Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [ldap]

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

0
votes
0answers
15 views

ldap users are not able to login in centOS 7

i'm not able to login using ldap user, getting authentication failure. here are some o/p's - please let me know if anything is required. [root@server01 pam.d]# getent passwd testuser testuser:*:...
0
votes
0answers
12 views

Solutions for centralized user management, sessions recording and jump server login on Linux debian [on hold]

I am managing about 30 Linux (Ubuntu) servers and we have a team of 20 IT staff members. Different members have access to different servers. Currently, we have one single user on each server and I'm ...
0
votes
0answers
11 views

ldapsearch.exe on Domino Server to connect to Address Book

Good Evening. I have a Domino Server running and two Global Address Books. I would like to access Global Address Book Records using the LDAPSearch.exe tool. When I run below command it lists the ...
0
votes
0answers
25 views

Cannot sync to LDAP Using nslcd [closed]

i tried using using nslcd to authenticate my centos 7 to LDAP, but it failed. Here is my nslcd.conf file : uid nslcd gid ldap uri ldap://ldap.sample.com base dc=sample,dc=com binddn cn=ldap_user,ou=...
0
votes
0answers
30 views

How to query LDAP via port 636 from powershell?

I use adsi to connect to AD and measure the latency of the connection. For same query when i replace server with server:636 , it fails. What is the easiest way to do a ldap "find" through 636 port?
0
votes
1answer
40 views

pfSense unable to LDAP bind to Active Directory Server

I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something. I've tested the ...
0
votes
0answers
22 views

LDAP Search Filter failing to retrieve objects?

I am performing an LDAP Customer Query. I have a Vormetric Cloud Encryption Gateway configured and I want to authenticate a select group of users to authenticate with the VCEG application. My domain ...
0
votes
0answers
12 views

AD doesn't return baseSessionKey when authentificate via NTLM

I have a question about NTLM authentication in a Active Directory. So, I try to retranslate NTLM messages from client to AD to be aware, that AD can authenticate this client. All steps work fine, 1)...
1
vote
1answer
49 views

Vsftpd user authentication

I've set up a virtual machine running Centos 7 and VSFTPD. VSFTPD is working great when connecting with local users. It chroots the user into his previously created home in /ftp/pub/{user_name} with ...
0
votes
2answers
55 views

Trying to connect to LDAPS (Windows active directory) but keep receiving Verify return code: 20 (unable to get local issuer certificate) error

I've been given a certificate by the person who runs our Active Directory server so I can use LDAPS but I can't get it to work. When verifying with openssl: openssl s_client -connect domain.com:636 -...
0
votes
0answers
29 views

Freeradius multi-factor auth with LDAP and Yubikey

I just set up a freeradius server and would like to be able to authenticate using both the password of a ldap user and the yubico otp generated from their yubikey. It is working using the ldap ...
0
votes
0answers
22 views

Using OpenLDAP as network resource access control

We have configured basic LDAP in our small office of 15 sytems, Where 15 accounts have been created on LDAP server and all other system has been configured to act as clients. Now we want to add ...
0
votes
1answer
21 views

LDAP on Ubuntu 16 won't connect

I've installed LDAP on an Ubuntu 16.04 machine, using this command: sudo apt install slapd ldap-utils This is my config file /etc/ldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details #...
1
vote
0answers
40 views

SFTP chroot jail on Centos system with Active Directory integration

I am trying to set up a SFTP chroot jail environment on one of our Centos, which is integrated with Active Directory for user authentication (set up with Realmd/oddjob). I would like to chroot each ...
0
votes
1answer
39 views

Openldap and SSL certificate chain validation

I just set up TLS for slapd on one server, using a simple PKI, like this one: ldap cert < intermediate CA cert < root CA cert In order to connect to the ldap server using TLS from a client, I ...
0
votes
2answers
33 views

Set ACL in OpenLDAP so that user can find its own entry from filtered subtree

I have a user directory in an openldap server under the base DN ou=users,dc=mydomain. The user entries are uid=user1,ou=users,dc=mydomain My current ACLs are: {5}to * by self write by dn="cn=admin,...
0
votes
1answer
38 views

Automount LDAP home folders in client machines

I have created couple of users on my ldap, and setup a couple of ubuntu ldap client machines, where users can login with their accounts. I now want to share their home folders and make it centralised ...
2
votes
1answer
54 views

How do I use Get-AdObject with an -LDAPFilter on proxyAddresses?

I'm trying to search for SMTP addresses using an LDAPFilter on ADObject Get-AdObject -properties * -LDAPFilter "(proxyAddresses=alert.haveibeenpwned@test.edu)" I understand that some of this is ...
-1
votes
1answer
50 views

Add a mobile number to LDAP mobile field

I'm new to LDAP and I've been looking how to do something for awhile now but with no results. I'd like to add a phone number to the mobile field through terminal command with this LDIF template dn: ...
1
vote
1answer
83 views

Active Directory is being attacked remotely

Thanks for clicking, I'm having an issue with our server where our Active Directory is being abused by random external servers. From what I can gather, our server is the victim of an LDAP forwarding ...
0
votes
1answer
88 views

openldap with haproxy - (ldap_result() failed: Can't contact LDAP server)

I'm having an issue with openldap proxied via haproxy. The authentication works perfectly fine on CentOS (7.5.1804) and Debian (9.4). The only problem is that I'm getting errors in syslog and authlog: ...
0
votes
1answer
101 views

Azure ADDS synced to AAD

I have a requirement to implement Active Directory Domain Services with the current Azure AD that is syncing to our on premise AD. The requirement for ADDS is because we need LDAPS. My question is ...
0
votes
0answers
19 views

Kerberos slave KDC connected to Active Directory

I have a Cluster with one login gateway and n computing nodes. They all run CentOS 7 and are connected via a private network. Only the login gateway is also connected to the outside world. I also have ...
1
vote
0answers
63 views

How to create a single Authentication point with multiple LDAP servers?

I'm currently into a process of creating a central service system from where users can connect to VMs. My goal with this is to have a single point of authentication for all possible users. The issue ...
1
vote
0answers
105 views

how to export all FreeIPA users list to a csv format?

How can export all FreeIPA users to a csv file?
0
votes
1answer
94 views

LDAP TSL ldap_modify: error 80

I was read few suggestion from this and many others forums and try to fix problem on my own, but without result. I need to add cert to ldap and always it return error 80. I was add permission to ...
0
votes
0answers
80 views

ASP.NET Core application with LDAP authentication on Docker image

I created a sample ASP.NET webapi application that authenticates the user in the domain through this piece of code: using (PrincipalContext pc = new PrincipalContext(ContextType.Domain, "mydomain"...
2
votes
1answer
62 views

Apache auth_ldap “authentication failed” only for a single user

We have a tricky problem with apache and auth_ldap against AD. Only a single user is not allowed to login, although it is in one of the allowed groups and other users of this group are allowed. When ...
0
votes
0answers
29 views

What is wrong with this pam_ldap configuration?

I've set up LDAP auth for PAM on an Ubuntu 16.04 machine. I can't log in over SSH even though I know the password is correct. My goal is to have a list of local users, and anyone having an account on ...
0
votes
0answers
65 views

LDAP Query to find ALL managers of a user

Is it possible, using LDAP filter syntax, to retrieve all users a user is subordinate to, based on the 'manager' attribute? For example, Bob is John's manager Alice is Bob's manager Dave is Alice's ...
0
votes
1answer
36 views

Editing a value in a ldap dn

What is the correct syntax to edit a value in an LDAP dn? As of now I was trying the following: serveradmin@magic:~$ ldapmodify -x -W -D cn=admin,dc=example,dc=com <<EOF > dn: uid=foo,ou=...
0
votes
0answers
53 views

LDAP user can log in from tty but not login manager

Configuration CentOS 7.5.1804 GDM, LightDM, SDDM tested yum group "KDE Plasma Workspaces" as desktop environment, GNOME also tested LDAP logins provided by sssd, /home/* mounted via autofs over NFS ...
0
votes
0answers
14 views

Apache Directory Studio login to OpenLDAP server

I am trying to authenticate to an OpenLDAP server using Apache Directory Studio. I am able to authenticate using the dn but when trying with other fields (cn or uid) it fails. My question is what is ...
0
votes
0answers
25 views

Enable custom login field in OpenLDAP

I have set up an OpenLDAP server instance. Currently, login is possible via dn/password, e.g. "cn=151test,cn=somecn,ou=someou,dc=mydomain,dc=com" somepass How can I use another field for username ...
-1
votes
1answer
25 views

No base DN returned from server.Plase enter the base DN manually- Apache Directory Studio

I'm new in Ldap and trying to setup it manually on centos and i'm getting below error while access it from Apache Directory studio. No base DN returned from server.Plase enter the base DN manually- ...
0
votes
2answers
256 views

Unable to authenticate OpenLDAP users on macOS clients “user not found: no secret in database”

I have an Ubuntu 16.04 server that is runnning an OpenLDAP server. I am able to see everything just fine: serveradmin@Magic:~$ ldapsearch -x -H ldap://localhost -D cn=admin,dc=example,dc=com -W Enter ...
0
votes
1answer
46 views

OpenLDAP auditlog overlay module does not get loaded on Debian

I use OpenLDAP on Debian Stretch. I wanted to use the auditlog overlay module, however it does not seem to load. I added the module auditlog to my config # module{0}, config dn: cn=module{0},cn=...
1
vote
0answers
19 views

Create Dynamic LDAP Group From Attributes

Not terribly experience with LDAP here. Looking for some help crafting either a LDAP dynamic group or LDAP query that I can use to create a dynamic group. Here is the goal: a groupOfNames or ...
0
votes
0answers
17 views

Anyone successfully connect ejjaberd to macOS Open Directory

I am attempting to get ejabberd connected to Open Directory on macOS High Sierra. Apple has offered no assistance other than direct me to here. My ejabberd.yml errors out on line 354 about ldap uids....
0
votes
0answers
41 views

AD: who binds via LDAP with this username?

How can I determine which PCs bind via LDAP with a specific username? Finding out IP addresses would be fantastic, but any clues will help. Server: Windows 2012 R2 (AD Schema Version 69) Clients: ...
0
votes
2answers
47 views

Can we get attributes of all referenced DNs in LDAP with a single query?

For example, the following is ldapquery and it's output: # ldapsearch -LLL -h myldaphost -D uid=myname,ou=People,ou=MyBranch,o=MyOrg -x -w mypasswd -b cn=TEST_USERS,ou=Groups,ou=MyBranch,o=MyOrg ...
0
votes
0answers
31 views

Kopano LDAP unable to login when username has special character

Ok, so I currently have a Kopano server working with Openldap to manage logins. The problem I currently have is that if I decide to define a user's login as his email, I can't send a message via ...
0
votes
0answers
16 views

How to create an admin account that has the capability to reset user password with ppolicy implemented in openLDAP centos7?

I need a lower level account because rootDN account bypasses passwordpolicy overlays in ldap. Here is my base ldif file: dn: dc=compaid,dc=com dc: compaid objectClass: top objectClass: domain dn: ...
0
votes
1answer
112 views

LDAP authentication NFS home mount with local login

I have a configuration that normally user home is automatically mounted after ldap authentication. What I want to learn is how can I mount ldap authenticated nfs home of a user with local login? Is ...
1
vote
0answers
180 views

slapd won't start (due to missing certificate?)

I'm trying to setup a OpenLDAP server on a CentOS 7.5. Following this guide seemed to work very well until something went wrong (LDAP-password wasn't accepted any longer) due to a server crash. I ...
1
vote
0answers
16 views

Slow LDAP connection on Apache?

I'm trying to troubleshoot why the first call on a web service is taking more than a minute when subsequent takes less than a second (this repeats every 10+ minutes without calls). I ran Wireshark on ...
0
votes
0answers
34 views

Linux password via kerberos unable to reset

When I try to reset a ldap user password from client machine I am getting the following error $ passwd Changing password for user demo. Current Password: New password: Retype new password: passwd: ...
0
votes
2answers
206 views

How to restart ns-slapd

I am trying to restart an LDAP server running on a CentOS machine so as to apply new SSL certificates. I have tracked the service to being run as /usr/sbin/ns-slapd -D /etc/dirsrv/slapd-<instance&...
1
vote
1answer
162 views

How to get the distinguished name (DN) of the current host directly in adedit?

I know how to get the DN from the command line: adquery user -D "$(hostname -s)" However, I want to get the DN into an adedit script. If I can select_object {DN here}, then I can do the other ...
2
votes
1answer
30 views

Unable to dump LDAP database after changes

I added an attribute to my LDAP database by running ldapmodify -QY EXTERNAL -H ldapi:/// -f openssh-lpk.schema as root, where openssh-lpk.schema contains this: # Author: Eric AUGE <eau@phear.org&...