Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

4
votes
3answers
275 views

centralized audit server solution for mutiple server management [closed]

We have dozens of Linux servers, and several developers, and each of the developer covers parts of the servers. Currently each server has an admin account, if someone want's to manage that server, ...
2
votes
1answer
463 views

ldap_modify: Insufficient access (50) when changing password

I'm trying to modify the LDAP admin password on a fresh OpenLDAP install on CentOS 6.7 (similar to RHEL 6.7). I created a file called change_ldap_password.ldif: # Hash your password: # slappasswd -h ...
0
votes
1answer
425 views

OS X Server NFS home directory mount options

we are running a couple of OS X clients in an open directory OS X server environment with home directories provide via NFS. The auto_home script allows to mount the home folder of the user without ...
0
votes
0answers
35 views

Disabling anonymous bind on ApacheDS LDAP causes getent group not to work

Am new to ApacheDS - am using apacheds-2.0.0-M17. Followed the instructions to setup an Ubuntu 14.04 LTS machine as a LDAP client from this page: https://help.ubuntu.com/community/...
0
votes
2answers
33 views

PAM - LDAP authentication interaction

So far from what I understand it gets given a username/password pair, it then searches the LDAP for the username and tries to log into the LDAP using the distinguished name and the password pair, if ...
2
votes
1answer
75 views

Can apache expose the ldap group used to authenticate to a php application?

I have a LAMP server setup using Apache2, mod_php, and mod_authnz_ldap to authenticate to Active Directory. This hosts a lightweight php application where users enter and manipulate data. Access is ...
0
votes
0answers
42 views

Configure ldap.conf host with ipv6

In my ldap.conf is it possible to use HOST to configure an IPv6 address? I know that I can configure an IPv6 address using URI. The linux manual on ldap.conf doesn't state if it only support IPv4 for ...
1
vote
2answers
599 views

Emails are bounced with 'user unknown' when using LDAP in Postfix virtual config

I have been tackling this problem for several days and seem to have exhausted all troubleshooting, so thought I'd reach out to the community for any help. Without introducing OpenLDAP into the mail ...
0
votes
1answer
58 views

Dynamically assign extension based on active disrectory SID with asterisk

I'm new to Asterisk. Basically all I need to do is set up Asterisk to have dynamic extension numbers based on Active Directory (LDAP) SID. AKAIK the SID is always the same prefix, followed by unique ...
1
vote
1answer
87 views

How to import SSL certificates in a 389 Directory Server using the command line?

I am trying to setup a new 389 Directory Server in a RHEL machine and I am trying to configure SSL for LDAPS using the command line. I have just spent several hours digging through every piece of ...
0
votes
1answer
485 views

freeipa admin password reset

I'm trying to figure out how to reset my freeipa3 admin password. I'm able to see the user when I search the domain: [root@ipaserver ipa]# LDAPTLS_CACERT=/etc/ipa/ca.crt ldapsearch -h localhost -ZZ -...
2
votes
3answers
162 views

How to filter a LDAP query for users which are authenticated? [closed]

I want to check if a user is authenticated right now for my Windows domain. For that I want to use an LDAP query. I learned that there is a group "Authenticated Users" (S-1-5-11) which might do the ...
0
votes
0answers
69 views

Requesting parent OU doesn't seem to work right with Meta-Backend OU as child

I got a huge problem here. I’ve been trying to merge users from a local LDAP (ou=local-users,ou=accounts,dc=domain: which authenticates against a remote active directory (which is not ldap://remote....
-1
votes
1answer
34 views

can I centralize SQL and AD users via LDAP? [closed]

I have to mention that I am talking about 60 - 100 users. We are having SQL database for specific internal use, where contain all the users in the company. Now we are deploying Windows Active ...
0
votes
1answer
27 views

LDAP - Forward OU to remote LDAP OU

i've been looking for a solution to forward a OU request to a remote LDAP OU. dc=domain ou=accounts ou=local-accounts cn=local-user ou=remote-accounts ALL OBJECTS FROM PRE DEFINED REMOTE ...
2
votes
1answer
2k views

How to migrate LDAP (database,schema,configuration) to other machine

I'm using openldap 2.4.40, and i need to migrate my existing ldap database, configuration, and schema (basically everything ldap server related) to a new machine. the problem is, I use cn=config ...
0
votes
0answers
227 views

Freeradius authentication: LDAP group and SSID matching

I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
0
votes
1answer
840 views

Openldap - ldap user can't add entry: Insufficient access (no write access to parent)

I'ld like to make an addressbook in LDAP (for mailing clients, in first step for my RoundCube). Server is Debian 7.9, slapd 2.4.31 (OpenLDAP). After the successfully installation, I've created a ...
0
votes
0answers
7 views

Winbind increase idmap range

i have a computing cluster running and use likewise for connecting all machines to the AD. I want to add new machines using ldapsam. My issue is, that it seems to only offer idmap ranges from "idmap ...
0
votes
1answer
52 views

FreeIPA - remove user password

I have created a user in FreeIPA. He has been assigned a password and SSH key. I want him to leave only SSH key. Is there a way, how to remove password??
1
vote
0answers
36 views

What would cause an Active Directory connection attempt to a workstation?

I'm trying to troubleshoot a freezing issue with our git server. We're running Atlassian Stash on a dedicated Windows Server 2012 R2 Standard virtual machine. The server will sometimes (a few times ...
1
vote
1answer
88 views

Limiting SSH users in LDAP to only one command on an SSH bastion

I have a private network of Centos 7 servers. Each of the servers can only be reached via an SSH bastion. Furthermore, all of these servers use SSSD to authenticate SSH users' keys against an LDAP ...
1
vote
1answer
69 views

Setting shell for SSH directory users on a per-group basis in SSSD

I have a network of Centos 7 machines hosting sshd, each of which is configured to lookup a user's public keys in an LDAP directory for ssh authentication. Furthermore, all ssh users that have access ...
0
votes
0answers
106 views

CentOS7 ldap client not authenticating with ldap server

I am using ApacheDS which was a breeze to setup thanks to the apacheds mailing list. I am able to retrieve ldapsearch results, however, I am not able to get anything by doing a:"getent passwd ". [...
0
votes
0answers
82 views

PAM - Ignore local user, if LDAP-connection works

I have configured some SLED10SP1 (not allowed to update) machines to use LDAP for user authentication. Because SLED10 doesn't have official packages for pam_ccreds or sssd, I have to find a way to ...
0
votes
0answers
279 views

How to Setup IIS 7 and LDAP Authentication

Hi IIS and LDAP Experts! I will need to configure IIS 7 so that when a user go to my intranet website it will popup a login box asking for the user to enter his/her intranet ID and password which is ...
0
votes
1answer
117 views

How can I use an objectCategory attribute on slapd?

I am a bloody LDAP newbie. I have managed to set up slapd (which is part of OpenLDAP) with LAM as a frontend and have successfully configured several services to connect to it for user/group ...
0
votes
1answer
21 views

krb5 / ldap: realm name match with directory namingContext

In order to store krb5 principal entries on LDAP, is the LDAP naming context (root basename) required to match the realm name? principals of the realm HQ.EXAMPLE.ORG can be stored in the dc=...
0
votes
0answers
54 views

why a user account with /bin/false shell in directory server is asking for membership in groups?

Firstly, we use ldap for user authentication. I have accidentally deleted a person account(his loginShell is /bin/false)from our directory server(sun DS7) running on red hat enterprise linux, although ...
0
votes
1answer
194 views

libnss-mysql gone in Jessie?

I was happily using libpam-ldap and libnss-mysql (authenticating clients directly against LDAP, with NSS data such as UID/GID/home dir kept in a mysql database). Now I tried to install Jessie on ...
0
votes
1answer
31 views

Mutiple OUs in Win2k8 pGina configuration

I have pGina installed to a Windows Server 2008 box that is using a RHDS LDAP for authentication. So far I have it working so that if we use only one organizational unit and do not care about ...
0
votes
1answer
186 views

Authenticate SMB connections on OpenBSD using Active Directory

I have an OpenBSD box that is being used primarily as an SFTP server. Some users running windows need the ability to map a share from this server using SMB. Rather than setting up individual accounts ...
1
vote
1answer
20 views

Will adding a new objectClass in ldap get replicated?

I have a ldap setup with one master and two replicas created using this tutorial https://help.ubuntu.com/lts/serverguide/openldap-server.html#openldap-server-replication . If I add a new/custom ...
0
votes
1answer
101 views

Create a new objectClass in order to add a custom attribute to an existing objectClass

Long titles ask for short answers :) I have a ldap server with the default schemas. Under some organizational unit I have entries that have the structural objectClass person and another two clasess ...
1
vote
1answer
68 views

nscd works when strace is attaching to the process

I have a server where I am running nslcd to query an AD server, and use it for authorization, and this is working as expected. Now, I introduced nscd to reduce the load on the AD servers. The results ...
0
votes
0answers
65 views

pam_access nisnetgroup with nested posixgroup

We have pam_access enabled and correctly allowed/denying users based on the rules in place. One such rule looks up LDAP backed NIS groups + : @hostname-granted : ALL Putting tuples in ldap work for ...
0
votes
2answers
680 views

Importing database in LDAP creates error

I have exported my database using the following function slapcat > ldif While I am importing database in other LDAP server it creates error. I am using the following function slapadd -l ldif. ...
2
votes
0answers
66 views

Slow response time when using ADUC utility to search a trusted domain

Current Setup: I have child 2 domains, one in America (amer.domain.com) and one in Asia (asia.domain.com) in the same forest. Both domains are connected via MPLS links. In each physical site, there ...
0
votes
1answer
118 views

How to list uid of all the users of LDAP?

I get list of all the users of LDAP using the following command ldapsearch -x -LLL uid=* > result. The result of the following command results in following format dn: uid=shahrukh,ou=People,dc=...
5
votes
5answers
211 views

Filter LDAP user through PAM so it appears to not exist at all

In our corporate environment long ago some wiz decided to put the user "mysql" into LDAP. The account is disabled: $ sudo su - mysql This account is currently not available. ...but it's id still ...
-2
votes
1answer
194 views

Unable to create Home Directory for LDAP Login

I have linked my server with LDAP for ssh login. I get the Following error while logging in using ssh. Could not chdir to home directory /home/ldap/sharukhk: No such file or directory shahrukh@...
3
votes
0answers
245 views

Active directory filter to get all users on several AD locations without using groups

I'm required to use AD for authorization to some online tools to ease software development across three countries in a big international company. The tools AD/LDAP section have one line to specify a ...
1
vote
1answer
271 views

Java application authentication using Active Directory

I am working on a third party Java application for which I need to authenticate its users using Active Directory. This application is hosted on RHEL 6.5, and uses LDAP to authenticate with Windows ...
0
votes
1answer
57 views

slapd configuration for back-sql: how to traslate examples from slapd.conf to slapd.d

I'm trying to configure slapd with back-sql (specifically postgresql backend). All documents I found (Postgresq LDAP Howto seems to be more complete) are related to old configuration that use slapd....
0
votes
5answers
2k views

Sync non-AD LDAP instance with Office365 / Azure AD

We have a non-AD LDAP environment that we wish to sync our with our o365 Azure AD directory. Is this currently possible with DirSync AAD Sync or similar?
0
votes
1answer
161 views

Migrate from Windows Server 2008 Active Directory to Samba4

I'd like to migrate from Windows Server 2008 Active Directory to Samba4 AD as our primary domain server. An hour of Googling has not landed me any clear recipes for doing a migration and it is ...
0
votes
1answer
97 views

How can I limit a ldap query to just a few OUs ? LDAP bind to a domain user account

For LDAP queries I created a special account (domain user) located in : OU=work, CN=do, CN=apropos, CN=tev How can I restrict the read permission of this account to just: OU=trouble, OU=now, CN=do, CN=...
1
vote
2answers
926 views

Configure Gitlab to use FreeIPA as LDAP server

I'm running in ran into a bit of a trouble and I don't seem to be able to fix it. Please follow the scenario bellow: I have two servers: ONE (10.0.3.10): Ubuntu based, having Gitlab (as deb package)...
1
vote
0answers
90 views

How can I make Kerberos flush the credential cache when a user changes their password?

We've got a fun new issue after upgrading to OS X 10.10 client and server with Open Directory (from 10.8). When a user changes their password (using System Preferences or at the Login screen) it ...
0
votes
0answers
34 views

Yast authentication server configuration: Global settings empty

I try to enable TLS/SSL for my LDAP-Server on a SLES12. So I enabled LDAP over SSL (ldaps) in Yast > Authentication Server Configuration > Startup Configuration. Fine so far. But when it comes ...