Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

2
votes
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
2
votes
1answer
2k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
2
votes
1answer
624 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
2
votes
1answer
556 views

Unable to connect QNAP NAS ldap to Domino server

We've just bought a QNAP 419 NAS to the office and for simplicity I'd like to authenticate using LDAP from our Domino server. qnap ldap auth demands the following settings: Base DN Root DN ...
2
votes
1answer
170 views

Overriding Debian default groups from LDAP

This is a thing that has always bothered me: how am I best to handle Debian standard groups for LDAP users? Debian has a number of groups defined by default, e.g. plugdev, audio, cdrom and so on. ...
2
votes
1answer
701 views

Best practices for LDAP and DMZ

We are in the process of setting up a DMZ and I have stumbled into the question of how to handle machines that need to have ports exposed to the internet, but at the same time be able to make LDAP ...
2
votes
1answer
1k views

Make Postfix search LDAP group members by UID instead of DN?

I'm creating an e-mail server with postfix (v2.7.1 on Debian 6.0) where users and groups are stored in an LDAP server. Users accounts works fine but I want to create e-mail aliases from group (any ...
2
votes
1answer
368 views

Apache2: nested require statements within Location

I'd like to set up different LDAP authorization rules for different levels of an URL. This is the config currently used <Location /> AuthType Basic AuthName "Foo" ...
2
votes
1answer
105 views

Securing access to virtual directories with valid users determined by part of the URL

I'm not a very experienced Apache sysadmin (fell in to the role as I was the only person who knew anything at all about it!) and I'm really stuck with this problem. Thanks to an over-zealous salesman ...
2
votes
1answer
171 views

IE, FireFox LDAP issues

We have an intranet site, with no known updates pushed to the server over the weekend. This morning, when attempting to validate with LDAP credentials via single sign on in IE, we receive Access ...
1
vote
1answer
76 views

Auth fail on Samba server with LDAP backend‏

I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc. The samba schema is present in the LDAP, and in the users profile. ...
1
vote
1answer
48 views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
1
vote
1answer
29 views

How to change an attribute value for all entries of ldap directory using ldapmodify command?

LDAP: How to modify an attribute value for all entries of directory using ldapmodify command? Looking for some syntax like below in modification input file for ldapmodify command dn: ...
1
vote
1answer
121 views

Configure Jenkins with LDAP : parameter 'Root DN'

I am installing an LDAP server and configuring Jenkins in order to accept LDAP for authentication. In Jenkins parameters, I have a weird behavior with the parameter Root DN. Documentation says : ...
1
vote
1answer
88 views

LDAP authentication using RADIUS server

I have a RADIUS server with a custom authentication method. I have a Mysql-Database with passwords of a Django CMS which are hashed in PBKDF2_SHA256, so I had to write a custom authentication script. ...
1
vote
1answer
76 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
1
vote
1answer
74 views

Is it possible to have one group or account authenticate locally, bypassing LDAP auth?

We have one RAC cluster of machines where the local UID:GID of a couple users (oracle and grid) do not match the UID:GID of those same users in LDAP. Ultimately we ought to change the UID and GID of ...
1
vote
1answer
145 views

Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox

I want to connect liferay to zimbra in Virtual Box and I need to fill this form : ![Capture of liferay try to connect to ldap in VB] http://i.stack.imgur.com/cUOuV.png I got the url and password ...
1
vote
1answer
142 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
1
vote
1answer
195 views

Dovecot + OpenLDAP

I am trying to get dovecot 2.0.19 authenticate users via LDAP (OpenLDAP 2.4.28) and using Wireshark to debug the process. It looks like the basic configuration of dovecot is fine, but it doesn't pull ...
1
vote
1answer
75 views

Net::FTP Perl module hangs

So, I'm running Perl 5.8.8 on a RHEL5.2 system. I recently moved the LDAP source for authentication, and now I'm having issues with Net::FTP. Authentication works with the new LDAP source perfectly. ...
1
vote
1answer
295 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
1
vote
1answer
1k views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
1
vote
1answer
172 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
1
vote
1answer
724 views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
1
vote
1answer
140 views

ldapsearch returning “success” but no data for groups

I'm not an LDAP expert. I need to run an ldapsearch to determine membership in a group... I have read up on this, and was successful getting a simple ldapsearch to run, which displayed user info... so ...
1
vote
1answer
3k views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
1
vote
1answer
275 views

SSL Connect timing out during handshake (client exchange re-transmission)

We have a Java LDAP client making SSL connection to AD. Some times the connect hangs with client and server re-transmitting Client Key Exchange and ACK packets continuously as shown below and ...
1
vote
1answer
260 views

SVN Server LDAP Authentication Error: User is not unique

I'm getting the following error when Apache (running on Solaris) tries to authenticate against LDAP for a specic user for SVN server: auth_ldap authenticate: user abc authentication failed; URI ...
1
vote
1answer
134 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
1
vote
1answer
95 views

Unable to login applications using LDAP alias

We have several applications and we are able to integrate LDAP successfully. In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
1
vote
1answer
365 views

Apache 2.2 Ldap Authantication error 500 - AuthLDAPURL

I have an Apache server on RHEL 6 that uses our active directory for authentication, We added a new "LocationMatch" AuthLDAPURL ...
1
vote
1answer
746 views

Restricting LDAP users from authenticating without a valid shell

What I'm trying to accomplish is if I changed the user's attributes in LDAP to have no shell; for example: /etc/noshell, I do not want the user to ssh successfully. I have changed the attribute of one ...
1
vote
1answer
55 views

Root being controlled by ARD

I run an educational lab of 20 iMacs, all running Mac OS 10.7.5(11G63) with ARD version 3.6.2. My server and all of the iMacs run Lion. I seem to have crossed something and now my root user is being ...
1
vote
1answer
2k views

ldap-authentication without sambaSamAccount on linux smb/cifs server (e.g. samba)

i'm currently running samba-3.5.6 on a debian/wheezy host to act as the fileserver for our department's w32-clients. authentication is done via OpenLDAP, where each user-dn has an ...
1
vote
1answer
122 views

Multimaster LDAP replication on Ubuntu 11.04

I'm attempting to setup a multimaster pair on Ubuntu 11.04. I currently have a working single server which I've cloned to a 2nd server. The installed version of OpenLDAP is the default from the Ubuntu ...
1
vote
1answer
851 views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
1
vote
1answer
2k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
1
vote
1answer
215 views

Get logon information through ldap from AD server

I want to know users logged into the domain and from which IP. I know it is possible to see by monitoring AD eventlogs. However, I want to do it without any software on AD server itself. Is it ...
1
vote
1answer
226 views

LDAP does not timeout when server is down

I am currently trying to add LDAP support to supplement a file auth system. Unfortunately, I can't just phase out the file system in it's entirety because of when the LDAP server goes down. The ...
1
vote
1answer
221 views

How can I add another naming context to my ldap server using the olc method?

I am trying to add another naming context to my ldap server using the olc, but so far I am new to this and haven't found a example explaining this. I guess I could use a tool like apacheDS but I want ...
1
vote
1answer
209 views

Courier IMAP stucks after authentication in Debian

I just updated my Debian and Courier imap is not logging in anymore. Pop3 service works fine. In the logs I can see that authdaemon authenticates, but imapd gets stuck and does not return OK. Logs: ...
1
vote
1answer
774 views

Connecting a linux client into active directory

I have a linux server (opensuse 12.1) running OTRS 3.0.10. And a primary domain controller running Windows Server 2008R2. I've followed the howto page here and here. Obviously the Net::LDAP perl ...
1
vote
1answer
818 views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
1
vote
1answer
393 views

Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?

[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ] Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
1
vote
1answer
187 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
1
vote
1answer
740 views

error in auth.log but can login; LDAP/PAM

I have a server running OpenLDAP. When I start a ssh-session I can log in without problems, but an error appears in the logs. This only happens when I log in with a LDAP account (so not with a system ...
1
vote
1answer
481 views

ubuntu mount nfs only if user is in group

I have basic-to-medium advanced network setup at my work. We run an ubuntu 10.04 fileserver serving a few different directories (including /home) over NFS and all client machines (various ubuntu ...
1
vote
1answer
260 views

Postgresql with ldaps:/// url on port 636

Is it possible to connect postgres' LDAP authentication to the SSL (ldaps://) port 636 of an LDAP server (eg, openldap)? It appears that it can use StartTLS on the regular 389 port, but is it ...
1
vote
1answer
503 views

getent returns group with no users

I have been strugling to get the expected result from getent. Ive setup a Solaris 9 server to authenticate agains eDirectory Ldap Server.Im able to Authenticate fine. only thing is when i run the id ...