Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
220 views

Setup LDAPS authentification in Zabbix

I try to setup LDAPS authentification on Zabbix 2.4 but it's not working. Here is the infos on my configuration : OS : Debian PHP packages installed : libapache2-mod-php5 php-pear php5 php5-cli ...
2
votes
0answers
197 views

Ldap client on CoreOS

Has anyone setup ldap on CoreOS before? If so, how does one do such a task? I have a cluster of CoreOS machines and I'm trying to hook up this service Foxpass https://www.foxpass.com/ to it for user ...
0
votes
0answers
22 views

Windows AD server allows communication with-out LDAPs

I have a windows server 2008 AD setup with LDAPs signing requirement. I try a simple bind (through port 389) it is getting blocked as expected. But when I try a bind through 636, the ldaps port, It ...
1
vote
1answer
587 views

How can I get LDAP to pass the currently logged-in user's credentials to a local Apache server?

I'm trying to get SSO (single-sign on) working on a local osTicket installation. I found the HTTP passthru plugin on the osTicket website and have installed it in osTicket. I've made sure the plugin ...
0
votes
0answers
117 views

LDAP NET-IQ DRA (Active Directory) Group member of does not work

I am trying to list a couple computers, that do not have a specific group membership. This is what I have at the moment: ...
0
votes
0answers
101 views

CAS Authentication Handler for LDAP

I've been messing with CAS and LDAP for some time now and finally know why CAS is unavailable. I'm using CAS with Liferay with an LDAP db on another computer. Everything works fine until I change the ...
0
votes
1answer
35 views

Simple Paged Results control on Sun-Directory-Server/11.1.1.5.1

I am confused. I am trying to run simple pager results against what I believe is Oracle 11g Directory Server. I know that an old version at some point did not support RFC 2696. Now, according to ...
0
votes
2answers
30 views

Does LDAP work within just one directory or diferent directories can comunicate each other using LDAP?

I started to learn about directories just a month ago and this question came to my midn. I know that LDAP is an open protocol that defines services within a directory. But I asked myself if there is ...
3
votes
1answer
39 views

In the context of Active Directory, what does “single schema” mean and why is this an advantage?

in my learning of AD DS Ecosystem I came across with this definition [link]: By using the Windows Server® 2008 Active Directory® Lightweight Directory Services (AD LDS) role, formerly known as ...
1
vote
1answer
125 views

Wrong user mapping in kerberized NFSv4 automounted homedirs

Short problem description This question is about id mapping in NFSv4 going wrong. NFS server: a Synology DS, with DSM 5.2. Client: A regular FC22 machine, which automounts as /home one of the ...
0
votes
0answers
127 views

find all memberOf groups, including cross-domain, of a group using LDA

I am trying to figure out how I can query AD for a group and find all the groups it is a member of including groups in another DC. So this is my configuration (simplified for the sake of simplicity): ...
0
votes
0answers
39 views

How to disable some ciphers in nsSSL3ciphers command?

Referring to Sun Directory Server Man Page Reference, can anybody tell whether - or + is really needed for scenario? I need to: enable only TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, and disable ...
2
votes
1answer
537 views

How do I query members of an Exchange distribution group using LDAP filter syntax?

I'm trying to use a couple of Exchange distribution lists for access to an application (the list, due to the culture at this particular enterprise, is kept more up to date with people moving in and ...
0
votes
1answer
364 views

LDAP + KERBEROS + NFS. Why do I need idmapd?

What I am trying to do I have a freeIPA domain, with a few clients and a Synology NAS (also enrolled in freeIPA). I created a shared folder on the NAS, with NFSv4 + krb5 support. From the client, I ...
5
votes
2answers
2k views

Distinguish Between Users and Service Accounts in Active Directory

Question Is there a "correct" / standard way to distinguish Service Accounts from User Accounts in AD? More Info In certain scenarios we have systems running under AD Credentials (i.e. under a ...
0
votes
0answers
194 views

OwnCloud on Synology-NAS should use OpenDirectory-Server (LDAP)

I got a little problem: I want to configure LDAP with OwnCloud. The LDAP-Service is my OS X Open Directory-Server. OwnCloud runs on Synology DS214play. Well, I got the domain bureau.example.com ...
0
votes
0answers
54 views

Cant connect to newly installed LDAP server from ADSIEdit

I'm an LDAP newb learning by the seat of my pants. I installed AD LDS Role (LDAP) on a Windows Server 2012 R2 server. I created a partition with the context name CN=LDAPPartition, DC=subdomain, ...
0
votes
0answers
159 views

Unable to load Cert into OpenLDAP userCertificate attribute

I having troubles to add particular cert into userCertificate attribute (DER encoded certificate) in standard scheme of openldap-servers-2.4.39-3.el7.x86_64 running on Centos7 Slapd uses: include ...
1
vote
1answer
202 views

A way to update the plain text password to ssha in Open ldap for 400K Users

Is there any command/extension available to update the "userPassword" attribute from a user object in LDAP server to SSHA hashed passsword from plain text? we found that users in LADP are stored in ...
0
votes
0answers
293 views

getent doesn't show netgroup from LDAP server

I followed this tutorial to migrate NIS to a new FreeBSD LDAP Server. However after I do all steps, in my test client, getent doesn't show netgroup normally from LDAP Server: $ getent netgroup ...
0
votes
1answer
230 views

LDAP Authentication on Apache denies valid credentials

I'm trying to link my LDAP with an Apache 2.4 server dedicated to my SVN repositories, so I use the Apache mods dav_svn and authnz_ldap. The LDAP works properly on its own. I could manage to bind the ...
1
vote
1answer
90 views

What does Samba need from LDAP for a valid account?

I have inherited an OpenLDAP system, coupled to a FreeNAS and it is quite a headache to create users all the time. I just want to create a user that can access its own homes share. I have a working ...
0
votes
0answers
56 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
1
vote
1answer
86 views

Adding more than one DIT

I have posted this question in dba.stackexchange.com but it is considered off-topic and people suggest that I should post it here so I am posting it here. I have an openldap server up and running on ...
0
votes
1answer
97 views

LDAP group access controls

I'm trying to set up our LDAP server so that members of the pwmadmins group can change people's passwords for them. To be more specific, we have PWM for Tomcat set up and are trying to let pwmadmins ...
0
votes
1answer
64 views

How to configure 389ds LDAP for idle user timeout

For my application till now i was using Java code for timing out the inactive user session from application. But for the purpose of upgrading it, want to use 389ds LDAP (my application is already ...
0
votes
1answer
38 views

Populate “Lab” Domain via LDAP

I have a lab environment where I need to own Active Directory Services/DNS/DHCP/etc at work. I have a pseudo "production" environment in this lab that has everything from vCenters to Jenkins to VDI ...
4
votes
1answer
482 views

GitLab Active Directory authentication: no results and no authentication

I'm trying to set up LDAP authentication with GitLab (version 7.12.2 installed on Ubuntu 14.04 amd64 on a VM, Omnibus set up). I've edited my gitlab.rb file to look like the following: ...
0
votes
1answer
161 views

How Do I Configure ApacheDS LDAP Like AD

I am trying to set up Apache DS to simulate my company Active Directory locally. I have created a new partition to match. I then created an ldif file to add users and groups. e.g. ##Create the root ...
0
votes
2answers
81 views

Apache LDAPS connection to AD not working

I am trying to set up LDAPS with apache, so that users logging in to my site will be authenticated against my AD, and that this auth traffic is itself encrypted. Apache is version 2.2.15 running on ...
0
votes
1answer
43 views

AD keeps local accounts from timing out?

Currently, our customer requirements say that after 60 days, the local accounts on our devices are supposed to be locked. When AD is being implemented, the local accounts are not being used (everyone ...
1
vote
1answer
56 views

What files get modified by the authconfig?

I am trying to identify which files are edited with the following command, but can not find. authconfig --enablemd5 --enableshadow --enablecache --enablelocauthorize --enableldap --enableldapauth ...
0
votes
2answers
77 views

Where are LDAP user's home stored

I have been goolging around LDAP these days. And I'm trying to deploy a central authentication server for quite a few ubuntu servers. After all the research, one question come to my mind. Where are ...
0
votes
1answer
138 views

pam google authenticator can't compute location of secret file

I've installed Google Authentication on all the machines in our system, and while the authentication during login works fine, our machines are producing logs that have this line over and over: ...
0
votes
0answers
224 views

LDAP Query Of All Users In Various Groups In A Specific ActiveDirectory OU

I need to configure Atlassian Crowd to query all the users in my AD server that are in various groups in a top-level OU. The DN for the OU is "OU=Atlassian,DC=NNNN,DC=com". The various groups would ...
-1
votes
2answers
43 views

Checking ldapsearch and ldapsearch -h 127.0.0.1 -Z -x in nagios [closed]

Basically I just want to ensure whether ldapsearch and ldapsearch -h 127.0.0.1 -Z -x I did some check_ldap command and it's fine but I specially want to verify ldapsearch and ldapsearch -h ...
0
votes
1answer
62 views

Why is LDAP using servers other than those specified?

I have a linux system that is using Active Directory (2012) for LDAP lookups of users and groups. It's in a network that is connected to our main site by VPN. When the VPN goes down, all ldap ...
3
votes
0answers
203 views

LDAP over TLS fails to connect, Schannel Alert 48

I am trying to use PHP to edit users in active directory through LDAP. My test machine is using a simple WAMP setup and is NOT connected to the windows domain. This machine can connect to LDAP on the ...
0
votes
1answer
39 views

Make active directory available to remote users [closed]

I have an AD filled with test data. I have automated tests that query this AD. I would quite like to be able to run these tests from anywhere, including outside of the domain. I have seen the ...
0
votes
0answers
58 views

Kolab removed FreeIPA admin write privileges

I was able to configure kolab so that it could import users from an external FreeIPA server, but after that I found that the admin user in FreeIPA doesn't have write permission anymore. I tried to ...
0
votes
2answers
27 views

OpenLDAP - possible to search without specifying base?

I am having some issues with OpenLDAP and Spring security, where the latter does a search with the whole path in dn (filter), and an empty base. OpenLDAP does not like this, and the query fails. The ...
0
votes
0answers
271 views

How to let a user remove the pwdAccountLockedTime attribute without being an admin in ApacheDS?

I am probably going about this all wrong but there is no "Look stupid, do this..." level documentation out there that I have found. I have Apache DS v2.0.0 I have users I want some users (who I add ...
2
votes
1answer
110 views

dovecot/ postfix make me two different folder same user (user; user@domain)

I had some problem with the Dovecot/Postfix/LDAP/SASL config files: The LDAP query, SASL config its work but my problem is postfix and the dovecot: When i first login the outlook/thunderbird/etc.. it ...
0
votes
0answers
66 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
1
vote
0answers
158 views

LDAP build script failing on openLDAP-2.4.31 ( ldapmodify -Y EXTERNAL -H ldapi:/// )

ORIGINAL QUESTION: I want to set the password to the backend admin so that I can change the LDAP ACL to what I need... needless to say I don't want my config posted all over the place, plus the .ldif ...
0
votes
1answer
83 views

389DS Access.log parsing - turning LDAP request type into an audit event

Has anyone authored code to parse a 389 Directory Server's access.log file with an aim of generating audit events based around the LDAP request type. Bascially, take the log sequence ...
0
votes
0answers
79 views

LDAP, nslcd and intermittent “Invalid user”

EDITED for simplification and new information. Some of my Ubuntu boxen, after an upgrade (12.04 -> 15.04), decided they don't want to accept new users. Sometimes. I turned off nscd so it wouldn't ...
1
vote
1answer
278 views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with ...
0
votes
1answer
295 views

How to add a user containing a UID to OpenLDAP that runs on CentOS7?

Add a user user.ldif dn: uid=sampleuser,ou=people,dc=my-domain,dc=com objectClass: top objectClass: inetOrgPerson cn: sample user uid: sampleuser Problem [root@host ~]# ldapadd -x -W -D ...
1
vote
1answer
360 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...