Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

2
votes
0answers
265 views

LDAP Not working for SSH connections on ubuntu 12.04

Connecting from the client to the server: $ ssh -vvv user@10.0.50.170 OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 debug1: Reading configuration data /etc/ssh_config debug1: /etc/ssh_config line 20: ...
3
votes
1answer
252 views

LDAP authentication fails

I try to set up an LDAP directory that will allow me to authenticate Debian users. Once the configuration of the LDAP server and PAM files is done, the authentication fails. I think the client doesn't ...
1
vote
0answers
1k views

LDAP with SSSD: force user to change password - 'ShadowLastChange' not working

I have CentOS6, with LDAP user authentication, using OpenLDAP and SSSD. I'm trying to force user to change the password. According to this ServerFault question I tried to set ShadowLastChange to 0, ...
1
vote
0answers
22 views

The differences between libpam-ldap and libpam-ldapd, included packages and modules? [duplicate]

May I ask what's the differences between libpam-ldap and libpam-ldapd when it comes to included packages and modules? As i understand is nss-pam-ldapd the project of libpam-ldapd, which is an ...
1
vote
1answer
101 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
0
votes
0answers
129 views

Password History isn't working in 389ds LDAP

I'm testing few of the password policies that are available in 389ds which is installed in CentOS 6.5. In that except Password History, all the attributes are working according to the configuration ...
1
vote
0answers
49 views

Remote home-folders with optional but preferred locally-encrypted folder

I have the use case that on default all users are working within remote mounted home directories. However, sometimes they prefer a local home on one or more machines, e.g. because the network is too ...
0
votes
1answer
79 views

Wrong ldap user and group IDs on nfs

we have users authentication driven by ldap and home directories shared on nfs server mounted by autofs. We recently installed Ubuntu 15.04 on three new machines and added them to our infrastructure ...
2
votes
2answers
148 views

How to set default values in openldap? [closed]

How can we set the default value for an attribute in openldap like we do in mysql schema? MYSQL create table test (str varchar(32), ts TIMESTAMP DEFAULT CURRENT_TIMESTAMP);
0
votes
1answer
668 views

Can a base DN for LDAP queries be a group DN?

I am trying to do LDAP integration for user authentication in HP NNMi. (NNMi on RHEL6 to Active Directory on W2K8 R2) I know I can get it to work if I use the OU that my users are in as the base DN ...
1
vote
2answers
201 views

LDAP syncrepl with kerberos authentication

I'm trying to set up a replication server for LDAP using syncrepl. I would like to use Kerberos to authenticate the consumer, because we have it set up, and it seems more secure. The database ...
2
votes
2answers
235 views

ldap is working but not ldaps correctly

I'm a little lost with ldapsearch... I have to configure a cloud with AD authentication. this is working well ldapsearch -h server -p 389 -x -D 'admin.test' -w 'xxx' -b ...
2
votes
2answers
171 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
0
votes
1answer
184 views

OpenLdap Replication

I have installed openldap on two machines and tried to setup multi-way replication.I am able to perform the multi-way replication (Add/Update/delete) when both the machines are up and ldap is running. ...
0
votes
0answers
94 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
0
votes
0answers
14 views

How to authenticate RHEL 6.6 to Windows Server 2012 Active Directory and LDAP? [duplicate]

Need help with setting up LDAP on Windows Server 2012 R2, I have AD setup already, but not sure what all I need to do to get LDAP running. Then I can't find any good resources online to authenticate ...
3
votes
0answers
230 views

How to configure LDAP client without Yast - SLES 11 SP3 [closed]

I'm configuring an LDAP client in a large number of Suse servers. The only way that I know to do this is using Yast, and this way is slow. I can't find another way. I did it on RHEL, Debian, and ...
-1
votes
2answers
93 views

getxattr operation not supported samba audit

I have a strange issue with my samba ldap server, its a centos server with same 3.0, it was working fine from quite some time but suddenly I noticed that my log file is full of messages saying ...
1
vote
0answers
184 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
0
votes
0answers
81 views

ldapsearch through ssh tunnel failing

I have following situation: 2 servers: a_server - this one from which I want to perform ldapsearch b_server - this is where LDAP directory located When I'm on b_server, this command ldapsearch -x ...
1
vote
2answers
625 views

Linux-SSSD: always getting incorrect password when su'ing to domain users, but why?

I've built a new Linux environment at my work place. I've configured sssd and bound it to one of the Active Directory domains of the company. I can tell that the sssd is partially working, let me ...
0
votes
2answers
191 views

Integrate Squid Kerberos auth and Squidguard ldapusersearch into AD

I'm having trouble with Squid Kerberos auth and the Squidguard ldapusersearch that I use to apply ACLs by Active Directory groups membership. The problem is : Squid and Squidguard see my user as : ...
0
votes
1answer
136 views

LDAP auth fails for some users

Something weird is happening, some users are not able to authenticate via our LDAP to access services (SSH connection, Samba, etc.). Their entries are in the LDAP and everything seems to be fine, I ...
-1
votes
1answer
79 views

IT for a small organization: mailing lists, file server, hosting [closed]

I've been asked to help manage my church's information systems. We're small (~3 staff, ~150 parishioners), which puts us below the needs of a lot of the "Church Management" software I've seen. The ...
0
votes
1answer
117 views

active directory simple bind always anonymous (event 1219)

I am getting event 1219: "Active Directory could not initialize simple bind authentication. Therefore, simple bind authentication against this LDAP interface will result in binding as an ...
2
votes
1answer
442 views

Why can't I use inetOrgPerson with groupOfNames?

I am trying to create a user in LDAP that uses object classes inetOrgPerson with groupOfNames (so i could use the attribute 'member') but it won't let me no matter which combination I try. What is the ...
1
vote
1answer
574 views

OpenLDAP & Asterisk - no global superior knowledge

I'm struggling to setup OpenLDAP to allow Asterisk to store information about users. I've tried to follow several howto's, but unfortunately I'm not able to set it up correctly. It seems like most ...
1
vote
1answer
1k views

Backing up Zimbra 8.0.x, data.mdb issues

When trying to create a backup of zimbra open source edition 8.0.1+ I ran into issues with data.mdb 'exploding'. While my /opt/zimbra directory is only about 8GB my backup is around 80GB. both rsync ...
0
votes
1answer
38 views

Does Active Directory uses LDAP natively?

I was asked to use LDAP over SSL (LDAPS) in our domain. Does it require any change in AD itself? Does AD use LDAP natively? Or is it something need to be done in application level that approach AD ...
0
votes
0answers
88 views

LDAP Browser(Softerra) vs LDP.exe

Here is the issue; -> There is a Deny All(FullControll) set on 2 OUs for a service account. -> When i use LDP.exe to query those OUs, it can read their names but can not display any objects ...
-1
votes
1answer
126 views

Ldap Active directory checking (and securely storing it) user provided password [closed]

Hey all I am needing to know if it is possible to check a users typed in password against the AD to make sire it's the correct password? Reason being is that once they log in I need to use their user ...
0
votes
1answer
366 views

ProFTPD with AD LDAP dont retrieve right usergroup

I am struggling with a ProFTPD with AD LDAP auth. I have everything configured and the AUTH works, it retrieves de user from the AD and if it exist, it creates the home folder and let he user in. The ...
1
vote
1answer
35 views

Verify TLS encryped communication when querying LDAP server?

I have a web application (not hosted on windows) that authenticates users by querying an LDAP server (a windows domain controller). The app is configured to use STARTTLS to encrypt communication with ...
0
votes
0answers
86 views

LDAP ACLs with filters

I am trying to write LDAP ACL filters that would suspend authentication for domains that have a custom attribute set to some value. I created a custom object with an extra NAME attribute domainStatus ...
0
votes
1answer
333 views

how to translate an Active Directory group into a NIS netgroup?

The goal is to be able to add + : @DL-MyCompany-MyTeam : ALL to /etc/security/access.conf and have it work as expected. This is my sssd.conf: [domain/default] cache_credentials = True [sssd] ...
0
votes
2answers
67 views

Apply changes to PAM changes

Does the server or a specific service needs to be restarted to let changes to pam files (/etc/pam.d/system-auth) take effect? longer version - I'm working on configuring SSSD to connect with LDAP for ...
1
vote
2answers
51 views

migrate to new root-dn

I'm using LDAP used (mostly) as a backend for user authentication (pam, samba, web,...). Now I'm trying to migrate the LDAP-database to a new root-dn. old root-dn: dc=local new root-dn: ...
0
votes
1answer
440 views

ubuntu 12.04 sssd sudo not working

This is for Ubuntu 12.04.5 LTS I am trying to implement SSSD as a client and everything works all right BUT SUDO I cannot see anything happening in the sssd_sudo.log file at all but the usual file ...
-2
votes
1answer
116 views

Are the UID of users from a domain maintained locally in a machine?

This could be total nonsense but as I am new and am trying to learn. I came across this question. I have seen many of my office linux machines connected to some domain. I am wondering as if a ...
3
votes
2answers
710 views

Linux: sssd cache not being cleaned upon server reboot, what could be the cause and how can it be changed?

I'm using sssd in order to work with LDAP users and groups within our Linux environment. I had to rename the LDAP group of one of my Linux users and I noticed that after I finished editing the group, ...
0
votes
1answer
33 views

proprietary authentication to LDAP

I have a proprietary external authentication platform, that I can use to authenticate with over REST-WS. Now I would like to have / build a way to have numerous other web services (website, forum, ...
0
votes
2answers
1k views

ldap query with nested group

I try to build a ldap query to MS Active Directory. I found that there is a LDAP_MATCHING_RULE_IN_CHAIN type to do so. Which results in the follow syntax: ...
1
vote
1answer
714 views

Auth fail on Samba server with LDAP backend‏

I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc. The samba schema is present in the LDAP, and in the users profile. ...
2
votes
1answer
1k views

Enabling LDAPS: Cannot get to open port 636

I have a domain controller, which has Active Directory (AD). I want to turn on LDAPS on this AD, so that I could access the AD via secure connection. I have followed the following guide: ...
-2
votes
1answer
108 views

Migrate local user to LDAP server and keep the old user directory

I have an existing Debian server with a lot of local user (these user account are used for application authentication and keeps files in each home directory), and I want to migrate all the local user ...
0
votes
1answer
306 views

LDAP Bind failure / GroupPolicy 1006 / ErrorCode 81 (on one workstation only)

Multiple domain accounts on this same workstation yield the same error; those same accounts on other workstations sail through with no problems. It's occurring intermittently: roughly about 9 out of ...
0
votes
0answers
80 views

gitlab ldap authentication with domino server

i try to implement ldap authentication for my gitlab server 7.8.4 my ldap server is a Lotus Domino Server My group called "gitusers" with all of the allowed members does anyone know how to build the ...
1
vote
0answers
143 views

Promote Windows Server 2012 to domain controller in an existing samba network

I have a Windows Server that I want to use as a domain controller to push gpo's to workstations that are on a samba 3 domain served from an Oracle Solaris server. If I were to promote this server to a ...
1
vote
1answer
418 views

Check if account is allowed when using pam_access

I'm using pam_access and /etc/security/access.conf to restrict who can login to my Rhel 6.5 hosts. I have an LDAP server with a diverse user base, and the security people would like a list of who can ...
0
votes
1answer
508 views

migrate samba users to new server

I've read How to migrate Samba User Accounts to a new linux server? however it doesn't address my situation, or at least not with a solution. I have a RHEL 5 machine, wood, running Samba, Dovecot, ...