on a Gentoo workstation to authenticate against a central server. However, I encountered some issues and I really hope you guys can help me out here :) First off, the LDAP ...
1
vote
0answers
166 views

LDAP authentication very slow on production server

We are developing a Spring MVC application which does LDAP authentication using Spring Security framework. The problem we are facing is that the authentication works just fine on our development ...
1
vote
1answer
249 views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
1
vote
1answer
553 views

SSSD ignoring ldap_access_filter

I've setup sssd and LDAP. Users authenticate and login. My problem is that sssd seems to ignore the ldap_access_filter option and allows all users to login. I've examined the logs/debug and pam_sss ...
2
votes
1answer
79 views

Strange PATH when use sudoers via ldap

I have a working LDAP authentication environment. LDAP server is on ubuntu 12.04 machine while client are all centos 6.4 machines. Recently I configure sudoers in LDAP following this article ...
-1
votes
1answer
73 views

LightSquid ldap authentication fails

I have a lightsquid server to generate reports about Internet use. It is integrated with LDAP server. I cant login in lightsquid web page. cat /var/log/apache2/error.log Thu Dec 26 13:54:04 2013] ...
0
votes
0answers
34 views

LDAP Replication

I'm trying to use LDAP Sync Replication. I must grant rights to my account replicador. This is my ldif: dn: olcDatabase={1}hdb,cn=config replace: olcAccess olcAccess: {0}to attrs = ...
1
vote
1answer
79 views

Prevent sssd from using ldap to authenticate or id specific users for chef

I'm trying to use chef to add/modify a few local user accounts. For whatever reason there are duplicate accounts in LDAP. Since the system uses sssd/pam/ldap, it sees the user as existing, but is ...
0
votes
0answers
102 views

Worklight WAS Liberty profile configuration based on Tomcat configuration

(I already asked this question on Stackoverflow, but didn't get much of an answer, so I decided I'd better ask the sysadmins, because it's more relevant here. The answer I got was that I also had to ...
1
vote
1answer
62 views

ldapsearch returning “success” but no data for groups

I'm not an LDAP expert. I need to run an ldapsearch to determine membership in a group... I have read up on this, and was successful getting a simple ldapsearch to run, which displayed user info... so ...
3
votes
1answer
114 views

Active Directory LDAPS Somehow Holding on to the Expired Certificate

Windows Server 2008 Non-R2, 64bit. It's an AD domain controller. It uses a third party certificate (not AD CS and autoenrollment) in its Computer\Personal store to enable LDAP over SSL. I obtained ...
0
votes
1answer
144 views

Change existing linux user's uid in LDAP but hdfs seems does not recognize it

I have set up a hadoop 1.2.1 environment on centos 6. I also use nfs-proxy that mount ndfs to local file system so that I can access the files inside hdfs locally. It works perfectly until today, I ...
2
votes
1answer
38 views

Forcing mail to a username to go through SMTP rather than local mailer

I've got two nodes, connected via a network. One runs an LDAP server, which both nodes use for authentication. One is shostakovich, the other is rachmaninoff. Each user is allowed to log in to only ...
2
votes
1answer
270 views

Disable LDAP authentication on Ubuntu

I have an Ubuntu server that is able to authenticate users against our Domain. I can not contact the person who set this up, but I do find these packages installed: libaprtil1-ldap libldap-2.4-2 ...
0
votes
0answers
40 views

How can I set path for non-interactive user authenticated using LDAP?

On a Mac running OSX 10.7.5, I need to set the PATH for non-interactive users who connect via ssh and are authenticated using LDAP. It's the same question that was asked (and answered) here: Updating ...
0
votes
0answers
111 views

Can connect to LDAP server, but cannot bind: OpenLdap error message: Can't contact LDAP server

We have a PHP application deployed on a RHEL6 machine that relies on some ldap calls to function. In particular, ldap_connect and ldap_bind are used to verify users and also to look up their details. ...
0
votes
2answers
141 views

starting Standalone LDAP Daemon, slapd

I am following THIS guide to install an ldap server. At step 9 i use: /usr/local/libexec/slapd instead of: su root -c /usr/local/libexec/slapd since i dont have access to su I get this ...
0
votes
1answer
306 views

access to <url> forbidden; SVN with Apache and LDAP

I'm setting up an SVN server on a CentOS VM. What I want to achieve is an SVN server on port 443 with multiple repositories accessible at an address https://192.168.0.5:443/svn/ReposXX/trunk, for ...
0
votes
1answer
781 views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
0
votes
1answer
39 views

DNS Portability with regards to LDAP/Kerberos

How portable is a DNS server when it comes to LDAP, especially Kerberos which I am using for authentication? Meaning, how much do I have to change to use the same LDAP server with 2 different DNS ...
3
votes
1answer
240 views

How to use PAM to check LDAP password for some users, yet always use UID/GIDs from local files?

For a subset of my users in /etc/passwd, I would like to configure PAM (on Linux) to do the password checking part of the logon against an LDAP server, ignoring that these users are actually are ...
3
votes
2answers
162 views

Unable to Delete User Object in AD windows server 2008

OS - Window Server 2008 ( Domain Controller ) One User Object in AD is Creating Problem as well as i am unable to delete it manually also. Please see the below Error. In Event viewer i am getting ...
1
vote
0answers
102 views

Restrict server login via LDAP hostObject objectClass and host Attribute

How do I configure my LDAP server to allow all hosts except one? All users by default have the host: * attribute, which allows any user to login to any server. I've tried the following regex, but it ...
0
votes
1answer
160 views

Unknown LDAP cn=config admin password

when I installed openldap I was asked to create a password for an admin user but now i realize there's another admin user for cn=config whose password i don't know. Does anyone know how should i ...
1
vote
0answers
39 views

Can you write an LDAP query that returns accounts modified in the previous day?

I have a system that synchronizes from a master LDAP store. The synchronization process has gotten longer and longer as our directory grows. I had to stop syncing hourly, and moved it to an overnight ...
1
vote
0answers
31 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
0
votes
1answer
518 views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
1
vote
2answers
288 views

Open Directory Password Location and Encryption Method

Background: I would like to use Google Apps Directory Sync (GADS) to synchronize user accounts and passwords from a Mac OS X Server (10.9) running Open Directory. GADS is installed on a Ubuntu 12.04 ...
6
votes
1answer
512 views

Active Directory 2012 LDAP Integration Service Principal Name Entry is Disappearing?

Creating Python Service to Query AD Attributes I'm integrating our AD with web services running Python on linux using Python-LDAP over SASL(DIGEST-MD5) to query AD 2012 user attributes (division, ...
3
votes
1answer
43 views

What must I do to enable newly created class schemas to be added as new objects in LDAP?

I am using ADAM ADSI Edit. I have created a new class schema in the Schema on this LDAP server. However, when I go into LDAP and pick an OU, right-click, and select 'New -> Object...' the newly added ...
3
votes
2answers
255 views

OpenDirectory/LDAP Query Syntax to find all users in a Group for GADS

I would like to construct an LDAP query to find all users that are part of the "Google Apps Users" group (short name: googleappsusers) on my OS X 10.9 Server. When I run the following query in Google ...
2
votes
3answers
294 views

How to handle centralized user authentication without LDAP?

I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
0
votes
0answers
158 views

redirect LDAP with TLS with SSH

I need to query an LDAP server with TLS enabled. The LDAP server is behind a firewall. It only accepts queries with TLS enabled (-Z option). I redirected the LDAP port like this: oz123@devhost ~ $ ...
0
votes
0answers
95 views

LDAP_route not working after upgrade from Debian Lenny to Wheezy

 I have Debian 5 box (Lenny) with configured sendmail and LDAP_routing feature. This box is placed between Internet and my final mail server (MS Exchange). LDAP_route feture was used to validate ...
0
votes
0answers
73 views

Detect reuse of deleted AD account's email addresses

One company I have something to do with has the - in my eye not optimal - policy of recycling email addresses. If a user leaves, they just delete the Active Directory account. So they don't even know ...
0
votes
1answer
137 views

AD Login to Solaris Zone Periodically Not Working

I have a Solaris 11.1 zone named "AZone". I have the zone joined to an Active Directory domain (Windows Server 2008) with the goal of users being able to use their AD account to log in to the Solaris ...
0
votes
0answers
178 views

Authentication error in LTSP client

I am building a LTSP server with LDAP authentication for LTSP Clients. I have configured LDAP server also. When I try to login from LTSP client in GUI, I am getting No response from server, ...
0
votes
1answer
271 views

OpenLdap: Why slapd tell me there's no DB_CONFIG when there is one

When I run slapcat or restart slapd on Debian 6, OpenLdap 2.4.23-7.32.4.23-7.3, I see this warning: hdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (14). Expect poor ...
0
votes
0answers
366 views

REMOTE_USER not getting set?

I am trying to setup LDAP Authentication in Joomla using a plugin called JMapMyLDAP (in fact 4 plugins each doing a different job). I need to pull a part of a string out of the server variable ...
0
votes
0answers
62 views

Infopath performance issue with RODC

We have number of infopath forms deployed across the organization. Recently we started experience unusual slowness in infopath forms opening on sites with RODC. Servers Win2008R2sp1, client Win7. ...
2
votes
1answer
331 views

Automatic LDAP login to Gitlab

I've Apache 2.2 and Gitlab 6 running. After installing OpenLDAP on Debian Wheezy and setting up Gitlab I can login to Gitlab with LDAP credentials. But I wonder if there is a way to provide LDAP login ...
-2
votes
1answer
140 views

Are there any viable DNS or LDAP alternatives for distributed key/value storage and retrieval? [closed]

I'm working on a software app that needs distributed decentralized name resolution, and isn't bound to TCP/IP. Or more precisely, I need to store a "key" and look up it's value, and the key may be a ...
1
vote
1answer
73 views

Sharing information between nodes in Beowulf Cluster

I am setting up a beowulf cluster and I've been reading that it might be necessary to make the home directory of the cluster users shared between them (assuming this users are local to each machine). ...