Questions tagged [ldap]
Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network
2,711
questions
0
votes
0
answers
5
views
how to select the ISE proxy sequence based on an LDAP lookup?
I am currently setting up a VOIP network for my customer, which includes 802.1x and MAB authentication.
The normal auth sequence goes like this:
The switch detects a new machine with no 802.1x ...
- 101
0
votes
1
answer
18
views
Issue with not being able to pars LDIF file (invalid format (line 5) entry: "cn=schema")
Trying to add a new attribute to a schema by using this command:
ldapmodify -f ./add-id-attribute.ldif -h localhost -p 50389 -D "cn=Directory Manager" -w mySecretPassword
And this LDIF file
...
0
votes
1
answer
27
views
ldap_group_search_base is not working as intented
I've used the below-given sssd.conf file to authorize the users to a server. The issue is some users who are not listed under the DN: cn=authorized,ou=rona,ou=servers,ou=groups,dc=yolo,dc=com still ...
0
votes
1
answer
35
views
What are all the certificates mandatory to be provide while setting TLSVerifyClient option to demand
In my case, I had set TLSVerifyClient to demand. I couldn't be able to establish a connection While providing TLSCACertificateFile alone.
While setting the TLSVerifyClient option demand is it ...
- 11
0
votes
0
answers
5
views
Specific olcAccess does not work for an OU in LDAP
On my OpenLDAP server, I would like the accounts in my "ou=partners" OU to have "read" permissions to all objects in "ou=abos". Here is the tree of my DIT :
[ditTree][1]
...
0
votes
0
answers
17
views
HAProxy load balancing check
I have two LDAP servers that replicate together on my LAN. I have a Pfsense CE that performs a load balancing on my two servers for the requests from the WAN. Is it possible to check the number of ...
0
votes
1
answer
27
views
Debian 11 + ProFTPd and LDAPS
I'm trying to authenticate my FTP users from Active Directory using LDAPS over SSL (port 636).
I managed to get it working using simple LDAP on port 389 and now I would like to increase security!
OS ...
- 33
0
votes
1
answer
116
views
LDAP replication to server with Let's Encrypt certificate fails, "unable to get issuer certificate"
I am currently trying to set up LDAP replication between to instances of 389 Directory Server (both running on Fedora 37), which I'll call $SUPPLIER and $CONSUMER in the following (serving at the ...
- 51
1
vote
1
answer
70
views
Setup SSO : openldap, kerberos, nfs(truenas) :
Currently I am able to setup a SSO NFS setup with openldap ldap server and Truenas NFS server (with LDAP access configured). The ubuntu clients are able to use pam-mount to mount the nfs home shares. ...
- 13
1
vote
0
answers
39
views
CentOS 7, Integrating SAMBA server with LDAP server to authenticate users through LDAP
I spent many hours trying to solve my problem, but unfortunately to no avail.
Im configuring SAMBA server on CentOS 7. I want to fetch users' credentials from LDAP server, so they will be able to ...
- 11
0
votes
0
answers
36
views
Dspace 7.4 authentication with LDAP Active Directory
Could you suggest step by step how to enable authorization through Active Directory in repository Dspace 7.4?
Repository Dspace 7.4 installed in virtual Ubuntu server. Active directory in Windows ...
0
votes
1
answer
21
views
Strange hash lengths in OpenLDAP
I recently went through all the hashes stored in an LDAP instance I have access to and noticed something strange that I can't explain.
Despite all the hashes being marked as SSHA (which should be ...
- 11
1
vote
0
answers
38
views
LDAP postfix "User doesn't exist"
I have a postfix server, which forwards all the emails to a dovecot server via LMTP. The usersname/groups are kept in a 389-Directory Server (LDAP)
In /etc/postfix/transport I have a few lines like (...
- 11
0
votes
0
answers
6
views
detect when sssd connects to the ladp server and finds a specific group in boot
I am looking to find a way so when system is booting , i can detect when sssd connect to LDAP server and finds a specific group then reload the systemd-udevd.
i actually want to automate all of these ...
- 1
0
votes
0
answers
40
views
How to delete olcAttributeTypes LDAP
Is there a way to delete olcAttributeTypes from my schema?
It's not a system attribute, I added it myself, now I need to delete it.
I'm using LAM (LDAP Account Manager) v5.6
The attribute is located ...
0
votes
0
answers
96
views
failed to bind to LDAP server ldap://<server IP>/: Can't contact LDAP server: Transport endpoint is not connected
Users are unable to login to network cluster.
var/log/messages =
failed to bind to LDAP server ldap://<ldap server hostname>: Can't contact LDAP server: Transport endpoint is not connected
no ...
- 1
0
votes
0
answers
42
views
ldap+sssd on SuSE shows only local users
Problem: Not able to list ldap users.
Hello,
I am setting up new LDAP authentication on our SuSE 12 test system. I am a LDAP newbie and following the instructions from the site https://www.port389.org/...
- 11
0
votes
0
answers
23
views
OpenLDAP meta backend with different directory structure
I am working on a project and we need to "combine" two completely different Active Directory (AD) servers to one. I have found that OpenLDAP might provide a solution by providing a reverse ...
- 1
0
votes
1
answer
63
views
Getting "ldap_add: Server is unwilling to perform (53) additional info: no global superior knowledge" when trying to add new objectClass to openLDAP
I have created new schema which looks like this
attributetype ( 2.25.3236588
NAME 'x-candidateNumber'
DESC 'Candidate number'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4....
- 3
0
votes
0
answers
45
views
Join a SuSE 15.4 to Active Directory
I was reading this post because I have to add a SuSE 15.4 Server to an Active Directory domain. I followed it but the packages that he ask me to install cannot be installed. For instance, the command:
...
- 119
1
vote
0
answers
21
views
SSSD versus direct ldap IPA
I'm trying to setup so my sudoers in nsswitch.conf is using sss and not ldap directly. However, when I try to switch this and run a sudo I get following error:
Error
userX is not allowed to run sudo ...
- 131
0
votes
0
answers
225
views
openLDAP / Sasl - ldap_sasl_interactive_bind_s: Local error (-2)
I configure openldap with sasl bind.
Trying connect:
# ldapsearch -v -H ldaps:// -Y PLAIN -U name@example.com
But getting error:
ldap_sasl_interactive_bind_s: Local error (-2)
I create a config ...
- 1
0
votes
1
answer
93
views
Cannot authorize WiFi user on FortiGate via LDAP
I am using Fortigate + FortiAP for WiFi. The WiFi is working, I can connect to it via for example WEP password. However, I want to authorize all my LDAP (Windows Standard 2019 AD) users vie WPA ...
- 17
0
votes
1
answer
145
views
Nsswitch - sudoers sss vs ldap what am I missing
I'm trying to configure nsswitch to use sudoers: files sss which is default for rhel9 system, however this does not work for me, but the following sudoers: files ldap does indeed work.
What am I ...
- 131
0
votes
1
answer
51
views
In terms of replication, can an OpenLDAP consumer act as a provider to another OpenLDAP server?
If I have an OpenLDAP server configured as a replication provider and a second OpenLDAP server configured as a consumer, can I configure the second server to act as a provider for a third OpenLDAP ...
- 232
0
votes
0
answers
14
views
Why do users in the administrators group not show they are in the group from a sssd joined host?
Noticed that when running id usertocheck or groups usertocheck the users in the administrators group did not show that group listed.
Checking on the windows dc with net user usertocheck shows ...
- 209
0
votes
1
answer
198
views
Kerberos auth from non-domain joined machines using custom UPN suffix
I am trying to access resources inside an Active Directory domain from a non-domain joined Windows 10 machine. The domain is ad.example.com, but there is also the alternative UPN suffix example.com.
...
- 1
0
votes
1
answer
106
views
Adding SSL certs to Samba from CA
I have a wildcard SSL cert from A CA that I am trying to get to work on my samba ADDC. Samba will fail on Samba restart when smb.conf looks like this:
tls enabled = yes
tls keyfile = tls/...
0
votes
1
answer
37
views
Do I have to reconfigure after restarting an LDAP service?
I'm using two LDAP servers in a mirror mode.(active-active hot standby, openldap 2.4)
As explained in an LDAP document, instead of using a config file, I configured dynamically with ldapadd and ...
- 103
0
votes
0
answers
21
views
OpenLDAP Child or Relay server configuration assistance
I am a really lost here and would appreciate some help.
My organization already maintains an OpenLDAP server which allows read-only access
Running this gives me an entire dump of all the users and ...
- 51
0
votes
0
answers
23
views
Using Ppolicy in a provider peer cluster can trigger consumer refresh condition
My ldap consists of a cluster of 3 providers that all replicate to each other, and a fleet of consumers replicating from them, and we have ppolicy installed on our providers and consumers both, though ...
- 1
0
votes
0
answers
36
views
Setting ACL on OpenLDAP server
I did setup OpenLDAP server, but I need to implement ACL. I'm not linux admin and I'm not even sure if what I'm trying to achieve is possible.
I have 3 groups. These has users which are posixAccount ...
- 3
0
votes
0
answers
58
views
ldapwhoami command returning can't contact
I tried to connect from my ubuntu local system to ldap server for checking the connection getting can't connect response, following is the command I tried.
ldapwhoami -H ldap://192.168.132.241:389 -D &...
- 101
0
votes
0
answers
73
views
ldap password policy for other attributes
Say, you have a user with a normal password attribute, userPassword, and an apllication-password attribute, appPassword, that are not the same and also have a different hash-scheme.
In OpenLDAP, you ...
0
votes
0
answers
60
views
Automatically add LDAP users to a local group
I manage about 100 servers running Alma Linux 9.1, each with multiple users. Historically we've had a single account "admin" that everyone logs into when working on a server. I'm moving us ...
- 914
1
vote
0
answers
33
views
Unable to set ms-TS-Max-Idle-Time LDAP attribute
I need help with an LDAP attribute that I’m trying to assign for adding a new AD user.
I’m using the following Python script for adding a new user and everything works as expected:
# sample ...
- 11
1
vote
1
answer
36
views
How do I view contents of incoming bindRequests to Active Directory DS?
I have a full fledged AD DS running on Windows server 2016. I have a spring app which I am using to authenticate against my active directory database using a simple authentication bind over a ssl ...
- 13
0
votes
1
answer
68
views
Does ldapmodify propagate changes of dn/uid to associated groups of the user?
I have to modify a user's UID and DN in an OpenLDAP server because of marriage. Now, I follow this example from Oracle's website: https://docs.oracle.com/cd/E22289_01/html/821-1273/adding-modifying-...
0
votes
1
answer
39
views
Windows server - what edition for active directory logging only
for my organization (40-50 users) I need a Domain Controller. The server will be used only to log users on their PC/Notebook (with windows pro edition) and to set policy on the PC (like to block pc ...
0
votes
3
answers
141
views
How to secure LDAP Querys from a public system to our DC
We have a public reachable Debianserver running Nextcloud, where our users should logon with their AD credentials. This server is in a DMZ and hardned as much as possible but I'm a bit worried about ...
0
votes
0
answers
30
views
Comparing ldap object attributes from different LDAP servers
I have one requirement like...I need to write a python script which will compare objects between two ldap servers residing in two different servers (server A and server B) and list out the ...
- 11
1
vote
1
answer
108
views
Kubernetes Nifi cluster LDAP configuration
We are using cetic/helm for nifi cluster. We have configured LDAP credentials as below:
ldap:
enabled: true
host: "ldaps://ldaphost.net"
searchBase: "ou=People,o=ABC" #...
- 29
0
votes
0
answers
120
views
samba - openLdap authentication issue - Ubuntu 20.04 server
i'll try and be concise:
i'm running a Ubuntu server 20.04 VM, i've installed OpenLDAP and Samba (this is an assignment, so i'm not worrying very much that those both are hosted on same server for the ...
- 1
0
votes
0
answers
41
views
k8s integration with OpenLdap
I am new in Kubernetes, can any guide me, how to integrate OpenLdap with Kubernetes?
I have tried multiple ways like DEX+LDAP+Kubernetes. but no success.
Regards
Pradeep
0
votes
0
answers
32
views
Can't bind to ldaps when creating new Domain Controller
I'm using ldp.exe..... I can connect fine via ldap to my new domain controller by doing this (the Server Name here is a dns alias pointing to the IP of the server)
.....but when I attempt to bind ...
- 103
0
votes
0
answers
134
views
Possible to perform AD modify request with Apache Directory Studio?
I want simulate a password change towards Active Directory using Apache Directory Studio. Is there a command line interface or dialog to perform this operation:
ldap modifyRequest
delete unicodePwd ....
- 101
1
vote
1
answer
273
views
FreeIPA import hashed passwords or sync with another ldap
We want to setup FreeIPA to work with our legacy user management system, we can output an ldif file and alter it into a FreeIPA compatible format and import it. Everything works nicely except for the ...
0
votes
1
answer
167
views
Best practices to completely disable LDAP users' access to mixed services with mixed authentication methods?
Background
We use LDAP in our department to authenticate users to various services including web apps as well as Linux servers (via SSH). When a user leaves the department, we should disable their ...
- 38
0
votes
1
answer
78
views
Migrate LDAP records to FreeIPA and populate POSIX
We have a legacy application that we manage the employees, this application connects to an ApacheDS and provides LDAP authentication trough it. Now we want to implement FreeIPA but not as the source ...
1
vote
1
answer
36
views
Error 20080078:BIO routines:bio_write_intern: uninitialized
My php test script for SSL connection to the LDAP server crashes.
When I run it from command line CLI crashes.
The message from the LDAP logging shows this before the crash:
Error 20080078:BIO ...
- 153