Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
2answers
5k views

getent passwd dosen't show users of LDAP server

I have made the LDAP authentification configurations and I try to authenticate to the LDAP server on Ubuntu 14.04 TLS. This is the file nsswitch.conf : # /etc/nsswitch.conf # # Example configuration ...
6
votes
1answer
11k views

How to manage groups and users in Jenkins

I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right. I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the ...
0
votes
0answers
23 views

LDAP modify doesn't change anything

Got an issue with Active Directory LDAP and setting passwords. I'm connected through the LDAPS protocol to my AD server, and binding is successful. When attempting to set a user password, no error is ...
0
votes
0answers
15 views

How to change the 'olcAccess' values of olcDatabase in OpenLDAP via spring-ldap?

I'm a new person of using spring-ldap-2.0.4 in order to communicate openldap, and change olcAccess values of olcDatabase via spring LDAP interface without using LDIF, I have met a difficult problem, ...
0
votes
0answers
13 views

Debian Cyrus SASL LDAP Auth fails

I am in the middle of an emergency server transfer from a server I did not setup to a new piece of hardware. I am running the newest Debian with Postfix and Cyrus. I have copied over the majority of ...
1
vote
1answer
6k views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
1
vote
1answer
48 views

sAMAccountName requires DOMAIN\ to authenticate

I am trying to ingtegrate SLES with Windows Active directory server for authentication purposes. We need to use sAMAccountName as login name but its unable to bind if we didn't give ...
1
vote
2answers
1k views

LDAP authentication apache 2.2 error 500

This is my LDAP configuration in Apache2.2.x Order deny,allow AuthType Basic AuthName "Test" AuthBasicProvider ldap AuthLDAPURL "ldap://dc1.domain.com:389/DC=domain,DC=com?sAMAccountName" ...
0
votes
2answers
1k views

ldap query with nested group

I try to build a ldap query to MS Active Directory. I found that there is a LDAP_MATCHING_RULE_IN_CHAIN type to do so. Which results in the follow syntax: ...
1
vote
1answer
14 views

How to only allow users and/or groups access to certain client machines that are connected to an openldap server?

I would really like to figure out how I can allow users and/or groups access to certain client machines that are all connected to an OpenLDAP server. I would like to do this whether the user is ...
1
vote
3answers
3k views

Is anyone using access.conf and netgroup authentication with sssd?

I want to be able to authenticate users (via ssh) to specific groups of hosts based on the users' LDAP netgroup membership. The LDAP server is dsee7. The distro is OEL 6.5 with openldap as the client. ...
23
votes
5answers
16k views

Common wisdom about Active Directory authentication for Linux Servers?

What is the common wisdom in 2014 about Active Directory authentication/integration for Linux servers and modern Windows Server operating systems (CentOS/RHEL-focused)? Over the years since my first ...
0
votes
0answers
33 views

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in ...
0
votes
1answer
2k views

LDAP client on Ubuntu 14.04 LTS server

I am setting up an LDAP client on Ubuntu 14.04 server and can't seem to be able to logon. I see an error in the auth.log that says unknown user. I installed packages: ldap-auth-client ...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
0
votes
1answer
1k views

SSSD & LDAP authentication

I’m currently working on deploying openldap and SSSD for authentication. When I try to id a user that is stored within ldap I get the response no such user. The user has been added to LDAP correctly ...
0
votes
0answers
13 views

Gitlab ldap user filter

I need to filter out some groups from corporate ldap server to make gitlab available to most people via ldap auth. I created this filter: gitlab_rails['ldap_user_filter'] = ...
0
votes
1answer
48 views

Forcing OpenLDAP connections to use STARTTLS not allowing user to login

I have a basic OpenLDAP server running on Ubuntu 16.04LTS which authenticates users perfectly fine but I really wanted to make it more secure so I decided to use STARTTLS and How To Encrypt OpenLDAP ...
0
votes
2answers
77 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
46 views

Suddenly i can not join Windows clients to Samba PDC anymore

Some years ago i configured a Primary Domain Controller through Samba and LDAP (slapd) on an Ubuntu machine (13.10) at 192.168.69.203 which should be accessible by the NetBIOS name SRV1. I must note i ...
2
votes
1answer
1k views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
0
votes
1answer
3k views

LDAP+SAMBA login issues

I'm on a clean Ubuntu 13.10 install and I've just installed and configured openldap+samba. While I'm trying to configure a domain controller plus user shares. In order to ease LDAP management I've ...
0
votes
0answers
12 views

LDAP filter alphanumeric

Does LDAP (precisely Active Directory) allow to filter out only alpha-numeric characters? Client app crashes on some non-printable characters (like vertical tab U+000B), when trying to get AD groups ...
6
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
1
vote
0answers
9 views

LDAP User switches to local user mid session

So, what's happening is I have an LDAP server and two clients: LDAP Server = Ubuntu 16.04 Headless Client 1 = Ubuntu Gnome 16.04 Client 2 = Ubuntu 16.04 (XFCE, Gnome & Unity) I have it all ...
-1
votes
2answers
457 views

Set up LDAP on Redmine with Zimbra LDAP

I'm trying to enable LDAP authentication for a Redmine installation. My LDAP Server is the one provided by Zimbra, and I'm perfectly sure that it works good (I use LDAP also for ownCloud server, in ...
0
votes
0answers
32 views

LDAP PAM authentication: endless password change loop

I'm setting up LDAP authentication in a 'toy' environment - i.e. the LDAP server and client are on the same system, and the setup is quite simple. The system which I'm setting it up on is an ...
4
votes
1answer
1k views

Cisco ASA LDAP Group Privilege Level

We have a pair of ASA 5510s (8.4.3) on which we use LDAP authentication for VPN and SSH access. On all of our Catalyst switches, which use RADIUS, we're able to set the shell:priv-lvl to 15 in the ...
0
votes
1answer
1k views

LDAP port forwarding or proxy

I am trying to find a way to locally access an OID server (via LDAP) that is usually only accessible from my app's staging server. I have login credentials for the staging box. I do not have login ...
0
votes
0answers
14 views

syncing users across docker containers

I am wondering if there is a common way to sync user accounts between docker containers. In my specific use case i would like to have a container serving a directory via netatalk (afp), another ...
4
votes
2answers
4k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.example.org port 636 with the ssl checkbox. This is on the local server itself. ...
1
vote
2answers
258 views

Where are the attributes for room mailbox stored?

I'm using Exchange 2007 and I've created a room mailbox. I want to know where the settings of the room mailbox are stored? What are the attributes used to store room mailbox information? Are they ...
1
vote
1answer
3k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
1
vote
1answer
39 views

[Solved]Internal Error 500 occur when use apache 2.4 with LDAP Authetication

I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server. Well ...
2
votes
1answer
34 views

Internal Error 500 appear when use apache 2.4 with LDAP Authetication

I have an CentOS 7 server with SVN server configured and I have another windows server 2012R2 with LDAP, that I use for domain controller. I can use ldapsearch communicate with windows server. Well ...
0
votes
0answers
15 views

unable to delete entry.what am i missing?

Newbie question, There are 2 ldap servers i have inherited. I need to delete a user which keeps re-spawning. I was told that this is a syncrepl setup with another node. What do i need to do in order ...
5
votes
1answer
131 views

LDAP not preventing disabled users from authenticating

I have an interesting situation where we have the exact same application running in a "Development" environment and another in a "Testing" environment behaving differently when authenticating with AD ...
0
votes
1answer
1k views

LDAP installed, running, but can't connect remotely [Ubuntu 10.10]

I installed LDAP on my ubuntu 10.10 system, using the tutorial found here: https://help.ubuntu.com/10.10/serverguide/C/openldap-server.html Everything seems to be working well, when logged into the ...
1
vote
0answers
7 views

rfc2307bis LDAP schema: ipNetmaskNumber lookup for an ipHost object

I'm using Openldap for IAM, and consider using it also as a configuration management backend. The rfc2307bis schema has an ipHost class, which allows for ipHostNumber attribute, but not for the ...
3
votes
2answers
4k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
3
votes
0answers
946 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
1
vote
2answers
366 views

Why is the user@domain and cn=user,dc=domain not equivalent?

I've setup a Simple AD on AWS that I can finally authenticate against with LDAP. I don't understand why I was unable to use dc= which is widely suggested everywhere but am able to use @domain. ...
1
vote
0answers
16 views

LDAP attribute for image/png

Like the jpegPhoto-attribute (0.9.2342.19200300.100.1.60) of inetOrgPerson for the mime-type image/jpeg - I'm searching a LDAP-attribute for image/png. Does such a pngPhoto or pngImage exists?
0
votes
0answers
16 views

Mail Server Fails to Replicate Active Directory Users

My business recently made the jump to Active Directory, and wanted our mail server to replicate AD accounts. Both the domain controller and the mail server are running Windows Server 2012, and we're ...
1
vote
1answer
1k views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
0
votes
1answer
65 views

how to control ldap users access using groupdn?

i am using openldap, nslcd and nss-pam-ldapd. i want to restrict users login to ldap client. i have configured this in centos6.5 without any problem using groupdn. but in centos 7, there is no ...
3
votes
1answer
2k views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
4
votes
1answer
5k views

Couldn't drop privileges: User is missing UID (see mail_uid setting)

I'm hoping I can use some help. I'm configuring dovecot_ldap, but I can't seem to be able to get dovecot to authenticate the ldap user. Below is my config and log info: hosts = 192.168.128.45:3268 ...
4
votes
1answer
61 views

openldap user can't login when using tcsh

I would appreciate any help in the following problem: I have an openladp (2.3.39) server (Fedora 8) which authenticates users from other ldap clients (various versions of Fedora). On my attempt to ...
3
votes
1answer
2k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...