Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

9
votes
2answers
134 views
+50

Common wisdom about Active Directory authentication for RHEL/CentOS Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for RHEL-like servers and modern Windows Server operating systems? Over the years since my first attempts with ...
2
votes
1answer
49 views

build user chroot on first login

I'm using ldap for remote user authentication and I basically need to either figure out how to: a. chroot a user on machine b from machine a via nfs,(which doesn't seem possible without mounting ...
0
votes
1answer
1k views

TLS: hostname does not match CN in peer certificate

im trying to connect LDAP over StartTLS but Im stuck with an issue. I've followed step by step this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-tls and LDAP it's ...
4
votes
5answers
2k views

Ubuntu 12.04 LDAP SSL self-signed cert not accepted

I'm working with Ubuntu 12.04, using OpenLDAP server. I've followed the instructions on the Ubuntu help pages and can happily connect without security. To test my connection, I'm using ldapsearch ...
2
votes
2answers
1k views

Correct options for keeping open a reverse SSH-tunnel using autossh

I have a set-up with a LDAP-sever (ldapserver) behind a strict firewall, and a webapplication running on a sever (appserver) outside that firewall that needs to authenticate using that LDAP-sever. I ...
2
votes
0answers
12 views

Auditing anonymous binds to AD LDAP

We're about to commence an AD upgrade to 2012 R2, and I have just found to my horror that anonymous LDAP binds have been enabled in the 2003 domain. We've certainly been issuing accounts for LDAP ...
1
vote
1answer
31 views

After upgrading openssl, unable to bind to server: Can't contact LDAP server

It was working like this, in /etc/openldap/ldap.conf URI ldap://127.0.0.1/ BASE dc=example,dc=com TLS_REQUEST never TLS_CACERTDIR /etc/pki/tls/certs I was able to connect our secured ldap server. ...
1
vote
0answers
44 views

Routing LDAP traffic from Application server to Proxy to internet

I've included a drawing so you get an idea how it would work. (Red = LDAP connections , Blue = HTTP / AJP in the backend) Problem: We want to connect our customer application server to an LDAP of ...
1
vote
1answer
13k views

PAM_LDAP error trying to bind?

I have this error when I ssh to my LDAP client using the login name on the LDAP server my LDAP client's running Ubuntu 9.10 Karmic my LDAP server is Fedora Core 4 and running Fedora Directory Server ...
0
votes
0answers
15 views

How Setup LDAP server on Windows 7 step by step?(Very confused) [on hold]

I need to create a Ldap Server in windows 7 and create address book to import inside Thunderbird.I want step by step.
0
votes
3answers
641 views

Descriptive “constraint violation” when using passwd

Is it possible to inform the user of slightly more than just "constraint violation" when they attempt to change their password? Something like "password must be 7 or more characters", instead of ...
0
votes
1answer
829 views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
-1
votes
1answer
23 views

How to set “sudoers” in nsswitch.conf on Solaris-11

I am doing this on Solaris 11. When i open '/etc/nsswitch.conf' i see this - ... sudoers: files ... I would like to change this to - ... sudoers: files ldap ... I tried editing the file ...
1
vote
1answer
747 views

LDAPS being redirected to 389

We're trying to perform an LDAPS bind to a server which blocks 389 with a firewall so all traffic must travel over 636. In our test lab we're connecting to a test ldap (located on the same server) ...
5
votes
1answer
3k views

How to manage groups and users in Jenkins

I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right. I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the ...
1
vote
0answers
19 views

Connect an LDAP realm with an AD domain, with the same name?

The situation is a separate group has created an LDAP domain. We'll call it foo.bar. (fyi, none of these are connected in any way to the Internet) They also have a Windows domain and renamed it to ...
0
votes
1answer
26 views

Where do I specify the Bind DN and password for sss+ldap?

I'm trying sssd for LDAP authentication, and while it can show user IDs with the id command, getent group and getent passwd do not show LDAP names, and while I can chown files to ldap users, they ls ...
2
votes
1answer
671 views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
1
vote
1answer
739 views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
1answer
24 views

How to debug SASL authentication via LDAP towards active directory

I am trying to configure SASL running on Centos 6.5 to allow authentication towards the corporate active directory server. The end goal is to authenticate access to some subversion repos which are ...
0
votes
2answers
985 views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
3
votes
2answers
1k views

NetApp FAS 2040 LDAP Win2k8R2

I am trying to get my FAS2040 to action user lookups using LDAP, below is the filer configuration options: filer> options ldap ldap.ADdomain dc1.colour.domain.local ldap.base ...
4
votes
1answer
1k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
0
votes
1answer
2k views

Windows Server 2008 R2 Active Directory Web Services won't start with SSL

I am running a Windows 2008 R2 server as a PDC. I've installed the ADWS and I'm trying to get SSL support running but I'm experiencing the following error: Source: ADWS EventID: 1400 Active ...
1
vote
2answers
656 views

LDAP authentication with Graphite

I have setup Graphite Web 0.9.9 on CentOS 6.2 x86_64 at EC2 and I'm trying to get LDAP authentication to work against 389 Directory Server. I have configured local_settings.py with: USE_LDAP_AUTH ...
1
vote
1answer
12 views

Net::FTP Perl module hangs

So, I'm running Perl 5.8.8 on a RHEL5.2 system. I recently moved the LDAP source for authentication, and now I'm having issues with Net::FTP. Authentication works with the new LDAP source perfectly. ...
0
votes
1answer
21 views

OpenLDAP cannot add new schema

I'm trying to add new schema to my OpenLDAP server. The version of slapd is 2.4.23. I'm using Debian 6. If I understood it well, slapd 2.4+ uses OLC configuration with (cn=config) by default for this ...
3
votes
2answers
173 views

Why do I need to create symbolic links for certificates?

Other than noticing something like this: yourid@linuxtpf:~/certificates> ls -l lrwxrwxrwx 1 yourid users 9 2009-04-07 18:06 50a694ac.0 -> cert2.pem #<-- was missing lrwxrwxrwx 1 yourid ...
1
vote
1answer
2k views

Persuading openldap to work with SSL on Ubuntu with cn=config

I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance. I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
0
votes
0answers
15 views

Hostname aliases in LDAP and phpLDAPadmin

What is the best method of storing multiple hostname aliases in LDAP? Currently, the hosts file I wish to migrate has many entries such as 172.24.3.54 workstation114.example.net wks114 exphost3 ...
-2
votes
1answer
75 views

Loganalyzer LDAP

Iv installed Loganalyzer and now im trying to configure to authenticate with LDAP. And i have the following in loganalyzer config.php file: $CFG['UserDBEnabled'] = true; $CFG['UserDBServer'] = ...
0
votes
1answer
550 views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
0
votes
0answers
26 views

OpenLDAP+pam_ldap+ppolicy does not notify user that they are blocked

We have an OpenLDAP server configured to use the password policy overlay in order to lock users when they reach a certain number of failed password attempts. This is working perfectly but when a ...
0
votes
1answer
1k views

OS X Server with Open Directory and Network Configuration

I am trying to use a Mac Mini as an Open Directory domain, however it fails on the Open Directory Setup. The exact error from the log is a below: Server[308]: An error occurred while configuring ...
1
vote
2answers
5k views

Jenkins/Hudson - LDAP group *lookup* does not work

I'm trying to get Jenkins to authenticate users via our active directory groups. If I insert users they are correctly looked up. If I insert group names, they are not found. Edit: Through trial ...
0
votes
1answer
1k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
0
votes
1answer
668 views

cannot add ldap group to system local user

I have an ldap server with users and groups. Also, another server that is using the first one for the accounts. Users from ldap can login to the second server. I can add groups to the users in ldap. ...
1
vote
0answers
27 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
1
vote
1answer
21 views

OpenLDAP user group membership integrity

In OpenLDAP a user has membership in a group. Suppose one deletes the user. In the member attribute of the group the user remains. Is this considered an integrity violation? Is there a means to ...
0
votes
2answers
40 views

Account name changes

The way we currently handle account name changes is quite cumbersome and wondering if there is an easier way to go about things. Name change request comes through and we create a new AD account, ...
0
votes
0answers
19 views

Cannot authenticate as diradmin - OS X Server 10.6 Workgroup Manager

As far as I can tell, not an uncommon problem: when I try to authenticate as 'diradmin' in Workgroup Manager for /LDAPv3/127.0.0.1 it fails with a login problem: "The login information is not valid ...
1
vote
1answer
55 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
0
votes
0answers
11 views

389 directory server - password not recognized

I have installed "389 directory server" on a CentOS6.5 server, with the setup-ds-admin.pl script. Then added 2 users from the '389-console', to "People" (setting their password from the GUI). Now I'm ...
0
votes
0answers
36 views

Managing Linux user accounts + Samba + more

I have a network of about 3-6 CentOS servers, with about 5-10 users (currently, and near future). I'm looking for a solution for centralized managements of users. My requirements from it are: Linux ...
0
votes
1answer
38 views

Immediate logout after login

I have copied VM with Red Hat 6.4 in VMware vSphere Client, move it to another network and change configs for connecting to ldap servers. And now I have a problem with logging procedure through LDAP. ...
0
votes
1answer
930 views

OSX Server 10.5 - Cannot log into Workgroup Manager - diradmin password is correct

I've got a setup where I am trying to rescue a broken AD. We can no longer authenticate on the Workgroup manager, with passwords being rejected all the time - even though it is correct. I can connect ...
0
votes
1answer
77 views

Centos 6.5, Active directory and ldapsearch

I need to query the ldap part of an Active Directory DC from CentOS 6.5. ldapsearch allows me to do that, but I have found two bumps in the "ldapsearch" road: ldapsearch wraps long text to several ...
0
votes
1answer
27 views

Adding win7 shared folders to *nix domain?

I have a CentOS 6.x/ NIS based network from which I need to start sharing some folders to Win7 machines. I've installed Samba on a test system but can't seem to get the trick of having the Win7 ...
0
votes
1answer
26 views

Authenticating Apache HTTPd against Active Directory

We're using Apache 2.2.12 to authenticate against one Active Directory domain using a .htaccess configuration file. Our current configuration is: AuthBasicProvider ldap AuthType Basic AuthName "AD ...
0
votes
1answer
40 views

Configure GIT server over HTTP using LDAP

I am quite new to GIT and overall am not very experienced in infrastructure setup. However, what I am trying to do seems to be very basic and I am not able to do it. I am trying to create a GIT ...