New answers tagged

0

For binding as uid=f.lastname,cn=domain.bg to work with CommuniGate that record should contain the userPassword attribute. The LDAP Central Directory in CommuniGate can be configured to copy account passwords to the directory records. Another option is to enable the LDAP Direct Provisioning option in CommuniGate: it this case operations that use DNs ...


0

centos 6 has a wonderful system for trusting CAs, shared system certificates Place the CA cert in pem format in /etc/pki/ca-trust/source/anchors/, run update-ca-trust && update-ca-trust enable The beauty of this tool is that it generates openssl, java and nss stores. So if your CA certificate is correct, it will work (at $work we deploy our ...


-2

Had a similar problem and this helped me to solve it: http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.active_directory/2006-05/msg01913.html


0

No schema change is required for Authentication - posixAccount, posixGroup etc work fine for me. I haven't implemented sudo in ODSEE, but did research the topic a while ago. There's loads of documentation online - see the sudo LDAP documentation or Solaris community forums for the current schema extensions.


0

$guid = "d65e4578-475a-422e-ac99-123456789012" foreach ($dom in (Get-adforest).Domains) { Get-ADObject -filter {ObjectGUID -eq $guid } -Properties * -Server $dom | fl }


1

It turned out the issue was a corrupted config file, all of our settings were correct. The ActiveDS.dat file had become corrupted with an extremely long and nonsensical LDAP query. Removing the extraneous section of the query allowed it to process and sync correctly.


0

So it seems that the "--with-berkley-db" tag is not valid anymore. If you try this at home, use brew reinstall openldap --with-berkeley-db4 I just hope that I'll get my old data to work again...


0

I believe you can use Samba, kerberos and LDAP to authenticate windows machines via AD. I'm not sure how wise this is. You can use ldap tools (e.g. ldapadd, ldapmodify, ldap delete) or libraries e.g. PHP or perl LDAP modules to populate and maintain entries in AD. So there is no reason you can't write script for user management that doesn't update both ...


0

Do you want to delete the objectClasses or the directory entry? I kind of get the idea you want to remove the entire entry (i.e. record for the person). If so the tool to use is ldapdelete and it is generally installed at the same time as ldapmodify ? Depending on which suite of tools it comes from (e.g. proprietary, OpenLDAP etc) it's generally pretty ...


1

I suspect your entries have attributes that require the objectClasses your are trying to remove. You need to remove the attributes that depend on the objectClasses before you remove the object class. I don't know which LDAP server you are using, but I have had to remove entries to remove object clasees. This was done by extracting the record, removing ...


1

I suspect it's your LDAP server. olcSizeLimit: size[.{soft|hard|unchecked}]= [...] Specify the maximum number of entries to return from a search operation. The default size limit is 500. Use unlimited to specify no limits. The second format allows a fine grain setting of the size limits. Extra args can be added in the same value or as additional ...


3

SSL/TLS versions are not linked to Active Directory, the ciphers supported is part of the operating system/configuration. SSL 2.0, 3.0 TLS 1.0, 1.1, 1.2 https://blogs.technet.microsoft.com/askds/2015/12/08/speaking-in-ciphers-and-other-enigmatic-tonguesupdate/ With LDAP connections to 636/3269, it may sometimes be necessary to enable the following ...


0

go to your DNS setting on server manager and on : Forward Lookup zone->your Local server-->>(there will be the list of host connected to your domain delete the host giving error message and resart the host computer.


0

Cisco ASA routers support one authentication group per profile. So if your VPN connection profile is set to use an authentication group named VPN then when users connect to the VPN they will authenticate to the first available server in the VPN authentication group. You can have LOCAL set for a fallback authentication source, but it is only available if the ...



Top 50 recent answers are included