2
votes
1answer
26 views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
0
votes
1answer
46 views

OpenLDAP server network architecture and hardware requierments [closed]

I would like to know your opinions and experience while setting-up a centralized authentication server using OpenLDAP. Currently a have a few hosted servers running a few services (email, webapps, ...
0
votes
0answers
489 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
2
votes
1answer
64 views

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the ...
0
votes
0answers
36 views

first login/password change ldap -> call script on local machine

i have machines which authenticate against openldap using pam_ldap. I would like to be able to call shell scripts somehow (to update services which don't integrate with ldap) (which should be ...
0
votes
1answer
385 views

LDAP userPassword only works with plaintext

I have setup openLDAP server on an ubuntu machine. I am trying to test user authentication, but am running into a problem. If, in ldap, the userPassword contains a plaintext password, authentication ...
0
votes
1answer
470 views

“getent passwd” enumerates users, “su <username>” fails

I have an LDAP server with two BDB backends. The user accounts are split between the two backends. Backend A has a referral object to Backend B. I have tried to setup LDAP client authentication on ...
0
votes
2answers
2k views

Can't add local user on system using ldap auth for samba [closed]

Trying to add a local user to a CentOS 6.3 system that is using ldap for Samba authentication, but being stymied by the user's existing entry in ldap. [root@samba ~]# adduser wchandy adduser: user ...
1
vote
0answers
84 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
0
votes
2answers
704 views

openLDAP Client Config for CentOS 6

I have been trying to get the users on the LDAP server to get authenticated over centOS 6 clients, but, the client will not accept the passwords of the LDAP users. I have Ubuntu Systems which ...
0
votes
1answer
205 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
0
votes
2answers
128 views

OpenLDAP: How to hide config directory from tools like JXplorer, etc

I'm trying to set up an OpenLDAP server for test and demonstration purposes - my team need to be add LDAP connectivity to our product, so we want to have an LDAP server we can authenticate against. ...
0
votes
1answer
71 views

openldap authentication against a slave

I have an openldap master/slave configuration, setup as per the Ubuntu guide, on Ubuntu 12.04, running slapd 2.4.28-1.1ubuntu4.2. I have pam_ldap configured for ssh authentication, everything works ...
0
votes
3answers
6k views

How to change expired LDAP user password under linux?

can somebody give an advice how to change the LDAP password already expired? I have an LDAP user and the password for this user is expired: # su user You are required to change your password ...
0
votes
1answer
3k views

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 ...
1
vote
1answer
564 views

OpenLDAP Authentication UID vs CN issues

I'm having trouble authenticating services using uid for authentication, which I thought was the standard method for authentication on the user. So basically, my users are added in ldap like this: # ...
1
vote
0answers
599 views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
2
votes
0answers
292 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
0
votes
1answer
1k views

Samba with remote LDAP authentication doesn`t see users properly

I'm trying to setup a samba server authenticated by a remote LDAP server, and I'm having some problems that I can't figure how to solve. I was able to make an getent passwd at samba server and I ...
12
votes
2answers
237 views

SSH only works after intentionally failed password

So, I'm having a rather weird problem. I have a server, that when I try to SSH into, immediately closes the connection if I type in the correct password on the first attempt. However, if I ...
0
votes
1answer
211 views

Configure host access rights in OpenLDAP

I've set up an OpenLDAP-Server to authenticate users to our Ubuntu-servers. The authentication works quite well but I'd like to restict the user's access to certain servers. I know this can be done ...
2
votes
2answers
1k views

Active Directory Authentication with LDAP proxy

We have a services in a isolated network. These services need to authenticate users against the Active Directory server. However the Active Directory server is not directly available so I have to ...
2
votes
1answer
227 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
0
votes
1answer
337 views

Credentials caching in OpenLDAP proxy

I am creating LDAP proxy server using OpenLDAP, server will be used for user authentication (using simple bind over SSL/TLS). Is there a way to make OpenLDAP proxy to cache simple bind credentials and ...
1
vote
1answer
1k views

Account lockout using Openldap

What is the best way to implement account lockout in openldap? I have an openldap server with Ubuntu desktop client connecting to it for authentication. I want he accounts to locked out after say 5 ...
1
vote
1answer
432 views

Openldap with ppolicy

We have working installation of OpenLDAP version 2.4 which is using shadowAccount attributes. I want to enable ppolicy overlays. I have gone through the steps provided at OpenLDAP and ppolicy howto. ...
0
votes
1answer
251 views

Configuring LDAP configuration on RHEL-based OS with configurable DN container

I am trying to configure LDAP configuration the same way we configure it for our web applications: The server binds using the administrator account provided The server searches for uid=$login where ...
3
votes
2answers
394 views

Logging authentication failure on OpenLDAP

I need to log authentication failure on OpenLDAP. What is the proper log level bit for that? Or is there another configuration for such a thing?
0
votes
1answer
508 views

Returning first match only with OpenLDAP slapd-meta backend?

I have OpenLDAP configured to act as a metadirectory in front of three different backends: database meta uri "ldap://ldap1.example.com/ou=domain1,o=combined" uri ...
1
vote
1answer
802 views

LDAP with multiple domains(.net & .com)

I have LDAP service running on Ubuntu server. I use webmin to administer ldap service of the base dn mydomain.net. Is it possible runnig LDAP on multiple domains?, like I want to create one more ...
4
votes
1answer
678 views

Slappasswd output randomized

I was expecting slappasswd to produce a fixed hash but it appears that the output is randomized as I never get the same output for the same input password: $ slappasswd -s secret ...
1
vote
1answer
1k views

What is my BaseDN supposed to be with the following configuration of OpenLDAP?

I have the following in my OpenLDAP configuration. Using the latest version OpenLDAP on Centos 5.3. Installed using yum. From my /etc/openldap/slapd.conf database bdb suffix ...
0
votes
1answer
1k views

ldapwhoami -D vs -U

I have an LDAP user with this schema: dn: uid=portal,ou=Special Accounts,dc=example,dc=com objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top sn: portal ...
2
votes
1answer
152 views

OpenLdap configuration

Simple enough question; is there a way you can configuare your ldap server so it only accepts kerberos authentication and rejects any other type. I'm almost 100% certain this can be done, i just do ...
1
vote
1answer
46 views

LDAP authenticating partially. Password being replaced

After a week of struggling to find out why some of our machines are Authenticating off of our LDAP servers and some are not I noticed that after PAM binds to see if the uid exists it then sends the ...
0
votes
3answers
1k views

Allowing LDAP users to change password

How to allow LDAP users to change password from client machines ?
2
votes
8answers
3k views

Find users currently logged in using ldap?

We have Openldap configured here and users are able to use ldap for login to client machines. But any way to check the users currently logged into machines using LDAP ? I would like to find which ...
2
votes
2answers
715 views

Snow Leopard Hangs when Using OpenLDAP on Linux for Authentication

We have a new iMac on Snow Leopard authenticating against an OpenLDAP directory. Homes are on (automounted) NFSv3 (Linux, kernel-server). NFS seems to work pretty well (if a bit slow, but we don't ...
3
votes
4answers
4k views

OpenLDAP Password Expiration with pwdReset=TRUE?

I have configured the ppolicy overlay for OpenLDAP to enable password policies. These things work: Password lockouts on too many failed attempts Password Change required once pwdReset=TRUE added to ...
1
vote
2answers
5k views

Open LDAP Authentication - How to verify userPassword without bind?

What I am doing... Trying to implement single-sign-on for our organization’s all machines, blogs, wiki’s, CRM, HRM, project management tools, SVN, etc, etc... We have OpenLDAP installed and ...
1
vote
2answers
2k views

LDAP pass-through authentication

I have the following situation: I have a web site that needs to authenticate users, some of these will be internal users that are stored in an active directory domain, but there will be other users ...