Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

2
votes
2answers
103 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
1answer
85 views

Define a group leader in a LDAP posixgroup

I'm trying to find out if it's possible to define a certain member in a posixgroup as the group leader/manager of that specific group. I tried looking for some objectclasses with this purpose, but my ...
1
vote
1answer
679 views

Openvas ldap authentication configuration

I'm stuck in the process of Openvas ldap authentication configuration. I use the following openvas components version from upstream: openvas libraries - 8.0.3 openvas manager - 6.0.3 (both ...
1
vote
1answer
807 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
0
votes
1answer
81 views

LDAP authentification and sub-directories

My apache server is using the LDAP to authenticate users when they want to access the root of the server. I'd like to add another authentification (without prompt) to allow/forbid groups of users ...
2
votes
0answers
101 views

what is the the difference between all the NSS caching daemons? [closed]

I would like to see a comparison between nscd (part of glibc), unscd, nsscache, sssd and nss-pam-ldapd. Those are all the alternatives to nscd that i could find in Debian... Our setup is that we ...
0
votes
1answer
43 views

Track a machine who is entering bad passwords into a samba3 domain controller

I have a user who is getting its account locked constantly because an other machine is trying to login with an old and bad password and thus locking the user's account... The user doesn't know which ...
0
votes
0answers
75 views

assigning permissions to nested groups in FreeIPA

I have several user groups in FreeIPA (group1, group2, ..., group6) which are members of each other. (group1 is the master group) group1 -> group2 -> group3 -> group4 -> group5 -> ...
1
vote
1answer
167 views

Windows 2008R2 Logon Restrictions and LDAP Authentication

We use a Palo Alto firewall (and its GlobalProtect client) for VPN access to our network. The firewall uses LDAP to authenticate VPN logins. I am now trying to setup a user ID for a consultant and I ...
0
votes
0answers
282 views

OS X management - binding to OpenLDAP server

As my small company starts to realise the need to manage things more efficiently, I've been working on centralising management of our OS X workstations. Our overall environment consists of Linux and ...
1
vote
0answers
72 views

How do you add new custom attributetypes to existing objectclasses in LDAP

How the heck do we add new attributes to existing object? For example, I have a custom LDAP objectclass: m-oid=1.1.1.1.1.1... m-must: uid m-may: role m-may: cn m-may: sn Then I added some ...
0
votes
0answers
147 views

LDAP search query (using or) not returning values

I am using the following query in LDAP: ldapsearch -D "uid=test,cn=Users,cn=accounts,dc=earthlinktele,dc=com" -w dsaasddsa -b "cn=accounts,dc=earthlinktele,dc=com" ...
1
vote
0answers
165 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
3
votes
0answers
78 views

Multiple passwordStorageScheme values on same user on 389ds / FreeIPA

I have deployed a FreeIPA identity solution which is backed inside by a 389 directory server. Due to the need of periodically syncing user passwords to another platform (Google Apps for Work), I need ...
1
vote
1answer
63 views

ACL - Subtree Admin should be able to modify password as well as the users themselves

dn: olcDatabase={1}hdb,cn=config objectclass: olcDatabaseConfig objectclass: olcHdbConfig olcaccess: {0}to dn.subtree="ou=subtree,dc=domain,dc=tld" by self write by dn="cn=subadmin,dc=domain,dc=tld" ...
0
votes
0answers
33 views

cisco ucs user login using ldap group authorization

I'm trying to configure a cisco ucs server login with ldap using group authorization. I can login to the cisco server using ldap username and password when I add the user to "admins" group, but when I ...
0
votes
2answers
471 views

MultiOTP + FreeRADIUS + MS Active Directory

I am running a CentOS 6.6 64 bit Server with FreeRADIUS 2.1.12 installed from base repository. Additionally I am using MultiOTP (http://www.multiotp.net/) which is configured to connect to our Windows ...
2
votes
2answers
2k views

Linux AD integration, unable to login when using Windows Server 2012 DC

I am trying to integrate my CentOS 6.6 servers into Active Directory. I've followed this guide from Red Hat using configuration 3 (SSSD/Kerberos/LDAP). When using a Windows Server 2008 R2 server as ...
1
vote
1answer
141 views

Dovecot not used as LDA by Postfix

I try to set up a mail server on Ubuntu using Postfix, Dovecot and LDAP. So far I can send and receive mails with Postfix and can connect to Dovecot via telnet (port 143) with an LDAP user. As a next ...
1
vote
1answer
86 views

How can I enable the audit logging in LDAP

I want to log the users activities (who does what) on LDAP, the audit log is disabled by default, how can I enable it?
0
votes
1answer
46 views

Weird authentication error from Active Directory Win 2008R2

I am trying to do a ldap query from a OpenBSD client to windows 2008R2 active directory and I am getting this error,"49: Invalid credentials". I don't understand why if I tried the same username and ...
1
vote
1answer
172 views

All LDAP traffic is being sent on TLSv1.1 not TLSv1.2

I have a kvm server, Centos 6.6 host with 6.6 guests. We run a php based web app that uses LDAP authentication for our clients. We just moved a client to this setup and they are reporting that all ...
2
votes
1answer
19 views

FreeIPA re-arrange custom attributes

I created several custom attributes and added them to LDAP and FreeIPA, but their order in the user page is very messy. I want to re-arrange them and put the related attributes together (such as ...
1
vote
0answers
77 views

OpenVPN routing based in LDAP Authentication?

To understand the solution better this is an example: The company has 1000 users that constantly switch seats (computers are set with DHCP IP, so the user can constantly have his IP address ...
1
vote
1answer
525 views

Zimbra: stuck .msg files and phantom messages in mailboxes

Users in my org use Outlook 2010 e-mail client with pop3 access to ZCS/OSE. These clients are using default "delete messages from server after 14 days" setting All message boxes are set up as follows: ...
1
vote
0answers
16 views

LDAP group of words (not names)

We use LDAP for authentication and organization of items, and we have the following structure (minus a couple top levels, of course): Clients Client1 client1Users (group of users, member is ...
1
vote
1answer
202 views

htpasswd: unable to update file

I am trying to add a new user to authenticate to Apache2 (httpd) through Active Directory. The user already exists and belongs to a domain. I am essentially following the instructions in this Apache ...
0
votes
1answer
97 views

OpenLdap error: Your attempt to add uidNumber (2276) to <cn …> is NOT allowed. That attribute/value belongs to another entry

I'm using OpenLDAP. The management interface is phpLDAPadmin. Whilst this has made things easy, it also means I've not been exposed to the internals. There is an existing entry using the uidNumber ...
1
vote
1answer
225 views

Filter getent passwd output with SSSD

I am using ldap_access_filter in sssd.conf in order to limit access to users that are in a specific ldap group. However, when I do a "getent passwd" I still get a full list of the ldap users. How can ...
0
votes
1answer
105 views

Apache - Multiple AuthLDAPURL

I currently have my vhosts setup to authenticate via LDAPS via Apache reverse proxy . I am wondering if it's possible to add a backup/fallback LDAP server if my primary one goes down. I tried working ...
0
votes
1answer
35 views

LDAP share attribute's value between a group members

I want to add members to a group, then I want them to share a single attribute value that need to be changed once for it to be changed for all other members. I found a page about effective attributes. ...
0
votes
1answer
244 views

FreeIPA users can't see new custom attributes

I have added some new custom attributes to my FreeIPA and so far I was using the admin account to check them in the WebUI. But today I accessed the WebUI using a regular user account and I was ...
1
vote
0answers
137 views

Not able to take secure LDAP connection using perl NET::LDAPS

I trying to take a secure connection of AD server ( w2k12 ) using perl Net::LDAPs. Steps: $ldaps = Net::LDAPS->new('AD.server.ip', port => '636', verify => 'none', capath => ...
0
votes
2answers
57 views

Create a relationship between two attributes in LDAP

I created two attributes in LDAP (multivalued strings) and I want to (somehow) create a relationship between their values so that each value in one of then is linked to a value in the second: for ...
1
vote
1answer
58 views

Lighttpd ldap auth issue, massive performance loss (lighttpd 1.4.35-1.el6.x86_64 + RHEL 6.6)

I installed lighttpd for the first time from epel repo. I changed user and group for the webserver and ran the lighttpd server. I can download a page with 200 small images in about a second. If I ...
2
votes
1answer
155 views

Extending LDAP and FreeIPA

I'm working with FreeIPA and I've extended its attributes successfully, but noticed that the verification function in the Python plugin, added to FreeIPA, only works for the values entered through the ...
0
votes
0answers
1k views

Call to undefined function ldap_connect() in ubuntu

I'm attempting to set up a test ldap server on an ubuntu 12 VM. I've gotten this error: Fatal error: Call to undefined function ldap_connect() in ubuntu I've installed the gettext extension in ...
2
votes
0answers
313 views

LDAP Not working for SSH connections on ubuntu 12.04

Connecting from the client to the server: $ ssh -vvv user@10.0.50.170 OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 debug1: Reading configuration data /etc/ssh_config debug1: /etc/ssh_config line 20: ...
3
votes
1answer
373 views

LDAP authentication fails

I try to set up an LDAP directory that will allow me to authenticate Debian users. Once the configuration of the LDAP server and PAM files is done, the authentication fails. I think the client doesn't ...
1
vote
0answers
2k views

LDAP with SSSD: force user to change password - 'ShadowLastChange' not working

I have CentOS6, with LDAP user authentication, using OpenLDAP and SSSD. I'm trying to force user to change the password. According to this ServerFault question I tried to set ShadowLastChange to 0, ...
1
vote
0answers
22 views

The differences between libpam-ldap and libpam-ldapd, included packages and modules? [duplicate]

May I ask what's the differences between libpam-ldap and libpam-ldapd when it comes to included packages and modules? As i understand is nss-pam-ldapd the project of libpam-ldapd, which is an ...
1
vote
1answer
115 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
1
vote
0answers
55 views

Remote home-folders with optional but preferred locally-encrypted folder

I have the use case that on default all users are working within remote mounted home directories. However, sometimes they prefer a local home on one or more machines, e.g. because the network is too ...
0
votes
1answer
101 views

Wrong ldap user and group IDs on nfs

we have users authentication driven by ldap and home directories shared on nfs server mounted by autofs. We recently installed Ubuntu 15.04 on three new machines and added them to our infrastructure ...
2
votes
2answers
215 views

How to set default values in openldap? [closed]

How can we set the default value for an attribute in openldap like we do in mysql schema? MYSQL create table test (str varchar(32), ts TIMESTAMP DEFAULT CURRENT_TIMESTAMP);
0
votes
1answer
878 views

Can a base DN for LDAP queries be a group DN?

I am trying to do LDAP integration for user authentication in HP NNMi. (NNMi on RHEL6 to Active Directory on W2K8 R2) I know I can get it to work if I use the OU that my users are in as the base DN ...
1
vote
2answers
256 views

LDAP syncrepl with kerberos authentication

I'm trying to set up a replication server for LDAP using syncrepl. I would like to use Kerberos to authenticate the consumer, because we have it set up, and it seems more secure. The database ...
2
votes
2answers
317 views

ldap is working but not ldaps correctly

I'm a little lost with ldapsearch... I have to configure a cloud with AD authentication. this is working well ldapsearch -h server -p 389 -x -D 'admin.test' -w 'xxx' -b ...
2
votes
2answers
248 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
0
votes
1answer
245 views

OpenLdap Replication

I have installed openldap on two machines and tried to setup multi-way replication.I am able to perform the multi-way replication (Add/Update/delete) when both the machines are up and ldap is running. ...