Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ldap]

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

0
votes
1answer
29 views

(Open) LDAP - Authentication not working

I installed OpenLDAP on a CentOS7 machine, I can log on locally on the server, so user exists (in passwd). I also run the following LDAP command: #ldapsearch -h localhost -x cn=ldapuser01 -b "dc=...
-1
votes
1answer
18 views

dovecot with LDAP can't find userPassword

I'm new to LDAP and I'm trying to use it with Dovecot for authentication. When I test out my setup with Telnet and IMAP, it reports 'userPassword not found'. However a simple search using the same ...
0
votes
0answers
15 views

ldapwhoami returns invalid credentials

my ldap configuration (/etc/openldap/slapd.conf) file is as follows include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/...
0
votes
0answers
28 views

LDAP Domain Controllers experiencing many “Kerberos authentication ticket (TGT) was requested” [closed]

My team uses winbind to perform AD authentication requests on our OEL 6.10 servers. Our LDAP team is experiencing nightly issues where my servers are making 1000's of "Kerberos authentication ticket(...
0
votes
0answers
28 views

Adding multi-way relationships to ldap schema

I have an LDAP server which has the following types of objects: person - users; listed in ou=people,dc=example,dc=com organization - companies that are our clients; listed in ou=clients,dc=example,dc=...
0
votes
0answers
33 views

Can't connect from any active directory Windows PC to a Samba share with IP address, only with host name

Ok, this one is a bit surreal: We have an all Windows network with Active Directory that has the domain controller server, a file server and a database server. Recently we had to add a SUSE ...
-1
votes
0answers
19 views

I have “warning: restriction `reject_authenticated_sender_login_mismatch' ignored: no SASL support”

I'm using Postfix with Dovecot and Postfix. Domains and usernames are stored in a db. In order to send email I have to authenticate. However, sometimes I receive spam from my own email - sender and ...
1
vote
1answer
69 views

<olcRootPW> can only be set when rootdn is under suffix

can someone help me to resolve this error? 5c18d91d ldif_read_file: checksum error on "/etc/openldap/slapd.d/cn=config.ldif" 5c18d91d olcRootPW: value #0: <olcRootPW> can only be set when ...
0
votes
0answers
15 views

HAProxy not sending correct URL to LXD container

HAProxy not sending correct URL to LXD container I want to have the following behaviour: In one virtual machine I have three LXD containers: One with HAProxy, another with a LDAP server, and the ...
0
votes
0answers
31 views

OpenVPN auth-ldap cannot find user in a group, but ldapsearch can find it

I can search for a user without issue: ldapsearch -h ldap.my.server.name -b "cn=vpnusers,ou=groups,dc=example,dc=com" -x "memberUid=myusername" Results: # extended LDIF # # LDAPv3 # base <cn=...
0
votes
1answer
67 views

How do I fix my ldap olcAccess to allow users to bind to it?

Background I have a super simple openldap server with basically nothing in it except the admin user, a couple OU's, and a user. I can login and auth against it with the admin user cn=admin,dc=...
0
votes
2answers
86 views

FreeRADIUS with LDAP vs Kerberos

The following site discusses how to setup FreeRADIUS to authenticate against an LDAP backend (it goes through a tutorial showing how to expose NT hashed passwords in FreeIPA so that FreeRADIUS can ...
0
votes
0answers
21 views

Pass through authentication from Openldap to Openldap

I am looking for a method to setup a Pass Through Authentication (PTA) between 2 openldap instances. All what I found is that is is possible to have this feature between an openldap instance to which ...
0
votes
0answers
59 views

How to limit LDAP virtual_alias_maps to a group of domains?

I am trying to setup some email forwards in Postfix using virutal_alias_maps and an LDAP looking. My first attempt looked up the user part using: query_filter = (&(objectClass=...
1
vote
2answers
42 views

GPO Deploy Printer Based on User Attribute

I am trying to deploy printers based on the Office attribute in AD. If a user is assigned to the Richmond office they should get those printers. Please note this is NOT location based printing. I just ...
-1
votes
0answers
25 views

ldapsearch hangs on ldap_int_select in some of my servers

I'm running open ldap on cent os 7. When I run ldapsearch in some of my servers it hangs on ldap_int_select: ldap_create ldap_url_parse_ext(ldap://{LDAP_SERVER_ADDRESS}:389) ldap_sasl_bind ...
0
votes
0answers
110 views

LDAP: creating a bind user with limited privileges

I need to bind to an OpenLDAP server to authenticate users, but I don't want this low-privileged or "delegated administrator" to be able to see more attributes than strictly necessary. How do I ...
0
votes
0answers
33 views

OpenLDAP ACL for group not working

I have an install of OpenLDAP which I have recently moved to be configured by olc. I'm setting up the ACL's but am having a trouble with setting admin access. I have the following rules I am using: ...
0
votes
1answer
54 views

nginx with nginx-auth-ldap won't make

I've done this before and used this guide: https://calvin.me/nginx-ldap-http-authentication/ Unfortunately lately that server has had some major issues with nginx crashing (there have been no changes ...
0
votes
0answers
142 views

How to configure LDAP client by using SSSD for authentication on CentOS, local accounts for identity, ldap for authentication

I've installed sssd, openldap, openldap-clients. I want to use local accounts for identity information and ldap for authentication. I'm using proxy for id_provider and ldap for auth_provider. Here'...
2
votes
1answer
28 views

What considerations should be made when determining the format of the CN (common name)

We're looking to improve the standardization & quality of data in our active directory. In doing this we've found inconsistencies in the format of the distinguishedName; specifically the format ...
2
votes
0answers
53 views

LDAPS Microsoft Active Directory Multiple Certificates RFC6125

We have an Microsoft Active Directory Domain with a large pool of domain controllers (DC) that are are setup with LDAP. These are all setup with LDAPS and uses Certificate Services via a template to ...
0
votes
0answers
33 views

pam_ldap detecting expiring password on Active Directory

I am maintaining some code that uses: pam_ldap version 186 which compiles against openldap 2.4.40 We are using Active Directory on Windows 2012 for the LDAP backend. pam_ldap successfully ...
1
vote
1answer
58 views

Using SASL from CentOS 7 Host to Authenticate to Active Directory

Trying to configure SASL on a CentOS 7 box to talk to an Active Directory installation. I've tried a couple different configurations that generate different errors. The latest: No worthy mechs found ...
0
votes
4answers
60 views

Get fullname by username using SSSD

The OS uses SSSD to authenticate users via LDAP. It has no X server running. I can run id <username> to get the uid of the user. And the users can login to the system and their full name is ...
0
votes
0answers
20 views

How to solve LDAP invalid credential (49) after upgrade from debian wheezy to jessie?

I've upgraded my machine Debian Wheezy to Jessie. On it, there was a LDAP configured managing users. Now, whenever I try to do ldapaddgroup foo to add a group (and then a new user) I can't complete ...
0
votes
0answers
49 views

SSH Auth through sssh

i have openldap and rhel7.4. My problem is i would like ssh authentication through sssd. At this point : sssd.conf [sssd] config_file_version = 2 services = nss, pam domains = MYDOMAIN.FR [domain/...
2
votes
1answer
40 views

Store data with an AD user in LDAP

I'm migrating from samba3+ldap to a samba4 domain (with samba 4.7.6-Ubuntu). Part of this migration has to be the storage of some data our services need in the user objects. (Nextcloud quota, ...
0
votes
1answer
185 views

How to enable OpenLDAP server trust a self-signed certificate from a client?

I am using JNDI to connect to a remote OpenLDAP server via ldaps by the following code: Hashtable env = new Hashtable(); env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap....
0
votes
1answer
46 views

OpenLdap inetOrgPerson object class attribute missing : “middlename”

I have an openLDAP installed on my server. Please refer image below for the details. My OpenLDAP version My issue is that i can't find middlename attribute under inetOrgPerson object class, which is ...
2
votes
0answers
121 views

SSSD with LDAP users not able to resolve their own uid/gid names and others

I have a machine setup to authenticate users with an LDAP directory using sssd+nss+pam. At the current state any user in the directory is able to login by ssh, or with su in between user accounts, ...
1
vote
1answer
95 views

Update AD password from python-ldap code : INSUFF_ACCESS_RIGHTS

I need to implement an "update password" feature in a Python web application (Flask). The goal is to allow user to self-update his password on a remote Active Directory server. I ended with this ...
1
vote
1answer
212 views

ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)

I am running an LDAP I can connect to, but in wanting to move away from slapd.conf and use ldif's, I am encountering the following problem(s). When I type:ldapsearch -H ldap:// -x -s base -b "" -LLL "...
-1
votes
1answer
72 views

sldap.d missing after installation

I am following the instructions on http://www.openldap.org/doc/admin24/quickstart.html to install OpenLDAP on RedHat. Everything goes fine until step 9: Import the configuration database You are ...
0
votes
0answers
13 views

Maillist in openldap addressbook

How can i create a mail list contains multiple email address in openldap? I have an open ldap server on centos 7 with interOrg object class for storing email address of the employee. I tried to ...
0
votes
1answer
267 views

TLS trace: SSL_connect:error in SSLv2/v3 read server hello A

I am trying to query AD for users and tried every options available but no success Operating System = CentoS7.5 Packages = Openldap, ldapsearch Microsoft Active Directory my command ldapsearch -x -...
0
votes
2answers
95 views

(SOLVED) Enable SSL/LDAPS in openLDAP 2.4 on Ubuntu 16.04.5 LTS - ldap_result: Can't contact LDAP server (-1)

I have the following Problem and googled for weeks now. Because I´ve really no clue where the problem is I´m asking my question here with the hope to find some ldap or ssl genius :) I have a working ...
2
votes
1answer
626 views

How can Samba be configured to use LDAP for authentication only?

I'm looking to set up a new Samba file share that uses LDAP for back-end authentication. The LDAP server is already set up, and the machine the Samba server will be on is already set up to allow SSH ...
-4
votes
1answer
168 views

Implementing Kerberos Authentication on Linux servers using script [closed]

My client wants to implement Kerberos Authentication on multiple Oracle Linux Boxes. Do they need to be done manually or can I implement on all of them using any script? Is there any way to script ...
0
votes
1answer
59 views

Openldap enable ssl on replication

Can you told me how can i modify current configuration for olcSyncRepl? I have following situation: I Configured master ldap server and slave server I Configured replication between these two ...
1
vote
0answers
214 views

How to set up System Security Services Daemon(SSSD) to authenticate users against Azure Active Directory

I have set Azure Active Directory(AD) up and running along with Azure AD Domain Services in which a single domain with secure LDAP is configured. On a Linux server, I have tested whether it can ...
0
votes
1answer
35 views

OpenLDAP slapd as transparent proxy, bind always fails

I have a linux (4.1.12-61.1.34.el6uek.x86_64) box with a slapd service (slapd 2.4.40). What I'm trying to achieve is to transparently proxy all client ldap related traffic through this slapd instance ...
0
votes
1answer
22 views

How to configure clients with two ldap servers : master and slave?

I 've successfully managed to set up OPENLDAP replication : ldap1.mydomain.com ldap2.mydomain.com (ldap2 initiates connection every 10min to ldap1.mydomain.com to synchronize) What I want is that ...
0
votes
0answers
86 views

Restrict user login to Linux via group membership querying Active Directory

I need to restrict access to linux servers according to AD group membership. I already have Centos 7 servers joined to AD realm using sssd and have already configured sssd.conf in order to use ...
1
vote
1answer
150 views

Non supported SSL cipher, how to disable it?

I have a linux system with a a version of OpenSSL 0.9.8j-fips 07 Jan 2009 and an Apache Server version: Apache/2.4.27 (Unix) The Apache has issues connecting via secure LDAPS to a remote DC Windows ...
0
votes
1answer
94 views

Automatically block Gitlab users, removed from LDAP

I've migrated this question from StackOverflow. I'm administering a Gitlab-Omnibus (Community Edition) instance in our company as an additional duty. Gitlab uses company's Active Directory server ...
0
votes
0answers
96 views

java ldap query across domain

My active directory have structur as below: AD server URL = ldap://ldap.abc.com:389 having domain controller as below: dc=xyz,dc=abc,dc=com dc=pqr,dc=abc,dc=com Now, dc=xyz,dc=abc,dc=com has a group ...
0
votes
1answer
161 views

Debian 9: Can't contact LDAP server with ldapi protocol

On my client on pam authentication (libnss-ldap and libpam-ldap packages and configuration) there is a configuration which leads me to nss_ldap: failed to bind to LDAP server ldapi://172.16.10.174/: ...
0
votes
0answers
181 views

getent passwd dosen't show users of LDAP server but getent shadow works

This is an Ubuntu with LDAP + NSCD installed and validating against an AD server. I can run ldapsearch without any problem and getent shadow shows all the ldap users but getent passwd and getent ...
1
vote
1answer
39 views

OPENLDAP 2.4 , allow anonymous access only to get User Publickey

I'm trying to do the following : I have openldap 2.4.45 server (test) which contains users, groups like this : o=Example(dc=example,dc=com) ou=users uid=alice uid=bob PublicKey="...." ...