Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

0
votes
0answers
27 views

All LDAP traffic is being sent on TLSv1.1 not TLSv1.2

I have a kvm server, Centos 6.6 host with 6.6 guests. We run a php based web app that uses LDAP authentication for our clients. We just moved a client to this setup and they are reporting that all ...
1
vote
1answer
5 views

FreeIPA re-arrange custom attributes

I created several custom attributes and added them to LDAP and FreeIPA, but their order in the user page is very messy. I want to re-arrange them and put the related attributes together (such as ...
1
vote
1answer
15 views

Zimbra: stuck .msg files and phantom messages in mailboxes

Users in my org use Outlook 2010 e-mail client with pop3 access to ZCS/OSE. These clients are using default "delete messages from server after 14 days" setting All message boxes are set up as follows: ...
1
vote
0answers
15 views

OpenVPN routing based in LDAP Authentication?

To understand the solution better this is an example: The company has 1000 users that constantly switch seats (computers are set with DHCP IP, so the user can constantly have his IP address ...
6
votes
6answers
13k views

Web interface for LDAP management [on hold]

We are going to implement LDAP for centralized authentication in our organization. Which is the best simple LDAP management tool available ?
1
vote
2answers
50 views

LDAP syncrepl with kerberos authentication

I'm trying to set up a replication server for LDAP using syncrepl. I would like to use Kerberos to authenticate the consumer, because we have it set up, and it seems more secure. The database ...
0
votes
1answer
88 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
0
votes
1answer
2k views

Lookup Active Directory entry by implicit UPN

In our company exists a forest-wide UPN suffix company.com and almost all user accounts have the explicit UPN set to fistname.lastname@company.com. This value is also set in the Active Directory ...
0
votes
0answers
23 views

How to integrate Active Directory with OpenBSD using ypldap and login_ldap?

How do I make OpenBSD authenticate to Windows server 2008 R2 Active Directory structure? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in OpenBSD. ...
1
vote
1answer
24 views

htpasswd: unable to update file

I am trying to add a new user to authenticate to Apache2 (httpd) through Active Directory. The user already exists and belongs to a domain. I am essentially following the instructions in this Apache ...
0
votes
0answers
7 views

Mac OS X Server authenticate Samba agains external LDAP

Here's our current situation; We have 2 networks that are connected to each other with a router. The first network in an Microsoft Active Directory based network. The second network is an Apple Mac OS ...
4
votes
1answer
4k views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
1
vote
0answers
10 views

LDAP group of words (not names)

We use LDAP for authentication and organization of items, and we have the following structure (minus a couple top levels, of course): Clients Client1 client1Users (group of users, member is ...
1
vote
1answer
2k views

ldap-authentication without sambaSamAccount on linux smb/cifs server (e.g. samba)

i'm currently running samba-3.5.6 on a debian/wheezy host to act as the fileserver for our department's w32-clients. authentication is done via OpenLDAP, where each user-dn has an ...
0
votes
1answer
10 views

OpenLdap error: Your attempt to add uidNumber (2276) to <cn …> is NOT allowed. That attribute/value belongs to another entry

I'm using OpenLDAP. The management interface is phpLDAPadmin. Whilst this has made things easy, it also means I've not been exposed to the internals. There is an existing entry using the uidNumber ...
0
votes
0answers
19 views

Secure LDAP replication over the Internet

I have a remote site in which I'll need to authenticate my users. I have my users in a LDAP db. Thus my idea is to replicate the OpenLDAP server to the remote site to perform authentication locally ...
2
votes
1answer
615 views

How to configure Centos 5.3 using OpenLDAP to store and serve SSH public keys?

I want to be able to manage all my users logins via OpenLDAP. I am using Centos 5.3, OpenSSH 4.3p2-42 and OpenLDAP 2.3.43. I have installed GOsa2. Is there a GOsa plugin to manage the SSH keys in ...
1
vote
1answer
33 views

Filter getent passwd output with SSSD

I am using ldap_access_filter in sssd.conf in order to limit access to users that are in a specific ldap group. However, when I do a "getent passwd" I still get a full list of the ldap users. How can ...
0
votes
1answer
29 views

Apache - Multiple AuthLDAPURL

I currently have my vhosts setup to authenticate via LDAPS via Apache reverse proxy . I am wondering if it's possible to add a backup/fallback LDAP server if my primary one goes down. I tried working ...
0
votes
1answer
19 views

LDAP share attribute's value between a group members

I want to add members to a group, then I want them to share a single attribute value that need to be changed once for it to be changed for all other members. I found a page about effective attributes. ...
0
votes
2answers
24 views

Create a relationship between two attributes in LDAP

I created two attributes in LDAP (multivalued strings) and I want to (somehow) create a relationship between their values so that each value in one of then is linked to a value in the second: for ...
1
vote
0answers
447 views

Ubuntu server + Samba + PAM + Apple OpenDirectory

Due to various reasons, we are looking to migrate our file servers from OS X Server 10.9 over to a true Samba implementation running on Ubuntu 14.04LTS. We have Ubuntu up and running with Samba ...
0
votes
2answers
2k views

LDAP authentication issue with Kerio Connect

We have Kerio Connect (mail server) running on a Windows Server 2003 server on a domain. In the webmail client, users are able to change their domain password. This functionality used to work fine ...
0
votes
1answer
13 views

FreeIPA users can't see new custom attributes

I have added some new custom attributes to my FreeIPA and so far I was using the admin account to check them in the WebUI. But today I accessed the WebUI using a regular user account and I was ...
0
votes
1answer
2k views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
2
votes
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
2
votes
1answer
2k views

LDP SSL Port 636 Works - ldaps:// does not

I am trying to use ldap with ssl on Server 2008 R2. Got it all set and am able to connect using ldp.exe to the domain.name.org port 636 with the ssl checkbox. This is on the local server itself. ...
1
vote
1answer
3k views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
2
votes
2answers
1k views

LDAP authentication with Graphite

I have setup Graphite Web 0.9.9 on CentOS 6.2 x86_64 at EC2 and I'm trying to get LDAP authentication to work against 389 Directory Server. I have configured local_settings.py with: USE_LDAP_AUTH ...
0
votes
0answers
14 views

Checking ShadowExpire with apache's mod_authnz_ldap

I'm currently using mod_authnz_ldap for basic authentication. This works fine, but I'd like the ability to lock accounts without changing the user's password. For Linux, adding shadowExpire attribute ...
1
vote
1answer
86 views

Turn LDAP tracing on WebSphere 7?

I am having difficulty logging into our test environment, but not production. I confirmed in the WebSphere Admin console that our LDAP configuration is the same as production. Nothing has changed on ...
7
votes
3answers
20k views

How can I find the LDAP server in the DNS on Windows?

For Linux, this command should return the DNS record for the LDAP server host -t srv _ldap._tcp.DOMAINNAME (found at Authenticating from Java (Linux) to Active Directory using LDAP WITHOUT ...
3
votes
1answer
4k views

Couldn't drop privileges: User is missing UID (see mail_uid setting)

I'm hoping I can use some help. I'm configuring dovecot_ldap, but I can't seem to be able to get dovecot to authenticate the ldap user. Below is my config and log info: hosts = 192.168.128.45:3268 ...
1
vote
0answers
337 views

How do you set up pam_check_host_attr auth on Mandriva MMC?

I was recently tasked with trying to set some servers up to do LDAP auth to our existing LDAP db (OpenLDAP on a Mandriva MDS server running MMC to manage it). I managed to get it somewhat working, in ...
1
vote
0answers
28 views

Not able to take secure LDAP connection using perl NET::LDAPS

I trying to take a secure connection of AD server ( w2k12 ) using perl Net::LDAPs. Steps: $ldaps = Net::LDAPS->new('AD.server.ip', port => '636', verify => 'none', capath => ...
2
votes
1answer
1k views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
1
vote
2answers
717 views

Status of replication support in ApacheDS?

The features page indicates they're expecting to support multi-master replication "soon". Does it have any basic master-slave replication yet or does it currently not support any form of replication? ...
0
votes
0answers
10 views

Lighttpd ldap auth issue, massive performance loss (lighttpd 1.4.35-1.el6.x86_64 + RHEL 6.6)

I installed lighttpd for the first time from epel repo. I changed user and group for the webserver and ran the lighttpd server. I can download a page with 200 small images in about a second. If I ...
1
vote
1answer
2k views

OS X Server with Open Directory and Network Configuration

I am trying to use a Mac Mini as an Open Directory domain, however it fails on the Open Directory Setup. The exact error from the log is a below: Server[308]: An error occurred while configuring ...
2
votes
3answers
181 views

Windows Hosts DNS query for _ldap._tcp.domaincontroller, is this normal?

To make this easier to wrap my head around, here's what I'm using in my examples: deecee = my domain controller dctoo = another domain controller internal.foo.bar = the full DNSDomainName of ...
0
votes
1answer
2k views

Squidguard + LDAP (Active Directory) not working

I've been trying to configure a squid with squidguard and MS AD. I've successfuly linked my squid with my AD so far, but now, I want to link my squidguard with the active directory. I've followed ...
0
votes
1answer
25 views

Extending LDAP and FreeIPA

I'm working with freeipa and I extended its attributes successfully, but I noticed that the verification function in the python plugin added to the freeipa only works for the values entered through ...
3
votes
1answer
61 views

LDAP authentication fails

I try to set up an LDAP directory that will allow me to authenticate Debian users. Once the configuration of the LDAP server and PAM files is done, the authentication fails. I think the client doesn't ...
0
votes
3answers
2k views

Installation OpenLDAP on CentOS 7

I'm following this OpenLDAP step by step tutorial: http://www.server-world.info/en/note?os=CentOS_7&p=openldap&f=1 Important: I'm working on CentOS 7 But when in the first part I try to start ...
2
votes
1answer
4k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
0answers
45 views

Call to undefined function ldap_connect() in ubuntu

I'm attempting to set up a test ldap server on an ubuntu 12 VM. I've gotten this error: Fatal error: Call to undefined function ldap_connect() in ubuntu I've installed the gettext extension in ...
3
votes
7answers
20k views

How can I enable LDAP in PHP - Windows Server 2008

I've installed PHP in my Win Server 2008 using Web Platform Installer. The installation was success and I can correctly display phpinfo page from my virtual directory. How can I enable LDAP support? ...
1
vote
1answer
266 views

Can connect to LDAP server, but cannot bind: OpenLdap error message: Can't contact LDAP server

We have a PHP application deployed on a RHEL6 machine that relies on some ldap calls to function. In particular, ldap_connect and ldap_bind are used to verify users and also to look up their details. ...
2
votes
0answers
29 views

LDAP Not working for SSH connections on ubuntu 12.04

Connecting from the client to the server: $ ssh -vvv user@10.0.50.170 OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 debug1: Reading configuration data /etc/ssh_config debug1: /etc/ssh_config line 20: ...
1
vote
1answer
900 views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...