Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
19 views

ldapsearch can't connect to ldaps

I am using a Centos 6.6 and i'm trying to use ldapsearch to connect to my windows ad server and i can't connect using port 636. I exported the CA root certificate of my ad server in base64 and added ...
0
votes
0answers
12 views

Remote LDAP authentication test in Windows server

I've a windows server A loggedin under domain local-domain.com I've another read only domain that is called remote-domain.com all ldap users are exist in the remote-domain.com. I want a simplest ...
2
votes
1answer
1k views

How do I query members of an Exchange distribution group using LDAP filter syntax?

I'm trying to use a couple of Exchange distribution lists for access to an application (the list, due to the culture at this particular enterprise, is kept more up to date with people moving in and ...
0
votes
0answers
17 views

Printer unable to reach ldap server

I am trying to configure a Ricoh C2051 printer to use LDAP authentication. I have my ldapserver setup and working correctly, and is reachable from the network where the printer is. There is no ...
0
votes
0answers
6 views

How do I enable nis schema in SunLDAP Server 11r1?

How do I enable nis schema in SunLDAP Server 11r1? I would like to be able to use the posixAccount and posixGroup classes
2
votes
1answer
1k views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
0
votes
1answer
4k views

LDAP+SAMBA login issues

I'm on a clean Ubuntu 13.10 install and I've just installed and configured openldap+samba. While I'm trying to configure a domain controller plus user shares. In order to ease LDAP management I've ...
0
votes
1answer
802 views

AD LDS - LDAP - How to set group's rights on container

I installed AD LDS on a W2012R2. Everything is working fine. Now, I want to create new Roles, to grant to groups permissions to create/modify/delete users in a certain container. (I used this article) ...
0
votes
1answer
1k views

LDAP port forwarding or proxy

I am trying to find a way to locally access an OID server (via LDAP) that is usually only accessible from my app's staging server. I have login credentials for the staging box. I do not have login ...
0
votes
0answers
9 views

Is it possible to create this directory structure in AD LDS?

A customer is determined to have a directory structure like this: cn=lab1,ou=HHH, l=London, C=GB, OU=ACME Research,O=ACME Is this possible in AD LDS? How would I go about creating it? Currently ...
0
votes
1answer
14 views

SunLDAP Schema Extensions to support Linux/Unix Authentication + Sudo

We are running SunLDAP (Sun/Oracle Directory server 11), and would like our Linux/Unix machines to authenticate against LDAP and also use LDAP for storing SUDO policies. What Schema Extensions are ...
6
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
-1
votes
0answers
15 views

How to authenticate LDAP connection on git? [on hold]

Hi I'm trying to setup git server on my company virtual server using http://gogs.io git service. They have the setup for LDAP connection but there are no way to test the authentication.. or is that ...
2
votes
1answer
1k views

Configure Jenkins with LDAP : parameter 'Root DN'

I am installing an LDAP server and configuring Jenkins in order to accept LDAP for authentication. In Jenkins parameters, I have a weird behavior with the parameter Root DN. Documentation says : ...
4
votes
1answer
1k views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
-1
votes
0answers
25 views

LDAP Server on ASUS (or other) Router [closed]

Looking for a way to do set up my wireless network with WPA2-Enterprise without the need to have my 1U server on. this server sits in my room, and is the only location it can be, and it's loud. This ...
0
votes
0answers
26 views

ldaps on Debian Jessie with let's encrypt certificate

I'm already struggling for a while to set up an LDAP-Server on debian Jessie with enabled TLS. I'm new to the topic, so please show me my mistakes. I started by installing an reconfiguring slapd apt-...
8
votes
3answers
12k views

Search AD by GUID

How do I search Active Directory for objects by GUID? In other words, what would be a good way to find what objects belong to specified GUIDs?
0
votes
0answers
18 views

LDAPs calls fail through PHP installed on Nginx Server

I have PHP running on an Nginx Server and I want to make calls to my Active Directory over LDAPs. Calls over LDAP run just fine, but LDAPs poses some connection errors. I have ensured that LDAPs works ...
4
votes
2answers
4k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.example.org port 636 with the ssl checkbox. This is on the local server itself. ...
2
votes
0answers
20 views

Ldap over ssl not working

I have configured AD DS, DNS and AD CS in windows server 2012 R2. I have restarted machine after configured. I can able to connect with ldap on port 389 using ldp.exe. When trying to connect with ...
1
vote
0answers
23 views

PAM+LDAP no longer working after SLES 10.4->11.4 Upgrade

authentication via LDAP has ceased functioning after we upgraded to SLES 11.4 via recommended method (boot from DVD). Unfortunately with SLES I cannot give you any meaningful log output since neither ...
0
votes
1answer
23 views

Mail Server Fails to Replicate Active Directory Users

My business recently made the jump to Active Directory, and wanted our mail server to replicate AD accounts. Both the domain controller and the mail server are running Windows Server 2012, and we're ...
14
votes
4answers
19k views

How to authenticate users in nested groups in Apache LDAP?

I've working LDAP authentication with the following setup AuthName "whatever" AuthType Basic AuthBasicProvider ldap AuthLDAPUrl "ldap://server/OU=SBSUsers,OU=Users,...
0
votes
0answers
14 views

libnss-ldapd and Onelogin vLDAP

I'm trying to get Onelogin's new vLDAP service working with libnss-ldapd on an Ubuntu server (14.04). It looks like vLDAP uses authenticated bind per user. I've tried lots of different configurations ...
0
votes
1answer
30 views

Running (brew) openldap on osx El Capitan?

As Apple keeps making "improvements" to the LDAP that comes with OSX (i.e. keeps breaking it on each update), I had to do my own installation of openldap, which worked fine on Maverick and Yosemite (...
1
vote
0answers
70 views

How to allow users on an openLDAP server to create, update, and modify users under a certain organizationalUnit?

I have been stuck on trying to allow openLDAP users that are in a certain group (EX: cn=Admins,dc=mydomain,dc=com) to create, modify, update, and delete users that are in another organizationalUnit (...
0
votes
0answers
11 views

Applying ppolicy.ldif in OpenLdap

I just added the ppolicy.ldif schema to ldap by running the following: ldapadd -T EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif I then try to ldapadd my change.ldif file seen below #...
1
vote
1answer
3k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
0
votes
0answers
8 views

How to set an ACL in OpenLDAP to allow a user to fully manage an OrganizationalUnit? [duplicate]

I just installed OpenLDAP on my Ubuntu Server 16.04 LTS. I have my OpenLDAP server setup as depicted in the image below: Just like the image depicts I would like the blue color coded cn=admin to be ...
27
votes
2answers
21k views

SSH key authentication using LDAP

In short: Would like a way to do SSH key authentication via LDAP. Problem: We use LDAP (slapd) for directory services and we've recently moved to using our own AMI for building instances. The ...
3
votes
1answer
2k views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
0
votes
1answer
1k views

LDAP installed, running, but can't connect remotely [Ubuntu 10.10]

I installed LDAP on my ubuntu 10.10 system, using the tutorial found here: https://help.ubuntu.com/10.10/serverguide/C/openldap-server.html Everything seems to be working well, when logged into the ...
1
vote
2answers
111 views

Add AD entries using ldapadd failing with “unwilling to perform”

I'm trying to add entries to an Active Directory using ldapadd. Here's my ldif file: DN: CN=John_Smith,CN=Users,DC=ad,DC=example,DC=net objectClass: user CN: John_Smith sn: John givenName: Smith ...
3
votes
2answers
4k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
-4
votes
0answers
32 views

Control internet access in LAN

We have a lab setup with multiple user-systems, where user authentication is done centrally from a server through ldap and home directories exported from server through nfs. Within this lab setup we ...
3
votes
3answers
649 views

LDAP Active Directory integration

We are looking to primarily use LDAP as a means of authentication throughout our environment consisting of both Linux and Windows boxes. I would like to know if there is a way to use our existing ...
0
votes
2answers
20 views

Using ldapModify to delete objectClass in LDAP entry

I have a need to delete three different objectClasses from a bunch of LDAP entries. Here's my ldif file: dn: uid=user,ou=People,dc=example,dc=net changetype: modify delete: objectClass objectClass: ...
0
votes
2answers
3k views

Squidguard + LDAP (Active Directory) not working

I've been trying to configure a squid with squidguard and MS AD. I've successfuly linked my squid with my AD so far, but now, I want to link my squidguard with the active directory. I've followed ...
0
votes
1answer
46 views

Is it possible to configure a Cisco AnyConnect VPN to use two separate LDAP authentication methods simultaneously?

I have a Cisco ASA 5505 with a Security Plus license along with an AnyConnect Plus license. I don't currently have any VPN configuration on the ASA as I'm still in the planning phase. I would like to ...
0
votes
0answers
11 views

Sync data between AD DS and AD LDS with differing schema

first off I have only recently been introduced to this world so forgive me if I trip up a bit :) From what I have read about replicating/synchronizing between AD and LDS it tends to disagree when the ...
0
votes
0answers
13 views

Oracle LDAP search where uid is not a part of the dn

I have a test server setup with users that have a uid in their DN and a CN in their DN: dn: cn=John Doe,ou=users,dc=qaoracleldap,dc=foo,dc=lan cn: John Doe givenname: John objectclass: ...
4
votes
1answer
6k views

Couldn't drop privileges: User is missing UID (see mail_uid setting)

I'm hoping I can use some help. I'm configuring dovecot_ldap, but I can't seem to be able to get dovecot to authenticate the ldap user. Below is my config and log info: hosts = 192.168.128.45:3268 ...
0
votes
1answer
17 views

Weird behavior with ldap and getent or repquota

I've observed a weird behavior in my network. I have my network users stored in OpenLDAP 2.4 which also serves a samba 3.6 Domain. I have user quotas on my NFS servers and that is where I stumbled ...
1
vote
1answer
1k views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
2
votes
1answer
28 views

What version(s) of SSL/TLS does Active Directory support?

I'm running a pair of 2012R2 RODCs behind a load balancer for authentication for certain applications (mostly on Linux). LDP.exe works fine for lookups, but we're having an issue with Postgres where ...
3
votes
1answer
2k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
-1
votes
0answers
34 views

Linux, Kerberos Auth, and LogonWorkstations AD Attribute

When using Kerb Auth on Linux, with a Server 2008 AD Domain for authentication, and nsswitch set to files then ldap: If an ldap user tries to ssh to a server, and they are a member of a group which ...