Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
6 views

Password History isn't working in 389ds LDAP

I'm testing few of the password policies that are available in 389ds which is installed in CentOS 6.5. In that except Password History, all the attributes are working according to the configuration ...
1
vote
0answers
11 views

Remote home-folders with optional but preferred locally-encrypted folder

I have the use case that on default all users are working within remote mounted home directories. However, sometimes they prefer a local home on one or more machines, e.g. because the network is too ...
0
votes
0answers
4 views

Wrong ldap user and group IDs on nfs

we have users authentication driven by ldap and home directories shared on nfs server mounted by autofs. We recently installed Ubuntu 15.04 on three new machines and added them to our infrastructure ...
4
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
0
votes
2answers
17 views

How to set default values in openldap

How can we set the default value for an attribute in openldap like we do in mysql schema. MYSQL create table test (str varchar(32), ts TIMESTAMP DEFAULT CURRENT_TIMESTAMP);
1
vote
2answers
1k views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
2
votes
1answer
5k views

SquidGuard and Active Directory: how to deal with multiple groups?

I'm setting up SquidGuard (1.4) to validate users against an Active Directory domain and apply ACLs based on group membership; this is an example of my squidGuard.conf: src AD_Group_A { ...
3
votes
1answer
3k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
2
votes
2answers
34 views

ldap is working but not ldaps correctly

I'm a little lost with ldapsearch... I have to configure a cloud with AD authentication. this is working well ldapsearch -h server -p 389 -x -D 'admin.test' -w 'xxx' -b ...
0
votes
1answer
17 views

Can a base DN for LDAP queries be a group DN?

I am trying to do LDAP integration for user authentication in HP NNMi. (NNMi on RHEL6 to Active Directory on W2K8 R2) I know I can get it to work if I use the OU that my users are in as the base DN ...
-1
votes
0answers
12 views

Where are the zentyal users stored?

I just succeeded in setting up zentyal and sending/receiving emails. The problem is, the first user that I created in zentyal Users and Computers, does not show up. I can not reproduce the problem ...
0
votes
0answers
22 views

LDAP syncrepl with kerberos authentication

I'm trying to set up a replication server for LDAP using syncrepl. I would like to use Kerberos to authenticate the consumer, because we have it set up, and it seems more secure. The database ...
2
votes
2answers
29 views

AD server not using cert for Active Directory LDAP + SSL

I'm trying to enable SSL for Active Directory in our domain. The problem I'm running into is that the server is failing to recognize the certificate I've made for it. Whenever I try to query the ...
1
vote
1answer
122 views

Multimaster LDAP replication on Ubuntu 11.04

I'm attempting to setup a multimaster pair on Ubuntu 11.04. I currently have a working single server which I've cloned to a 2nd server. The installed version of OpenLDAP is the default from the Ubuntu ...
0
votes
1answer
43 views

OpenLdap Replication

I have installed openldap on two machines and tried to setup multi-way replication.I am able to perform the multi-way replication (Add/Update/delete) when both the machines are up and ldap is running. ...
1
vote
1answer
1k views

getent and ldapsearch results are inconsistent concerning the loginShell

I have a test that creates a user in LDAP with /bin/bash and I then modify the ldap attributes to /bin/noshell but the results from getent and ldapsearch are inconsistent for the shell. This user does ...
14
votes
3answers
13k views

How to use Google Apps as an OD/AD/LDAP Provider

I see tons of solutions for allowing Google Apps to use external AD and LDAP services for login. However, I already have a ton of users setup in Google Apps already, and I'm trying to go the other ...
1
vote
2answers
1k views

How to enable catch-all email in iRedMail Open Source edition?

How to create catch-all email alias for domain in iRedMail Open Source edition? I know that's possible via LDAP and found the following instructions: ...
0
votes
1answer
2k views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
6
votes
1answer
448 views

CentOS requires entering password twice for sudo, login

At every login or sudo prompt, the server always rejects the password when it is first supplied, but accepts it the second time. I found this thread which describes what seems to be the same problem, ...
4
votes
1answer
3k views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
3
votes
2answers
114 views

Usefulness of an absolute filter on an LDAP query?

I was perusing the source for OpenLDAP and I saw where the root DSE supports something called absolute filters. It looks like it's specified in RFC4526 It looks like the author that originally drafted ...
1
vote
1answer
2k views

ldap-authentication without sambaSamAccount on linux smb/cifs server (e.g. samba)

i'm currently running samba-3.5.6 on a debian/wheezy host to act as the fileserver for our department's w32-clients. authentication is done via OpenLDAP, where each user-dn has an ...
3
votes
2answers
5k views

Unable to modify schema in OpenLDAP using run-time configuration cn=config

I'm having trouble modifying the schema of an OpenLDAP installation using the run-time configuration (cn=config). What I'm trying to do is modify existing attributes and add new ones to a custom ...
0
votes
0answers
22 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
0
votes
1answer
2k views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
2
votes
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
2
votes
1answer
2k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
0
votes
0answers
13 views

How to authenticate RHEL 6.6 to Windows Server 2012 Active Directory and LDAP? [duplicate]

Need help with setting up LDAP on Windows Server 2012 R2, I have AD setup already, but not sure what all I need to do to get LDAP running. Then I can't find any good resources online to authenticate ...
0
votes
2answers
2k views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
2
votes
0answers
38 views

How to configure LDAP client without Yast - SLES 11 SP3 [closed]

I'm configuring an LDAP client in a large number of Suse servers. The only way that I know to do this is using Yast, and this way is slow. I can't find another way. I did it on RHEL, Debian, and ...
2
votes
2answers
1k views

LDAP authentication with Graphite

I have setup Graphite Web 0.9.9 on CentOS 6.2 x86_64 at EC2 and I'm trying to get LDAP authentication to work against 389 Directory Server. I have configured local_settings.py with: USE_LDAP_AUTH ...
1
vote
1answer
1k views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
0
votes
1answer
2k views

OS X Server with Open Directory and Network Configuration

I am trying to use a Mac Mini as an Open Directory domain, however it fails on the Open Directory Setup. The exact error from the log is a below: Server[308]: An error occurred while configuring ...
0
votes
1answer
2k views

Squidguard + LDAP (Active Directory) not working

I've been trying to configure a squid with squidguard and MS AD. I've successfuly linked my squid with my AD so far, but now, I want to link my squidguard with the active directory. I've followed ...
1
vote
1answer
3k views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
-1
votes
2answers
22 views

getxattr operation not supported samba audit

I have a strange issue with my samba ldap server, its a centos server with same 3.0, it was working fine from quite some time but suddenly I noticed that my log file is full of messages saying ...
1
vote
0answers
45 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
0
votes
0answers
19 views

ldapsearch through ssh tunnel failing

I have following situation: 2 servers: a_server - this one from which I want to perform ldapsearch b_server - this is where LDAP directory located When I'm on b_server, this command ldapsearch -x ...
0
votes
2answers
57 views

Linux-SSSD: always getting incorrect password when su'ing to domain users, but why?

I've built a new Linux environment at my work place. I've configured sssd and bound it to one of the Active Directory domains of the company. I can tell that the sssd is partially working, let me ...
2
votes
4answers
5k views

pam_ldap.so before pam_unix.so? Is it ever possible?

we have a couple of servers with PAM+LDAP. The configuration is standard (see http://arthurdejong.org/nss-pam-ldapd/setup or http://wiki.debian.org/LDAP/PAM). For example, /etc/pam.d/common-auth ...
6
votes
4answers
1k views

Free calendar server? [closed]

I am looking for free calendar server who can authenticate to LDAP server. I want our users to use thunderbird lightning with calendar server. We have mail server with devcot and squirlmail for ...
-2
votes
1answer
36 views

Are the UID of users from a domain maintained locally in a machine?

This could be total nonsense but as I am new and am trying to learn. I came across this question. I have seen many of my office linux machines connected to some domain. I am wondering as if a ...
0
votes
0answers
36 views

Integrate Squid Kerberos auth and Squidguard ldapusersearch into AD

I'm having trouble with Squid Kerberos auth and the Squidguard ldapusersearch that I use to apply ACLs by Active Directory groups membership. The problem is : Squid and Squidguard see my user as : ...
2
votes
1answer
4k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
1answer
56 views

Authenticate Radius with LDAP Group

I'm trying to authenticate specific LDAP group with FreeRadius. I need to apply this checking inside a virtual-server, as there are two different groups and i'm using a single Unix Box. Any ...
0
votes
1answer
1k views

Disable LDAP service in CentOS 6.3

What command needed to disable LDAP service in CentOS 6.3. I tried: authconfig --disableldap but it doesn't work. I am trying to run ISC-DHCP in my machine but it always shows Not searching ...
0
votes
1answer
1k views

LDAP client on Ubuntu 14.04 LTS server

I am setting up an LDAP client on Ubuntu 14.04 server and can't seem to be able to logon. I see an error in the auth.log that says unknown user. I installed packages: ldap-auth-client ...
0
votes
4answers
1k views

Allowing LDAP users to change password

How to allow LDAP users to change password from client machines ?
0
votes
1answer
42 views

LDAP auth fails for some users

Something weird is happening, some users are not able to authenticate via our LDAP to access services (SSH connection, Samba, etc.). Their entries are in the LDAP and everything seems to be fine, I ...