Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

2
votes
1answer
221 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
2
votes
1answer
306 views

Apache2: nested require statements within Location

I'd like to set up different LDAP authorization rules for different levels of an URL. This is the config currently used <Location /> AuthType Basic AuthName "Foo" ...
2
votes
1answer
103 views

Securing access to virtual directories with valid users determined by part of the URL

I'm not a very experienced Apache sysadmin (fell in to the role as I was the only person who knew anything at all about it!) and I'm really stuck with this problem. Thanks to an over-zealous salesman ...
2
votes
1answer
142 views

IE, FireFox LDAP issues

We have an intranet site, with no known updates pushed to the server over the weekend. This morning, when attempting to validate with LDAP credentials via single sign on in IE, we receive Access ...
2
votes
1answer
444 views

Make Postfix local(8) tempfail on LDAP outage

I have a Unix system where user accounts only exist in LDAP. I'm using libnss-ldapd with nscd to do this and it works quite well. Postfix delivers mail as expected under normal circumstances. ...
1
vote
1answer
58 views

Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox

I want to connect liferay to zimbra in Virtual Box and I need to fill this form : ![Capture of liferay try to connect to ldap in VB] http://i.stack.imgur.com/cUOuV.png I got the url and password ...
1
vote
1answer
75 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
1
vote
1answer
67 views

Dovecot + OpenLDAP

I am trying to get dovecot 2.0.19 authenticate users via LDAP (OpenLDAP 2.4.28) and using Wireshark to debug the process. It looks like the basic configuration of dovecot is fine, but it doesn't pull ...
1
vote
1answer
89 views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
1
vote
1answer
28 views

Net::FTP Perl module hangs

So, I'm running Perl 5.8.8 on a RHEL5.2 system. I recently moved the LDAP source for authentication, and now I'm having issues with Net::FTP. Authentication works with the new LDAP source perfectly. ...
1
vote
1answer
147 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
1
vote
1answer
948 views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
1
vote
1answer
264 views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
1
vote
1answer
86 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
1
vote
1answer
274 views

Automounting home directories using LDAP in ArchLinux

I have managed to set up an OpenLDAP server that runs ArchLinux. I can now log in from the client (also ArchLinux) using the LDAP users. Now i want to mount the home directories over the network... I ...
1
vote
1answer
253 views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
1
vote
1answer
62 views

ldapsearch returning “success” but no data for groups

I'm not an LDAP expert. I need to run an ldapsearch to determine membership in a group... I have read up on this, and was successful getting a simple ldapsearch to run, which displayed user info... so ...
1
vote
1answer
171 views

SSL Connect timing out during handshake (client exchange re-transmission)

We have a Java LDAP client making SSL connection to AD. Some times the connect hangs with client and server re-transmitting Client Key Exchange and ACK packets continuously as shown below and ...
1
vote
1answer
227 views

LDAP and DAV with AuthnProviderAlias not working

I have a working apache 2.4 config for ldap with svn <IfModule mod_ssl.c> <VirtualHost _default_:443> ... <Location /ldapsvn> DAV svn SVNParentPath ...
1
vote
1answer
144 views

SVN Server LDAP Authentication Error: User is not unique

I'm getting the following error when Apache (running on Solaris) tries to authenticate against LDAP for a specic user for SVN server: auth_ldap authenticate: user abc authentication failed; URI ...
1
vote
1answer
177 views

Refresh ldap client configuration Centos

Recently we change the ip address (and add some groups) of our LDAP server (running in Suse Enterprise) so should change also the ldap authenthication configurations for all the servers that we have. ...
1
vote
1answer
55 views

Unable to login applications using LDAP alias

We have several applications and we are able to integrate LDAP successfully. In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
1
vote
1answer
124 views

Apache 2.2 Ldap Authantication error 500 - AuthLDAPURL

I have an Apache server on RHEL 6 that uses our active directory for authentication, We added a new "LocationMatch" AuthLDAPURL ...
1
vote
1answer
358 views

Restricting LDAP users from authenticating without a valid shell

What I'm trying to accomplish is if I changed the user's attributes in LDAP to have no shell; for example: /etc/noshell, I do not want the user to ssh successfully. I have changed the attribute of one ...
1
vote
1answer
49 views

Root being controlled by ARD

I run an educational lab of 20 iMacs, all running Mac OS 10.7.5(11G63) with ARD version 3.6.2. My server and all of the iMacs run Lion. I seem to have crossed something and now my root user is being ...
1
vote
1answer
557 views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
1
vote
1answer
850 views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
1answer
1k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
1
vote
1answer
192 views

Get logon information through ldap from AD server

I want to know users logged into the domain and from which IP. I know it is possible to see by monitoring AD eventlogs. However, I want to do it without any software on AD server itself. Is it ...
1
vote
1answer
191 views

LDAP does not timeout when server is down

I am currently trying to add LDAP support to supplement a file auth system. Unfortunately, I can't just phase out the file system in it's entirety because of when the LDAP server goes down. The ...
1
vote
1answer
410 views

Samba+LDAP: Minimal permissions for sambaLMPassword/sambaNTPassword?

What are the minimum permissions for the attributes sambaLMPassword/sambaNTPassword for the the LDAP administrator account so that Samba is just enabled to use it for authentication for ldapsam ...
1
vote
1answer
162 views

How can I add another naming context to my ldap server using the olc method?

I am trying to add another naming context to my ldap server using the olc, but so far I am new to this and haven't found a example explaining this. I guess I could use a tool like apacheDS but I want ...
1
vote
1answer
171 views

Courier IMAP stucks after authentication in Debian

I just updated my Debian and Courier imap is not logging in anymore. Pop3 service works fine. In the logs I can see that authdaemon authenticates, but imapd gets stuck and does not return OK. Logs: ...
1
vote
1answer
625 views

Connecting a linux client into active directory

I have a linux server (opensuse 12.1) running OTRS 3.0.10. And a primary domain controller running Windows Server 2008R2. I've followed the howto page here and here. Obviously the Net::LDAP perl ...
1
vote
1answer
521 views

OpenLDAP on CentOS 6.2 (@ localhost)

I'm trying to configure openldap on CentOS 6.2, I'm just testing openldap on my server at home, so I don't have any DNS server and stuff like that. I already installed openldap using the following ...
1
vote
1answer
305 views

Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?

[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ] Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
1
vote
1answer
165 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
1
vote
1answer
407 views

error in auth.log but can login; LDAP/PAM

I have a server running OpenLDAP. When I start a ssh-session I can log in without problems, but an error appears in the logs. This only happens when I log in with a LDAP account (so not with a system ...
1
vote
1answer
464 views

ubuntu mount nfs only if user is in group

I have basic-to-medium advanced network setup at my work. We run an ubuntu 10.04 fileserver serving a few different directories (including /home) over NFS and all client machines (various ubuntu ...
1
vote
1answer
360 views

search and replace ldap attribute

I have a reasonably large set of data in an LDAP server. Some of the attributes appear in many places, and I would like to replace them. The data is not enormous, but it is enough to rule out editing ...
1
vote
1answer
197 views

Postgresql with ldaps:/// url on port 636

Is it possible to connect postgres' LDAP authentication to the SSL (ldaps://) port 636 of an LDAP server (eg, openldap)? It appears that it can use StartTLS on the regular 389 port, but is it ...
1
vote
1answer
473 views

getent returns group with no users

I have been strugling to get the expected result from getent. Ive setup a Solaris 9 server to authenticate agains eDirectory Ldap Server.Im able to Authenticate fine. only thing is when i run the id ...
1
vote
1answer
44 views

LDAP authenticating partially. Password being replaced

After a week of struggling to find out why some of our machines are Authenticating off of our LDAP servers and some are not I noticed that after PAM binds to see if the uid exists it then sends the ...
1
vote
1answer
80 views

SVN - http checkout issue

I have corrected my httpd config file after that I could able succeed the LDAP authentication Now I am trying to checkout the files using the following code SvnClient client = new SvnClient(); ...
1
vote
1answer
523 views

LDAP Authentication woes

I have a local OpenLDAP server with a couple of users. I'm using it for development purposes, here's the ldif: #Top level - the organization dn: dc=site, dc=com dc: site description: My Organization ...
1
vote
1answer
602 views

CA Siteminder Installation - “super user could not be saved in the policy store”

Roadblock during CA SiteMinder Policy Server installation. I've moved past various other LDAP credential related errors, but haven't been able to find any information on this one, whatsoever. What ...
0
votes
1answer
16 views

Cannot see objectClass from custom schema

I added new schema to my ldap server but when I trey to create an entry with custom objectClass an custom attributes, it doesn't see my custom stuff. It's just experimental so OID's are not important. ...
0
votes
1answer
21 views

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group ...
0
votes
1answer
17 views

Use ldapsearch to bind using short username?

I am trying for more than 2 hours to find a way to use ldapsearch to connect to Microsoft Active Directory and I am not able to perform a successful bind. I do not want to use the CN of my account ...
0
votes
1answer
61 views

restrict ssh access to host using sssd and LDAP

I need to restrict ssh access to hosts based on the user's LDAP group membership. I want to do this using sssd's ldap_access_filter feature. Here's my sssd.conf file: [sssd] config_file_version = 2 ...