Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

6
votes
1answer
344 views

Dynamically Authenticate Apache with LDAP Based on Request String?

It is possible to use a portion of the request URI as an input into mod_authnz_ldap's Require ldap-group directive? I'm trying to dynamically check access to a bunch of different project directories, ...
6
votes
1answer
11k views

How to manage groups and users in Jenkins

I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right. I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the ...
5
votes
1answer
436 views

SSSD process won't die

Thanks for taking the time to check out my problem. I'm currently working on an issue that has only appeared once before. Back on Jan 3rd when this first appeared we were able to reboot the server ...
4
votes
1answer
5k views

Couldn't drop privileges: User is missing UID (see mail_uid setting)

I'm hoping I can use some help. I'm configuring dovecot_ldap, but I can't seem to be able to get dovecot to authenticate the ldap user. Below is my config and log info: hosts = 192.168.128.45:3268 ...
4
votes
1answer
806 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
0
votes
0answers
213 views

Unable to load Cert into OpenLDAP userCertificate attribute

I having troubles to add particular cert into userCertificate attribute (DER encoded certificate) in standard scheme of openldap-servers-2.4.39-3.el7.x86_64 running on Centos7 Slapd uses: include ...
0
votes
0answers
373 views

getent doesn't show netgroup from LDAP server

I followed this tutorial to migrate NIS to a new FreeBSD LDAP Server. However after I do all steps, in my test client, getent doesn't show netgroup normally from LDAP Server: $ getent netgroup ...
0
votes
0answers
58 views

Retrieving the AD machine account password on an Ubuntu machine

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be ...
0
votes
0answers
283 views

LDAP Query Of All Users In Various Groups In A Specific ActiveDirectory OU

I need to configure Atlassian Crowd to query all the users in my AD server that are in various groups in a top-level OU. The DN for the OU is "OU=Atlassian,DC=NNNN,DC=com". The various groups would ...
0
votes
0answers
73 views

Kolab removed FreeIPA admin write privileges

I was able to configure kolab so that it could import users from an external FreeIPA server, but after that I found that the admin user in FreeIPA doesn't have write permission anymore. I tried to ...
0
votes
0answers
316 views

How to let a user remove the pwdAccountLockedTime attribute without being an admin in ApacheDS?

I am probably going about this all wrong but there is no "Look stupid, do this..." level documentation out there that I have found. I have Apache DS v2.0.0 I have users I want some users (who I add ...
0
votes
0answers
79 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
0
votes
0answers
87 views

LDAP, nslcd and intermittent “Invalid user”

EDITED for simplification and new information. Some of my Ubuntu boxen, after an upgrade (12.04 -> 15.04), decided they don't want to accept new users. Sometimes. I turned off nscd so it wouldn't ...
0
votes
0answers
146 views

centos7 pam_authz_search for *.group.company.com

Upgrading from Centos6 where we were using ldap.conf entry "pam_check_host_attr=yes" previously, with wildcard 'host' attribute in ldap where the host attribute looked like 'host=*.group.company.com' ...
0
votes
0answers
69 views

assigning permissions to nested groups in FreeIPA

I have several user groups in FreeIPA (group1, group2, ..., group6) which are members of each other. (group1 is the master group) group1 -> group2 -> group3 -> group4 -> group5 -> ...
0
votes
0answers
272 views

OS X management - binding to OpenLDAP server

As my small company starts to realise the need to manage things more efficiently, I've been working on centralising management of our OS X workstations. Our overall environment consists of Linux and ...
0
votes
0answers
140 views

LDAP search query (using or) not returning values

I am using the following query in LDAP: ldapsearch -D "uid=test,cn=Users,cn=accounts,dc=earthlinktele,dc=com" -w dsaasddsa -b "cn=accounts,dc=earthlinktele,dc=com" ...
0
votes
0answers
33 views

cisco ucs user login using ldap group authorization

I'm trying to configure a cisco ucs server login with ldap using group authorization. I can login to the cisco server using ldap username and password when I add the user to "admins" group, but when I ...
0
votes
0answers
111 views

Mac OS X Server authenticate Samba agains external LDAP

Here's our current situation; We have 2 networks that are connected to each other with a router. The first network in an Microsoft Active Directory based network. The second network is an Apple Mac OS ...
0
votes
0answers
53 views

Secure LDAP replication over the Internet

I have a remote site in which I'll need to authenticate my users. I have my users in a LDAP db. Thus my idea is to replicate the OpenLDAP server to the remote site to perform authentication locally ...
0
votes
0answers
150 views

Checking ShadowExpire with apache's mod_authnz_ldap

I'm currently using mod_authnz_ldap for basic authentication. This works fine, but I'd like the ability to lock accounts without changing the user's password. For Linux, adding shadowExpire attribute ...
0
votes
0answers
1k views

Call to undefined function ldap_connect() in ubuntu

I'm attempting to set up a test ldap server on an ubuntu 12 VM. I've gotten this error: Fatal error: Call to undefined function ldap_connect() in ubuntu I've installed the gettext extension in ...
0
votes
0answers
153 views

Password History isn't working in 389ds LDAP

I'm testing few of the password policies that are available in 389ds which is installed in CentOS 6.5. In that except Password History, all the attributes are working according to the configuration ...
0
votes
0answers
366 views

ldapsearch - Get all members of a CN (nisNetgroupTriple)

I'm a bit new to using LDAP, especially non AD LDAP. We use RedHat Directory Server and was trying to do an LDAP query (filter specifically) that would retrieve all the users (and their attributes) ...
0
votes
0answers
761 views

OpenLDAP client certificate giving “Unable to find the certificate or key necessary for authentication”

Initial setup of system I have an OpenLDAP server running on SLC6.5 and a client running Fedora 20. The server and client are both running OpenLDAP 2.4.39 which is built with Mozilla NSS as its SSL ...
0
votes
0answers
175 views

Slow sudo response

We have LDAP setup to provide information regarding sudo. The whole system works, but it takes a long time (~10 seconds) for any sudo command to return. For instance if I run strace -f -r -o ...
0
votes
0answers
899 views

LDAP with TLS: connect error(-11)

I configured OpenLDAP and today I've configured the TLS for more security following these guide lines: Configure OpenLDAP with TLS=required Modifying the cn=config.ldif with config file: dn: ...
0
votes
0answers
50 views

Connect OpenLDAP to Samba in read mode?

We have Samba 3 based domain controller. The password backend for the domain is pdb/*nix users, this means that we do not have LDAP service running with Samba (I may be wrong on this one, but I do not ...
0
votes
0answers
697 views

AD LDS - LDAP - How to set group's rights on container

I installed AD LDS on a W2012R2. Everything is working fine. Now, I want to create new Roles, to grant to groups permissions to create/modify/delete users in a certain container. (I used this article) ...
0
votes
0answers
43 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
0
votes
0answers
1k views

ldapsearch throws me a login fail (invalid credentials (49))

I'm starting with LDAP and trying to configure all in this tutorial step by step: http://wiki.openiam.com/pages/viewpage.action?pageId=7635198 But when I'm in 10th step: ldapsearch -h localhost -D ...
0
votes
0answers
54 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
0answers
459 views

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use ...
0
votes
0answers
2k views

openLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04

I have installed an ldap server in Ubuntu 12.04 using the tutorial https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-server-installation. First time everything went fine but had ...
0
votes
0answers
91 views

Early tear down of communication

I have an application which performs an LDAP search which works in one domain but not in the other, when analyzing the packets sent between the application server and the domain controller being ...
0
votes
0answers
313 views

Freenas & LDAP Multiple User Groups Not Taking Affect

we are using, Freenas 9.2.1.7 which communicates with LDAP to control file permission. We have Windows users in multiple groups. Some belong to Finance as their primary group and Admin as another ...
0
votes
0answers
228 views

Way to authenticate against Active Directory but without direct access to it?

So I'm in an interesting situation. I have an application that only supports authentication via LDAP on my network and client with active directory on their network. We have a secure VPN tunnel ...
0
votes
0answers
1k views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
0answers
381 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
0
votes
0answers
163 views

Debian nfs-client shows nobody:nogroup

i have a running ldap-server, which works well with my webserver. Now i tried to get the nfs-server running with my a MySQL server. I (think) i did the same things like on my webserver configuration. ...
0
votes
0answers
1k views

Dovecot won't work with quota value from LDAP that include the “S” appended for size?

I have a courier-imap IMAP system backed by LDAP holding the user data. I would like to convert IMAP to dovecot, and I am able to successfully configure basic login; that is working correctly. But I ...
0
votes
0answers
321 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
0answers
81 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
0
votes
0answers
9k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
0
votes
0answers
46 views

LDAP Replication

I'm trying to use LDAP Sync Replication. I must grant rights to my account replicador. This is my ldif: dn: olcDatabase={1}hdb,cn=config replace: olcAccess olcAccess: {0}to attrs = ...
0
votes
0answers
600 views

redirect LDAP with TLS with SSH

I need to query an LDAP server with TLS enabled. The LDAP server is behind a firewall. It only accepts queries with TLS enabled (-Z option). I redirected the LDAP port like this: oz123@devhost ~ $ ...
0
votes
0answers
210 views

LDAP_route not working after upgrade from Debian Lenny to Wheezy

 I have Debian 5 box (Lenny) with configured sendmail and LDAP_routing feature. This box is placed between Internet and my final mail server (MS Exchange). LDAP_route feture was used to validate ...
0
votes
0answers
1k views

REMOTE_USER not getting set?

I am trying to setup LDAP Authentication in Joomla using a plugin called JMapMyLDAP (in fact 4 plugins each doing a different job). I need to pull a part of a string out of the server variable ...
0
votes
0answers
534 views

ejabberd LDAP auth and vcard access works, but search does not - why?

I've set up an ejabberd installation and configured the LDAP authentication and vcard data extraction against an ActiveDirectory global catalog server as described in the documentation. This part ...
0
votes
0answers
78 views

MMC Cert Manager Plug-in is making LDAP connection to external site, why?

I'm trying to figure out what is causing 5 of my servers to attempt to connect to an external LDAP server. I inherited these servers when another employee left the company. As far as I know these ...