Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
36 views

Centos LDAP server slapd stops responding until rsyslog is restarted

Have a LDAP sever running centos 6 with a fairly low amount of LDAP AUTH requests. Every couple of days the LDAP server will stop responding completely to any requests. LDAPsearch will freeze and ...
0
votes
0answers
25 views

Disabling anonymous bind on ApacheDS LDAP causes getent group not to work

Am new to ApacheDS - am using apacheds-2.0.0-M17. Followed the instructions to setup an Ubuntu 14.04 LTS machine as a LDAP client from this page: ...
0
votes
0answers
35 views

Configure ldap.conf host with ipv6

In my ldap.conf is it possible to use HOST to configure an IPv6 address? I know that I can configure an IPv6 address using URI. The linux manual on ldap.conf doesn't state if it only support IPv4 for ...
0
votes
0answers
40 views

Requesting parent OU doesn't seem to work right with Meta-Backend OU as child

I got a huge problem here. I’ve been trying to merge users from a local LDAP (ou=local-users,ou=accounts,dc=domain: which authenticates against a remote active directory (which is not ...
0
votes
0answers
129 views

Freeradius authentication: LDAP group and SSID matching

I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
0
votes
0answers
4 views

Winbind increase idmap range

i have a computing cluster running and use likewise for connecting all machines to the AD. I want to add new machines using ldapsam. My issue is, that it seems to only offer idmap ranges from "idmap ...
0
votes
0answers
66 views

CentOS7 ldap client not authenticating with ldap server

I am using ApacheDS which was a breeze to setup thanks to the apacheds mailing list. I am able to retrieve ldapsearch results, however, I am not able to get anything by doing a:"getent passwd ". ...
0
votes
0answers
58 views

PAM - Ignore local user, if LDAP-connection works

I have configured some SLED10SP1 (not allowed to update) machines to use LDAP for user authentication. Because SLED10 doesn't have official packages for pam_ccreds or sssd, I have to find a way to ...
0
votes
0answers
105 views

How to Setup IIS 7 and LDAP Authentication

Hi IIS and LDAP Experts! I will need to configure IIS 7 so that when a user go to my intranet website it will popup a login box asking for the user to enter his/her intranet ID and password which is ...
0
votes
0answers
35 views

why a user account with /bin/false shell in directory server is asking for membership in groups?

Firstly, we use ldap for user authentication. I have accidentally deleted a person account(his loginShell is /bin/false)from our directory server(sun DS7) running on red hat enterprise linux, although ...
0
votes
0answers
45 views

pam_access nisnetgroup with nested posixgroup

We have pam_access enabled and correctly allowed/denying users based on the rules in place. One such rule looks up LDAP backed NIS groups + : @hostname-granted : ALL Putting tuples in ldap work for ...
0
votes
0answers
26 views

Yast authentication server configuration: Global settings empty

I try to enable TLS/SSL for my LDAP-Server on a SLES12. So I enabled LDAP over SSL (ldaps) in Yast > Authentication Server Configuration > Startup Configuration. Fine so far. But when it comes ...
0
votes
0answers
29 views

LDAP troubleshooting

We have a Windows SBS 2011 which sometimes responds slowly to access requests. I'm troubleshooting performance issues fro a while, and now i want to know if there is any problem with the AD, LDAP ...
0
votes
0answers
38 views

olcRequires: difference between authz and bind (with olcDisallows: bind_anon)?

With OpenLDAP, what is the difference between: olcDisallows: bind_anon oldRequires: bind and: olcRequires: authc It seems to me that both configurations would require the client to authenticate ...
0
votes
0answers
10 views

RETCODE OpenLDAP overlay configuration

I am looking for various ways to disable Simple Paged Search results on OpenLDAP. Somehow, my attempts to disable paged searches by disabling it in contiguration using olcSizeLimit or olcLimits ...
0
votes
0answers
51 views

OpenLDAP & Posix Groups/Account configuration

with following configuration I am not able to add POSIX users/groups to the LDAP server. If some can educate me about significance of dc in this case, is it FQDN that I mentioned when I created ...
0
votes
0answers
34 views

disable simple paged results control support

Trying to make my client, originally developed for OpenLDAP, also compatible with Oracle DSEE. Oracle DSEE is missing support for simple paged results, which the client code uses. Yet, ODSEE supports ...
0
votes
0answers
185 views

Set Up OpenVPN with Ldap support on CentOS7

We are trying to set up OpenVPN with ldap support via openvpn-auth-ldap on CentOS7. The EPEL repository is not listing openvpn-auth-ldap anymore for CentOS7. For CentOS6, there was a working relase. ...
0
votes
0answers
215 views

Setup LDAPS authentification in Zabbix

I try to setup LDAPS authentification on Zabbix 2.4 but it's not working. Here is the infos on my configuration : OS : Debian PHP packages installed : libapache2-mod-php5 php-pear php5 php5-cli ...
0
votes
0answers
22 views

Windows AD server allows communication with-out LDAPs

I have a windows server 2008 AD setup with LDAPs signing requirement. I try a simple bind (through port 389) it is getting blocked as expected. But when I try a bind through 636, the ldaps port, It ...
0
votes
0answers
117 views

LDAP NET-IQ DRA (Active Directory) Group member of does not work

I am trying to list a couple computers, that do not have a specific group membership. This is what I have at the moment: ...
0
votes
0answers
100 views

CAS Authentication Handler for LDAP

I've been messing with CAS and LDAP for some time now and finally know why CAS is unavailable. I'm using CAS with Liferay with an LDAP db on another computer. Everything works fine until I change the ...
0
votes
0answers
126 views

find all memberOf groups, including cross-domain, of a group using LDA

I am trying to figure out how I can query AD for a group and find all the groups it is a member of including groups in another DC. So this is my configuration (simplified for the sake of simplicity): ...
0
votes
0answers
39 views

How to disable some ciphers in nsSSL3ciphers command?

Referring to Sun Directory Server Man Page Reference, can anybody tell whether - or + is really needed for scenario? I need to: enable only TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, and disable ...
0
votes
0answers
191 views

OwnCloud on Synology-NAS should use OpenDirectory-Server (LDAP)

I got a little problem: I want to configure LDAP with OwnCloud. The LDAP-Service is my OS X Open Directory-Server. OwnCloud runs on Synology DS214play. Well, I got the domain bureau.example.com ...
0
votes
0answers
53 views

Cant connect to newly installed LDAP server from ADSIEdit

I'm an LDAP newb learning by the seat of my pants. I installed AD LDS Role (LDAP) on a Windows Server 2012 R2 server. I created a partition with the context name CN=LDAPPartition, DC=subdomain, ...
0
votes
0answers
156 views

Unable to load Cert into OpenLDAP userCertificate attribute

I having troubles to add particular cert into userCertificate attribute (DER encoded certificate) in standard scheme of openldap-servers-2.4.39-3.el7.x86_64 running on Centos7 Slapd uses: include ...
0
votes
0answers
289 views

getent doesn't show netgroup from LDAP server

I followed this tutorial to migrate NIS to a new FreeBSD LDAP Server. However after I do all steps, in my test client, getent doesn't show netgroup normally from LDAP Server: $ getent netgroup ...
0
votes
0answers
56 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
0
votes
0answers
222 views

LDAP Query Of All Users In Various Groups In A Specific ActiveDirectory OU

I need to configure Atlassian Crowd to query all the users in my AD server that are in various groups in a top-level OU. The DN for the OU is "OU=Atlassian,DC=NNNN,DC=com". The various groups would ...
0
votes
0answers
58 views

Kolab removed FreeIPA admin write privileges

I was able to configure kolab so that it could import users from an external FreeIPA server, but after that I found that the admin user in FreeIPA doesn't have write permission anymore. I tried to ...
0
votes
0answers
268 views

How to let a user remove the pwdAccountLockedTime attribute without being an admin in ApacheDS?

I am probably going about this all wrong but there is no "Look stupid, do this..." level documentation out there that I have found. I have Apache DS v2.0.0 I have users I want some users (who I add ...
0
votes
0answers
65 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
0
votes
0answers
78 views

LDAP, nslcd and intermittent “Invalid user”

EDITED for simplification and new information. Some of my Ubuntu boxen, after an upgrade (12.04 -> 15.04), decided they don't want to accept new users. Sometimes. I turned off nscd so it wouldn't ...
0
votes
0answers
105 views

centos7 pam_authz_search for *.group.company.com

Upgrading from Centos6 where we were using ldap.conf entry "pam_check_host_attr=yes" previously, with wildcard 'host' attribute in ldap where the host attribute looked like 'host=*.group.company.com' ...
0
votes
0answers
56 views

assigning permissions to nested groups in FreeIPA

I have several user groups in FreeIPA (group1, group2, ..., group6) which are members of each other. (group1 is the master group) group1 -> group2 -> group3 -> group4 -> group5 -> ...
0
votes
0answers
235 views

OS X management - binding to OpenLDAP server

As my small company starts to realise the need to manage things more efficiently, I've been working on centralising management of our OS X workstations. Our overall environment consists of Linux and ...
0
votes
0answers
113 views

LDAP search query (using or) not returning values

I am using the following query in LDAP: ldapsearch -D "uid=test,cn=Users,cn=accounts,dc=earthlinktele,dc=com" -w dsaasddsa -b "cn=accounts,dc=earthlinktele,dc=com" ...
0
votes
0answers
30 views

cisco ucs user login using ldap group authorization

I'm trying to configure a cisco ucs server login with ldap using group authorization. I can login to the cisco server using ldap username and password when I add the user to "admins" group, but when I ...
0
votes
0answers
289 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
0
votes
0answers
95 views

Mac OS X Server authenticate Samba agains external LDAP

Here's our current situation; We have 2 networks that are connected to each other with a router. The first network in an Microsoft Active Directory based network. The second network is an Apple Mac OS ...
0
votes
0answers
50 views

Secure LDAP replication over the Internet

I have a remote site in which I'll need to authenticate my users. I have my users in a LDAP db. Thus my idea is to replicate the OpenLDAP server to the remote site to perform authentication locally ...
0
votes
0answers
137 views

Checking ShadowExpire with apache's mod_authnz_ldap

I'm currently using mod_authnz_ldap for basic authentication. This works fine, but I'd like the ability to lock accounts without changing the user's password. For Linux, adding shadowExpire attribute ...
0
votes
0answers
52 views

Lighttpd ldap auth issue, massive performance loss (lighttpd 1.4.35-1.el6.x86_64 + RHEL 6.6)

I installed lighttpd for the first time from epel repo. I changed user and group for the webserver and ran the lighttpd server. I can download a page with 200 small images in about a second. If I ...
0
votes
0answers
779 views

Call to undefined function ldap_connect() in ubuntu

I'm attempting to set up a test ldap server on an ubuntu 12 VM. I've gotten this error: Fatal error: Call to undefined function ldap_connect() in ubuntu I've installed the gettext extension in ...
0
votes
0answers
126 views

Password History isn't working in 389ds LDAP

I'm testing few of the password policies that are available in 389ds which is installed in CentOS 6.5. In that except Password History, all the attributes are working according to the configuration ...
0
votes
0answers
93 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
0
votes
0answers
80 views

ldapsearch through ssh tunnel failing

I have following situation: 2 servers: a_server - this one from which I want to perform ldapsearch b_server - this is where LDAP directory located When I'm on b_server, this command ldapsearch -x ...
0
votes
0answers
88 views

LDAP Browser(Softerra) vs LDP.exe

Here is the issue; -> There is a Deny All(FullControll) set on 2 OUs for a service account. -> When i use LDP.exe to query those OUs, it can read their names but can not display any objects ...
0
votes
0answers
86 views

LDAP ACLs with filters

I am trying to write LDAP ACL filters that would suspend authentication for domains that have a custom attribute set to some value. I created a custom object with an extra NAME attribute domainStatus ...