Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

2
votes
1answer
410 views

Unable to connect QNAP NAS ldap to Domino server

We've just bought a QNAP 419 NAS to the office and for simplicity I'd like to authenticate using LDAP from our Domino server. qnap ldap auth demands the following settings: Base DN Root DN ...
2
votes
1answer
3k views

Couldn't drop privileges: User is missing UID (see mail_uid setting)

I'm hoping I can use some help. I'm configuring dovecot_ldap, but I can't seem to be able to get dovecot to authenticate the ldap user. Below is my config and log info: hosts = 192.168.128.45:3268 ...
2
votes
1answer
128 views

Overriding Debian default groups from LDAP

This is a thing that has always bothered me: how am I best to handle Debian standard groups for LDAP users? Debian has a number of groups defined by default, e.g. plugdev, audio, cdrom and so on. ...
2
votes
1answer
223 views

Configure DB2 LDAP authentication

I want to configure LDAP auth in DB2. From IBM docs I learned that first I need to configure LDAP authentication in operating system. But in documentation described old way of configuring LDAP for ...
2
votes
1answer
511 views

Best practices for LDAP and DMZ

We are in the process of setting up a DMZ and I have stumbled into the question of how to handle machines that need to have ports exposed to the internet, but at the same time be able to make LDAP ...
2
votes
1answer
1k views

Make Postfix search LDAP group members by UID instead of DN?

I'm creating an e-mail server with postfix (v2.7.1 on Debian 6.0) where users and groups are stored in an LDAP server. Users accounts works fine but I want to create e-mail aliases from group (any ...
2
votes
1answer
226 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
2
votes
1answer
314 views

Apache2: nested require statements within Location

I'd like to set up different LDAP authorization rules for different levels of an URL. This is the config currently used <Location /> AuthType Basic AuthName "Foo" ...
2
votes
1answer
104 views

Securing access to virtual directories with valid users determined by part of the URL

I'm not a very experienced Apache sysadmin (fell in to the role as I was the only person who knew anything at all about it!) and I'm really stuck with this problem. Thanks to an over-zealous salesman ...
2
votes
1answer
146 views

IE, FireFox LDAP issues

We have an intranet site, with no known updates pushed to the server over the weekend. This morning, when attempting to validate with LDAP credentials via single sign on in IE, we receive Access ...
2
votes
1answer
448 views

Make Postfix local(8) tempfail on LDAP outage

I have a Unix system where user accounts only exist in LDAP. I'm using libnss-ldapd with nscd to do this and it works quite well. Postfix delivers mail as expected under normal circumstances. ...
1
vote
1answer
31 views

Is it possible to have one group or account authenticate locally, bypassing LDAP auth?

We have one RAC cluster of machines where the local UID:GID of a couple users (oracle and grid) do not match the UID:GID of those same users in LDAP. Ultimately we ought to change the UID and GID of ...
1
vote
1answer
39 views

Postfix/dovecot remove LDAP user

I have to remove or blacklist an LDAP/dovecot user. The authentication is setup from active directory what I cannot manage so I thought there should be a way at least to disable this specific user on ...
1
vote
1answer
66 views

Is anyone using access.conf and netgroup authentication with sssd?

I want to be able to authenticate users (via ssh) to specific groups of hosts based on the users' LDAP netgroup membership. The LDAP server is dsee7. The distro is OEL 6.5 with openldap as the client. ...
1
vote
1answer
68 views

Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox

I want to connect liferay to zimbra in Virtual Box and I need to fill this form : ![Capture of liferay try to connect to ldap in VB] http://i.stack.imgur.com/cUOuV.png I got the url and password ...
1
vote
1answer
94 views

LDAP over SSL with an EFI Fiery printer

I've got a printer with a Fiery running 8e Release 2. I can authenticate users against AD using the LDAP configuration, but I can only get it to work if I don't use SSL/TLS, and only if I use SIMPLE ...
1
vote
1answer
87 views

Dovecot + OpenLDAP

I am trying to get dovecot 2.0.19 authenticate users via LDAP (OpenLDAP 2.4.28) and using Wireshark to debug the process. It looks like the basic configuration of dovecot is fine, but it doesn't pull ...
1
vote
1answer
33 views

Net::FTP Perl module hangs

So, I'm running Perl 5.8.8 on a RHEL5.2 system. I recently moved the LDAP source for authentication, and now I'm having issues with Net::FTP. Authentication works with the new LDAP source perfectly. ...
1
vote
1answer
166 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
1
vote
1answer
1k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
1
vote
1answer
326 views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
1
vote
1answer
93 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
1
vote
1answer
411 views

Automounting home directories using LDAP in ArchLinux

I have managed to set up an OpenLDAP server that runs ArchLinux. I can now log in from the client (also ArchLinux) using the LDAP users. Now i want to mount the home directories over the network... I ...
1
vote
1answer
293 views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
1
vote
1answer
74 views

ldapsearch returning “success” but no data for groups

I'm not an LDAP expert. I need to run an ldapsearch to determine membership in a group... I have read up on this, and was successful getting a simple ldapsearch to run, which displayed user info... so ...
1
vote
1answer
185 views

SSL Connect timing out during handshake (client exchange re-transmission)

We have a Java LDAP client making SSL connection to AD. Some times the connect hangs with client and server re-transmitting Client Key Exchange and ACK packets continuously as shown below and ...
1
vote
1answer
155 views

SVN Server LDAP Authentication Error: User is not unique

I'm getting the following error when Apache (running on Solaris) tries to authenticate against LDAP for a specic user for SVN server: auth_ldap authenticate: user abc authentication failed; URI ...
1
vote
1answer
225 views

Refresh ldap client configuration Centos

Recently we change the ip address (and add some groups) of our LDAP server (running in Suse Enterprise) so should change also the ldap authenthication configurations for all the servers that we have. ...
1
vote
1answer
65 views

Unable to login applications using LDAP alias

We have several applications and we are able to integrate LDAP successfully. In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
1
vote
1answer
136 views

Apache 2.2 Ldap Authantication error 500 - AuthLDAPURL

I have an Apache server on RHEL 6 that uses our active directory for authentication, We added a new "LocationMatch" AuthLDAPURL ...
1
vote
1answer
402 views

Restricting LDAP users from authenticating without a valid shell

What I'm trying to accomplish is if I changed the user's attributes in LDAP to have no shell; for example: /etc/noshell, I do not want the user to ssh successfully. I have changed the attribute of one ...
1
vote
1answer
49 views

Root being controlled by ARD

I run an educational lab of 20 iMacs, all running Mac OS 10.7.5(11G63) with ARD version 3.6.2. My server and all of the iMacs run Lion. I seem to have crossed something and now my root user is being ...
1
vote
1answer
592 views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
1
vote
1answer
888 views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
1answer
1k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
1
vote
1answer
193 views

Get logon information through ldap from AD server

I want to know users logged into the domain and from which IP. I know it is possible to see by monitoring AD eventlogs. However, I want to do it without any software on AD server itself. Is it ...
1
vote
1answer
196 views

LDAP does not timeout when server is down

I am currently trying to add LDAP support to supplement a file auth system. Unfortunately, I can't just phase out the file system in it's entirety because of when the LDAP server goes down. The ...
1
vote
1answer
438 views

Samba+LDAP: Minimal permissions for sambaLMPassword/sambaNTPassword?

What are the minimum permissions for the attributes sambaLMPassword/sambaNTPassword for the the LDAP administrator account so that Samba is just enabled to use it for authentication for ldapsam ...
1
vote
1answer
163 views

How can I add another naming context to my ldap server using the olc method?

I am trying to add another naming context to my ldap server using the olc, but so far I am new to this and haven't found a example explaining this. I guess I could use a tool like apacheDS but I want ...
1
vote
1answer
177 views

Courier IMAP stucks after authentication in Debian

I just updated my Debian and Courier imap is not logging in anymore. Pop3 service works fine. In the logs I can see that authdaemon authenticates, but imapd gets stuck and does not return OK. Logs: ...
1
vote
1answer
641 views

Connecting a linux client into active directory

I have a linux server (opensuse 12.1) running OTRS 3.0.10. And a primary domain controller running Windows Server 2008R2. I've followed the howto page here and here. Obviously the Net::LDAP perl ...
1
vote
1answer
541 views

OpenLDAP on CentOS 6.2 (@ localhost)

I'm trying to configure openldap on CentOS 6.2, I'm just testing openldap on my server at home, so I don't have any DNS server and stuff like that. I already installed openldap using the following ...
1
vote
1answer
313 views

Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?

[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ] Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
1
vote
1answer
170 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
1
vote
1answer
445 views

error in auth.log but can login; LDAP/PAM

I have a server running OpenLDAP. When I start a ssh-session I can log in without problems, but an error appears in the logs. This only happens when I log in with a LDAP account (so not with a system ...
1
vote
1answer
466 views

ubuntu mount nfs only if user is in group

I have basic-to-medium advanced network setup at my work. We run an ubuntu 10.04 fileserver serving a few different directories (including /home) over NFS and all client machines (various ubuntu ...
1
vote
1answer
383 views

search and replace ldap attribute

I have a reasonably large set of data in an LDAP server. Some of the attributes appear in many places, and I would like to replace them. The data is not enormous, but it is enough to rule out editing ...
1
vote
1answer
198 views

Postgresql with ldaps:/// url on port 636

Is it possible to connect postgres' LDAP authentication to the SSL (ldaps://) port 636 of an LDAP server (eg, openldap)? It appears that it can use StartTLS on the regular 389 port, but is it ...
1
vote
1answer
481 views

getent returns group with no users

I have been strugling to get the expected result from getent. Ive setup a Solaris 9 server to authenticate agains eDirectory Ldap Server.Im able to Authenticate fine. only thing is when i run the id ...
1
vote
1answer
44 views

LDAP authenticating partially. Password being replaced

After a week of struggling to find out why some of our machines are Authenticating off of our LDAP servers and some are not I noticed that after PAM binds to see if the uid exists it then sends the ...