Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

2
votes
0answers
868 views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
1
vote
1answer
114 views

Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox

I want to connect liferay to zimbra in Virtual Box and I need to fill this form : ![Capture of liferay try to connect to ldap in VB] http://i.stack.imgur.com/cUOuV.png I got the url and password ...
0
votes
1answer
46 views

LDAP Groups in authconfig

In my authconfig setup, I always use : --ldapbasedn='ou=users,o=Directory' I thought by using: --ldapbasedn='o=Directory' groups would also be included, but no luck. My LDAP schema looks ...
0
votes
1answer
160 views

issue with master and slave ldap configuration

I am configuring master and slave ldap configuration. Initially I installed LDAP in Master machine and also installed on slave machine apt-get install -y slapd ldap-utils while installing LDAP ...
4
votes
1answer
442 views

How to get Active Directory domain objectGUID anonymously

As an authenticated Active Directory user, I can run this to get the domain GUID (objectGUID): dsquery * "DC=lab,DC=local" -scope base -attr objectguid I can use this command in Linux to get the ...
1
vote
0answers
104 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
0
votes
0answers
71 views

Why is my samba domain user created by a bash script behave differently from one created manually?

I have a samba server which is using LDAP as its backend. The PDC is working as expected as long as I create the users manually. This means that if I use the following command to create a new user, I ...
1
vote
3answers
143 views

Is it possible to have non-replicated data on an LDAP consumer?

I've read all the available documentation, the Mastering OpenLDAP book, and like a zillion mail-list posts but I haven't found a way to make such scenario possible. I see several use cases for this ...
1
vote
0answers
172 views

LDAP + NFS + automount home directories permissions issue

When an LDAP user logs into the system they have incorrect permissions to their home directory. LDAP and NFS services exist on the same server. The directory shows the correct ownership / ...
0
votes
0answers
37 views

How to make a role with all permissions on Ldap?

I'm working with Open Ldap and want to make a role which has all permissions. I mean if I make a new permission on the future, the role should automatically has that permission and no need to add the ...
1
vote
0answers
21 views

bind-sdb does not query for wildcard entry

I have successfully set up Bild with LDAP on a Fedora VM. The Problem is, bind-sdb simply does not query wildcard entries. When I do: nslookup doesnotexist.example.com. 127.0.0.1 The LDAP server ...
0
votes
0answers
44 views

Apache rewrite logged in username

I have included a git server in which users logs in with their username and password. By using the Basic Authentication, user are able to login without adding the domain (like DOMAIN\username). Here ...
0
votes
0answers
105 views

bugzilla authenticate with kerberos + ldap + SSO

I want to set up bugzilla with SSO, i cannot find any good documentation on how to do this. I have managed to set up ldap login which works fine. now I have set up kerberos on apache which works fine, ...
0
votes
0answers
63 views

LDAP sync between Win2008 and Cisco Unified Call Manager

I have a VOIP environment with Win 2008 as a primary LDAP server. However, before I setup Cisco Unified Call Manager to get LDAP sync from Win 2008, previous administrator has created users in CUCM ...
1
vote
1answer
152 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
1
vote
1answer
185 views

Using LDAP/Active Directory with PIN based authentication

We'd like to integrate our service with LDAP, but because of hardware constraints, we're only allow 4 digit user ids and passwords. What would be the best practice for performing such an ...
1
vote
2answers
95 views

How to disable password change for openldap user?

Considering possible solutions for some improvements I run into this theoretical question and I couldn't find a satisfying answer. Some of you may have first-hand experience with this in practice, so ...
0
votes
1answer
428 views

Apache 2.4 with PHP 5.5, LDAP in PHP not working

I'm working with a server running Debian 7.4 and it's currently running PHP 5.5.12 and Apache 2.2.22. I'm attempting to upgrade to Apache 2.4.9 so that I can enable Perfect Forward Secrecy. I ...
0
votes
1answer
239 views

LDAP query to search for the active user in a particular container

I am trying to configure ldap sync in Alfresco 4.2e. I am able to authenticate the users but I am unable to sync the users. I am using ldapadmin browser to check the tree of the active directory ...
1
vote
1answer
2k views

Pfsense+squid LDAP search filter error

Just installed pfsense and squid on a spare machine. I am trying to get Squid to authenticate AD users via LDAP. First I tried this: ...
1
vote
0answers
285 views

Disabling LDAP Signing on Windows PDC in Local Policy

I just tripped over my own feet it seems. Playing around on a Windows 2008 R2 server (set up as domain controller), I was intrigued by certain warning event (event id 2886) which says: "To enhance ...
0
votes
2answers
99 views

view all possible attributes of an objectClass for LDAP

I'm scripting some ldap automation and have reached a slight hangup. Basically, I want to check if an attribute being added to an entry actually exists within a given objectClass before I try to add ...
0
votes
1answer
625 views

CentOS/Redhat: Systemwide aliases when logging in through LDAP/sssd

I've asked this question in the Centos Support forum, but we didn't found a solution for it (https://www.centos.org/forums/viewtopic.php?f=13&t=46101#p196728) When logging in through LDAP/sssd, ...
0
votes
1answer
174 views

Add group/user on OpenLDAP

I am setting up OpenLDAP for the first time, on RHEL6 and using Puppet to do the initial install/configuration. I believe the configuration uses the slapd.d rather than slapd.conf method. Basically, ...
-1
votes
1answer
255 views

OpenLDAP modify member is not allowed

I am Struggeling with my LDAP attributes. I already created a few test users and groups, but I am unable to add users to the groups. #!DATE 2014-05-22T11:48:16.324 #!ERROR [LDAP: error code 65 - ...
0
votes
3answers
51 views

Possible to refer to a user in AD without the full LDAP path?

I have an application that needs to authenticate (log in as) a particular user. The vendor says they need to hard-code the full DN of the user to make this occur. It's been a while since I looked at ...
2
votes
0answers
309 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
0
votes
1answer
67 views

OpenLDAP on Ubuntu 13.10

I've configured OpenLDAP following the Ubuntu guide (with some minor edits, such as setting a proper password, my own domain name, and creating a staff group instead of an example one under people) ...
1
vote
1answer
145 views

Dovecot + OpenLDAP

I am trying to get dovecot 2.0.19 authenticate users via LDAP (OpenLDAP 2.4.28) and using Wireshark to debug the process. It looks like the basic configuration of dovecot is fine, but it doesn't pull ...
2
votes
0answers
163 views

configuration CAS with LDAP active Directory

I am using CAS server version 3.5.2 and after I configured it to connect to an LDAP server I got this message. Anyone have a clue about what is happening? My LDAP server is pfeserver.pfe.dz ...
1
vote
0answers
93 views

Groups with local and LDAP users

I'm exploring the idea of authenticating users on some RHEL 6.4 boxes using LDAP. I'm using sssd with an LDAP provider, and setting the nsswitch.conf file to use sss for passwd/shadow/group. How can ...
0
votes
2answers
149 views

Difference between LDAP Search and Virtual List View

An member server has some application using service account to query active directory for users and groups. I am using LDP to connect/bind and do queries using LDP.exe , "Bind" works succesfully with ...
0
votes
1answer
450 views

VBS Scripting - Access LDAP User object with samAccountName

I am trying to write a VBScript that meets 2 requirements: It unlocks a user's account. It can do so and reference the user using the samAccountName. #1 works. However, the below script I have ...
2
votes
1answer
161 views

How can I force a mac mobile account user to be logged out or locked out when their LDAP account is disabled?

I have a FREEIPA LDAP server and a Mavericks Client. I have bound my Mac to my ldap and created a mobile account. What I want is when someone is disabled it logs out the user or locks the screen.
2
votes
2answers
392 views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
1
vote
1answer
1k views

ISC DHCP server not dynamically updating DNS

I have an Ubuntu 14.04 server, running an isc_dhcp_server and the bind9 DNS server. Bind acts as a cache, and it maintains the .m domain (and zone) on my local network. The server's address is ...
1
vote
0answers
388 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
1answer
182 views

FreeIPA client's sssd not using LDAPS

No matter what I try I am unable to get sssd to connect to my ldap/FreeIPA server via LDAPS/636. Checking debug shows that sssd is showing that it should be using 636... however packet captures and ...
1
vote
1answer
68 views

LDAP connections favoring 1 DC over the other in same site

Observing spikes in "AD Search Subops" counter and "PROC LSASS%" counter daily on DC A relative to DC B; its not in maintainence windows; its at start of business hrs daily. -> Eliminated the point ...
2
votes
1answer
220 views

build user chroot on first login

I'm using ldap for remote user authentication and I basically need to either figure out how to: a. chroot a user on machine b from machine a via nfs,(which doesn't seem possible without mounting ...
16
votes
4answers
3k views

Common wisdom about Active Directory authentication for Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for Linux servers and modern Windows Server operating systems (CentOS/RHEL-focused)? Over the years since my first ...
2
votes
1answer
104 views

Auditing anonymous binds to AD LDAP

We're about to commence an AD upgrade to 2012 R2, and I have just found to my horror that anonymous LDAP binds have been enabled in the 2003 domain. We've certainly been issuing accounts for LDAP ...
-1
votes
1answer
331 views

How to set “sudoers” in nsswitch.conf on Solaris-11

I am doing this on Solaris 11. When i open '/etc/nsswitch.conf' i see this - ... sudoers: files ... I would like to change this to - ... sudoers: files ldap ... I tried editing the file ...
1
vote
0answers
152 views

Routing LDAP traffic from Application server to Proxy to internet

I've included a drawing so you get an idea how it would work. (Red = LDAP connections , Blue = HTTP / AJP in the backend) Problem: We want to connect our customer application server to an LDAP of ...
1
vote
1answer
145 views

After upgrading openssl, unable to bind to server: Can't contact LDAP server

It was working like this, in /etc/openldap/ldap.conf URI ldap://127.0.0.1/ BASE dc=example,dc=com TLS_REQUEST never TLS_CACERTDIR /etc/pki/tls/certs I was able to connect our secured ldap server. ...
1
vote
0answers
63 views

Connect an LDAP realm with an AD domain, with the same name?

The situation is a separate group has created an LDAP domain. We'll call it foo.bar. (fyi, none of these are connected in any way to the Internet) They also have a Windows domain and renamed it to ...
0
votes
1answer
232 views

Where do I specify the Bind DN and password for sss+ldap?

I'm trying sssd for LDAP authentication, and while it can show user IDs with the id command, getent group and getent passwd do not show LDAP names, and while I can chown files to ldap users, they ls ...
1
vote
1answer
49 views

Net::FTP Perl module hangs

So, I'm running Perl 5.8.8 on a RHEL5.2 system. I recently moved the LDAP source for authentication, and now I'm having issues with Net::FTP. Authentication works with the new LDAP source perfectly. ...
0
votes
1answer
394 views

OpenLDAP cannot add new schema

I'm trying to add new schema to my OpenLDAP server. The version of slapd is 2.4.23. I'm using Debian 6. If I understood it well, slapd 2.4+ uses OLC configuration with (cn=config) by default for this ...
3
votes
2answers
232 views

Why do I need to create symbolic links for certificates?

Other than noticing something like this: yourid@linuxtpf:~/certificates> ls -l lrwxrwxrwx 1 yourid users 9 2009-04-07 18:06 50a694ac.0 -> cert2.pem #<-- was missing lrwxrwxrwx 1 yourid ...