Questions tagged [pam-ldap]
The pam-ldap tag has no usage guidance.
25
questions with no upvoted or accepted answers
6
votes
0
answers
164
views
Write arbitrary attribute into ENV from LDAP upon successful PAM authentication
Is it possible during the authentication phase of pam_ldap to map an arbitrary LDAP attribute of the user's record into the resulting user's environment?
The specifics of my situation, in case you ...
- 311
2
votes
0
answers
202
views
afpd[]: PAM audit_log_acct_message() failed: Operation not permitted
Im trying to debug this error in the /var/log/auth but I dont know where to look at.
Jul 27 06:44:30 server afpd[6463]: PAM audit_log_acct_message() failed: Operation not permitted
The syslog seems ...
- 33
2
votes
0
answers
769
views
LDAP Not working for SSH connections on ubuntu 12.04
Connecting from the client to the server:
$ ssh -vvv [email protected]
OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011
debug1: Reading configuration data /etc/ssh_config
debug1: /etc/ssh_config line 20: ...
- 3,704
2
votes
0
answers
959
views
Set Linux GID based on LDAP OU in ldap.conf
In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
- 111
2
votes
1
answer
2k
views
Mapping User and Group Ownership through LDAP
I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
- 151
1
vote
1
answer
475
views
Can't understand why libnss-pam-ldapd does not find LDAP library
I am trying to cross-compile libnss-pam-ldapd for an arm architecture. The configure command always gives the following error:
checking for library containing ldap_search_ext... no
checking for ...
- 11
1
vote
1
answer
805
views
ldapwhoami works but pam_authenticate fails with the same credentials
I'm testing the pam_ldap implementation with a C++ application. I configured ldap and pam_ldap to authenticate against a OpenLDAP server running in the same host. Created a user for testing, ...
- 111
1
vote
1
answer
979
views
PAM authentication - automatically create user?
I've finally got LDAP auth working on Ubuntu 18.04, however it only works if I first create the local user account (eg john.smith).
If I don't create the account first, it fails to bind to the LDAP ...
- 11
1
vote
0
answers
4k
views
SSH and LDAP auth with groups
I have SSH/LDAP working just fine with public keys and all on an AWS Linux instance. I'm using nss-pam-ldapd and pam_ldap.
But when I set /etc/pam_ldap.conf as follows to restrict login to a LDAP ...
- 596
1
vote
1
answer
780
views
Active Directory (LDAP) and pam using kerberos instead of bindpw or anonymous access
I have a system that currently uses an LDAP/AD server for authentication via pam and the pam_ldap module. In order to use this server for authentication pam_ldap requires an account which exposes the ...
- 11
1
vote
1
answer
2k
views
LDAP - how to use attribute from objectclass:account and objectclass:inetOrgPerson?
I have an openLDAP which I use for authenticating users to various servers, where each user can have access to a varying number of hosts. I am solving that requirement by using the "host" attribute, ...
- 111
1
vote
0
answers
635
views
PAM - Ignore local user, if LDAP-connection works
I have configured some SLED10SP1 (not allowed to update) machines to use LDAP for user authentication. Because SLED10 doesn't have official packages for pam_ccreds or sssd, I have to find a way to ...
- 11
1
vote
0
answers
145
views
vlock/pam_ldap based authentications fails when adding TLS/SSL
I have working centralized authentication configuration setup on Debian Wheezy based servers, utilizing OpenLDAP (2.4.31), pam_ldap (184-8), and libnss-ldap (264-2). I have successfully configured ...
- 91
1
vote
0
answers
859
views
LDAP: forced to change root password on every login
I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password':
login as: root
[email protected]'s password:
...
- 591
0
votes
0
answers
89
views
user not able to login remotely to sssd configured linux host
I have a RHEL host. I have configured sssd to connect to ldap server. The ldap user are not able to connect remotely to the host. However ever if i do su - username it work for me. but if the user ...
0
votes
0
answers
194
views
Is Certificates are required for STARTTLS connection on LDAP
My LDAP server's ldap.conf file
#
# LDAP Defaults
#
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
BASE dc=coretesting,dc=com
URI ldap://ldap....
- 7
0
votes
0
answers
116
views
Is it possible to add memberUid as bind DN
Can we use memberUid for bind dn string.
Here is my sample ldif file
dn: cn=posixgroup,dc=memtesting,dc=com
objectClass: top
objectClass: posixGroup
gidNumber: 1001
cn: posixgroup
memberUid: posixuser
...
- 7
0
votes
1
answer
141
views
What are all the certificates mandatory to be provide while setting TLSVerifyClient option to demand
In my case, I had set TLSVerifyClient to demand. I couldn't be able to establish a connection While providing TLSCACertificateFile alone.
While setting the TLSVerifyClient option demand is it ...
- 7
0
votes
0
answers
1k
views
nss_ldap failed to bind to LDAP server
i have configured ldap client (ubuntu 20.04) with nss_ldap to connect on ldap server and accept users in a specific group, it seems that everything is working fine, the client can access the ldap ...
0
votes
1
answer
339
views
ppolicy not enforced on OpenLDAP Client when using 'passwd'
The issue:
Password Policy is not being enforced when I change the password using the 'passwd' command. It is enforced when I use the 'ldappaswd' command.
But the OpenLDAP password still changes using ...
- 191
0
votes
2
answers
4k
views
nss-pam-ldapd ldap group filtering
I'm attempting to setup authentication via ldap for OpenSSH connections on our FreeBSD servers in AWS. The actual ldap server is external to AWS and is accessed over the Internet.
I've run into a ...
- 113
0
votes
0
answers
155
views
Centos 6 nss-pam-ldapd delay?
I have configured Centos with nss-pam-ldapd and seems to work fine. ( I can login with my AD credentioals). Except there seems to be a delay of about 20-30 seconds before I can log in.
I also set-up ...
- 325
0
votes
0
answers
60
views
do not allow multiple sessions if user have different IPs
I am running Red Hat Enterprise Linux 6.6 and for authentication we use LDAP authentication. We have running application on a server (doesn't really matter which one it is) and the way application ...
- 123
0
votes
1
answer
839
views
Why I cannot find ldap.conf file when I want to integrate 389-ds and samba on centos 7?
I am working on two servers, a samba server and a 389-ds server. Now I want to integrate them so that samba shares are authenticated via ldap server.
I have followed instructions on http://directory....
- 103
0
votes
0
answers
65
views
What are the minimum permissions for a libpam-ldap unix domain socket?
I'm setting up an LDAP server and libpam-ldap to run on the same host, communicating via a UNIX domain socket. I'd like to give this socket the minimum permissions necessary, so random local users can'...
- 101