Reputation
7,169
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 21 50
Impact
~360k people reached

Feb
4
comment Passwordless login for AFS
tools.ietf.org/html/rfc4556
Jan
6
comment ldapmodify error - Server is unwilling to perform (53) additional info: no global superior knowledge
That's more an issue with using a shell + here document than it is with ldapmodify.
Nov
6
comment Passwords not working after migration from /etc/shadow to LDAP
The contents of /etc/pam.d/su and all files included in that file, recursive, are relevant. As are /etc/ldap.conf or /etc/sssd/sssd.conf depending on your setup.
Nov
3
comment Master is Dead - Promote LDAP Slave to Master
It looks like your replicas don't have any ACLs. I hope you don't store authentication information on them.
Nov
3
comment ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1) for ldapi:/// on CentOS
/etc/openldap/ldap.conf is the client configuration. You'll want to look at /etc/sysconfig/slapd and ss -lxp | grep slapd`.
Nov
2
comment ldap_modify: Insufficient access (50) when changing password
Minor correction: That's external peercred. External TLS uses certificates and will work over tcp connections.
Oct
29
comment PAM - LDAP authentication interaction
I strongly prefer rfc2307bis schema. It's posixGroup is an auxiliary class. This allows it to be combined with groupOfNames, unlike the one in the nis schema.
Oct
27
comment restore parts of an LDAP Database
Look into the audit overlay.
Oct
12
comment Allowing OpenLDAP users to change their own password
Regardless of what access control policy is defined, the rootdn is always allowed full rights (i.e. auth, search, compare, read and write) on everything and anything. As a consequence, it's useless (and results in a performance penalty) to explicitly list the rootdn among the <by> clauses. openldap.org/doc/admin24/access-control.html#Introduction
Oct
10
comment Modules memberof.la and syncprov.la missing
Are syncprov.so and memberof.so available? If present, those should be sufficient.
Oct
9
comment How to supernet a group of subnets together?
@moonxdd Utilities exist so we don't have to do binary math by hand. There are ways to manually do this, but that kind of "show your work" is above and beyond for this site.
Oct
6
comment Removed 2 hard drives in RAID configuration from Dell Server, need to recover data
What RAID level?
Oct
1
comment libvirt lxc container won't use statically assigned address at startup
network is already enabled, as per default. Disabling NetworkManager does not seem to help.
Oct
1
comment Importing database in LDAP creates error
slapadd exists for very specific reasons. What are you trying to accomplish?
Oct
1
comment How can I set a url that would work with OAuth?
Don't use the IP address as part of your URI, use the A record instead.
Aug
26
comment Can I create a system wide custom signature in Office 365?
This might be a better fit for webapps.stackexchange.com ?
Jul
16
comment kerberos cross realm authentication
AD Domains by default will have a realm of them same name configured. Making another is unlike to achieve much beyond frustration. Why do you need another AD domain or an MIT realm?
Jul
12
comment Is there a security risk to disclosing your SSH known_hosts file?
@Lekensteyn You're admonishing? me for something that both appears in the accepted answer and also don't work on all of the systems I manage. Additionally, "calculating" may misinterpret the use case. I think "reading" might be a better choice of word. Offending ECDSA key in /home/username/.ssh/known_hosts:63
Jul
11
comment Why is LDAP using servers other than those specified?
How is your linux system configured? nss-pam-ldapd sssd samba?
Jul
10
comment LDAP build script failing on openLDAP-2.4.31 ( ldapmodify -Y EXTERNAL -H ldapi:/// )
Let me try this again. ldapi is ldap over inodes i.e. unix sockets. ldapi does not use tcp. Unix sockets are not tcp sockets. TCP sockets have ports e.g. 389. Unix sockets have (path)names e.g. /var/run/ldapi. If you'd rather use ss instead of netstat then the proper command would be ss -lp | grep slapd.