Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
44 views

LDAP dynlist not working with syncrepl replication

I'm using syncrepl replication with one master and many slaves. I'm also using dynlist overlay. Dynlist works on the master, but not on slaves. When I run a query on master, everything works normally,...
0
votes
0answers
122 views

Ubuntu LDAP and NFS directory permissions

I have an issue with NFS and directory permissions using LDAP. Users that are members of a certain group cannot access a directory owned by that group (it works fine without NFS). They can access ...
0
votes
0answers
147 views

How to purge roaming credentials from AD user objects?

Background Due to low-budget constraints we are using roaming credentials instead of smart cards in our environment. Problem Now we have recognized that the relevant AD user attributes became ...
0
votes
0answers
53 views

Ubuntu: Authenticating against ldapjs server

Our developers have decided to go with ldapjs for a SSO solution for most of our applications. I have been tasked with getting our Ubuntu servers to authenticate against this ldapjs server. Although I ...
0
votes
0answers
100 views

Centos LDAP server slapd stops responding until rsyslog is restarted

Have a LDAP sever running centos 6 with a fairly low amount of LDAP AUTH requests. Every couple of days the LDAP server will stop responding completely to any requests. LDAPsearch will freeze and ...
0
votes
0answers
37 views

Disabling anonymous bind on ApacheDS LDAP causes getent group not to work

Am new to ApacheDS - am using apacheds-2.0.0-M17. Followed the instructions to setup an Ubuntu 14.04 LTS machine as a LDAP client from this page: https://help.ubuntu.com/community/...
0
votes
0answers
44 views

Configure ldap.conf host with ipv6

In my ldap.conf is it possible to use HOST to configure an IPv6 address? I know that I can configure an IPv6 address using URI. The linux manual on ldap.conf doesn't state if it only support IPv4 for ...
0
votes
0answers
74 views

Requesting parent OU doesn't seem to work right with Meta-Backend OU as child

I got a huge problem here. I’ve been trying to merge users from a local LDAP (ou=local-users,ou=accounts,dc=domain: which authenticates against a remote active directory (which is not ldap://remote....
0
votes
0answers
235 views

Freeradius authentication: LDAP group and SSID matching

I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
0
votes
0answers
7 views

Winbind increase idmap range

i have a computing cluster running and use likewise for connecting all machines to the AD. I want to add new machines using ldapsam. My issue is, that it seems to only offer idmap ranges from "idmap ...
0
votes
0answers
115 views

CentOS7 ldap client not authenticating with ldap server

I am using ApacheDS which was a breeze to setup thanks to the apacheds mailing list. I am able to retrieve ldapsearch results, however, I am not able to get anything by doing a:"getent passwd ". [...
0
votes
0answers
84 views

PAM - Ignore local user, if LDAP-connection works

I have configured some SLED10SP1 (not allowed to update) machines to use LDAP for user authentication. Because SLED10 doesn't have official packages for pam_ccreds or sssd, I have to find a way to ...
0
votes
0answers
311 views

How to Setup IIS 7 and LDAP Authentication

Hi IIS and LDAP Experts! I will need to configure IIS 7 so that when a user go to my intranet website it will popup a login box asking for the user to enter his/her intranet ID and password which is ...
0
votes
0answers
55 views

why a user account with /bin/false shell in directory server is asking for membership in groups?

Firstly, we use ldap for user authentication. I have accidentally deleted a person account(his loginShell is /bin/false)from our directory server(sun DS7) running on red hat enterprise linux, although ...
0
votes
0answers
67 views

pam_access nisnetgroup with nested posixgroup

We have pam_access enabled and correctly allowed/denying users based on the rules in place. One such rule looks up LDAP backed NIS groups + : @hostname-granted : ALL Putting tuples in ldap work for ...
0
votes
0answers
34 views

Yast authentication server configuration: Global settings empty

I try to enable TLS/SSL for my LDAP-Server on a SLES12. So I enabled LDAP over SSL (ldaps) in Yast > Authentication Server Configuration > Startup Configuration. Fine so far. But when it comes ...
0
votes
0answers
37 views

LDAP troubleshooting

We have a Windows SBS 2011 which sometimes responds slowly to access requests. I'm troubleshooting performance issues fro a while, and now i want to know if there is any problem with the AD, LDAP ...
0
votes
0answers
144 views

olcRequires: difference between authz and bind (with olcDisallows: bind_anon)?

With OpenLDAP, what is the difference between: olcDisallows: bind_anon oldRequires: bind and: olcRequires: authc It seems to me that both configurations would require the client to authenticate ...
0
votes
0answers
14 views

RETCODE OpenLDAP overlay configuration

I am looking for various ways to disable Simple Paged Search results on OpenLDAP. Somehow, my attempts to disable paged searches by disabling it in contiguration using olcSizeLimit or olcLimits failed....
0
votes
0answers
66 views

OpenLDAP & Posix Groups/Account configuration

with following configuration I am not able to add POSIX users/groups to the LDAP server. If some can educate me about significance of dc in this case, is it FQDN that I mentioned when I created ...
0
votes
0answers
42 views

disable simple paged results control support

Trying to make my client, originally developed for OpenLDAP, also compatible with Oracle DSEE. Oracle DSEE is missing support for simple paged results, which the client code uses. Yet, ODSEE supports ...
0
votes
0answers
588 views

Setup LDAPS authentification in Zabbix

I try to setup LDAPS authentification on Zabbix 2.4 but it's not working. Here is the infos on my configuration : OS : Debian PHP packages installed : libapache2-mod-php5 php-pear php5 php5-cli ...
0
votes
0answers
22 views

Windows AD server allows communication with-out LDAPs

I have a windows server 2008 AD setup with LDAPs signing requirement. I try a simple bind (through port 389) it is getting blocked as expected. But when I try a bind through 636, the ldaps port, It ...
0
votes
0answers
151 views

LDAP NET-IQ DRA (Active Directory) Group member of does not work

I am trying to list a couple computers, that do not have a specific group membership. This is what I have at the moment: (&(objectcategory=computer)(|(name=Computer1)(name=Computer2)(name=...
0
votes
0answers
138 views

CAS Authentication Handler for LDAP

I've been messing with CAS and LDAP for some time now and finally know why CAS is unavailable. I'm using CAS with Liferay with an LDAP db on another computer. Everything works fine until I change the ...
0
votes
0answers
259 views

find all memberOf groups, including cross-domain, of a group using LDA

I am trying to figure out how I can query AD for a group and find all the groups it is a member of including groups in another DC. So this is my configuration (simplified for the sake of simplicity): ...
0
votes
0answers
51 views

How to disable some ciphers in nsSSL3ciphers command?

Referring to Sun Directory Server Man Page Reference, can anybody tell whether - or + is really needed for scenario? I need to: enable only TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, and disable ...
0
votes
0answers
243 views

OwnCloud on Synology-NAS should use OpenDirectory-Server (LDAP)

I got a little problem: I want to configure LDAP with OwnCloud. The LDAP-Service is my OS X Open Directory-Server. OwnCloud runs on Synology DS214play. Well, I got the domain bureau.example.com ...
0
votes
0answers
92 views

Cant connect to newly installed LDAP server from ADSIEdit

I'm an LDAP newb learning by the seat of my pants. I installed AD LDS Role (LDAP) on a Windows Server 2012 R2 server. I created a partition with the context name CN=LDAPPartition, DC=subdomain, DC=...
0
votes
0answers
262 views

Unable to load Cert into OpenLDAP userCertificate attribute

I having troubles to add particular cert into userCertificate attribute (DER encoded certificate) in standard scheme of openldap-servers-2.4.39-3.el7.x86_64 running on Centos7 Slapd uses: include ...
0
votes
0answers
440 views

getent doesn't show netgroup from LDAP server

I followed this tutorial to migrate NIS to a new FreeBSD LDAP Server. However after I do all steps, in my test client, getent doesn't show netgroup normally from LDAP Server: $ getent netgroup <...
0
votes
0answers
64 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
0
votes
0answers
325 views

LDAP Query Of All Users In Various Groups In A Specific ActiveDirectory OU

I need to configure Atlassian Crowd to query all the users in my AD server that are in various groups in a top-level OU. The DN for the OU is "OU=Atlassian,DC=NNNN,DC=com". The various groups would ...
0
votes
0answers
372 views

How to let a user remove the pwdAccountLockedTime attribute without being an admin in ApacheDS?

I am probably going about this all wrong but there is no "Look stupid, do this..." level documentation out there that I have found. I have Apache DS v2.0.0 I have users I want some users (who I add ...
0
votes
0answers
90 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
0
votes
0answers
186 views

centos7 pam_authz_search for *.group.company.com

Upgrading from Centos6 where we were using ldap.conf entry "pam_check_host_attr=yes" previously, with wildcard 'host' attribute in ldap where the host attribute looked like 'host=*.group.company.com' ...
0
votes
0answers
161 views

LDAP search query (using or) not returning values

I am using the following query in LDAP: ldapsearch -D "uid=test,cn=Users,cn=accounts,dc=earthlinktele,dc=com" -w dsaasddsa -b "cn=accounts,dc=earthlinktele,dc=com" "(&(|(objectcategory=person)(...
0
votes
0answers
1k views

Call to undefined function ldap_connect() in ubuntu

I'm attempting to set up a test ldap server on an ubuntu 12 VM. I've gotten this error: Fatal error: Call to undefined function ldap_connect() in ubuntu I've installed the gettext extension in ...
0
votes
0answers
426 views

ldapsearch - Get all members of a CN (nisNetgroupTriple)

I'm a bit new to using LDAP, especially non AD LDAP. We use RedHat Directory Server and was trying to do an LDAP query (filter specifically) that would retrieve all the users (and their attributes) ...
0
votes
0answers
843 views

OpenLDAP client certificate giving “Unable to find the certificate or key necessary for authentication”

Initial setup of system I have an OpenLDAP server running on SLC6.5 and a client running Fedora 20. The server and client are both running OpenLDAP 2.4.39 which is built with Mozilla NSS as its SSL ...
0
votes
0answers
191 views

Slow sudo response

We have LDAP setup to provide information regarding sudo. The whole system works, but it takes a long time (~10 seconds) for any sudo command to return. For instance if I run strace -f -r -o ...
0
votes
0answers
1k views

LDAP with TLS: connect error(-11)

I configured OpenLDAP and today I've configured the TLS for more security following these guide lines: Configure OpenLDAP with TLS=required Modifying the cn=config.ldif with config file: dn: cn=...
0
votes
0answers
50 views

Connect OpenLDAP to Samba in read mode?

We have Samba 3 based domain controller. The password backend for the domain is pdb/*nix users, this means that we do not have LDAP service running with Samba (I may be wrong on this one, but I do not ...
0
votes
0answers
45 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
0
votes
0answers
1k views

ldapsearch throws me a login fail (invalid credentials (49))

I'm starting with LDAP and trying to configure all in this tutorial step by step: http://wiki.openiam.com/pages/viewpage.action?pageId=7635198 But when I'm in 10th step: ldapsearch -h localhost -D "...
0
votes
0answers
55 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
0answers
514 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
0
votes
0answers
2k views

openLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04

I have installed an ldap server in Ubuntu 12.04 using the tutorial https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-server-installation. First time everything went fine but had ...
0
votes
0answers
95 views

Early tear down of communication

I have an application which performs an LDAP search which works in one domain but not in the other, when analyzing the packets sent between the application server and the domain controller being ...
0
votes
0answers
323 views

Freenas & LDAP Multiple User Groups Not Taking Affect

we are using, Freenas 9.2.1.7 which communicates with LDAP to control file permission. We have Windows users in multiple groups. Some belong to Finance as their primary group and Admin as another ...