Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
22 views

Copy specific entries from Active Directory to Openldap

I am handpicking some entries from Active directory and I want to populate it to openldap. The entries are somethings like dn, cn, unix attirbutes like uid, gid, memberrOf, manager, phonenumber, etc. ...
0
votes
0answers
29 views

LDAP Cassandra OpsCenter Configuration With AD

I have an OpsCenter that I need to connect to AD. The relevant configuration below: [authentication] enabled = True authentication_method = LDAP audit_pattern = ldaplog [ldap] server_host = ...
0
votes
0answers
25 views

do not allow multiple sessions if user have different IPs

I am running Red Hat Enterprise Linux 6.6 and for authentication we use LDAP authentication. We have running application on a server (doesn't really matter which one it is) and the way application ...
0
votes
0answers
55 views

Automout user home directories with ldap

I know this question has been asked earlier. I am still not able to solve this error. Scenario: When user will login to ldap server its home directory will change to /home/guests/username My ...
0
votes
0answers
12 views

LDAP OU Integration

I am trying to integrate jboss 5 with AD.The users in the users OU are authenticated but users of the rest of OUs are not authenticating.The settings in login-config.xml are as follows; ...
0
votes
0answers
14 views

Allow or disallow some users login in Dovecot based in their network

I have a server running dovecot with IMAP and LDAP authentification. All works as expected, however I would want to let some users to access the mail server from outside and other to access from the ...
0
votes
0answers
22 views

Migrate logcal windows users to FreeIPA ones

We have several Windows machine (running 7, 8, and 10, but that should not be relevant) with local users. Most of those local users are the same login name but might have different UID/GID based on ...
0
votes
0answers
18 views

How to get rid of unexpected nslcd related messages caused by resolvconf?

I'm on a Ubuntu 12.04 based system. Our system is setup to use nslcd to allow LDAP authentication. In syslog we see lines like this: /var/log/syslog.1:Dec 20 06:25:11 T53-1014-014 nslcd[1496]: ...
0
votes
0answers
19 views

How to set initial user password in openldap?

I am new in setting up LDAP server. I have configured Openldap server and able to add test users from LDIF file. The LDIF file has username and password for each user. Now for the real part, I have ...
0
votes
0answers
33 views

nscd: nss_ldap: could not search LDAP server - server is unavaliable

I have an installation of ubuntu 14.04 and samba4 for Active Directory Today when I login with my LDAP usae has not allowed me, then update and restart the server And now i can see the next errors: ...
0
votes
0answers
21 views

Needed permissions to read msDS-ReplLinkFailures attribute

I'm using powershell to get the value of msDS-ReplLinkFailures attribute like this: Get-ADRootDSE -Properties msDS-ReplLinkFailures This works ok if the current user is member of domain's ...
0
votes
0answers
84 views

horde 5 ldap/samba4 authentication fails “Bad search filter Parameters”

I am trying to authenticate my horde users against my samba4 active directory but I am always getting a "Bad search filter Parameters" error. Unfortunately I am not able to identify the exact problem ...
0
votes
0answers
18 views

Ambari log is filled with LdapTemplate warning

I'm running: # ambari-server --version 2.1.0 Specifically, I'm running IBM Open Platform for Hadoop 4.1 FP2. I configured Ambari to use LDAP for authentication, and the LDAP authentication is ...
0
votes
0answers
47 views

Webmin authentication against LDAP

I want ultimately to authenticate Webmin user against one LDAP. I have read the page How can I make a Webmin user always use the same password as Unix?. According to this explanation, the ...
0
votes
0answers
27 views

LDAP connection string issue

Sir! please help I have a connection string extracted like this /o=First/ou=Exchange Administrative Group (EDABMHF23SPDLT)/cn=Recipients/cn=852edeadbeef354a4c8000ebaae09fdd01-Robert It doesn't ...
0
votes
0answers
33 views

RADIUS + LDAP + Cisco router 1941

I have a unique setup in my data center where I have configured a Radius with LDAP for authentication and authorization in my cisco 1941 router for remote IPSEC vpn users. This works fine and dandy. ...
0
votes
0answers
48 views

issues with svnserve using ldap and sasl

I am trying to setup SVN's svnserve server using ldap and sasl to authenticate users and to encrypt data but I come across the following issues: /var/log/messages error or warning when I execute ...
0
votes
0answers
80 views

Freeradius not expanding “Calling-Station-Id” attribute in LDAP search

I'm trying to do PEAP-MSCHAPv2, then do a LDAP search to verify the user is in the correct group AND see if there MAC address is under a otherLoginWorkstation entry. If you look in the logs, ...
0
votes
0answers
16 views

Can one safely migrate a non-LDAP Gitlab to an LDAP one?

I have two Gitlab installations. One uses Gitlab's internal authentication system and the other (newer) one uses LDAP. I now want to migrate everything from the old one to the new one. Both Gitlabs ...
0
votes
0answers
53 views

Why I cannot find ldap.conf file when I want to integrate 389-ds and samba on centos 7?

I am working on two servers, a samba server and a 389-ds server. Now I want to integrate them so that samba shares are authenticated via ldap server. I have followed instructions on ...
0
votes
0answers
49 views

postfix rejects all EMails Recipient address rejected: User unknown inlocal recipient table

Hi Together I've got a problem with my postfix server and i can't solve it. I set up a local mailserver with dovecot and postfix to receive e-mail over my own domain. It worked fine till i tried to ...
0
votes
0answers
33 views

LDAP dynlist not working with syncrepl replication

I'm using syncrepl replication with one master and many slaves. I'm also using dynlist overlay. Dynlist works on the master, but not on slaves. When I run a query on master, everything works ...
0
votes
0answers
88 views

Ubuntu LDAP and NFS directory permissions

I have an issue with NFS and directory permissions using LDAP. Users that are members of a certain group cannot access a directory owned by that group (it works fine without NFS). They can access ...
0
votes
0answers
84 views

How to purge roaming credentials from AD user objects?

Background Due to low-budget constraints we are using roaming credentials instead of smart cards in our environment. Problem Now we have recognized that the relevant AD user attributes became ...
0
votes
0answers
46 views

Ubuntu: Authenticating against ldapjs server

Our developers have decided to go with ldapjs for a SSO solution for most of our applications. I have been tasked with getting our Ubuntu servers to authenticate against this ldapjs server. Although I ...
0
votes
0answers
70 views

Centos LDAP server slapd stops responding until rsyslog is restarted

Have a LDAP sever running centos 6 with a fairly low amount of LDAP AUTH requests. Every couple of days the LDAP server will stop responding completely to any requests. LDAPsearch will freeze and ...
0
votes
0answers
32 views

Disabling anonymous bind on ApacheDS LDAP causes getent group not to work

Am new to ApacheDS - am using apacheds-2.0.0-M17. Followed the instructions to setup an Ubuntu 14.04 LTS machine as a LDAP client from this page: ...
0
votes
0answers
36 views

Configure ldap.conf host with ipv6

In my ldap.conf is it possible to use HOST to configure an IPv6 address? I know that I can configure an IPv6 address using URI. The linux manual on ldap.conf doesn't state if it only support IPv4 for ...
0
votes
0answers
57 views

Requesting parent OU doesn't seem to work right with Meta-Backend OU as child

I got a huge problem here. I’ve been trying to merge users from a local LDAP (ou=local-users,ou=accounts,dc=domain: which authenticates against a remote active directory (which is not ...
0
votes
0answers
199 views

Freeradius authentication: LDAP group and SSID matching

I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
0
votes
0answers
6 views

Winbind increase idmap range

i have a computing cluster running and use likewise for connecting all machines to the AD. I want to add new machines using ldapsam. My issue is, that it seems to only offer idmap ranges from "idmap ...
0
votes
0answers
91 views

CentOS7 ldap client not authenticating with ldap server

I am using ApacheDS which was a breeze to setup thanks to the apacheds mailing list. I am able to retrieve ldapsearch results, however, I am not able to get anything by doing a:"getent passwd ". ...
0
votes
0answers
77 views

PAM - Ignore local user, if LDAP-connection works

I have configured some SLED10SP1 (not allowed to update) machines to use LDAP for user authentication. Because SLED10 doesn't have official packages for pam_ccreds or sssd, I have to find a way to ...
0
votes
0answers
209 views

How to Setup IIS 7 and LDAP Authentication

Hi IIS and LDAP Experts! I will need to configure IIS 7 so that when a user go to my intranet website it will popup a login box asking for the user to enter his/her intranet ID and password which is ...
0
votes
0answers
47 views

why a user account with /bin/false shell in directory server is asking for membership in groups?

Firstly, we use ldap for user authentication. I have accidentally deleted a person account(his loginShell is /bin/false)from our directory server(sun DS7) running on red hat enterprise linux, although ...
0
votes
0answers
57 views

pam_access nisnetgroup with nested posixgroup

We have pam_access enabled and correctly allowed/denying users based on the rules in place. One such rule looks up LDAP backed NIS groups + : @hostname-granted : ALL Putting tuples in ldap work for ...
0
votes
0answers
32 views

Yast authentication server configuration: Global settings empty

I try to enable TLS/SSL for my LDAP-Server on a SLES12. So I enabled LDAP over SSL (ldaps) in Yast > Authentication Server Configuration > Startup Configuration. Fine so far. But when it comes ...
0
votes
0answers
31 views

LDAP troubleshooting

We have a Windows SBS 2011 which sometimes responds slowly to access requests. I'm troubleshooting performance issues fro a while, and now i want to know if there is any problem with the AD, LDAP ...
0
votes
0answers
97 views

olcRequires: difference between authz and bind (with olcDisallows: bind_anon)?

With OpenLDAP, what is the difference between: olcDisallows: bind_anon oldRequires: bind and: olcRequires: authc It seems to me that both configurations would require the client to authenticate ...
0
votes
0answers
10 views

RETCODE OpenLDAP overlay configuration

I am looking for various ways to disable Simple Paged Search results on OpenLDAP. Somehow, my attempts to disable paged searches by disabling it in contiguration using olcSizeLimit or olcLimits ...
0
votes
0answers
58 views

OpenLDAP & Posix Groups/Account configuration

with following configuration I am not able to add POSIX users/groups to the LDAP server. If some can educate me about significance of dc in this case, is it FQDN that I mentioned when I created ...
0
votes
0answers
40 views

disable simple paged results control support

Trying to make my client, originally developed for OpenLDAP, also compatible with Oracle DSEE. Oracle DSEE is missing support for simple paged results, which the client code uses. Yet, ODSEE supports ...
0
votes
0answers
394 views

Setup LDAPS authentification in Zabbix

I try to setup LDAPS authentification on Zabbix 2.4 but it's not working. Here is the infos on my configuration : OS : Debian PHP packages installed : libapache2-mod-php5 php-pear php5 php5-cli ...
0
votes
0answers
22 views

Windows AD server allows communication with-out LDAPs

I have a windows server 2008 AD setup with LDAPs signing requirement. I try a simple bind (through port 389) it is getting blocked as expected. But when I try a bind through 636, the ldaps port, It ...
0
votes
0answers
135 views

LDAP NET-IQ DRA (Active Directory) Group member of does not work

I am trying to list a couple computers, that do not have a specific group membership. This is what I have at the moment: ...
0
votes
0answers
123 views

CAS Authentication Handler for LDAP

I've been messing with CAS and LDAP for some time now and finally know why CAS is unavailable. I'm using CAS with Liferay with an LDAP db on another computer. Everything works fine until I change the ...
0
votes
0answers
211 views

find all memberOf groups, including cross-domain, of a group using LDA

I am trying to figure out how I can query AD for a group and find all the groups it is a member of including groups in another DC. So this is my configuration (simplified for the sake of simplicity): ...
0
votes
0answers
45 views

How to disable some ciphers in nsSSL3ciphers command?

Referring to Sun Directory Server Man Page Reference, can anybody tell whether - or + is really needed for scenario? I need to: enable only TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, and disable ...
0
votes
0answers
224 views

OwnCloud on Synology-NAS should use OpenDirectory-Server (LDAP)

I got a little problem: I want to configure LDAP with OwnCloud. The LDAP-Service is my OS X Open Directory-Server. OwnCloud runs on Synology DS214play. Well, I got the domain bureau.example.com ...
0
votes
0answers
79 views

Cant connect to newly installed LDAP server from ADSIEdit

I'm an LDAP newb learning by the seat of my pants. I installed AD LDS Role (LDAP) on a Windows Server 2012 R2 server. I created a partition with the context name CN=LDAPPartition, DC=subdomain, ...