Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

6
votes
1answer
275 views

Need help understanding PAM directives

I have the following directives in my /etc/pam.d/sshd file on a RHEL5 box and I'm a bit confused. These directives are there to make LDAP+RADIUS+OTP work. What I'm trying to do is tell pam not to ...
0
votes
0answers
35 views

Getting numbered users which does not really exist in the LDAP Interface

I'm currently experiencing a very weird problem. I maintain the ldap interface of a software of our company and i'm only communicating to the ldap interface of AD, Domino and so on. Today with a ...
1
vote
1answer
159 views

SVN Server LDAP Authentication Error: User is not unique

I'm getting the following error when Apache (running on Solaris) tries to authenticate against LDAP for a specic user for SVN server: auth_ldap authenticate: user abc authentication failed; URI ...
0
votes
1answer
86 views

Finding out my current LDAP server type

How can i find out if my current LDAP sever type is Standalone, Master or Replica (slave)? I am using OpenLDAP on SLES 11.
1
vote
0answers
12 views

Can the Apach AuthLDAPNURL be pointed at the root of a tree?

I have a server where I need to use Apaches AuthLDAPNURL value, but I cannot start at any specific O, OU, or DC. For whatever reason this tree has everybody in 19 Organization (O) objects, hanging ...
0
votes
1answer
111 views

After cert replacement, Apache servers on Centos can't ldaps auth

I run a bunch of servers, some run Ubuntu 12.04, and some run Centos 6.3 . Recently, the self-signed SSL certificate on my ldap server expired, so I generated a new one, and distributed it to all the ...
1
vote
1answer
250 views

Refresh ldap client configuration Centos

Recently we change the ip address (and add some groups) of our LDAP server (running in Suse Enterprise) so should change also the ldap authenthication configurations for all the servers that we have. ...
3
votes
1answer
257 views

ldapquery an Active Directory server for users that belongs to a group named X

When I do this at the bash prompt on a CentOS 6.4 ldapsearch -LLL -H ldap://adserver.example.com -x -D someuser@example.com -w somepass -b 'OU=Users,DC=example,DC=com' ...
0
votes
1answer
598 views

Moving from nslcd to sssd on Red Hat to solve NSS MD5 issue

I have a problem with the latest version of Red Hat, nss/nscd does not accept MD5 certificates. Because of recommendations I am replacing nscd with sssd with this howto ...
5
votes
3answers
3k views

How come all LDAP users are shown with getent passwd?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When I type "getent ...
1
vote
2answers
165 views

How can I allow users to change their local passwords?

We use an LDAP-server, but we also use local accounts. [jdoe@tst-03 ~]$ passwd Changing password for user jdoe. Changing password for jdoe. (current) UNIX password: Enter login(LDAP) password: This ...
3
votes
2answers
90 views

Usefulness absolute filter on an LDAP query?

I was perusing the source for OpenLDAP and I saw where the root DSE supports something called absolute filters. It looks like it's specified in RFC4526 It looks like the author that originally drafted ...
0
votes
1answer
139 views

LDAP queries for local users

Recently, in the company where I work, we have had a general system crash and we are figuring out the causes. Our machines are configured for LDAP authentication plus some local users in some of them. ...
2
votes
1answer
99 views

Puppet: Enumerating all users within a group

Is there any way to enumerate an array of all users within a group within Puppet, either as a fact or something so I can do something like this? $users = enumusers('wheel') each($users) |$user| { ...
2
votes
1answer
350 views

Creating Samba shares across multiple servers from a single LDAP server

We have a Fedora Directory Server running LDAP, where a few hundred users exist. We need a way we can create samba shares depending on projects and limit access to these shares across multiple Linux ...
1
vote
1answer
147 views

OpenLDAP - Changing user password both locally and in LDAP

We have just implemented an LDAP solution for our lab. All of the LDAP client machines still have files ldap (or files sss) in their nsswitch.conf for the time being (so local authentication first), ...
0
votes
2answers
99 views

Set up JDBC DataSource in LDAP

How do I create a JDBC DataSource in an OpenLDAP server? The problem is that jdbc/something is not a valid DN or RDN. But that is the format of the name that you are supposed to use for JDBC ...
1
vote
0answers
69 views

Which attributes does Active Directory currently use for POSIX compatibility?

In a heterogeneous environment that uses Windows Active Directory as the central directory, some attributes are essential for compatibility with Linux systems. uidNumber gidNumber gecos loginShell ...
1
vote
1answer
552 views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by ...
0
votes
1answer
42 views

Using autobind without LDAPI

I am trying to automate the installation of my OpenLDAP servers. Currently packages get installed (openldap-clients, openldap-servers) and started with their default configurations. I have a LDIF ...
0
votes
1answer
3k views

Windows Server 2008 R2 Active Directory Web Services won't start with SSL

I am running a Windows 2008 R2 server as a PDC. I've installed the ADWS and I'm trying to get SSL support running but I'm experiencing the following error: Source: ADWS EventID: 1400 Active ...
2
votes
0answers
47 views

How can I force a schema replacement operation in LDAP

I am using ApacheDS. I have created a custom schema such that it is in its own container under schema. When I make changes to the LDIF file and re-import it, I keep getting errors indicating that the ...
1
vote
3answers
191 views

Reset Mac OS X Workstation After Logout

I'm setting up a computer lab in a private school. All the students have LDAP login credentials and they stored all their files on separate shared servers. After the student logs out, I would like the ...
-1
votes
1answer
48 views

Configure Jenkins for LDAP failover [closed]

I was wondering if anyone has successfully configured Jenkins with two LDAP servers so if one server fails, it will query the other server?
1
vote
1answer
212 views

LDAP export attributes based on a different schema or import only valid attributes

I'm trying to export LDAP data from a Zimbra schema into a basic OpenLDAP schema. Obviously the Zimbra schema has much more attributes than the basic OpenLDAP. My question is if there is a way of: ...
0
votes
1answer
71 views

Split authentication and NSS lookups for users and groups to different servers

I've asked this question previously: Multiple Bind and base DNs in ldap.conf Since that previous question was answered in the negative, I'm looking for other options such as splitting authentication ...
0
votes
2answers
286 views

PAM LDAP configuration for non-local user authentication

I have a requirement to allow non-local user accounts to be logged in via LDAP authentication. Meaning, the user that is trying to login is allowed access, if the user account exists in LDAP server ...
0
votes
1answer
185 views

Multiple Bind and base DNs in ldap.conf

I have multiple LDAP servers and different user groups in each. I want to authenticate using both LDAP servers which have different base DNs. Is it possible to put in multiple bind and base DN values ...
0
votes
1answer
87 views

Configure LDAP for SUDO Support on Ubuntu Server 12.04

I'm running into some issues finishing my LDAP install. I used the following article to try the sudoers schema configured: http://ubuntuforums.org/showthread.php?t=1421998 When I run ldapadd -x -D ...
1
vote
0answers
209 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
2
votes
1answer
74 views

How to securely connect to multiple different LDAPS servers (Debian)

I'm trying to connect to multiple different LDAPS servers. A lot of the documentation I've seen recommends setting TLS_REQCERT never, but that strikes me as horribly unsecure to not verify the ...
0
votes
1answer
133 views

Difference to connect to LDAP by BindDn or by username

We have an application which can only connect to a LDAP (AD) by using the BindDn. When I try to connect from the server which host the application using a simple LDAP client (LDAPAdmin) it connects ...
1
vote
1answer
707 views

could not stat config file “slapd.conf” to add entries to LDAP

I got a problem when I adding some entries in LDAP slapadd -l /etc/openldap/root.ldif -f slapd.conf -d 10 slapadd -l /etc/openldap/people.ldif -f slapd.conf -d 10 slapadd -l ...
0
votes
1answer
93 views

OpenLDAP Change core schema

Is it possible to change core schema (cn={0}core,cn=schema,cn=config)? In lpadmodify im getting Insufficient access (50) though i'm using olcRootDn from olcDatabase={0}config. Apache DS just went ...
0
votes
1answer
46 views

How to specify a username in ldapsearch tool?

I'm new to ldap. I need to specify username in plaintext with some parameter without any sasl. So this command gonna give you some search results, but it always empty cause there's no authorization: ...
2
votes
2answers
59 views

Does LDAP fit the role of a user database for an application?

I (my company) run a webservice that integrates pieces of few entreprisey-level software. Most of them offer different type of authentication but all offers at least LDAP. I was wondering if storing ...
1
vote
0answers
85 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
1
vote
1answer
161 views

ssh login with multiple LDAP bases

I have an OpenLDAP directory with two different doamins (DN's) What I would like to do is allow the users to access the machines with ssh and their LDAP account. This worked fine when I only had one ...
1
vote
2answers
1k views

Upgrading to Debian 7: Postfix Auth fails

I'm upgrading various Debian 6 servers to Debian 7. There are a few minor issues, but this one is a show stopper. On Debian, Postfix runs in a chrooted environment. That environment is setup ...
1
vote
1answer
150 views

linux ldap authentication set gid to uid

I'm setting up ldap authentication with sssd for a linux server. everything works fine. however, the users from the ldap server have a default group User. which is, uid=10001 (larry), gid= 20001 ...
1
vote
2answers
446 views

How can I force folders created in a subdirectory to be owned by a user's secondary group?

I have setup a Samba share on Ubuntu 12.04 for our finance team, and they access it via Windows 7 and Mac OS X. They mount the share using their LDAP credentials. All of our LDAP users have ...
1
vote
2answers
2k views

CentOS 6 SSSD SSH/Console Login Issues

I'm new to SSSD but I think I've configured it correctly considering id {ldap user} returns the expected uid and gid values for multiple test users. I'm using two CentOS 6.4 servers as test machines. ...
2
votes
0answers
71 views

Is there an OpenLDAP web frontend that allows users to edit custom fields? [closed]

We are currently using a custom perl based frontend for our OpenLDAP user portal, and it's proving tricky to port over to a new server. I've setup phpLDAPadmin on the new server, but it doesn't appear ...
0
votes
1answer
99 views

Disable OpenLDAP replication

I set up openldap replication so that if my primary LDAP server were to die, I would have another LDAP server ready to use just in case. I used the directions on Ubuntu's site to set up the ...
8
votes
1answer
1k views

IPA vs just LDAP for Linux boxes - looking for a comparison

There are few (~30) Linux (RHEL) boxes and I'm looking for centralized and easy managed solution, mostly for control user accounts. I'm familiar with LDAP, and I deployed a pilot of IPA ver2 from Red ...
1
vote
1answer
2k views

how to configure pGina LDAP plugin

I have a project in which I have to authentificate clients from differents computers using an LDAP server. Do simulate that I have installed virtualbox in my PC and run two virtual machines, one with ...
0
votes
0answers
1k views

Samba standalone server using LDAP for authentication: SID mismatch

I'm trying to get my new samba server running for days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and >100 ...
0
votes
1answer
46 views

Moving user accounts and data from NFS server to local server

I'm pretty new to Enterprise Linux administration, and I need to find the best way to move user accounts and their /home directories to a new server. The current setup uses NFS to mount the /home and ...
0
votes
1answer
349 views

lighttpd mod_auth using LDAP

I've setup lighttpd to use an ldap backend like so: auth.debug = 2 auth.backend = "htdigest" auth.backend.ldap.hostname = "ldap.xxxxx.com" auth.backend.ldap.base-dn = ...
0
votes
1answer
72 views

LDAP URL example: is it possible / correct to use only the domain without the hostname?

We have an application which connects to an Active Directory (MS) using LDAP protocol. We give usually the following parameters: ldapUrl = ldap://myserver.mydomain.ext:389 ldapBaseDn = ...