Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

learn more… | top users | synonyms

4
votes
0answers
351 views

CentOS requires entering password twice for sudo, login

At every login or sudo prompt, the server always rejects the password when it is first supplied, but accepts it the second time. I found this thread which describes what seems to be the same problem, ...
3
votes
0answers
64 views

SSSD process won't die

Thanks for taking the time to check out my problem. I'm currently working on an issue that has only appeared once before. Back on Jan 3rd when this first appeared we were able to reboot the server ...
3
votes
0answers
287 views

Kerberos, .k5login and sudo

Background: I am using a Debian 7 system which I have integrated with an LDAP+Kerberos system using libnss-ldap, libpam-krb5 and nscd. I have modified sudoers to permit an LDAP group the right to sudo ...
3
votes
0answers
487 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
3
votes
0answers
231 views

How do I download the avatar image from an Active Directory server?

I'm using the ldapsearch.exe binary that was installed along with an Oracle client. It took awhile to tease out the arguments that it wanted, but I'm able to successfully connect to AD and parse out ...
2
votes
0answers
52 views

Single Sign On Solution

I'm trying to come up with a single sign on solution for a small team. I've got four applications: dokuwiki redmine svn owncloud All of these I was told by folks support LDAP, and that it was ...
2
votes
0answers
19 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
2
votes
0answers
436 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
2
votes
0answers
75 views

Are External LDAP referrals similar to a DNS Recursive or non recursive entry?

I'm very familiar with DNS, but less so with LDAP. In DNS I have the ability to delegate the CPU and IO load of referral chasing a given DNS query... or I can set norecurse and have the client ...
2
votes
0answers
2k views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
2
votes
0answers
200 views

configuration CAS with LDAP active Directory

I am using CAS server version 3.5.2 and after I configured it to connect to an LDAP server I got this message. Anyone have a clue about what is happening? My LDAP server is pfeserver.pfe.dz ...
2
votes
0answers
196 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
2
votes
0answers
2k views

LDAP over SSL Unsuccessful on 2003 DC, Working on 2008 R2 DC in Same Domain

I have a publicly signed UCC for LDAP over SSL in a test domain. It contains the Server Authentication OID Extension and works fine on a 2008 R2 DC in the same domain. The CSR was generated on the ...
2
votes
0answers
71 views

How can I force a schema replacement operation in LDAP

I am using ApacheDS. I have created a custom schema such that it is in its own container under schema. When I make changes to the LDIF file and re-import it, I keep getting errors indicating that the ...
2
votes
0answers
271 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
2
votes
0answers
76 views

Restricted LDAP mimic server backed on SQL

I may not be an expert on the subject, but it seems to me that 99% of any LDAP server installation is used only to provide user authentication credentials and nothing more. Given this restricted ...
2
votes
0answers
54 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
2
votes
0answers
379 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
625 views

Troubleshooting Redmine performance

I've got a Redmine instance (Bitnami Stack) that's unusually slow. Because I'm just trying to get to the bottom of this, I have some theories which I'd like to discuss here. So, if anybody has any ...
2
votes
0answers
873 views

LDAP groups not always mapping, Ubuntu server 12.04

Ubuntu 12.04 server, AMD64, authentication via LDAP. I'm having trouble getting the LDAP groups to map to my user account when logging in, even though 'getent group' shows the correct set of groups ...
2
votes
0answers
57 views

Auxiliary class

I try to modify an AD schema, adding a custom auxiliary class in user (Cn=MyName,CN=Users,DC=xxx,DC=yyy) With adsiedit when the new object window pops-up to add the class, I can only select ...
2
votes
0answers
709 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
2
votes
0answers
198 views

LDAP authentication for Trixbox

I have a trixbox IP PBX for a 700 user company and currently it is a painful process for managing user names & passwords. I wanted to use LDAP authentication for connecting to Trixbox so that ...
2
votes
0answers
1k views

Domain Admins do not have Administrative rights on Windows Server 2008 using Samba PDC

Members of Domain Admin using CentOS Directory Server as backend do not have Admin rights in Windows Server 2008. I have joined the domain, see that the users are populated, and can login using LDAP ...
2
votes
0answers
2k views

TLS (STARTTLS) Failure After 10.6 Upgrade to Open Directory Master

Environment: Mac OS X 10.6.3 install/import of a MacOS X 10.5.8 Open Directory Master server. After that upgrade, LDAP+TLS fails on our MacOS X 10.5, 10.6, CentOS, Debian, and FreeBSD clients ...
1
vote
0answers
30 views

Promote Windows Server 2012 to domain controller in an existing samba network

I have a Windows Server that I want to use as a domain controller to push gpo's to workstations that are on a samba 3 domain served from an Oracle Solaris server. If I were to promote this server to a ...
1
vote
0answers
40 views

Configurable ftp-proxy with LDAP authentication

I am looking for solution for following situation. I have bunch of ftp account (many servers) and many users. They need access to that servers. I don't want to give every user passwords to every ...
1
vote
0answers
49 views

Postfix not following MX, local delivery LDAP

Before explaining the problem, this is the setup: We run 5 servers, 2 in Montevideo [Uruguay], 3 in the US, on each server we have clients (domains, mail accounts, and obviously local logins) the LDAP ...
1
vote
0answers
25 views

Access denied for creating user on LDAP

I have a web application that needs to be able to create users on a LDAP. I have created a cn=intranet,dc=example,dc=com and I need it to be able to add users unside ou=People,dc=example,dc=com. So I ...
1
vote
0answers
168 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
1
vote
0answers
17 views

Nss-pam-ldapd host based login with TLS

I have an openldap server configured and set up for linux client logins with host based authentications. All is fine except I wanted to have TLS and have found that it is not working de to a bug ...
1
vote
0answers
34 views

Creating LDAP directory users with specific attrs for Dovecot email server

I have openldap-2.4.39-8.el6.x86_64 installed into my CentOS release 6.4 (Final) machine. I have another machine which I installed dovecot, and I would like to perform ldap authentication for my ...
1
vote
0answers
18 views

Setting environment variables based on passing Require directive

I finally succeed on configuring Apache as a SPNEGO reverse proxy for my app, and I'm using the AUTHORIZE_SAMACCOUNTNAME, AUTHORIZE_CN and AUTHORIZE_MAIL to figure out some information about the ...
1
vote
0answers
63 views

Nagios 3.2.3 Core web interface login via LDAP using full names for username

First off I've never done any Nagios or LDAP configuration in the past and I've been sort of dumped into this as is so often the case so forgive my inevitable ignorance regarding these things but I've ...
1
vote
0answers
43 views

delay in ACK packets for ldap abandon request

we have migrated from an openldap server on linux to a DirX on windows 2008. The ldap server und normal serch request behaves as expected. However with some applications (weblogic deployed webapps) ...
1
vote
0answers
34 views

Configuring openldap/PHP LDAP against “signed” LDAP connections with Active Directory

This may sound like a stupid question, and maybe it's already been answered, but I can't find a definitive answer anywhere, so I thought I'd ask. When someone enables "Domain controller: LDAP server ...
1
vote
0answers
106 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
1
vote
0answers
312 views

Ubuntu server + Samba + PAM + Apple OpenDirectory

Due to various reasons, we are looking to migrate our file servers from OS X Server 10.9 over to a true Samba implementation running on Ubuntu 14.04LTS. We have Ubuntu up and running with Samba ...
1
vote
0answers
261 views

Centos client authenticate against zentyal DC via ldap

I have a bit of a problem. 3 months ago we deployed a zentyal dc on my workplace because it was a good way of authenticating both windows, linux and mac against the same server. I got authentication ...
1
vote
0answers
65 views

How cache OpenLDAP Meta database (for use with Websphere Application Server)?

I have configured Meta database directory on OpenLDAP server for two different Active Diretories and it's work. But now I'd like set cache for this OpenLDAP, but I don't know how. From my slapd.conf ...
1
vote
0answers
25 views

Enable SSL in Apache Directory Studio

I'm trying to enable SSL in Apache Directory Studio. You can see I've enabled LDAPS Server and also configured the SSLKeystore. Now, when in do a ldapsearch from my terminal command. I get this ...
1
vote
0answers
57 views

Apache resetting LDAP requests and hanging

I've got Apache 2.2.15 running under CentOS 6.5. The module mod_authnz_ldap is being used to authenticate against a Microsoft AD server. Here's the LDAP config in Apache: AuthType Basic ...
1
vote
0answers
60 views

Turn LDAP tracing on WebSphere 7?

I am having difficulty logging into our test environment, but not production. I confirmed in the WebSphere Admin console that our LDAP configuration is the same as production. Nothing has changed on ...
1
vote
0answers
54 views

Gitlab userPrincipalName without Domain

I've to use the userPrincipalName instead of the default sAMAccountName in all applications which are integrated to AD because we've login-names > 20 characters which isn't supported by ...
1
vote
0answers
206 views

LDAP authentication, pam_mkhomedir and NFS automounted homes

We currently have a setup (running on Ubuntu 12.04.5 LTS) with mixed LDAP/NIS authentication and automounted home directories from several servers (with the auto.home map distributed over NIS). ...
1
vote
0answers
157 views

LDAP user's NFS files are mapped to nogroup (user ID mapped correctly)

In my office environment, I have set up multiple Ubuntu machines with LDAP authentication using the LDAP & NFSv4 server hostS. The LDAP/NFS server hostS exports the /home directory for all users ...
1
vote
0answers
122 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
1
vote
0answers
276 views

Mini mac server returning:- attribute “entryCSN” index delete failure

I have an Open Directory(OD) server running on OSX 10.8.5. I have software connecting to it (a web interface) which is searching the LDAP for users. So I run the query on the web app, and look in ...
1
vote
0answers
53 views

Where are the attributes for room mailbox stored?

I'm using Exchange 2007 and I've created a room mailbox. I want to know where the settings of the room mailbox are stored? What are the attributes used to store room mailbox information? Are they ...
1
vote
0answers
213 views

LDAP + NFS + automount home directories permissions issue

When an LDAP user logs into the system they have incorrect permissions to their home directory. LDAP and NFS services exist on the same server. The directory shows the correct ownership / ...