Tag Info

New answers tagged

1

Only using two different domains, I guess: [sssd] domains = userdomain, autofsdomain For the autofs domain, you can try setting some more-or-less phony id_provider, like none or local if you want to be sure to avoid retrieving users from the autofs domain.


0

You have 'encrypt passwords = yes'. From smb.conf (Samba 3): ... In order for encrypted passwords to work correctly smbd(8) must either have access to a local smbpasswd(5) file (see the smbpasswd(8) program for information on how to set up and maintain this file), or set the security = [server|domain|ads] parameter which causes smbd to authenticate ...


0

You could use Virtual Hosts to that match against Locations, whether via Location or LocationMatch. Here's an example that's been updated for Apache 2.4 and is run on a Windows 2012 Server that queries ActiveDirectory (Focus on the LocationMatch section): <VirtualHost *:80> WSGIScriptAlias /bloodhound ...


1

SSHA is a salted SHA-1. By default the last 4 Bytes are the salt. The output of slappasswd is '{<Hash Method>}<base64 converted hash and salt>' So in order to test, whether a plain text password is equal to the salted SHA, you need to: strip the hash method-specifier with e.g. sed. decode the base64 string extract the last 4 bytes, this is ...


0

I've solved the problem. Only thing I needed to do is to add new_authtok_reqd=done do the LDAP line in the common-account file. So, the resulting file looks like the following and everything is working is expected: account [success=2 new_authtok_reqd=done default=ignore] pam_unix.so account [success=1 new_authtok_reqd=done default=ignore] pam_ldap.so ...


0

I do not recall ipa-replica-prepare having this kind of error. I, however, saw that the warning you mentioned appears in ipa-replica-prepare man pages. This is an invalid statement, you can create replicas from other masters too. Only if you are installing replica with CA, you should create the replica file on other replica with CA. For the man page bug, I ...


0

This can't be done with just ldapmodify, but you can string a couple things together to do what you're asking. The following runs ldapmodify against an ldif file that we build on the fly from an ldapsearch plus the desired modifications. ldapmodify -f <(ldapsearch -LLL -b ou=People,dc=example,dc=com -s one uid=* dn | sed 's/^$/add: ...


0

It seems that one (or more) attribute for uid=doctor.lcl,ou=People,dc=domain,dc=lcl contains duplicate value with an already existing LDAP entry, for an attribute defined as unique. First, check your slapd.conf to search for attributes marked as unique. e.g : # index since the unique overlay will search for matching mail attributes index mail eq overlay ...


0

According to the manual slapd.conf is still supported in OpenLDAP 2.4. The Debian package maintainer may therefore still support it as well and have a check for the presence of the slapd.conf as part of the init script, maybe as a fall-back when no cn=config is detected either, to prevent OpenLDAP from starting without any configuration. You omitted the ...


0

I want to make my LDAP Port accessible inside my private network. Is it possible? Yes. You'll need to resolve the fact that your LDAP server only listens at the loopback interface as indicated by the netstat output: tcp 0 0 **127.0.1.1:389** 0.0.0.0:* LISTEN 1096/slapd and make it accept remote connections as well. Possibly you ...



Top 50 recent answers are included