Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

6
votes
1answer
265 views

Dynamically Authenticate Apache with LDAP Based on Request String?

It is possible to use a portion of the request URI as an input into mod_authnz_ldap's Require ldap-group directive? I'm trying to dynamically check access to a bunch of different project directories, ...
5
votes
1answer
4k views

How to manage groups and users in Jenkins

I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right. I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the ...
4
votes
1answer
1k views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
4
votes
1answer
279 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
4
votes
1answer
542 views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
3
votes
1answer
2k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
3
votes
1answer
345 views

CentOS Directory Server - Changing Password via LDAP Modify, passing in old password

This might be a bit odd, as I've had no success finding a solution thus far. This is installed in CentOS 5.8, and using CentOS-Directory/8.2.8 B2012.041.1227. Simply, I am using an application which ...
3
votes
1answer
151 views

How to add more multiple CA certificates to LDAP client

I'm having trouble with adding a 2nd LDAP server into the client configuration. If I configure the client to use just either one, it works fine. So I'm sure both CA certificates work. I have tried ...
3
votes
1answer
111 views

Database Administrator

I have a Novell LDAP server running on RHEL. and I want to authenticate my LDAP users from the Website on one of my machine having HTTP, so I use in the httpd.conf <Directory /var/www/html> ...
2
votes
1answer
45 views

Is dual directory integrations possible with Windows?

In the Mac world, you can integrate OS X systems with dual directories so that OS X looks towards Active Directory for authentication and OpenLDAP for OS X managed preferences. Is the following ...
2
votes
1answer
2k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
2
votes
1answer
827 views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
2
votes
1answer
506 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
2
votes
1answer
483 views

Unable to connect QNAP NAS ldap to Domino server

We've just bought a QNAP 419 NAS to the office and for simplicity I'd like to authenticate using LDAP from our Domino server. qnap ldap auth demands the following settings: Base DN Root DN ...
2
votes
1answer
143 views

Overriding Debian default groups from LDAP

This is a thing that has always bothered me: how am I best to handle Debian standard groups for LDAP users? Debian has a number of groups defined by default, e.g. plugdev, audio, cdrom and so on. ...
2
votes
1answer
590 views

Best practices for LDAP and DMZ

We are in the process of setting up a DMZ and I have stumbled into the question of how to handle machines that need to have ports exposed to the internet, but at the same time be able to make LDAP ...
2
votes
1answer
1k views

Make Postfix search LDAP group members by UID instead of DN?

I'm creating an e-mail server with postfix (v2.7.1 on Debian 6.0) where users and groups are stored in an LDAP server. Users accounts works fine but I want to create e-mail aliases from group (any ...
2
votes
1answer
239 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
2
votes
1answer
336 views

Apache2: nested require statements within Location

I'd like to set up different LDAP authorization rules for different levels of an URL. This is the config currently used <Location /> AuthType Basic AuthName "Foo" ...
2
votes
1answer
105 views

Securing access to virtual directories with valid users determined by part of the URL

I'm not a very experienced Apache sysadmin (fell in to the role as I was the only person who knew anything at all about it!) and I'm really stuck with this problem. Thanks to an over-zealous salesman ...
2
votes
1answer
154 views

IE, FireFox LDAP issues

We have an intranet site, with no known updates pushed to the server over the weekend. This morning, when attempting to validate with LDAP credentials via single sign on in IE, we receive Access ...
1
vote
1answer
23 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
1
vote
1answer
49 views

Is it possible to have one group or account authenticate locally, bypassing LDAP auth?

We have one RAC cluster of machines where the local UID:GID of a couple users (oracle and grid) do not match the UID:GID of those same users in LDAP. Ultimately we ought to change the UID and GID of ...
1
vote
1answer
114 views

Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox

I want to connect liferay to zimbra in Virtual Box and I need to fill this form : ![Capture of liferay try to connect to ldap in VB] http://i.stack.imgur.com/cUOuV.png I got the url and password ...
1
vote
1answer
152 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
1
vote
1answer
145 views

Dovecot + OpenLDAP

I am trying to get dovecot 2.0.19 authenticate users via LDAP (OpenLDAP 2.4.28) and using Wireshark to debug the process. It looks like the basic configuration of dovecot is fine, but it doesn't pull ...
0
votes
0answers
133 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
0answers
134 views

QNAP LDAP server cannot change primary user group

We are setting up a new QNAP server in our office. We have set up NFS and LDAP to share users and files in a linux only network. The LDAP is giving us some trouble. As the default user group Domain ...
0
votes
0answers
1k views

Change local password as root after configuring for MS-AD Kerberos+LDAP

I have followed this excelent post to configure Kerberos + LDAP: http://koo.fi/blog/2013/01/06/ubuntu-12-04-active-directory-authentication/ However, there are some local users used for services. When ...
0
votes
0answers
43 views

LDAP: what's with objectClass top?

I'm trying to get my head around LDAP and have installed a test OpenLDAP server (latest version slapd 2.4.31-1+nmu2) on a Debian 7.3.0 amd64 machine. After the basic setup which is done as part of the ...
0
votes
0answers
45 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
0
votes
0answers
78 views

MOD_AUTHNZ_LDAP query failing on search query yet search works in Apache Directory Studio

I have a search issue with mod_authnz_ldap that I need help on. I need to give authentication to users in the active directory however seem to need to specify "OU=XX" in the search string. Successful ...
0
votes
0answers
2k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
0
votes
0answers
38 views

LDAP Replication

I'm trying to use LDAP Sync Replication. I must grant rights to my account replicador. This is my ldif: dn: olcDatabase={1}hdb,cn=config replace: olcAccess olcAccess: {0}to attrs = ...
0
votes
0answers
164 views

Worklight WAS Liberty profile configuration based on Tomcat configuration

(I already asked this question on Stackoverflow, but didn't get much of an answer, so I decided I'd better ask the sysadmins, because it's more relevant here. The answer I got was that I also had to ...
0
votes
0answers
47 views

How can I set path for non-interactive user authenticated using LDAP?

On a Mac running OSX 10.7.5, I need to set the PATH for non-interactive users who connect via ssh and are authenticated using LDAP. It's the same question that was asked (and answered) here: Updating ...
0
votes
0answers
166 views

Can connect to LDAP server, but cannot bind: OpenLdap error message: Can't contact LDAP server

We have a PHP application deployed on a RHEL6 machine that relies on some ldap calls to function. In particular, ldap_connect and ldap_bind are used to verify users and also to look up their details. ...
0
votes
0answers
289 views

redirect LDAP with TLS with SSH

I need to query an LDAP server with TLS enabled. The LDAP server is behind a firewall. It only accepts queries with TLS enabled (-Z option). I redirected the LDAP port like this: oz123@devhost ~ $ ...
0
votes
0answers
122 views

LDAP_route not working after upgrade from Debian Lenny to Wheezy

 I have Debian 5 box (Lenny) with configured sendmail and LDAP_routing feature. This box is placed between Internet and my final mail server (MS Exchange). LDAP_route feture was used to validate ...
0
votes
0answers
581 views

REMOTE_USER not getting set?

I am trying to setup LDAP Authentication in Joomla using a plugin called JMapMyLDAP (in fact 4 plugins each doing a different job). I need to pull a part of a string out of the server variable ...
0
votes
0answers
212 views

Brief example for non-trivial idmapd sought

I manage users using an OpenLDAP server. I now want to connect a NAS as the main file server using NFSv4. The NAS allows me to import LDAP users and groups, but it maps them to user@ldap.domain. So I ...
0
votes
0answers
59 views

How to enable TLS on OpenLDAP

I use CentosOS 5. I have a problem to enable TLS (or ssl) on OpenLDAP server. I followed this tutorial... so: I generate the cerificates; I setted the path in sladp.conf TLSCertificateFile ...
0
votes
0answers
35 views

Getting numbered users which does not really exist in the LDAP Interface

I'm currently experiencing a very weird problem. I maintain the ldap interface of a software of our company and i'm only communicating to the ldap interface of AD, Domino and so on. Today with a ...
0
votes
0answers
264 views

ejabberd LDAP auth and vcard access works, but search does not - why?

I've set up an ejabberd installation and configured the LDAP authentication and vcard data extraction against an ActiveDirectory global catalog server as described in the documentation. This part ...
0
votes
0answers
1k views

Integrate LDAP with group based authentication in New gitlab 5.1.0

We currently installed gitlab 5.1.0 and is working fine. Also we are able to integrate Gitlab with LDAP with the following configuration: root@geopc:/home# vi /home/git/gitlab/config/gitlab.yml ...
0
votes
0answers
85 views

Apache to accept a (corrupt) certificate without a Subject?

I am using .htaccess to ask for a username and passphrase which authenticates against LDAP. The problem is, that the certificate is corrupt, and so Apache of course won't allow users to login. As ...
0
votes
0answers
258 views

configuring ldap client in ubuntu ( Bad file descriptor error )

I am configuring ldap client in ubuntu. I am following this tutorial link to configure the ldap client. But, When I try to update nss to use ldap, I am getting an error. That is, root@sat:/# ...
0
votes
0answers
74 views

MMC Cert Manager Plug-in is making LDAP connection to external site, why?

I'm trying to figure out what is causing 5 of my servers to attempt to connect to an external LDAP server. I inherited these servers when another employee left the company. As far as I know these ...
0
votes
0answers
389 views

Compile php 5.3 ldap extension

So trying to follow the very un-descriptive guide at my webhost for compiling a new php extension: **Compiling PHP 5.3 extensions You can also compile and load your own extensions. Here's how:** ...
-1
votes
0answers
403 views

Error attempting to join a windows xp to a samba domain

I have installed SAMBA and LDAP on XUBUNTU and they work normlly but when I try to join a windows xp machine it fails. I have already added the workstation using smbldap-useradd and the worksation ...