Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
1answer
2k views

TLS: hostname does not match CN in peer certificate

im trying to connect LDAP over StartTLS but Im stuck with an issue. I've followed step by step this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-tls and LDAP it's ...
0
votes
3answers
887 views

Descriptive “constraint violation” when using passwd

Is it possible to inform the user of slightly more than just "constraint violation" when they attempt to change their password? Something like "password must be 7 or more characters", instead of ...
-1
votes
0answers
12 views

How do I bind Isilon clusters to dsee7 using ldaps?

It's trivial to make the Isilon talk to my ldap servers unencrypted but I'm mostly clueless regarding the Bind To: and password fields. We're using TLS to secure LDAP on the Linux clients . . . not ...
1
vote
1answer
20 views

Are there any ldap proxy servers that can supplement the results from the main ldap server?

We have a central ldap server that authenticates and provides authorization information about users in our institution. I am looking for a LDAP Proxy that supplement the central LDAP server to support ...
-1
votes
2answers
39 views

RHEL 6.5 and LDAP

I am trying to connect our Active directory server to brand new RHEL 6.5 server. I want to authenticate users using AD credentials, but I want to restrict that only certain users can login, I don't ...
1
vote
1answer
39 views

Postfix/dovecot remove LDAP user

I have to remove or blacklist an LDAP/dovecot user. The authentication is setup from active directory what I cannot manage so I thought there should be a way at least to disable this specific user on ...
5
votes
1answer
4k views

How to manage groups and users in Jenkins

I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right. I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the ...
1
vote
1answer
70 views

Is anyone using access.conf and netgroup authentication with sssd?

I want to be able to authenticate users (via ssh) to specific groups of hosts based on the users' LDAP netgroup membership. The LDAP server is dsee7. The distro is OEL 6.5 with openldap as the client. ...
7
votes
5answers
1k views

Replacement for NIS/YP

The company that I am working for is embarking on replacing the current locally developed NIS/YP structure with LDAP. We already have AD in house for the Windows stuff and would like to consider ...
0
votes
0answers
14 views

Freenas & LDAP Multiple User Groups Not Taking Affect

we are using, Freenas 9.2.1.7 which communicates with LDAP to control file permission. We have Windows users in multiple groups. Some belong to Finance as their primary group and Admin as another ...
0
votes
1answer
83 views

Why can a local root turn into any LDAP user?

I know this has been asked here before, but I am not satisfied with the answers and don't know if it's ok to revive and hijack an older question. We have workstations that authenticate users on an ...
0
votes
3answers
30 views

executing commands when user first logs in

So I use webmin to create ldap user. I then manually create public_html folder, and set quota for newly created home folder. Is there a way such that I can execute commands when user first logs in or ...
0
votes
1answer
17 views

Change SAMBA password in LDAP with Apache Directory Studio

I am using Apache Directory Studio to administer a small LDAP database, and I am planning to stop using LAM for user and group management because it lacks groupOfUniqueNames support. I have only one ...
0
votes
1answer
8 views

phpldapadmin uidNumber stopped auto-updating on new user creation

We are having an issue that just started this morning. It seems our phpldapadmin (1.2.04) interface has stopped auto-incrementing the uidNumber on new user creation. Basically we are stuck at ...
0
votes
0answers
39 views

Way to authenticate against Active Directory but without direct access to it?

So I'm in an interesting situation. I have an application that only supports authentication via LDAP on my network and client with active directory on their network. We have a secure VPN tunnel ...
2
votes
1answer
3k views

Couldn't drop privileges: User is missing UID (see mail_uid setting)

I'm hoping I can use some help. I'm configuring dovecot_ldap, but I can't seem to be able to get dovecot to authenticate the ldap user. Below is my config and log info: hosts = 192.168.128.45:3268 ...
1
vote
2answers
721 views

SSSD ignoring ldap_access_filter

I've setup sssd and LDAP. Users authenticate and login. My problem is that sssd seems to ignore the ldap_access_filter option and allows all users to login. I've examined the logs/debug and pam_sss ...
1
vote
2answers
29 views

Use ldapsearch to bind using short username?

I am trying for more than 2 hours to find a way to use ldapsearch to connect to Microsoft Active Directory and I am not able to perform a successful bind. I do not want to use the CN of my account ...
1
vote
1answer
32 views

Is it possible to have one group or account authenticate locally, bypassing LDAP auth?

We have one RAC cluster of machines where the local UID:GID of a couple users (oracle and grid) do not match the UID:GID of those same users in LDAP. Ultimately we ought to change the UID and GID of ...
0
votes
1answer
15 views

Why does ldapsearch not show user's supplemental groups?

I have a user who when I type 'id username' shows more groups than when I query ldap using ldapsearch. What switch do I use? $ id apanda uid=14510(apanda) gid=5010(sambauser) ...
0
votes
1answer
42 views

389 directory server - password not recognized

I have installed "389 directory server" on a CentOS6.5 server, with the setup-ds-admin.pl script. Then added 2 users from the '389-console', to "People" (setting their password from the GUI). Now I'm ...
0
votes
2answers
179 views

Managing Linux user accounts + Samba + more

I have a network of about 3-6 CentOS servers, with about 5-10 users (currently, and near future). I'm looking for a solution for centralized managements of users. My requirements from it are: Linux ...
0
votes
0answers
15 views

ejabberd and LDAP authentication using StartTLS

I am trying to setup ejabberd that authenticates users against an LDAP server. The LDAP server requires all clients to connect via StartTLS (olcSecurity: tls=1). ejabberd's LDAP module does not ...
0
votes
1answer
22 views

Weblogic Admin server gets LDAP errors then unexpectedly shuts down

we have a new(ish) WLS 9.2 installation Over the last day or so, after restarting WLS, after a while, the admin server unexpectedly shuts down, preceded in the logs by many (hundreds) occurrences of ...
0
votes
1answer
880 views

ldap-authentication without sambaSamAccount on linux smb/cifs server (e.g. samba)

i'm currently running samba-3.5.6 on a debian/wheezy host to act as the fileserver for our department's w32-clients. authentication is done via OpenLDAP, where each user-dn has an ...
4
votes
3answers
1k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
2
votes
1answer
2k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
0
votes
0answers
23 views

pfSense and Windows Domain Controller - configuration?

I've got a small scaled business network separated into green, orange and red using pfSense as firewall & gateway. In the local network, there's a Windows server machine hosting a domain ...
0
votes
0answers
30 views

Apache - Restrict access to a ldap group on a directory [closed]

Requirement - I want to restrict access on a directory for ldap groups. Ldap group B members must not be able to access http://foobar.com/a Ldap group A members must not be able to access ...
2
votes
1answer
1k views

Ubuntu LDAP auth - offline cache / network init speed

I have configured LDAP auth for Ubuntu using this guide. The authentication works, but I have connection problems after reboot & suspend. Although the PC is configured using a static ip, after ...
0
votes
1answer
36 views

LDAP Groups in authconfig

In my authconfig setup, I always use : --ldapbasedn='ou=users,o=Directory' I thought by using: --ldapbasedn='o=Directory' groups would also be included, but no luck. My LDAP schema looks ...
0
votes
0answers
343 views

Use alias in auth users postfix

In my test postfix server I have configured SASL auth and reject_authenticated_sender_login_mismatch. My problem is that I would like to use alias on authenticated user, but I don't know how to do ...
3
votes
4answers
1k views

How can I require a certain group of users to login via LDAP while letting others use either LDAP or local login?

I have set up my system to allow either LDAP or the local password for login. I did this by adding "password sufficient pam_ldap.so" to PAM and calling "pam_unix2.so" afterwards. However I would ...
0
votes
0answers
22 views

Mini mac server returning:- attribute “entryCSN” index delete failure

I have an Open Directory(OD) server running on OSX 10.8.5. I have software connecting to it (a web interface) which is searching the LDAP for users. So I run the query on the web app, and look in ...
4
votes
1answer
241 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
0
votes
1answer
3k views

Windows Server 2008 R2 Active Directory Web Services won't start with SSL

I am running a Windows 2008 R2 server as a PDC. I've installed the ADWS and I'm trying to get SSL support running but I'm experiencing the following error: Source: ADWS EventID: 1400 Active ...
0
votes
2answers
1k views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
3
votes
2answers
2k views

NetApp FAS 2040 LDAP Win2k8R2

I am trying to get my FAS2040 to action user lookups using LDAP, below is the filer configuration options: filer> options ldap ldap.ADdomain dc1.colour.domain.local ldap.base ...
0
votes
3answers
1k views

Authenticate users with LDAP and Apache 2.4

i would like to setup a LDAP Authentication with Apache 2.4. LDAP Sever is a Windows 2008. My .htaccess looks like: AuthType Basic AuthName "Login" AuthBasicProvider ldap AuthLDAPBindDN ...
0
votes
1answer
721 views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
1
vote
1answer
889 views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
0
votes
1answer
14 views

How do I change pwdMaxAge on a “specialized password policy?”

I'm supporting dsee7 (Oracle/Sun LDAP server) and I have a "specialized password policy" for non human accounts called, SrvsPasswdPolicy. "pwdPolicySubentry: cn=SrvsPasswdPolicy,cn=config" I need to ...
1
vote
2answers
816 views

LDAP authentication with Graphite

I have setup Graphite Web 0.9.9 on CentOS 6.2 x86_64 at EC2 and I'm trying to get LDAP authentication to work against 389 Directory Server. I have configured local_settings.py with: USE_LDAP_AUTH ...
-1
votes
0answers
24 views

AD/LDAP: User accounts lost “Change password” permission for SELF

Seemingly random user objects in our 2003 Native Active Directory lost the non-inherited "SELF" and "Everyone" entries that grant "Change password." This has resulted in random people not being able ...
0
votes
1answer
2k views

OS X Server with Open Directory and Network Configuration

I am trying to use a Mac Mini as an Open Directory domain, however it fails on the Open Directory Setup. The exact error from the log is a below: Server[308]: An error occurred while configuring ...
0
votes
0answers
27 views

Percona MySQL LDAP authentication fails through .NET MySQL connector

Basically, MySQL uses its native authentication, where usernames and passwords are stored in mysql.user table. MySQL authenticates user against the credentials stored in mysql.user table. Our ...
0
votes
0answers
17 views

Is it possible to use iptables and trafficcontrol (tc qdisc) together to set rules on only specific packets/traffic?

I would need to set delay on my network interface such that only a specific set of packets/traffic is affected by this delay. i.e., I can set a 9 sec delay on eth0 tc qdisc add dev eth0 root netem ...
0
votes
1answer
82 views

LDAP client on Ubuntu 14.04 LTS server

I am setting up an LDAP client on Ubuntu 14.04 server and can't seem to be able to logon. I see an error in the auth.log that says unknown user. I installed packages: ldap-auth-client ...
0
votes
1answer
844 views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
2
votes
2answers
4k views

What is the best way to see objects attributes in Active Directory?

I can not find how to see objects attributes in Active Directory in Microsoft Management Console (MMS). Please tell me if it is possible to do it in MMS. I found the Active Directory Explorer that ...