Tag Info

Hot answers tagged

3

It looks like you're supplying a binddn, but bad credentials for it. Are the contents of /etc/ldap.secret and what you put in a the -W prompt exactly the same? rootbinddn is the binddn used by root on the client machine. It should generally not be the rootdn of the suffix as that would mean that compromise of the machine would also compromise the ...


3

The only option to achieve this is to create an LDAP filter string to be used by the ldap_user_search_base config parameter (syntax: search_base[?scope?[filter][?search_base?scope?[filter]]*]). This must be a valid RFC 2254 filter, and will likely somehow incorporate your ldap_access_filter into the ldap_user_search_base. The reason for this is that ...


3

If the svn_auth_file doesn't already exist, you probably need the "-c" option on the htpasswd command for the first user (and only the first user). Note that this will truncate the file if it already did exist, so check first to make sure you're not obliterating an existing file. Also, on Windows you need to run this as Administrator (it is not enough that ...


2

In LDAP you can't. RFC 2252 which is AFAIK still leading with regards to LDAP attribute syntax definitions does not provide for default values. An ObjectClass definition can only require that certain attributes must be present and some are optional, but not a default value.


2

I have struggle one this one as well for some time. Firstly check the version of openssh is >6.2 then the syntax of the sshpublickey from gosa. I had it on Debian 7.7 then dist upgrade to Debian 8 to get the latest openSSH features. Do ldapsearch -x '(&(objectClass=posixAccount)(uid='<Your user>'))' sshPublickey If you have added it with ...


1

Unlike RHEL5, RHEL6 requires ssl certificates (more specifically TLS) to connect to openldap. I went round and round trying to find a workaround and finally settled with the fact that using a ssl certificate was easier and more secure than finding a way not to use it. This link might help: ...


1

This is old and probably resolved but here is the info for turning on trace for security. This is taken from the manually gathering of the mustgather for websphere security issues... In the administrative console, navigate to TroubleShooting > Logs and Trace > server_name. Select Diagnostic Trace Service. Set the Maximum Number of Historical Files to 20. ...


1

With netlogon debugging enabled I found the same result in my Win7 SP1 machines (domain controllers are 2008r2SP1). It also caused an 8 second delay in processing so far as I can tell. Looks like a faulty API call from netlogon to me. You can replicate the same 1355 error by running the following on a workstation: nltest ...


1

I got this to work in my environment by querying LDAP for the userPrincipalName instead of sAMAccountName as my squid also returns user@domain.local from Kerberos/NTLM auth. Also be sure to use %20 instead of spaces and when I was specifying the bind DN in my conf file, I used quotes as it had an & in the DN and squidguard was not binding because of ...


1

I think this means that the consumer doesn't have a valid TGT. How do I configure the consumer to get a valid TGT? I've read some older sources that recommend using k5start or a cron job. Is this still the way to do it? Yes, that's exactly what it means. Yes, it still is, though the latest Krb5 has another option called client keytab. The ...


1

That's simple: You can't. LDAP schemas doesn't offer this feature.


1

In general, if you experience problems with idmapping you need: check that client can talk to LDAP/NIS server clean idmap cache by running 'nfsidmap -c' start rpc.idmapd in in a debug mode (rpc.idmapd -f -v) and watch the requests.


1

The problem was: I was logged in as the wrong user. I'm tempted to delete the question


1

Zimbra doesn't store message metadata on LDAP. Instead zimbra use MySQL to store it. Snippet from Zimbra wiki: Account mailbox database structure Zimbra uses mysql databases to store mail header information (To, From, Subject, Date, Read/Unread Status, Flags, Tags), contacts, calendar items, and tasks. Zimbra automatically assigns a zimbra account to a ...


1

OK I found the solution and it's very simple. The new attributes are displayed in the order by which their JavaScript plugins are added into the server.


1

The answer in our case was to force php to use tls v1.2 in the php.ini file: crypto_method = STREAM_CRYPTO_METHOD_TLSv1_2_SERVER


1

In cmd shell: nslookup set types=all _ldap._tcp



Only top voted, non community-wiki answers of a minimum length are eligible