Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

1
vote
0answers
77 views

Gitlab userPrincipalName without Domain

I've to use the userPrincipalName instead of the default sAMAccountName in all applications which are integrated to AD because we've login-names > 20 characters which isn't supported by ...
1
vote
1answer
1k views

phpldapadmin not being able to connect to LDAP server using ldaps

Update I have been able to reproduce the problem in a smaller scale using a simple php script that attempts an LDAP bind. From that script I got more debug output which lets me identify the actual ...
0
votes
1answer
70 views

LDAP configuration for Mac server

We just migrated our php webapps to a new web server (Mac OS X 10.9.5). We are having trouble with ldap logins to the webapps. We are able to successfully connect to a remote ldap server, but when we ...
0
votes
0answers
52 views

Early tear down of communication

I have an application which performs an LDAP search which works in one domain but not in the other, when analyzing the packets sent between the application server and the domain controller being ...
-1
votes
3answers
105 views

how do I change 1000 user passwords using ldap? [closed]

I have 1000 users I need to change the password for to a known password for a migration tool (groupwise to exchange). I do not have any of the existing password. How do I change the password for 1000 ...
3
votes
1answer
53 views

Is dual directory integrations possible with Windows?

In the Mac world, you can integrate OS X systems with dual directories so that OS X looks towards Active Directory for authentication and OpenLDAP for OS X managed preferences. Is the following ...
0
votes
1answer
165 views

How to set a user as RootDN in OpenLDAP

I have installed OpenLDAP and phpLDAPadmin on Ubuntu 14.04. I have a default RootDN which is something like: cn=admin,dc=example,dc=com Then I have created some users and groups organizational ...
0
votes
1answer
30 views

how do you query your existing ldap parameters?

ldapsearch -A locked my computer up and upchucked about 3000 unnecessary lines (not one clearly had the information I was looking for). Is their a quick summary search that will upchuck your ou, dn, ...
0
votes
2answers
25 views

LDAP config for Novell export

I am trying to export the email userlist from groupwise via the consoleOne export tool.. In the tool, they ask for some basic LDAP parameters that make little sense in the GUI (I dislike GUIs). ...
1
vote
2answers
501 views

Getting list of users indirectly members of an AD group through LDAP

I'm having a bit of a problem with LDAP search that should specify whether a user is a member of a given AD group or not (recursively). Basically, what I'm doing is issue a LDAP search with the ...
1
vote
0answers
236 views

LDAP authentication, pam_mkhomedir and NFS automounted homes

We currently have a setup (running on Ubuntu 12.04.5 LTS) with mixed LDAP/NIS authentication and automounted home directories from several servers (with the auto.home map distributed over NIS). ...
0
votes
1answer
522 views

Can't contact LDAP server (with ldaps) in Docker

I'm trying to do a ldapsearch like this : ldapsearch -x -D "uid=username,ou=people,dc=example" -w passw0rd -H ldaps://example.com "(objectClass=example)" But it's giving me this error : ...
0
votes
1answer
90 views

389 Directory Server - Multiple Domains

I have multiple business that i would like to authenticate to a single server for SSO. I am using 389 directory server and have already split each domain into it's own respective OU. I would like to ...
0
votes
1answer
204 views

FreeIPA/389 DS userPassword

I am connecting to FreeIPA LDAP (386 Directory Server) as admin. I can find a user, and add the userPassword attribute like #!RESULT OK #!CONNECTION ldap://freeipa1.localdomain:389 #!DATE ...
2
votes
2answers
4k views

pam_ldap and ldaps can't contact ldap server

I'm trying to allow authentication via LDAP on a CentOS host system. But I always get a Can't contact LDAP server error from pam_ldap. The LDAP server is pingable and authentication works perfectly ...
0
votes
1answer
291 views

SSH login with LDAP users over NSLCD works after restarting server

I have a working nslcd setup running on many servers. I distributed this config to many servers almost all of which are working without problems. However I forgot to install libnss-ldapd and ...
0
votes
2answers
137 views

How to configure OpenLDAP server and test using Apache HTTPD

I am using CentOS 6. I found a great article on how to install and configure OpenLDAP on CentOS 6, and I found some other great documentation here on how to configure LDAP to work on Apache HTTPD (I ...
0
votes
0answers
165 views

Root and child domain authentication through one LDAP path

I have a webapp and in the web.config file, there is an LDAP path to allow AD token lookup for users to login. The app also requires users to be in a specific group to login. In my case red\appadmins ...
0
votes
0answers
45 views

Restricting proxy access to certain ldap users

I'd like to restrict access to a squid proxy server to certain ldap users. Since the ldap backend I use is zimbra, I intruduced a new Class of Service simply called squidusers and use that for the ...
0
votes
1answer
69 views

How to create additonal Organizational Units (ou) with zimbra

How can I create more ous or change existing ous with zimbra (preferably the web administration frontend). Is there a zimlet available? Or is is maybe best practise to use additional Classes of ...
0
votes
1answer
84 views

Error while configuring openldap with ssl

I have a certificate from Digicert and I have added the keys to the bdb config file. The rest of the LDAP setup works fine except the SSL part. I have added a Mozilla certificate store as well, but i ...
0
votes
1answer
295 views

Password complexity on clients authenticating via openldap

We have a bunch of linux servers authenticating via an ldap server. We have set a password complexity policy on the ldap server. However, the local system policy overrides the policy set on the ldap ...
8
votes
2answers
606 views

Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?

We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most. Thus, we are installing: a wiki (dokuwiki) ...
0
votes
1answer
65 views

Intranet AD login for External Website

Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
1
vote
0answers
167 views

LDAP user's NFS files are mapped to nogroup (user ID mapped correctly)

In my office environment, I have set up multiple Ubuntu machines with LDAP authentication using the LDAP & NFSv4 server hostS. The LDAP/NFS server hostS exports the /home directory for all users ...
0
votes
1answer
146 views

Issues with LDAP authentication over SSL (ldaps)

I'm trying to setup an LDAP server with ldaps support. The server is hosted on ec2 and it has a domain name on route 53. I got an SSL certificate for the route 53 domain (say example.com). When i try ...
0
votes
1answer
47 views

red hat directory 9 / 389 directory server - Do duplicate invalid passwords count toward the lockout policy?

I have been looking at Red Hat's Directory server 9 (aka 389 directory server). One thing I was looking to find out was how account lockouts are handled if the same invalid password is repeated over ...
0
votes
1answer
24 views

Configuring different read and write targets for OpenLDAP

I have a new piece of infrastructure (a simple LDAP web service) that will be a drop-in replacement for something that currently exists in production. The backend OpenLDAP server will not be upgraded ...
0
votes
1answer
483 views

MacOS X 10.9 Mavericks Kerberos login w/ FreeIPA

Has anyone successfully set up authentication and authorization between MacOS X and FreeIPA? An old revision of the FreeIPA documentation explains how to get it working in 10.4 and nothing in their ...
1
vote
0answers
173 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
1
vote
2answers
557 views

How can I log on my linux machine with my Active Directory credentials?

I'm on a windows computer RDPing to a RHEL 7 Server. I now want to be able to log into that server using my windows domain credentials(over SSH, preferably RDP too but not necessary). Here's what I ...
1
vote
1answer
508 views

Postfix Splitting Domain to Separate Mailstores using LDAP

I'm investigating a new mail setup to replace Exchange in our organization using Cyrus-IMAP, Postfix and Perdition IMAP proxy server. I'm running into issues dealing with sending emails to different ...
0
votes
1answer
98 views

FreeIPA krb5.conf has example.com entries

I have installed and reinstalled FreeIPA ipa-server-3.0.0-37.el6.x86_64 on a fully updated OEL 6.5 server a couple (3) times now and even if I destroy the existing /etc/krb5.conf file and reinstall ...
0
votes
1answer
216 views

389-ds and openldap client setup

I am working towards a proof concept: I have installed 389-dc on centos and enabled ssl via a self-signed certificate. (after a lot of reading) I can see the port 636 is listening on the centos ...
0
votes
0answers
57 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
0
votes
1answer
432 views

Limit access on Apache 2.4 to ldap group

I've upgraded from Ubuntu 12.04 LTS to 14.04 LTS, and suddenly, my Apache 2.4 (previous: Apache 2.2) now lets everybody in to my virtual host, which is unfortunate :-). What am I doing wrong? ...
0
votes
0answers
16 views

LDAP: Extend database using referral

My company uses an off-site LDAP server to handle authentication. I'm currently working on a local VPN for my branch that needs to use the off-site LDAP to check user's usernames and passwords, but I ...
1
vote
1answer
67 views

Are there any ldap proxy servers that can supplement the results from the main ldap server? [closed]

We have a central ldap server that authenticates and provides authorization information about users in our institution. I am looking for a LDAP Proxy that supplement the central LDAP server to support ...
-1
votes
2answers
155 views

RHEL 6.5 and LDAP

I am trying to connect our Active directory server to brand new RHEL 6.5 server. I want to authenticate users using AD credentials, but I want to restrict that only certain users can login, I don't ...
0
votes
0answers
201 views

Freenas & LDAP Multiple User Groups Not Taking Affect

we are using, Freenas 9.2.1.7 which communicates with LDAP to control file permission. We have Windows users in multiple groups. Some belong to Finance as their primary group and Admin as another ...
0
votes
1answer
195 views

phpldapadmin uidNumber stopped auto-updating on new user creation

We are having an issue that just started this morning. It seems our phpldapadmin (1.2.04) interface has stopped auto-incrementing the uidNumber on new user creation. Basically we are stuck at ...
0
votes
3answers
74 views

executing commands when user first logs in [closed]

So I use webmin to create ldap user. I then manually create public_html folder, and set quota for newly created home folder. Is there a way such that I can execute commands when user first logs in or ...
0
votes
0answers
100 views

Way to authenticate against Active Directory but without direct access to it?

So I'm in an interesting situation. I have an application that only supports authentication via LDAP on my network and client with active directory on their network. We have a secure VPN tunnel ...
0
votes
1answer
146 views

Change SAMBA password in LDAP with Apache Directory Studio

I am using Apache Directory Studio to administer a small LDAP database, and I am planning to stop using LAM for user and group management because it lacks groupOfUniqueNames support. I have only one ...
0
votes
0answers
121 views

ejabberd and LDAP authentication using StartTLS

I am trying to setup ejabberd that authenticates users against an LDAP server. The LDAP server requires all clients to connect via StartTLS (olcSecurity: tls=1). ejabberd's LDAP module does not ...
0
votes
0answers
566 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
1answer
40 views

Why does ldapsearch not show user's supplemental groups?

I have a user who when I type 'id username' shows more groups than when I query ldap using ldapsearch. What switch do I use? $ id apanda uid=14510(apanda) gid=5010(sambauser) ...
0
votes
1answer
539 views

Weblogic Admin server gets LDAP errors then unexpectedly shuts down

we have a new(ish) WLS 9.2 installation Over the last day or so, after restarting WLS, after a while, the admin server unexpectedly shuts down, preceded in the logs by many (hundreds) occurrences of ...
1
vote
0answers
314 views

Mini mac server returning:- attribute “entryCSN” index delete failure

I have an Open Directory(OD) server running on OSX 10.8.5. I have software connecting to it (a web interface) which is searching the LDAP for users. So I run the query on the web app, and look in ...
0
votes
1answer
279 views

How do I change pwdMaxAge on a “specialized password policy?”

I'm supporting dsee7 (Oracle/Sun LDAP server) and I have a "specialized password policy" for non human accounts called, SrvsPasswdPolicy. "pwdPolicySubentry: cn=SrvsPasswdPolicy,cn=config" I need to ...