Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
2 views

SLES12, Authentication with PAM and LDAP

I want to set up an ssh-server which can authenticate against a ldap-server. The ldap-server is already running (openldap). Now I've installed a fresh SLES12SP1-Server and followed some tutorials for ...
2
votes
2answers
5k views

Persuading openldap to work with SSL on Ubuntu with cn=config

I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance. I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
0
votes
2answers
1k views

SSSD & LDAP authentication

I’m currently working on deploying openldap and SSSD for authentication. When I try to id a user that is stored within ldap I get the response no such user. The user has been added to LDAP correctly ...
0
votes
0answers
11 views

SYN/ACK dropped by Nexus 7000 series

We have a Cisco Nexus 7000 series switch sitting behind a Palo Alto firewall that does not accept the SYN/ACK packet sent back from LDAP connection. Any other packets are processed just fine. When ...
2
votes
1answer
1k views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
0
votes
2answers
1k views

Can't contact LDAP server (with ldaps) in Docker

I'm trying to do a ldapsearch like this : ldapsearch -x -D "uid=username,ou=people,dc=example" -w passw0rd -H ldaps://example.com "(objectClass=example)" But it's giving me this error : ...
0
votes
1answer
13 views

Apache mod_authnz_ldap: Is it possible to connect via Unix domain socket file?

On my Debian server I have configured the LDAP server slapd to accept connections only via Unix domain socket file. This is the relevant part from /etc/defaults/slapd: SLAPD_SERVICES="ldapi:///" I ...
0
votes
1answer
4k views

LDAP+SAMBA login issues

I'm on a clean Ubuntu 13.10 install and I've just installed and configured openldap+samba. While I'm trying to configure a domain controller plus user shares. In order to ease LDAP management I've ...
0
votes
1answer
1k views

LDAP port forwarding or proxy

I am trying to find a way to locally access an OID server (via LDAP) that is usually only accessible from my app's staging server. I have login credentials for the staging box. I do not have login ...
0
votes
1answer
9 views

nslcd and kerberos without Reverse DNS

I am trying to get nslcd to connect with an ldap instance using GSSAPI and kerberos authentication. Problem i'm having is that nslcd keeps using the wrong principal to try and connected with the ...
6
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
5
votes
1answer
3k views

How to migrate LDAP (database,schema,configuration) to other machine

I'm using openldap 2.4.40, and i need to migrate my existing ldap database, configuration, and schema (basically everything ldap server related) to a new machine. the problem is, I use cn=config ...
0
votes
0answers
11 views

Apache WebDAV and LDAP group membership authorization

I'd like to authenticate and authorize webdav access based on LDAP. The authentication part works just fine using mod_authnz_ldap with Apache 2.4. The authorization part is giving me more problems. ...
2
votes
1answer
1k views

Configure Jenkins with LDAP : parameter 'Root DN'

I am installing an LDAP server and configuring Jenkins in order to accept LDAP for authentication. In Jenkins parameters, I have a weird behavior with the parameter Root DN. Documentation says : ...
1
vote
1answer
22 views

Are LDAP search results transactional?

When a client makes an LDAP search against a directory like AD or OpenLDAP, are the results that come back required to represent the state of the directory either before or after any modifying ...
4
votes
1answer
1k views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
4
votes
2answers
4k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.example.org port 636 with the ssl checkbox. This is on the local server itself. ...
2
votes
1answer
35 views

What is the difference between an RDN, a DN, and a CN in LDAP?

I'm reading two (link1, link2) articles on LDAP and they make mention of Relative Distinguished Name (RDN), Distinguished Name (DN) and CN which is supposed to be the same thing as an RDN. I ...
0
votes
1answer
11 views

Can Windows Authenticate Against ApacheDS?

ApacheDS claims to have support for ldap and Kerberos, so is it possible to authenticate Windows machines using it?
0
votes
2answers
90 views

Is it possible to configure a Cisco AnyConnect VPN to use two separate LDAP authentication methods simultaneously?

I have a Cisco ASA 5505 with a Security Plus license along with an AnyConnect Plus license. I don't currently have any VPN configuration on the ASA as I'm still in the planning phase. I would like to ...
3
votes
1answer
14 views

ldap query for blank attribute value?

How does one query an ldap attribute for a blank value? The equivalent of str1==null in programming? I tried the following but it didn't work: (&(objectCategory=computer)(whenCreated>=...
0
votes
1answer
14 views

ion Where can I find a good list of Active Directory ldap attributes? [closed]

To be clear, I'm looking for the node data, and NOT the keys in Active Directory's ldap tree node. To be specific I suppose I'm looking for the official Microsoft documentation on this.
0
votes
0answers
11 views

Make DokuWiki update sambaNTPassword when updating LDAP-password

I'm running an LDAP authentication service (OpenLDAP with phpLdapAdmin) on a Debian box, and at the moment it's connected to a local Samba share and an instance of DokuWiki. Everything is working ...
0
votes
1answer
1k views

LDAP installed, running, but can't connect remotely [Ubuntu 10.10]

I installed LDAP on my ubuntu 10.10 system, using the tutorial found here: https://help.ubuntu.com/10.10/serverguide/C/openldap-server.html Everything seems to be working well, when logged into the ...
3
votes
1answer
2k views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
3
votes
0answers
28 views

Authentication vsftpd account using remote LDAP user

I'm trying to authenticate vsftpd from LDAP logins which hosted remotely another server . vsftpd hosted on Ubuntu 14.04.2 LTS (GNU/Linux 3.13.0-48-generic x86_64) amazon aws . from the LDAP server ...
0
votes
1answer
27 views

Troubleshooting AD LDS

I have a Win 2012 Server that I've created a new AD LDS forest on. I'm running a software application on the server that uses this forest for user credentials. The software application is not logging ...
4
votes
2answers
4k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
1
vote
1answer
32 views

OpenLDAP client inside a docker container

I have a docker container running CentOS 6 with a non-root user and OpenLDAP. When I use getent passwd it just returns the data from /etc/passwd. The config file /etc/nsswitch.conf is customized ...
1
vote
1answer
20 views

LDAP user account with no password (Linux)

Is it possible to setup a password-less ldap user login? I'd like to create a user that runs batch jobs with sudo rights. So it can ssh to multiple machines and run jobs without using ssh-keygen, ...
0
votes
1answer
90 views

User ldap cannot change password : LDAP password information update failed: Insufficient access

I'm using centos 6.7 to create LDAP server, but the user still cannot change their own password. The error when user try to change the password : [john2@servergw ~]$ passwd Changing password for ...
2
votes
0answers
57 views

LDAP changing password for wrong user?

I have an OpenLDAP server setup. I currently have two users added to my server. As far as my testing goes, a single user instance work just perfectly. My first issue arise when i have two users on the ...
-1
votes
0answers
14 views

openldap as filtering proxy for AD

I have successfully set up an OpenLDAP as proxy; this is so that public-facing servers not in our corp network can run LDAP-authenticating web apps without having to expose the Windows AD Server to ...
0
votes
2answers
3k views

Squidguard + LDAP (Active Directory) not working

I've been trying to configure a squid with squidguard and MS AD. I've successfuly linked my squid with my AD so far, but now, I want to link my squidguard with the active directory. I've followed ...
4
votes
1answer
6k views

Couldn't drop privileges: User is missing UID (see mail_uid setting)

I'm hoping I can use some help. I'm configuring dovecot_ldap, but I can't seem to be able to get dovecot to authenticate the ldap user. Below is my config and log info: hosts = 192.168.128.45:3268 ...
1
vote
1answer
65 views

Enable SSL in Apache Directory Studio

I'm trying to enable SSL in Apache Directory Studio. You can see I've enabled LDAPS Server and also configured the SSLKeystore. Now, when in do a ldapsearch from my terminal command. I get this error....
1
vote
1answer
1k views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
0
votes
1answer
27 views

Ssh + ldap not asking for private/public key

I have fully configured a LDAP server which works perfectly for authenticating users across my multiple nodes. I wanted to add an extra layer of security with the usual two factor public private key. ...
0
votes
3answers
10k views

How to modify/add a new objectClass to an entry in OpenLDAP

I recently setup centralized authentication system using OpenLDAP. Now I need to extend the users that are defined in the database to include a new object class that contains some security related ...
1
vote
1answer
1k views

Auth fail on Samba server with LDAP backend‏

I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc. The samba schema is present in the LDAP, and in the users profile. ...
0
votes
1answer
26 views

Configuring django with LDAP

I have configured LDAP successfully with a python application using little more than these statements in db/model.py: from gluon.contrib.login_methods.ldap_auth import ldap_auth auth.settings....
5
votes
1answer
69 views

get AD group path in the domain/tree

How to get the path of a specific group from the Domain/tree? I am not getting to the info with the "Active Directory Users and Groups" program. We have a extensive tree of folders beneath the ...
0
votes
1answer
10k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
3
votes
1answer
2k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
5
votes
5answers
10k views

Ubuntu 12.04 LDAP SSL self-signed cert not accepted

I'm working with Ubuntu 12.04, using OpenLDAP server. I've followed the instructions on the Ubuntu help pages and can happily connect without security. To test my connection, I'm using ldapsearch ...
2
votes
3answers
14k views

ldapadd/ldapmodify: clarifications needed about these comamnds

The ldapmodify man page states that: The default for ldapmodify is to modify existing entries Yet when I try to import an LDIF file with ldapmodify I get the below error: ldapmodify: modify ...
16
votes
3answers
119k views

How to test a LDAP connection from a client

How to check the LDAP connection from a client to server. I'm working on the LDAP authentication and this client desktop needs to authenticate via a LDAP server. I can SSH to the LDAP server using ...
0
votes
0answers
33 views

NFS nobody issue

I am having the nfs nobody issue running Centos 6 . I am running nfsv4 and authenticating users using 389-ds LDAP . The nfs mounts on the client are fine, but I am getting the folling error: ...
0
votes
0answers
14 views

SAMaccountname bind against Windows RODC not working

I'm currently trying to bind against an Windows 2012 RODC using the SAMAccountName and it doesnt work but when I try the userPrincipalName it works like a dream. Is there any way that I can enable ...
2
votes
1answer
2k views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by dn="cn=...