-5
votes
1answer
242 views

Migrating LDAP user and password to SAMBA4 AD

As title suggests. We are migrating from OpenLDAP as user authentication to Samba 4 AD Domain. But I can't find any information on how to transfer passwords and users to Samba 4 AD. How to migrate ...
0
votes
1answer
72 views

Using LDAP/Active Directory with PIN based authentication

We'd like to integrate our service with LDAP, but because of hardware constraints, we're only allow 4 digit user ids and passwords. What would be the best practice for performing such an ...
1
vote
0answers
101 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
0
votes
0answers
290 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
5
votes
2answers
720 views

Is it generally acceptable to expose LDAP in read only mode to the Internet?

I need to support Mac clients who need to access a LDAP server to locate SMIME keys. Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
1
vote
1answer
53 views

Can Active Directory issue a LDAP redirect to another LDAP server

I have several independent LDAP servers, controlled by different entities that allow anonymous access. I would like AD to tell an LDAP query to use a different server... like recursive DNS. Is ...
0
votes
2answers
353 views

Can't query AD using Kerberos from Linux host

ldapsearch -H <URL> -b <BASE> -s sub -D <USER> -x -w <PW> works fine kinit <USER>@<REALM> ldapsearch -H <URL> -b <BASE> -s sub fails with: text: ...
4
votes
1answer
129 views

systemPossSuperiors - why does AD have it, but not openldap

Having used openldap and now getting to know MS active directory (AD), I realize that in AD there is an attribute called "systemPossSuperiors", which defines which objects are allowed as parent ...
0
votes
1answer
20 views

Cannot access certain MS Server 2003 Active Directory users with Mountain Lion Server's Server App

The "magic triangle" is working perfectly for some users. Other users are invisible to the Mountain Lion OD master's Server App. Workgroup Manager can access all the users while Server App can't. ...
3
votes
1answer
221 views

ldapquery an Active Directory server for users that belongs to a group named X

When I do this at the bash prompt on a CentOS 6.4 ldapsearch -LLL -H ldap://adserver.example.com -x -D someuser@example.com -w somepass -b 'OU=Users,DC=example,DC=com' ...
1
vote
1answer
105 views

One-Way ActiveDirectory to Open LDAP push sync

I know that syncing AD and OpenLDAP is a common problem but after a few hours of googling and reading posts like this and that I am still unsure if there is a good (in a sense of convinient and safe) ...
0
votes
1answer
207 views

VLAN and Active Directory: complementary or substitute? [closed]

I recently encountered a network design that heavily implements VLANs but does not make use of a dedicated identity and access management system such as Active Directory or OpenLDAP. And yet another ...
1
vote
1answer
968 views

ldap_bind: Invalid credentials (49) using openLDAP

I understand this error has been asked quite a few times on Server Fault and I have done some extensive googling, however, I can not, for the life of me, figure out exactly why I am unable to ...
1
vote
0answers
183 views

Auto set Active Directory attributes upon new User creation

I have successfully created an OpenLDAP (CentOS 6.2) to Active Directory (Windows Server 2008 R2) connection. I can login to my CentOS using an AD user. Problem is, the AD user has to have these ...
-1
votes
1answer
1k views

How to configure AD server for client TLS authentication

How can I configure my Active Directory LDAP server (Windows 2008) to enable certificate verification and client authentication. Thanks, Gayathri
1
vote
2answers
142 views

Error getting PAM / Linux integrated with Active Directory

I'm trying to add a Linux server to a network which is controlled by AD. The aim is that users of the server will be able to authenticate against the AD domain. I have Kerberos working, but NSS / ...
3
votes
1answer
183 views

What are the differences in schemas of main directory servers?

Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
2
votes
2answers
1k views

Active Directory Authentication with LDAP proxy

We have a services in a isolated network. These services need to authenticate users against the Active Directory server. However the Active Directory server is not directly available so I have to ...
1
vote
0answers
305 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
4
votes
3answers
7k views

Active Directory and OpenLDAP synchronization

I have been digging holes on google to find out the best way to synchronize the user database between AD and OpenLDAP. What i want to achieve is, have user database in AD and then propagate these ...
2
votes
2answers
345 views

Active Directory and OpenLDAP user database integration

I need some guidance with AD and OpenLDAP user database integration/synchronization. Here is what I am trying to do. We have Full Linux database (Ubuntu 10.4) with users on OpenLDAP and using only ...
1
vote
1answer
3k views

ldapsearch against Active Directory fails authentication + search params wrong

I am using ldapsearch from OpenLDAP tools to search our corporate Active Directory for my email and phone number. This query is a test to ensure that I can authenticate against the domain so I can ...
3
votes
4answers
1k views

Can I manage Windows 7 machines with an open source server?

Can I manage a small office of Windows machines with an open source solution? (~15 users) (XP Pro, but will be moving to Windows 7 Pro as we get new computers over the next few months... as budget ...
2
votes
2answers
314 views

Account management in a dual directory (Active Directory + LDAP) environment

We currently have AD and OpenLDAP deployed at our organization. I was wondering if anyone has worked in a similar setup and would like to share some of the steps taken to keep the sysadmins sane. ...
3
votes
2answers
2k views

Migration from Active directory to OpenLDAP

Im pretty new to LDAP and AD. I have to port our present authorization/authentication structure from AD to OpenLDAP. Is it possible to run the entire setup in windows? What are the steps for migration ...
1
vote
1answer
517 views

How do I migrate from OpenLDAP to Active Directory?

currently we are running samba and openldap as our PDC. our ultimate goal is to migrate completely over to windows active directory. how would i go about doing this?
3
votes
3answers
10k views

Configuring OpenLDAP as a Active Directory Proxy

We try to set up an Active Directory server for company-wide authentication. Some of the servers that should authenticate against the AD are placed in a DMZ, so we thought of using a LDAP-server as ...
3
votes
2answers
903 views

Active Directory using Samba/Open LDAP for user accounts

I know this is the wrong way round... but Is it possible to use AD in front of Samba for our PC clients, so that the user accounts are in Samba/Open LDAP. Managing our fleet of Windows PC's is ...
4
votes
2answers
2k views

Keep AD Group Synced in OpenLDAP with POSIX Account Augmentation

What's the most obvious way of achieving the following: The site has an working AD infrastructure and certain parts of the infrastructure are tightly coupled GNU/Linux machines where people from the ...
6
votes
2answers
442 views

samba+openldap vs ad for medium size network

We are going to have an organized network with an NT user authentication and proxy server. In choosing between Active Directory and Samba Server, I wanted to choose Samba server (I do love Open Source ...
0
votes
1answer
4k views

Finding DNS name of exchange server for user using LDAP

Following up on my last question, once I have the correct domain controller, I would like to fetch a given user's exchange server. I am able to get this far using ldapsearch: ldapsearch -LLL -h ...
1
vote
2answers
3k views

Finding closest Domain Controller through LDAP

I am on a Unix host and am looking for a programatic way to determine the closest DC. Microsoft has an excellent article explaining how to perform the DNS lookup, and I am able to find the list of ...
3
votes
2answers
6k views

How do I migrate user-accounts from OpenLDAP to Active-Directory?

We want to migrate our user-accounts from OpenLDAP to Active-Directory without changing the passwords and such. The users shouldn't notice the difference against which server they're authenticating ...
4
votes
1answer
401 views

What are best practices to store delegated permissions in OpenLDAP?

My network's core user database is managed by OpenLDAP. Recently we need to introduce a possibility for one user to act on second user's behalf. As all application-related rights and permissions are ...
14
votes
6answers
13k views

Active Directory vs OpenLDAP

This is for a small company (12 developers) who haven't implemented any centralized user database - they've grown organically and just created accounts on computers as they needed. From a management ...
3
votes
4answers
313 views

Which identity management products are suitable for small to medium business?

Let's scope out an average setup: Web company About 50 users A few User Groups (Management, Support, Developers, Sys-Admins, Testers, Sales) A bunch of permissions (Only management is allowed to ...