Skip to main content

Questions tagged [ldap]

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

Filter by
Sorted by
Tagged with
0 votes
0 answers
29 views

ldapsearch: ldap_bind: Invalid credentials (49)

We have two forests,prod.com and test.com. There is a transitive trust between the forests. I'm able to login into the DC test.com using the username and password of DC prod.com in RDP. I'm not able ...
Sagar Rana Magar's user avatar
-1 votes
0 answers
42 views

Linux server integrated into AD does not authenticate users

I have some Linux servers integrated into AD. One joined to the domain with no error, but it does not authenticate any AD users. Could you help me? Log and configuration files: [root@oracleLinux72 ~]#...
stenioc1's user avatar
0 votes
0 answers
30 views

Can openldap ignore the -z (size limit) parameter in ldapsearch

I have an issue with a client application performing an ldap search against my Ubuntu 22.04 openldap server. As you can see in the wireshark trace, the client is specifying a sizelimit=1 for the ...
DoubleYou's user avatar
0 votes
0 answers
32 views

transient, intermittent "No user exists" errors with SSSD and LDAP

I'm using SSSD and Google LDAP. My users can log (via tailscale SSH, if that matters) in but after being logged in for a while they get errors like: No user exists for uid 61270005 (also any command ...
user162988's user avatar
0 votes
1 answer
24 views

How to rewrite LDAP attributes in slapd when used as a proxy?

I'm currently setting up slapd as a proxy and facing a challenge with rewriting LDAP attributes. I'm aware of the rewrite module (rwm) capability for DNs, but I need to apply similar functionality to ...
Ralequi's user avatar
  • 142
0 votes
1 answer
47 views

I can't log-in to the webserver via LDAP

We using a VM for a web server running with apache2 regulating a specific service. Both SSH-login and logging to the front end were regulated by our LDAP-server. A few weeks ago, some changes were ...
Assa Yeroslaviz's user avatar
0 votes
0 answers
63 views

FreeIPA, Keycloak and Radius with OTP used for Wifi, VPN and Docker registry auth result in logging in hell

we have configured our infrastructure to use FreeIPA for user database, keycloak as SSO auth and Radius as auth proxy. We use everywhere password + OTP policy. We have several apps connected to ...
Broskev's user avatar
  • 37
0 votes
1 answer
21 views

No rootDN in DIT after setting up OpenLDAP in Ubuntu 22.04

I am new to LDAP and Directory Services in general (My goal is to import ldif files containing certificates from a Public Key Directory (pkddownloadsg.icao.int/download)). But I am already failing at ...
tzippy's user avatar
  • 113
1 vote
0 answers
30 views

FreeRadius not loading clients from LDAP

I am trying to store and use my Radius clients in LDAP. They are defined and present in the LDAP: $ ldapsearch -x -H ldap://ldap.example.com -D "cn=admin,dc=example,dc=com" -w admin -b "...
Bnr's user avatar
  • 11
1 vote
0 answers
106 views

Domain user has different umask than expected

I have a network domain with multiple users managed by LDAP and Kerberos. I'm managing the default umask via pam.d, in my /etc/pam.d/common-session with the line: session optional pam_umask.so ...
tdpu's user avatar
  • 111
0 votes
2 answers
98 views

OpenLDAP authentication troubleshooting

I am running an OpenLDAP service using the slapd.d/ configuration style. I am testing creating users and authenticating as user. Here's my test script, which ends with a fail: ldap_bind: Invalid ...
XGDragon's user avatar
0 votes
0 answers
25 views

Ceph s3 LDAP not working despite following instructions

I have a problem with LDAP configuration in Ceph. I have a fresh cluster (for testing purposes). No operation has been performed on it except adding certificates to Dashborad and Grafana and issuing . ...
Konrad's user avatar
  • 11
0 votes
0 answers
35 views

FreeIPA replica - unable to login via web UI

I've installed a freeipa replica (almalinux-8-4.9.12) from my master (centos-7-4.6.8). Both running in docker. On web UI login I get Login failed due to an unknown reason. error. And any ipa command ...
Dimuk91's user avatar
0 votes
0 answers
25 views

slapd version not upgraded

I have just upgraded my openldap to 2.4.59. But when I execute slapd -V, it still shows my previous version : 2.4.44? root@VLDAP ~]# ldapsearch -V ldapsearch: @(#) $OpenLDAP: ldapsearch 2.4.59 (Mar 13 ...
Wan Zhafri's user avatar
0 votes
0 answers
65 views

Restricting Access to Kubernetes Ingress using LDAP and VPN

I'm working on securing access to my Kubernetes cluster, specifically for the domain name xyz.com. Currently, I'm using NGINX Ingress with the nginx.ingress.kubernetes.io/whitelist-source-range ...
adel hamrouni's user avatar
0 votes
0 answers
34 views

Reading LDAP attribute works, modifying it results in "attribute type undefined"

I have a Citrix ADC and want to setup multi-factor authentication using an OTP token. Since I do not have an AD but an LDAP directory only, the Authentication LDAP Server is set to NDS. The Citrix ADC ...
Drudge's user avatar
  • 155
1 vote
1 answer
76 views

sssd allows switching via su to users blocked from ldap_access_filter for users that can log in

My department is switching to using sssd with ldap for logins on all of our linux hosts. I've got it all working, but there was one issue I was hoping to resolve before continuing testing in our dev ...
user23497333's user avatar
0 votes
1 answer
41 views

Samba4 User password is not updated correctly via LDAP message, only via smbpasswd

I have set up a Samba4 AD DC, and I can successfully authenticate with my Administrator user from .net code: var directoryIdentifier = new LdapDirectoryIdentifier("127.0.0.1", 636); var ...
iSpain17's user avatar
  • 103
2 votes
0 answers
192 views

Why I can't activate SSL on my Ubuntu Server (20.04) with ldap auth? (ldaps)

I have to activate SSL for secure comunications with ldap, I count with Letsencrypt .pem files (chain, fullchain, cert & privkey). I followed the steps of some pages but it didn't had any effect ...
Harry02's user avatar
  • 21
2 votes
0 answers
57 views

ldap not working with svn

Authentication fails with password mismatch error whilst trying to login to svn repo. Following is the config for 10-subversion.conf Tried everything but nothing seemed to worked including changing ...
Mehran Saeed's user avatar
1 vote
1 answer
273 views

What is the best way to achieve SSO for Apache 2.4 within a Windows domain? [closed]

I would like to implement an SSO authentication (without login/password prompt) on a PHP 8 intranet app, which runs under Apache 2.4 x64 for Windows. My company has an Active Directory / LDAP / ...
b126's user avatar
  • 113
2 votes
1 answer
194 views

Insufficient Acces (50) LDAP

I am trying to execute a custom .ldif file at the beggining of the startup of OpenLDAP server and have succeded using the following command: ldapadd -x -D cn=admin,dc=vlad,dc=lan -w admin -H ldap:// -...
VladC's user avatar
  • 23
0 votes
2 answers
169 views

Freeradius filter ldap by group

I would like freeradius to check for group membership and allow access based on group membership: My current config: ldap { identity = 'cn=radius,ou=bindings,dc=company,dc=com' ...
Kristof Rado's user avatar
0 votes
0 answers
32 views

Can I Ldap Sync replication to a different backend?

My current OpenLDAP backend is BDB can I replicate (syncrepl) this to another server using a MDB backend? Probably a no but thought I'd ask. Thanks, Andy
Andy Fenney's user avatar
0 votes
0 answers
37 views

ssh-certificate LDAP schema existence?

Hello. I'm looking for an LDAP schema to make it possible to publish my ssh-certificates into user/host LDAP nodes. Is there any common one?
X bl lJJ H i K's user avatar
0 votes
0 answers
93 views

LDAP log spam - TCP ERROR Bad Ber Tag or uncleanly closed connection - B1

I have a loadbalancer infront of my ldap servers. However, the healthchecks from the loadbalancer is spamming my dirsrv logs with following: { "date": "[XXXXXXXXXXX] ", "...
N. J's user avatar
  • 125
0 votes
1 answer
55 views

OpenLDAP failing to add new attributes

I want to create some user accounts with attributes like "gender", meaning I need to create custom attributes. I have created the following LDIF file: dn: cn=schema changetype: modify add: ...
Seal_bebbe's user avatar
0 votes
0 answers
168 views

OpenLDAP won't look at CA certificate

I have set up an LDAP server that I would like to connect to from a client machine. Ubuntu is OS of both server and client, TLS is active and since this is a practice project, all my certificates are ...
Seal_bebbe's user avatar
-1 votes
1 answer
240 views

How to pick the Base DN for LDAP?

I'm setting up an LDAP (LLDAP, for same-sign on) and I understand every directory needs a Base DN. I understand the Base DN works like a namespace containing all the entries of this directory. It ...
Gamification's user avatar
0 votes
1 answer
204 views

Authenticate with Freeradius from LDAP fails

I want to set up Freeradius to be able to authenticate via an LDAP database. Freeradius can connect and find the user in LDAP directory correctly: 2024-01-14T22:00:25.233318433Z (1) ldap: EXPAND (uid=%...
Kristof Rado's user avatar
0 votes
2 answers
71 views

How to check which package/process updated nsswitch?

I've experincing problems with my /etc/nsswitch.conf. I'm not longer able to use sudo as my personal user (ldap). I've checked dpkg.log, and it seems it's been som upgrades on the packages which ...
N. J's user avatar
  • 125
0 votes
0 answers
60 views

OpenLDAP peername.ip ACL not working for subnets

I have the following ACL stored in my /etc/openldap/slapd.conf file: access to dn.regex="^([^,]+,)?ou=(groups|addressbook),dc=ldap$" by dn.exact="cn=directory,ou=users,dc=ldap&...
Matthew Knill's user avatar
0 votes
2 answers
92 views

Dovecot/Postfix: How to enforce an intial syntax check on user name before querying LDAP for authentication?

I have a Postfix/Dovecot setup and use OpenLDAP as the user/password backend. Users must login with their fully-qualified email address as their username due to virtual hosting and hence the domain ...
user2690527's user avatar
0 votes
1 answer
88 views

Creating ppolicy Overlay in OpenLDAP has no effect

I read +++ forums and docs. My OpenLDAP instance is configured in a Bitnami Container as follows: dn: cn=module,cn=config cn: module objectClass: olcModuleList olcModuleLoad: ppolicy.so olcModulePath: ...
Peedy2495's user avatar
0 votes
0 answers
89 views

AD recursive LDAP query for unexpired temporary group memberships

With Privileged Access Management for ADDS (on-premises), it is possible to temporary add a member to a group, e.g. using powershell Add-ADGroupMember. Additionally, it is possible to use LDAPs ...
rrr's user avatar
  • 101
2 votes
1 answer
460 views

RHEL 9 use ldap (AD) for authentication only

I want to manage users locally on an RHEL 9 system. I want to create, delete, associate with groups all locally. However I want their password to be validated against LDAP. If they don't exists in ...
Paul Lemmons's user avatar
1 vote
1 answer
188 views

openLDAP works for v2.4 but v2.6 returns: Invalid syntax (21) additional info: objectClass: value #0 invalid per syntax

I have been facing this problem for a few days by now, and I would like to preface this by stating that this is the first time I have ever used ldap. So after debugging a bit around the error I have ...
omarelkady22's user avatar
0 votes
0 answers
46 views

pgina not able to authorize as per rules

I have the following settings img 1 and these are the authorization rules I have added img 2 Yet pgina is unable to correctly identify and follow the rules. Here is the output of simulation. bwayne is ...
none's user avatar
  • 1
0 votes
2 answers
194 views

Load balance LDAPS with Network load balancer Layer 3/Layer 4 (IP protocol)

I'm trying to setup a Network Load Balancer which direct traffic to healthy servers based on Layer 3/Layer 4 (IP protocol) data. Question: Does this work for LDAP over SSL (LDAPS)? (I'm aware layer 7 ...
N. J's user avatar
  • 125
0 votes
1 answer
228 views

How to define the password protection scheme (e.g. hash function) used by ldappasswd?

I am using OpenLDAP 2.6. When I set an object's password via ldappasswd -x -D <dn of root user> -W -S <dn of object whose pwd shall be set> then some hash of the password end up in the ...
user2690527's user avatar
0 votes
1 answer
121 views

Where do I find the LDAP scheme for Postifx or which alternative should I use?

The howto https://www.postfix.org/LDAP_README.html describes LDAP object with object classes virtualaccount ldapgroup ldapuser attributes mail memberdn memberaddr maildrop Where do I find the ...
user2690527's user avatar
0 votes
0 answers
85 views

Include fields on an LDAP user search?

I am running an Authentik instance with an LDAP provider/outpost. To test it out, I've bound an Ubuntu server with sssd to the LDAP server. Everything is working great (...finally). But I am curious ...
iTim314's user avatar
1 vote
1 answer
302 views

openldap - adding image to 'photo' attribute gives me 'no validator for syntax'

New to openLDAP - i'm trying to simply add a base64 encoded binary (16Kb) image to the photo attribute to the person objectClass but whatever i try i simply get this error 'no validator for syntax 1.3....
Mannie's user avatar
  • 113
0 votes
0 answers
359 views

SSH with LDAP authentication within a Docker container

Im trying to setup a ssh jumphost with docker that uses LDAP authentication. I'm running the container as rootless. Note: This is all currently as testing but would love to hear some feedback about ...
Janchy's user avatar
  • 1
0 votes
0 answers
104 views

I am an LDAP user. Why can't I change my shell despite being listed in /etc/shells?

I can't change my shell. The following shell output shows what I have tried. How can I change my shell to /usr/bin/fish? [michael@vps ~]$ chsh.ldap -s /usr/bin/fish michael /usr/bin/chsh.ldap: /usr/...
Michael Tsang's user avatar
0 votes
0 answers
106 views

openLDAP olcAccess settings

i have installed openLdap server on a Rokye Linux: [root@localhost etc]# cat rocky-release Rocky Linux release 8.8 (Green Obsidian) I created the manager account following this guide on how to forge. ...
CiaoCiao's user avatar
0 votes
1 answer
255 views

Cannot passwd for root with nslcd and openldap on Debian 12

Fresh Debian 12 for lab (VM). I installed: slapd, phpldapadmin, nslcd, nscd and dependencies. I have two local accounts: root and user1. Also I have only user1 POSIX-account on local LDAP server. I ...
Karol's user avatar
  • 21
0 votes
1 answer
52 views

External LDAP SMIME Public Key Search Fails from Outlook for iOS With NoSuchObject

The Outlook for iOS documentation seems to indicate that it's possible to configure an external LDAP address to search for SMIME public key certificates: https://learn.microsoft.com/en-us/exchange/...
jdbst56's user avatar
0 votes
1 answer
4k views

How can ldapsearch look for a specific user with a specific group?

I'm working on some ldap authentication, and one of the things I need to do is require users be part of a specific group. To best replicate the functionality I can use this query ldapsearch -x -H &...
John Sly's user avatar
  • 101
-1 votes
1 answer
143 views

Setting up school wifi network with SSO linked to azure AD without local server

I am trying to restrict school Wi-Fi usage to staff and students. In addition would like to get user-wise usage data. Our current Wi-Fi network and access points are built on Cisco Access points and ...
user899893's user avatar

1
2 3 4 5
56