Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
52 views

Why I cannot add groupOfUniqueNames to LDAP?

Hi I'm trying to add groups for then add LDAP users to them but I don't know why LDAP is not adding. Previously I added users, organizational unit, etc. Here the exmaple of ldif that I would like to ...
0
votes
0answers
187 views

LDAP with TLS: connect error(-11)

I configured OpenLDAP and today I've configured the TLS for more security following these guide lines: Configure OpenLDAP with TLS=required Modifying the cn=config.ldif with config file: dn: ...
0
votes
0answers
32 views

Connect OpenLDAP to Samba in read mode?

We have Samba 3 based domain controller. The password backend for the domain is pdb/*nix users, this means that we do not have LDAP service running with Samba (I may be wrong on this one, but I do not ...
0
votes
0answers
51 views

multiple OUs in LDAPSearch

When working with Group ACL in PFSENSE+SquidGuard: In the Client-Source parameter, can I place OU and how? This is because I'm having multiple OUs with users to be added in the rule. Would the ...
0
votes
0answers
33 views

LDAP passswd command ask 4 new password

I know there is similar question but mine is a few different as I 'm using LDAP as identification and I'm running with debian wheezy (7) When my end user is using the passwd command for changing his ...
0
votes
0answers
71 views

Migration of LDAP and GOsa-config to new server

I have a running LDAP-server (using Ubuntu 12.04) with GOsa installed on it. Is there a way to migrate the whole database including the GOsa-config to a new server (Ubuntu 14.04)? I tried exporting ...
0
votes
0answers
55 views

LDAP: Segmentation fault

I have this error when I use ldapsearch: Segmentation fault I've removed and reinstalled openldap and openldap-servers and after that, throws me this error. /var/log/messages: ldapsearch[20232]: ...
0
votes
0answers
18 views

Debugging libnss_ldap AD synchronization

I am trying to configure my Debian server to talk to an AD. I have a connection to the LDAPs port of the AD, and i can use LDAP search to connect and retrieve results. I can also see that the getent ...
0
votes
0answers
201 views

AD LDS - LDAP - How to set group's rights on container

I installed AD LDS on a W2012R2. Everything is working fine. Now, I want to create new Roles, to grant to groups permissions to create/modify/delete users in a certain container. (I used this article) ...
0
votes
0answers
39 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
0
votes
0answers
215 views

ldapsearch throws me a login fail (invalid credentials (49))

I'm starting with LDAP and trying to configure all in this tutorial step by step: http://wiki.openiam.com/pages/viewpage.action?pageId=7635198 But when I'm in 10th step: ldapsearch -h localhost -D ...
0
votes
0answers
70 views

LDAP & IMAP - force users to password change

I need to force users to password change (passwords stored in LDAP) - but most of them use only mail clients to read mail (via IMAP) - is there any way i can force a password change during mail ...
0
votes
0answers
46 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
0answers
84 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
0
votes
0answers
44 views

Apache HTTP Server LDAP authentication with netgroups

Is it possible to do a group authentication in Apache HTTP Server ("Require ldap-group") but instead of a normal (posix) ldap group to use a netgroup?
0
votes
0answers
250 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
0
votes
0answers
635 views

openLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04

I have installed an ldap server in Ubuntu 12.04 using the tutorial https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-server-installation. First time everything went fine but had ...
0
votes
0answers
157 views

LDAP query to obtain distinguished name of a list of users

Hi im working on a migration process on which we are migrating users from one server to another domain controller. Right now I have a list of users I migrated, but I also got another of them I didnt. ...
0
votes
0answers
45 views

Disable ‘Authentication Required’ login modal upon failed ntlm authentication on apache

I'm trying to disable the Authentication Required login modal that appears when the NTLM authentication fails and simply redirect the users to a login page.
0
votes
0answers
113 views

Apache on Centos 6.5 Purge of LDAP cache failed

My logs are filling up with: Purge of LDAP cache failed I have researched as much as I can, and I cannot find a fix. I am running the latest (as of this post) version of Apache, PHP and all of the ...
0
votes
0answers
86 views

Require ldap-group with mod_authn_alias failing

So I've got LDAP authentication (from our AD) working fine in apache 2.2.22 on Debian 7.6. Because of some weirdness in the way our AD schema was set up, back in the day, I'm having to do the ...
0
votes
0answers
60 views

Early tear down of communication

I have an application which performs an LDAP search which works in one domain but not in the other, when analyzing the packets sent between the application server and the domain controller being ...
0
votes
0answers
176 views

Root and child domain authentication through one LDAP path

I have a webapp and in the web.config file, there is an LDAP path to allow AD token lookup for users to login. The app also requires users to be in a specific group to login. In my case red\appadmins ...
0
votes
0answers
54 views

Restricting proxy access to certain ldap users

I'd like to restrict access to a squid proxy server to certain ldap users. Since the ldap backend I use is zimbra, I intruduced a new Class of Service simply called squidusers and use that for the ...
0
votes
0answers
63 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
0
votes
0answers
17 views

LDAP: Extend database using referral

My company uses an off-site LDAP server to handle authentication. I'm currently working on a local VPN for my branch that needs to use the off-site LDAP to check user's usernames and passwords, but I ...
0
votes
0answers
210 views

Freenas & LDAP Multiple User Groups Not Taking Affect

we are using, Freenas 9.2.1.7 which communicates with LDAP to control file permission. We have Windows users in multiple groups. Some belong to Finance as their primary group and Admin as another ...
0
votes
0answers
118 views

Way to authenticate against Active Directory but without direct access to it?

So I'm in an interesting situation. I have an application that only supports authentication via LDAP on my network and client with active directory on their network. We have a secure VPN tunnel ...
0
votes
0answers
130 views

ejabberd and LDAP authentication using StartTLS

I am trying to setup ejabberd that authenticates users against an LDAP server. The LDAP server requires all clients to connect via StartTLS (olcSecurity: tls=1). ejabberd's LDAP module does not ...
0
votes
0answers
614 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
0answers
74 views

Percona MySQL LDAP authentication fails through .NET MySQL connector

Basically, MySQL uses its native authentication, where usernames and passwords are stored in mysql.user table. MySQL authenticates user against the credentials stored in mysql.user table. Our ...
0
votes
0answers
38 views

Is it possible to use iptables and trafficcontrol (tc qdisc) together to set rules on only specific packets/traffic?

I would need to set delay on my network interface such that only a specific set of packets/traffic is affected by this delay. i.e., I can set a 9 sec delay on eth0 tc qdisc add dev eth0 root netem ...
0
votes
0answers
124 views

Why does samba include seemingly bogus “supplementary groups”?

Our environment is subject to the "16 group limit" with Samba. We are using Samba version 3.6.12. Basically if a user is in more than 16 groups, the whole system gets hosed and things go haywire. ...
0
votes
0answers
273 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
0
votes
0answers
125 views

Debian nfs-client shows nobody:nogroup

i have a running ldap-server, which works well with my webserver. Now i tried to get the nfs-server running with my a MySQL server. I (think) i did the same things like on my webserver configuration. ...
0
votes
0answers
756 views

Dovecot won't work with quota value from LDAP that include the “S” appended for size?

I have a courier-imap IMAP system backed by LDAP holding the user data. I would like to convert IMAP to dovecot, and I am able to successfully configure basic login; that is working correctly. But I ...
0
votes
0answers
164 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
210 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
0answers
65 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
0
votes
0answers
5k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
0
votes
0answers
43 views

LDAP Replication

I'm trying to use LDAP Sync Replication. I must grant rights to my account replicador. This is my ldif: dn: olcDatabase={1}hdb,cn=config replace: olcAccess olcAccess: {0}to attrs = ...
0
votes
0answers
409 views

redirect LDAP with TLS with SSH

I need to query an LDAP server with TLS enabled. The LDAP server is behind a firewall. It only accepts queries with TLS enabled (-Z option). I redirected the LDAP port like this: oz123@devhost ~ $ ...
0
votes
0answers
170 views

LDAP_route not working after upgrade from Debian Lenny to Wheezy

 I have Debian 5 box (Lenny) with configured sendmail and LDAP_routing feature. This box is placed between Internet and my final mail server (MS Exchange). LDAP_route feture was used to validate ...
0
votes
0answers
794 views

REMOTE_USER not getting set?

I am trying to setup LDAP Authentication in Joomla using a plugin called JMapMyLDAP (in fact 4 plugins each doing a different job). I need to pull a part of a string out of the server variable ...
0
votes
0answers
421 views

Brief example for non-trivial idmapd sought

I manage users using an OpenLDAP server. I now want to connect a NAS as the main file server using NFSv4. The NAS allows me to import LDAP users and groups, but it maps them to user@ldap.domain. So I ...
0
votes
0answers
84 views

Lemonldap::ng + OpenID error in try generate

I am trying to configure authentication by OpenID in lemonldap::ng with this When I try http://auth.example.com/openidserver/username, I see following error: Unable to load Net::OpenID::Server ...
0
votes
0answers
75 views

How to enable TLS on OpenLDAP

I use CentosOS 5. I have a problem to enable TLS (or ssl) on OpenLDAP server. I followed this tutorial... so: I generate the cerificates; I setted the path in sladp.conf TLSCertificateFile ...
0
votes
0answers
37 views

Getting numbered users which does not really exist in the LDAP Interface

I'm currently experiencing a very weird problem. I maintain the ldap interface of a software of our company and i'm only communicating to the ldap interface of AD, Domino and so on. Today with a ...
0
votes
0answers
390 views

ejabberd LDAP auth and vcard access works, but search does not - why?

I've set up an ejabberd installation and configured the LDAP authentication and vcard data extraction against an ActiveDirectory global catalog server as described in the documentation. This part ...
0
votes
0answers
2k views

Integrate LDAP with group based authentication in New gitlab 5.1.0

We currently installed gitlab 5.1.0 and is working fine. Also we are able to integrate Gitlab with LDAP with the following configuration: root@geopc:/home# vi /home/git/gitlab/config/gitlab.yml ...