Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
2answers
84 views

Where are LDAP user's home stored

I have been goolging around LDAP these days. And I'm trying to deploy a central authentication server for quite a few ubuntu servers. After all the research, one question come to my mind. Where are ...
0
votes
1answer
173 views

pam google authenticator can't compute location of secret file

I've installed Google Authentication on all the machines in our system, and while the authentication during login works fine, our machines are producing logs that have this line over and over: ...
0
votes
0answers
283 views

LDAP Query Of All Users In Various Groups In A Specific ActiveDirectory OU

I need to configure Atlassian Crowd to query all the users in my AD server that are in various groups in a top-level OU. The DN for the OU is "OU=Atlassian,DC=NNNN,DC=com". The various groups would ...
-1
votes
2answers
47 views

Checking ldapsearch and ldapsearch -h 127.0.0.1 -Z -x in nagios [closed]

Basically I just want to ensure whether ldapsearch and ldapsearch -h 127.0.0.1 -Z -x I did some check_ldap command and it's fine but I specially want to verify ldapsearch and ldapsearch -h ...
0
votes
1answer
66 views

Why is LDAP using servers other than those specified?

I have a linux system that is using Active Directory (2012) for LDAP lookups of users and groups. It's in a network that is connected to our main site by VPN. When the VPN goes down, all ldap ...
3
votes
0answers
242 views

LDAP over TLS fails to connect, Schannel Alert 48

I am trying to use PHP to edit users in active directory through LDAP. My test machine is using a simple WAMP setup and is NOT connected to the windows domain. This machine can connect to LDAP on the ...
0
votes
1answer
40 views

Make active directory available to remote users [closed]

I have an AD filled with test data. I have automated tests that query this AD. I would quite like to be able to run these tests from anywhere, including outside of the domain. I have seen the ...
0
votes
0answers
73 views

Kolab removed FreeIPA admin write privileges

I was able to configure kolab so that it could import users from an external FreeIPA server, but after that I found that the admin user in FreeIPA doesn't have write permission anymore. I tried to ...
0
votes
2answers
27 views

OpenLDAP - possible to search without specifying base?

I am having some issues with OpenLDAP and Spring security, where the latter does a search with the whole path in dn (filter), and an empty base. OpenLDAP does not like this, and the query fails. The ...
0
votes
0answers
316 views

How to let a user remove the pwdAccountLockedTime attribute without being an admin in ApacheDS?

I am probably going about this all wrong but there is no "Look stupid, do this..." level documentation out there that I have found. I have Apache DS v2.0.0 I have users I want some users (who I add ...
2
votes
1answer
119 views

dovecot/ postfix make me two different folder same user (user; user@domain)

I had some problem with the Dovecot/Postfix/LDAP/SASL config files: The LDAP query, SASL config its work but my problem is postfix and the dovecot: When i first login the outlook/thunderbird/etc.. it ...
0
votes
0answers
79 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
1
vote
0answers
224 views

LDAP build script failing on openLDAP-2.4.31 ( ldapmodify -Y EXTERNAL -H ldapi:/// )

ORIGINAL QUESTION: I want to set the password to the backend admin so that I can change the LDAP ACL to what I need... needless to say I don't want my config posted all over the place, plus the .ldif ...
0
votes
1answer
113 views

389DS Access.log parsing - turning LDAP request type into an audit event

Has anyone authored code to parse a 389 Directory Server's access.log file with an aim of generating audit events based around the LDAP request type. Bascially, take the log sequence ...
0
votes
0answers
87 views

LDAP, nslcd and intermittent “Invalid user”

EDITED for simplification and new information. Some of my Ubuntu boxen, after an upgrade (12.04 -> 15.04), decided they don't want to accept new users. Sometimes. I turned off nscd so it wouldn't ...
1
vote
1answer
408 views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with ...
0
votes
1answer
448 views

How to add a user containing a UID to OpenLDAP that runs on CentOS7?

Add a user user.ldif dn: uid=sampleuser,ou=people,dc=my-domain,dc=com objectClass: top objectClass: inetOrgPerson cn: sample user uid: sampleuser Problem [root@host ~]# ldapadd -x -W -D ...
1
vote
1answer
475 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...
2
votes
1answer
85 views

How update passwords of user's already existing in ldap? [closed]

I want to update passwords [user's already existing in ldap] of the user by importing data from /etc/passwd and /etc/shadow. How to achieve this? I will give the overview of my setup. Nodes user ...
0
votes
1answer
97 views

cannot config LDAP in filenet p8 5.2

i tried to fulfil this form many times and click "test LDAP connection". it's alway return success. but when i click "run task", it's alway return Running the task failed with the following message: ...
0
votes
1answer
201 views

Delete domain using ldapdelete

According to the man page of ldapdelete it should be possible to delete entries [root@controller ~]# man ldapdelete EXAMPLE The following command: ldapdelete "cn=Delete ...
2
votes
1answer
787 views

Joining Linux host to Active Directory fails to update Microsoft DNS

I am joining Linux hosts (CentOS 6) to Active Directory using a special bind account. I've granted delegate permissions to this user and when I join on the default Computers OU, a computer object is ...
1
vote
0answers
28 views

FreeIPA remove read and search permission

I want to disable the read and search permission that is granted to all user accounts by default. I don't want users to be able to display other users informations. is this possible? and is there ...
0
votes
2answers
317 views

pam_ldap user password changes using rootbinddn on Debian Jessie

When configuring pam_ldap on Debian Jessie, end user password changes are utilizing the rootbinddn, circumventing OpenLDAP's ppolicy overlay. This is allowing end users to change their passwords ...
0
votes
0answers
146 views

centos7 pam_authz_search for *.group.company.com

Upgrading from Centos6 where we were using ldap.conf entry "pam_check_host_attr=yes" previously, with wildcard 'host' attribute in ldap where the host attribute looked like 'host=*.group.company.com' ...
2
votes
2answers
97 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
1answer
78 views

Define a group leader in a LDAP posixgroup

I'm trying to find out if it's possible to define a certain member in a posixgroup as the group leader/manager of that specific group. I tried looking for some objectclasses with this purpose, but my ...
1
vote
1answer
628 views

Openvas ldap authentication configuration

I'm stuck in the process of Openvas ldap authentication configuration. I use the following openvas components version from upstream: openvas libraries - 8.0.3 openvas manager - 6.0.3 (both ...
1
vote
1answer
761 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
0
votes
1answer
75 views

LDAP authentification and sub-directories

My apache server is using the LDAP to authenticate users when they want to access the root of the server. I'd like to add another authentification (without prompt) to allow/forbid groups of users ...
2
votes
0answers
93 views

what is the the difference between all the NSS caching daemons? [closed]

I would like to see a comparison between nscd (part of glibc), unscd, nsscache, sssd and nss-pam-ldapd. Those are all the alternatives to nscd that i could find in Debian... Our setup is that we ...
0
votes
1answer
42 views

Track a machine who is entering bad passwords into a samba3 domain controller

I have a user who is getting its account locked constantly because an other machine is trying to login with an old and bad password and thus locking the user's account... The user doesn't know which ...
0
votes
0answers
69 views

assigning permissions to nested groups in FreeIPA

I have several user groups in FreeIPA (group1, group2, ..., group6) which are members of each other. (group1 is the master group) group1 -> group2 -> group3 -> group4 -> group5 -> ...
1
vote
1answer
159 views

Windows 2008R2 Logon Restrictions and LDAP Authentication

We use a Palo Alto firewall (and its GlobalProtect client) for VPN access to our network. The firewall uses LDAP to authenticate VPN logins. I am now trying to setup a user ID for a consultant and I ...
0
votes
0answers
272 views

OS X management - binding to OpenLDAP server

As my small company starts to realise the need to manage things more efficiently, I've been working on centralising management of our OS X workstations. Our overall environment consists of Linux and ...
1
vote
0answers
69 views

How do you add new custom attributetypes to existing objectclasses in LDAP

How the heck do we add new attributes to existing object? For example, I have a custom LDAP objectclass: m-oid=1.1.1.1.1.1... m-must: uid m-may: role m-may: cn m-may: sn Then I added some ...
0
votes
0answers
140 views

LDAP search query (using or) not returning values

I am using the following query in LDAP: ldapsearch -D "uid=test,cn=Users,cn=accounts,dc=earthlinktele,dc=com" -w dsaasddsa -b "cn=accounts,dc=earthlinktele,dc=com" ...
1
vote
0answers
159 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
3
votes
0answers
71 views

Multiple passwordStorageScheme values on same user on 389ds / FreeIPA

I have deployed a FreeIPA identity solution which is backed inside by a 389 directory server. Due to the need of periodically syncing user passwords to another platform (Google Apps for Work), I need ...
1
vote
1answer
60 views

ACL - Subtree Admin should be able to modify password as well as the users themselves

dn: olcDatabase={1}hdb,cn=config objectclass: olcDatabaseConfig objectclass: olcHdbConfig olcaccess: {0}to dn.subtree="ou=subtree,dc=domain,dc=tld" by self write by dn="cn=subadmin,dc=domain,dc=tld" ...
0
votes
0answers
33 views

cisco ucs user login using ldap group authorization

I'm trying to configure a cisco ucs server login with ldap using group authorization. I can login to the cisco server using ldap username and password when I add the user to "admins" group, but when I ...
0
votes
2answers
434 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
2
votes
2answers
2k views

Linux AD integration, unable to login when using Windows Server 2012 DC

I am trying to integrate my CentOS 6.6 servers into Active Directory. I've followed this guide from Red Hat using configuration 3 (SSSD/Kerberos/LDAP). When using a Windows Server 2008 R2 server as ...
1
vote
1answer
123 views

Dovecot not used as LDA by Postfix

I try to set up a mail server on Ubuntu using Postfix, Dovecot and LDAP. So far I can send and receive mails with Postfix and can connect to Dovecot via telnet (port 143) with an LDAP user. As a next ...
1
vote
1answer
82 views

How can I enable the audit logging in LDAP

I want to log the users activities (who does what) on LDAP, the audit log is disabled by default, how can I enable it?
0
votes
1answer
46 views

Weird authentication error from Active Directory Win 2008R2

I am trying to do a ldap query from a OpenBSD client to windows 2008R2 active directory and I am getting this error,"49: Invalid credentials". I don't understand why if I tried the same username and ...
1
vote
1answer
165 views

All LDAP traffic is being sent on TLSv1.1 not TLSv1.2

I have a kvm server, Centos 6.6 host with 6.6 guests. We run a php based web app that uses LDAP authentication for our clients. We just moved a client to this setup and they are reporting that all ...
2
votes
1answer
19 views

FreeIPA re-arrange custom attributes

I created several custom attributes and added them to LDAP and FreeIPA, but their order in the user page is very messy. I want to re-arrange them and put the related attributes together (such as ...
1
vote
0answers
74 views

OpenVPN routing based in LDAP Authentication?

To understand the solution better this is an example: The company has 1000 users that constantly switch seats (computers are set with DHCP IP, so the user can constantly have his IP address ...
1
vote
1answer
489 views

Zimbra: stuck .msg files and phantom messages in mailboxes

Users in my org use Outlook 2010 e-mail client with pop3 access to ZCS/OSE. These clients are using default "delete messages from server after 14 days" setting All message boxes are set up as follows: ...