Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
200 views

Authenticate SMB connections on OpenBSD using Active Directory

I have an OpenBSD box that is being used primarily as an SFTP server. Some users running windows need the ability to map a share from this server using SMB. Rather than setting up individual accounts ...
1
vote
1answer
20 views

Will adding a new objectClass in ldap get replicated?

I have a ldap setup with one master and two replicas created using this tutorial https://help.ubuntu.com/lts/serverguide/openldap-server.html#openldap-server-replication . If I add a new/custom ...
0
votes
1answer
119 views

Create a new objectClass in order to add a custom attribute to an existing objectClass

Long titles ask for short answers :) I have a ldap server with the default schemas. Under some organizational unit I have entries that have the structural objectClass person and another two clasess ...
1
vote
1answer
69 views

nscd works when strace is attaching to the process

I have a server where I am running nslcd to query an AD server, and use it for authorization, and this is working as expected. Now, I introduced nscd to reduce the load on the AD servers. The results ...
0
votes
0answers
68 views

pam_access nisnetgroup with nested posixgroup

We have pam_access enabled and correctly allowed/denying users based on the rules in place. One such rule looks up LDAP backed NIS groups + : @hostname-granted : ALL Putting tuples in ldap work for ...
0
votes
2answers
805 views

Importing database in LDAP creates error

I have exported my database using the following function slapcat > ldif While I am importing database in other LDAP server it creates error. I am using the following function slapadd -l ldif. ...
2
votes
0answers
75 views

Slow response time when using ADUC utility to search a trusted domain

Current Setup: I have child 2 domains, one in America (amer.domain.com) and one in Asia (asia.domain.com) in the same forest. Both domains are connected via MPLS links. In each physical site, there ...
0
votes
1answer
140 views

How to list uid of all the users of LDAP?

I get list of all the users of LDAP using the following command ldapsearch -x -LLL uid=* > result. The result of the following command results in following format dn: uid=shahrukh,ou=People,dc=...
5
votes
5answers
219 views

Filter LDAP user through PAM so it appears to not exist at all

In our corporate environment long ago some wiz decided to put the user "mysql" into LDAP. The account is disabled: $ sudo su - mysql This account is currently not available. ...but it's id still ...
-2
votes
1answer
243 views

Unable to create Home Directory for LDAP Login

I have linked my server with LDAP for ssh login. I get the Following error while logging in using ssh. Could not chdir to home directory /home/ldap/sharukhk: No such file or directory shahrukh@...
3
votes
0answers
253 views

Active directory filter to get all users on several AD locations without using groups

I'm required to use AD for authorization to some online tools to ease software development across three countries in a big international company. The tools AD/LDAP section have one line to specify a ...
1
vote
1answer
286 views

Java application authentication using Active Directory

I am working on a third party Java application for which I need to authenticate its users using Active Directory. This application is hosted on RHEL 6.5, and uses LDAP to authenticate with Windows ...
0
votes
1answer
64 views

slapd configuration for back-sql: how to traslate examples from slapd.conf to slapd.d

I'm trying to configure slapd with back-sql (specifically postgresql backend). All documents I found (Postgresq LDAP Howto seems to be more complete) are related to old configuration that use slapd....
0
votes
5answers
2k views

Sync non-AD LDAP instance with Office365 / Azure AD

We have a non-AD LDAP environment that we wish to sync our with our o365 Azure AD directory. Is this currently possible with DirSync AAD Sync or similar?
0
votes
1answer
170 views

Migrate from Windows Server 2008 Active Directory to Samba4

I'd like to migrate from Windows Server 2008 Active Directory to Samba4 AD as our primary domain server. An hour of Googling has not landed me any clear recipes for doing a migration and it is ...
0
votes
1answer
115 views

How can I limit a ldap query to just a few OUs ? LDAP bind to a domain user account

For LDAP queries I created a special account (domain user) located in : OU=work, CN=do, CN=apropos, CN=tev How can I restrict the read permission of this account to just: OU=trouble, OU=now, CN=do, CN=...
2
votes
2answers
1k views

Configure Gitlab to use FreeIPA as LDAP server

I'm running in ran into a bit of a trouble and I don't seem to be able to fix it. Please follow the scenario bellow: I have two servers: ONE (10.0.3.10): Ubuntu based, having Gitlab (as deb package)...
1
vote
0answers
92 views

How can I make Kerberos flush the credential cache when a user changes their password?

We've got a fun new issue after upgrading to OS X 10.10 client and server with Open Directory (from 10.8). When a user changes their password (using System Preferences or at the Login screen) it ...
0
votes
0answers
34 views

Yast authentication server configuration: Global settings empty

I try to enable TLS/SSL for my LDAP-Server on a SLES12. So I enabled LDAP over SSL (ldaps) in Yast > Authentication Server Configuration > Startup Configuration. Fine so far. But when it comes ...
0
votes
0answers
37 views

LDAP troubleshooting

We have a Windows SBS 2011 which sometimes responds slowly to access requests. I'm troubleshooting performance issues fro a while, and now i want to know if there is any problem with the AD, LDAP ...
0
votes
1answer
72 views

Store OpenLDAP connection on a php session with cookies [closed]

Só I have a ldap server that should be managed via php, I can modify anything in Apache,OpenLDAP or php. But as this site already covered I can't store a LDAP connection in a _SESSION variable on php.....
0
votes
1answer
461 views

Slaptest, bad configuration file

I have been struggling to start LDAP server and I am failing miserably at it, from journalctl -xn I it clearly say bad configuration files!, but there are three configuration files, but what is ...
0
votes
1answer
183 views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ldap_url_parse_ext(ldap://99.99.99.99)...
5
votes
1answer
298 views

svnserve+sasl+ldap : saslauthd not contacted?

I am trying to authenticate subversion users against sasl+ldap. Other questions about this problem seem to be related to earlier versions of subversion, or sasldb authentication. lsb_release -a No ...
0
votes
0answers
145 views

olcRequires: difference between authz and bind (with olcDisallows: bind_anon)?

With OpenLDAP, what is the difference between: olcDisallows: bind_anon oldRequires: bind and: olcRequires: authc It seems to me that both configurations would require the client to authenticate ...
0
votes
1answer
28 views

How to add Organisations to LDAP via LDIF?

I want to initially add a couple of organisations. So I created an organisations.ldif in order to add them via ldapadd -Q -Y EXTERNAL -H ldapi:/// -W -f organisations.ldif My file looks like this ...
0
votes
0answers
14 views

RETCODE OpenLDAP overlay configuration

I am looking for various ways to disable Simple Paged Search results on OpenLDAP. Somehow, my attempts to disable paged searches by disabling it in contiguration using olcSizeLimit or olcLimits failed....
1
vote
0answers
288 views

Open Directory Password Change Issues on OS X Server 10.10

I'm having a problem with 50+ workstations (10.9 and 10.10) when a user changes their OD password (either at the OS X login screen or the System Preferences). The password change updates on the ...
0
votes
0answers
66 views

OpenLDAP & Posix Groups/Account configuration

with following configuration I am not able to add POSIX users/groups to the LDAP server. If some can educate me about significance of dc in this case, is it FQDN that I mentioned when I created ...
1
vote
1answer
55 views

migrate debian 8 user (SHA512 encrypted with $6 tag) to LDAP

I have a problem with migrating local user from debian 8 to LDAP. As you know debian 6 and above use SHA512 as standard user password encryption. in the shadow file it shows the password with "$6" ...
0
votes
2answers
1k views

SSSD & LDAP authentication

I’m currently working on deploying openldap and SSSD for authentication. When I try to id a user that is stored within ldap I get the response no such user. The user has been added to LDAP correctly ...
-1
votes
1answer
43 views

LDAP down - exim down

I need some ideas here: Centos 5 with ldap authentication loses exim functionality once the ldap server becomes unavailable (in the logfile I can see it just hangs once receives "rcpt to:") , any ...
0
votes
0answers
42 views

disable simple paged results control support

Trying to make my client, originally developed for OpenLDAP, also compatible with Oracle DSEE. Oracle DSEE is missing support for simple paged results, which the client code uses. Yet, ODSEE supports ...
0
votes
1answer
302 views

(Zimbra)OpenLDAP SSHA512

So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology. So my boss wanted me to create an OpenLDAP Database, and ...
0
votes
1answer
842 views

Tortoise SVN: Initial connect timeout

I have a problem when connecting Tortoise SVN to my SVN server. The first connect seems to run into a timeout (SVN hangs about 20 seconds) and the second (automatic) try works instantly. I.e. every ...
0
votes
1answer
512 views

Set Up OpenVPN with Ldap support on CentOS7

We are trying to set up OpenVPN with ldap support via openvpn-auth-ldap on CentOS7. The EPEL repository is not listing openvpn-auth-ldap anymore for CentOS7. For CentOS6, there was a working relase. ...
0
votes
1answer
145 views

FreeIPA (LDAP): Refuse auth for users with expired password

I have a FreeIPA used mostly as an LDAP in many local web services. Unfortunatly LDAP authorizes users to login to 3-rd party applications even when user's password is expired (including first random ...
0
votes
1answer
563 views

Setup a openldap proxy to another LDAP server on centos 6

I'm trying to get a local server to authenticate to its own openldap-server and then proxy to corporate LDAP if user is not found locally. Local users work Auth to local LDAP server works Auth to ...
0
votes
1answer
175 views

SASL Auth against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
1
vote
1answer
134 views

Can connect to my OpenLDAP server locally but not externally

I have a problem with my OpenLDAP server. I can't connect to it externally from client, it only works locally. My OpenLDAP server is running on a Raspberry Pi with Rasbian as the OS. When I run this ...
0
votes
0answers
602 views

Setup LDAPS authentification in Zabbix

I try to setup LDAPS authentification on Zabbix 2.4 but it's not working. Here is the infos on my configuration : OS : Debian PHP packages installed : libapache2-mod-php5 php-pear php5 php5-cli ...
2
votes
0answers
301 views

Ldap client on CoreOS

Has anyone setup ldap on CoreOS before? If so, how does one do such a task? I have a cluster of CoreOS machines and I'm trying to hook up this service Foxpass https://www.foxpass.com/ to it for user ...
0
votes
0answers
22 views

Windows AD server allows communication with-out LDAPs

I have a windows server 2008 AD setup with LDAPs signing requirement. I try a simple bind (through port 389) it is getting blocked as expected. But when I try a bind through 636, the ldaps port, It ...
1
vote
1answer
1k views

How can I get LDAP to pass the currently logged-in user's credentials to a local Apache server?

I'm trying to get SSO (single-sign on) working on a local osTicket installation. I found the HTTP passthru plugin on the osTicket website and have installed it in osTicket. I've made sure the plugin ...
0
votes
0answers
151 views

LDAP NET-IQ DRA (Active Directory) Group member of does not work

I am trying to list a couple computers, that do not have a specific group membership. This is what I have at the moment: (&(objectcategory=computer)(|(name=Computer1)(name=Computer2)(name=...
0
votes
0answers
139 views

CAS Authentication Handler for LDAP

I've been messing with CAS and LDAP for some time now and finally know why CAS is unavailable. I'm using CAS with Liferay with an LDAP db on another computer. Everything works fine until I change the ...
0
votes
1answer
64 views

Simple Paged Results control on Sun-Directory-Server/11.1.1.5.1

I am confused. I am trying to run simple pager results against what I believe is Oracle 11g Directory Server. I know that an old version at some point did not support RFC 2696. Now, according to ...
0
votes
2answers
30 views

Does LDAP work within just one directory or diferent directories can comunicate each other using LDAP?

I started to learn about directories just a month ago and this question came to my midn. I know that LDAP is an open protocol that defines services within a directory. But I asked myself if there is ...
3
votes
1answer
50 views

In the context of Active Directory, what does “single schema” mean and why is this an advantage?

in my learning of AD DS Ecosystem I came across with this definition [link]: By using the Windows Server® 2008 Active Directory® Lightweight Directory Services (AD LDS) role, formerly known as ...
1
vote
1answer
522 views

Wrong user mapping in kerberized NFSv4 automounted homedirs

Short problem description This question is about id mapping in NFSv4 going wrong. NFS server: a Synology DS, with DSM 5.2. Client: A regular FC22 machine, which automounts as /home one of the ...