Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
281 views

Change existing linux user's uid in LDAP but hdfs seems does not recognize it

I have set up a hadoop 1.2.1 environment on centos 6. I also use nfs-proxy that mount ndfs to local file system so that I can access the files inside hdfs locally. It works perfectly until today, I ...
2
votes
1answer
40 views

Forcing mail to a username to go through SMTP rather than local mailer

I've got two nodes, connected via a network. One runs an LDAP server, which both nodes use for authentication. One is shostakovich, the other is rachmaninoff. Each user is allowed to log in to only ...
2
votes
1answer
769 views

Disable LDAP authentication on Ubuntu

I have an Ubuntu server that is able to authenticate users against our Domain. I can not contact the person who set this up, but I do find these packages installed: libaprtil1-ldap libldap-2.4-2 ...
0
votes
0answers
181 views

Can connect to LDAP server, but cannot bind: OpenLdap error message: Can't contact LDAP server

We have a PHP application deployed on a RHEL6 machine that relies on some ldap calls to function. In particular, ldap_connect and ldap_bind are used to verify users and also to look up their details. ...
0
votes
2answers
212 views

starting Standalone LDAP Daemon, slapd

I am following THIS guide to install an ldap server. At step 9 i use: /usr/local/libexec/slapd instead of: su root -c /usr/local/libexec/slapd since i dont have access to su I get this ...
0
votes
1answer
633 views

access to <url> forbidden; SVN with Apache and LDAP

I'm setting up an SVN server on a CentOS VM. What I want to achieve is an SVN server on port 443 with multiple repositories accessible at an address https://192.168.0.5:443/svn/ReposXX/trunk, for ...
1
vote
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
0
votes
1answer
44 views

DNS Portability with regards to LDAP/Kerberos

How portable is a DNS server when it comes to LDAP, especially Kerberos which I am using for authentication? Meaning, how much do I have to change to use the same LDAP server with 2 different DNS ...
4
votes
1answer
768 views

How to use PAM to check LDAP password for some users, yet always use UID/GIDs from local files?

For a subset of my users in /etc/passwd, I would like to configure PAM (on Linux) to do the password checking part of the logon against an LDAP server, ignoring that these users are actually are ...
1
vote
2answers
265 views

Unable to Delete User Object in AD windows server 2008

OS - Window Server 2008 ( Domain Controller ) One User Object in AD is Creating Problem as well as i am unable to delete it manually also. Please see the below Error. In Event viewer i am getting ...
1
vote
0answers
159 views

Restrict server login via LDAP hostObject objectClass and host Attribute

How do I configure my LDAP server to allow all hosts except one? All users by default have the host: * attribute, which allows any user to login to any server. I've tried the following regex, but it ...
0
votes
1answer
2k views

Unknown LDAP cn=config admin password

when I installed openldap I was asked to create a password for an admin user but now i realize there's another admin user for cn=config whose password i don't know. Does anyone know how should i ...
1
vote
0answers
53 views

Can you write an LDAP query that returns accounts modified in the previous day?

I have a system that synchronizes from a master LDAP store. The synchronization process has gotten longer and longer as our directory grows. I had to stop syncing hourly, and moved it to an overnight ...
1
vote
0answers
38 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
0
votes
1answer
1k views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
1
vote
2answers
504 views

Open Directory Password Location and Encryption Method

Background: I would like to use Google Apps Directory Sync (GADS) to synchronize user accounts and passwords from a Mac OS X Server (10.9) running Open Directory. GADS is installed on a Ubuntu 12.04 ...
6
votes
1answer
917 views

Active Directory 2012 LDAP Integration Service Principal Name Entry is Disappearing?

Creating Python Service to Query AD Attributes I'm integrating our AD with web services running Python on linux using Python-LDAP over SASL(DIGEST-MD5) to query AD 2012 user attributes (division, ...
3
votes
1answer
54 views

What must I do to enable newly created class schemas to be added as new objects in LDAP?

I am using ADAM ADSI Edit. I have created a new class schema in the Schema on this LDAP server. However, when I go into LDAP and pick an OU, right-click, and select 'New -> Object...' the newly added ...
3
votes
2answers
520 views

OpenDirectory/LDAP Query Syntax to find all users in a Group for GADS

I would like to construct an LDAP query to find all users that are part of the "Google Apps Users" group (short name: googleappsusers) on my OS X 10.9 Server. When I run the following query in Google ...
2
votes
3answers
464 views

How to handle centralized user authentication without LDAP?

I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
0
votes
0answers
310 views

redirect LDAP with TLS with SSH

I need to query an LDAP server with TLS enabled. The LDAP server is behind a firewall. It only accepts queries with TLS enabled (-Z option). I redirected the LDAP port like this: oz123@devhost ~ $ ...
0
votes
0answers
129 views

LDAP_route not working after upgrade from Debian Lenny to Wheezy

 I have Debian 5 box (Lenny) with configured sendmail and LDAP_routing feature. This box is placed between Internet and my final mail server (MS Exchange). LDAP_route feture was used to validate ...
0
votes
1answer
216 views

AD Login to Solaris Zone Periodically Not Working

I have a Solaris 11.1 zone named "AZone". I have the zone joined to an Active Directory domain (Windows Server 2008) with the goal of users being able to use their AD account to log in to the Solaris ...
0
votes
1answer
873 views

OpenLdap: Why slapd tell me there's no DB_CONFIG when there is one

When I run slapcat or restart slapd on Debian 6, OpenLdap 2.4.23-7.32.4.23-7.3, I see this warning: hdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (14). Expect poor ...
0
votes
0answers
609 views

REMOTE_USER not getting set?

I am trying to setup LDAP Authentication in Joomla using a plugin called JMapMyLDAP (in fact 4 plugins each doing a different job). I need to pull a part of a string out of the server variable ...
2
votes
1answer
495 views

Automatic LDAP login to Gitlab

I've Apache 2.2 and Gitlab 6 running. After installing OpenLDAP on Debian Wheezy and setting up Gitlab I can login to Gitlab with LDAP credentials. But I wonder if there is a way to provide LDAP login ...
-2
votes
1answer
169 views

Are there any viable DNS or LDAP alternatives for distributed key/value storage and retrieval? [closed]

I'm working on a software app that needs distributed decentralized name resolution, and isn't bound to TCP/IP. Or more precisely, I need to store a "key" and look up it's value, and the key may be a ...
1
vote
1answer
89 views

Sharing information between nodes in Beowulf Cluster

I am setting up a beowulf cluster and I've been reading that it might be necessary to make the home directory of the cluster users shared between them (assuming this users are local to each machine). ...
0
votes
1answer
2k views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
9
votes
1answer
647 views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would it to have centralized control of user accounts (at least, I think I'd ...
3
votes
4answers
615 views

LDAP distinguished name validator

Is there a library, program or simple regex to check if a DN specified in input is well formed? Example: INPUT: manager, ou=company, dc=net ---> OUTPUT: not well formed INPUT: cn=manager, ...
0
votes
1answer
374 views

How do I set up disk quotas over LDAP on CentOs?

I've been google-ing for some time and I haven't been able to find any resources or hints on the subject. I am wondering if it is possible to do so, if so how? Any nudge in right direction will be ...
2
votes
1answer
107 views

LDAP groups not applying to filesystem permissions

System is ArchLinux, and I'm using nss-pam-ldapd (0.8.13-4) to connect myself to ldap. Relevant configuration files: /etc/nsswitch.conf /etc/nslcd.conf I've got my users and some groups in LDAP: ...
0
votes
0answers
242 views

Brief example for non-trivial idmapd sought

I manage users using an OpenLDAP server. I now want to connect a NAS as the main file server using NFSv4. The NAS allows me to import LDAP users and groups, but it maps them to user@ldap.domain. So I ...
0
votes
1answer
439 views

Httpd and LDAP Authentication not working for sub-pages

I just recently installed a Nagios implementation, and I'm trying to get LDAP authentication working for httpd on Red Hat. (nagios.conf for Apache config below, sanitized of course) ScriptAlias ...
4
votes
2answers
334 views

In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?

I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
6
votes
3answers
383 views

freeipa ssl ldap and round robin dns

I'm trying to ask this question in a way that's answerable, but part of the issue is knowing the implications of my current situation and if there's an issue or technical debt which'll bite me further ...
1
vote
1answer
471 views

Gerrit LDAP Configuration

I am configuring gerrit over Windows server 2008 R2 along with mysql and tomcat. I have completed installation successfully. Authentication mode is LDAP. I am unable to login. The error is: ...
0
votes
1answer
235 views

Can't make libnss-ldap resolve groups in Debian

We have an (active directory) LDAP server and I'm trying to use libnss-ldap to resolve ldap users and groups. When I run 'getent passwd', all of the users are returned exactly like I'd expect. ...
3
votes
1answer
241 views

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 ...
2
votes
1answer
84 views

Changing LDAP schema casts Confluence AD integration unoperable

I have had our instance of Atlassian Confluence configured to be integrated with our Active Directory. In AD, all the users were being created under default Users folder in Active Directory Users ...
0
votes
1answer
87 views

Change hashing password algorith in Jasig CAS

I configurated my Jasig CAS to authenticate user from LDAP. Now, I would to change my hashing password algorith. Where, in CAS configuration, have I to configure it? I use Jasig CAS 3.5.2 and ...
1
vote
1answer
231 views

SSL Connect timing out during handshake (client exchange re-transmission)

We have a Java LDAP client making SSL connection to AD. Some times the connect hangs with client and server re-transmitting Client Key Exchange and ACK packets continuously as shown below and ...
2
votes
1answer
607 views

Is This Normal LDAP Behaviour In CentOS Linux?

Hello fine people! As a novice in the Linux world, I have managed to learn enough to put into production a ClearOS 5.2 server running the CentOS Linux Distro. This box serves as my Primary Domain ...
2
votes
1answer
176 views

LDAP query doesn't return all accounts with specific login

I have a Windows 2008 domain that I am querying via ldapsearch and if I use a domain administrator account I get all the users I would expect, but if I use the service account I created for this ...
1
vote
1answer
371 views

LDAP and DAV with AuthnProviderAlias not working

I have a working apache 2.4 config for ldap with svn <IfModule mod_ssl.c> <VirtualHost _default_:443> ... <Location /ldapsvn> DAV svn SVNParentPath ...
0
votes
1answer
243 views

disable plaintext password in ldap

I have a openldap server v3 that is storing passwords in plain text, is there anyway by which we can change the password to be stored in SSHA format by default. I use Apache DS to login to the ...
0
votes
1answer
87 views

Problems with new server accessing ldap and mail server/relay (connection timeout and can't contact)

I'm on OpenSUSE 12.3, and setup a mail relay under mail server settings (posix) via yast. I try to send a mail and get timed out: 2013-09-27T15:19:08.745282+01:00 myserver postfix/qmgr[12258]: ...
0
votes
1answer
48 views

Import TLS certificate tu use LDAPS on client machine

I installed OpenLDAP server and I configurated TLS on the same machine (CentosOS 5) . Now I would to use LDAPS from an other machine: How can I import the generated certificate? I used this to enable ...
1
vote
2answers
106 views

Password handling in Apache to remote LDAP server

I have an Apache server in which I have a website with a protected directory. Protected by basic authentication against a remove LDAP server (not on same machine). <Location ...