Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ldap]

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

-2
votes
0answers
14 views

sldap.d missing after installation

I am following the instructions on http://www.openldap.org/doc/admin24/quickstart.html to install OpenLDAP on RedHat. Everything goes fine until step 9: Import the configuration database You are ...
0
votes
0answers
6 views

Maillist in openldap addressbook

How can i create a mail list contains multiple email address in openldap? I have an open ldap server on centos 7 with interOrg object class for storing email address of the employee. I tried to ...
0
votes
0answers
23 views

TLS trace: SSL_connect:error in SSLv2/v3 read server hello A

I am trying to query AD for users and tried every options available but no success Operating System = CentoS7.5 Packages = Openldap, ldapsearch Microsoft Active Directory my command ldapsearch -x -...
0
votes
1answer
36 views

Enable SSL/LDAPS in openLDAP 2.4 on Ubuntu 16.04.5 LTS - ldap_result: Can't contact LDAP server (-1)

I have the following Problem and googled for weeks now. Because I´ve really no clue where the problem is I´m asking my question here with the hope to find some ldap or ssl genius :) I have a working ...
2
votes
0answers
26 views

How can Samba be configured to use LDAP for authentication only?

I'm looking to set up a new Samba file share that uses LDAP for back-end authentication. The LDAP server is already set up, and the machine the Samba server will be on is already set up to allow SSH ...
-4
votes
1answer
61 views

Implementing Kerberos Authentication on Linux servers using script

My client wants to implement Kerberos Authentication on multiple Oracle Linux Boxes. Do they need to be done manually or can I implement on all of them using any script? Is there any way to script ...
0
votes
0answers
11 views

Openldap enable ssl on replication

Can you told me how can i modify current configuration for olcSyncRepl? I have following situation: I Configured master ldap server and slave server I Configured replication between these two ...
0
votes
0answers
40 views

How to set up System Security Services Daemon(SSSD) to authenticate users against Azure Active Directory

I have set Azure Active Directory(AD) up and running along with Azure AD Domain Services in which a single domain with secure LDAP is configured. On a Linux server, I have tested whether it can ...
0
votes
1answer
17 views

OpenLDAP slapd as transparent proxy, bind always fails

I have a linux (4.1.12-61.1.34.el6uek.x86_64) box with a slapd service (slapd 2.4.40). What I'm trying to achieve is to transparently proxy all client ldap related traffic through this slapd instance ...
0
votes
1answer
16 views

How to configure clients with two ldap servers : master and slave?

I 've successfully managed to set up OPENLDAP replication : ldap1.mydomain.com ldap2.mydomain.com (ldap2 initiates connection every 10min to ldap1.mydomain.com to synchronize) What I want is that ...
0
votes
0answers
30 views

Restrict user login to Linux via group membership querying Active Directory

I need to restrict access to linux servers according to AD group membership. I already have Centos 7 servers joined to AD realm using sssd and have already configured sssd.conf in order to use ...
1
vote
1answer
93 views

Non supported SSL cipher, how to disable it?

I have a linux system with a a version of OpenSSL 0.9.8j-fips 07 Jan 2009 and an Apache Server version: Apache/2.4.27 (Unix) The Apache has issues connecting via secure LDAPS to a remote DC Windows ...
0
votes
0answers
40 views

Automatically block Gitlab users, removed from LDAP

I've migrated this question from StackOverflow. I'm administering a Gitlab-Omnibus (Community Edition) instance in our company as an additional duty. Gitlab uses company's Active Directory server ...
0
votes
0answers
16 views

java ldap query across domain

My active directory have structur as below: AD server URL = ldap://ldap.abc.com:389 having domain controller as below: dc=xyz,dc=abc,dc=com dc=pqr,dc=abc,dc=com Now, dc=xyz,dc=abc,dc=com has a group ...
0
votes
1answer
33 views

Debian 9: Can't contact LDAP server with ldapi protocol

On my client on pam authentication (libnss-ldap and libpam-ldap packages and configuration) there is a configuration which leads me to nss_ldap: failed to bind to LDAP server ldapi://172.16.10.174/: ...
0
votes
0answers
20 views

getent passwd dosen't show users of LDAP server but getent shadow works

This is an Ubuntu with LDAP + NSCD installed and validating against an AD server. I can run ldapsearch without any problem and getent shadow shows all the ldap users but getent passwd and getent ...
1
vote
1answer
29 views

OPENLDAP 2.4 , allow anonymous access only to get User Publickey

I'm trying to do the following : I have openldap 2.4.45 server (test) which contains users, groups like this : o=Example(dc=example,dc=com) ou=users uid=alice uid=bob PublicKey="...." ...
1
vote
1answer
19 views

How can I proxy multiple LDAP servers with completely different name spaces?

We are developing R/Shiny Applications on Ubuntu Server. Authentication is done via OpenLDAP on Ubuntu Server. The Shiny Server only supports one LDAP directory. Now, we have an external customer ...
0
votes
1answer
23 views

Samba with LDAP queries the wrong sambaDomainName

I've set up Samba on Ubuntu use LDAP, but it insists on using the host name for the sambaDomainName query, instead of the configured workgroup, and so it fails to get the domain info. If I set ...
0
votes
0answers
22 views

How to log username from cookie when using Nginx + LDAP Auth?

I am using this method (unfortunately, it had been modified before I came to my current work, so I understand almost nothing in Nginx + LDAP Auth): https://github.com/nginxinc/nginx-ldap-auth to ...
0
votes
0answers
28 views

Enroll OS X 10.13 in FreeIPA

I'm trying to enroll a Macbook in FreeIPA on my home network. I went to System Preferences > Users & Groups > Join Network Account Server and entered freeipa.example.com. It succeeded in ...
0
votes
0answers
38 views

Integrating Yubikey Token details within LDAP with FreeIPA on CentOS

I would like to integrate yubikey token details within freeipa's ldap 389 directory server I'm trying to follow those instructions to extend ldap schema with yubikey information. Ldap's extensions ...
0
votes
0answers
27 views

CMD LDAP error Cannot connect to the LDAP server but connect success by c# code

I tried to search and use command line to test connection to LDAP server but it throw error "Cannot connect to the LDAP server" even at my local computer I use visual studio to debug code at my ...
0
votes
0answers
41 views

olcAccess Replace with filter

I am trying to setup access on an open LDAP server. I keep getting this error code: SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL ...
-3
votes
2answers
49 views

Integrate Active Directory and OpenLDAP [closed]

I am using the Active directory on windows server 2016 and LDAPv3 on Ubuntu 18.04. I have some client that using ubuntu desktop, I want to integrate LDAP with active directory for authentication and ...
0
votes
0answers
45 views

How to add ACL on OpenLDAP

I want to add an ACL for a sub organization on my OpenLDAP. This is their ACL documentation: https://www.openldap.org/doc/admin24/access-control.html I am using ldapmodify to update the ldap db on a ...
0
votes
2answers
51 views

Group policy on Open LDAP [closed]

Active directory on windows can give us many possibilities to manage out network such as Group policy. In my company, we have Linux systems. My question is: Is there any Linux based application or ...
0
votes
0answers
20 views

Apache Single Sign On Working on 1 of 2 Portals

I use a helpdesk system in our intranet that I've configured for Single-Sign-On via LDAP/Active Directory. The helpdesk server itself lives on an Ubuntu 16.04 Server box running on Apache, Server ...
0
votes
0answers
144 views

Active Directory LDAPS and Java 181 LDAPS Verification

Java 8u181 (Java 8 Update 181) enhances security around LDAPS connections: Change: Improve LDAP support Endpoint identification has been enabled on LDAPS connections. To improve the robustness ...
0
votes
1answer
64 views

dovecot cannot lookup user in LDAP

my system is set up like this. smtp --> postfix --> dovecot (via LMTP) --> mailbox The tricky part is that authentication is against LDAP. A typical LDAP entry looks like this: CN=Jon Doe uid=jond ...
1
vote
0answers
38 views

Jenkins (and other apps) user authentication in a K8s cluster

I have Jenkins running in a pod, in an on-prem Kubernetes cluster. My company uses AD, and my Jenkins instance outside the cluster (I'm migrating from this to the cluster instance) uses LDAP for ...
0
votes
1answer
39 views

Ambari sync with LDAP using StartTLS

I'm facing an issue to sync Ambari with a LDAP server using StartTLS and a self-signed certificate. Ambari server and ldap server are both running on the same machine. I've followed the steps written ...
0
votes
0answers
20 views

Configuring the Oracle Database(12c)-Microsoft Active Directory Integration

I am planning to integrate LDAP with Oracle database for authentication management. I do not want to use Kerberos for this. It would be helpful if somebody from here advise whether that is possible ...
1
vote
1answer
42 views

openldap with macOS Clients

I try to configure the mac clients to use a LDAP to connect to their session (using openLDAP). I have created PosixAccounts with PosixGroups, and tried on ubuntu systems : I can log-in with my users. ...
0
votes
1answer
74 views

Can't get SSL certificate from LDAPS server

I'm trying to retrieve the public SSL certificate from my organization's LDAPS server. I'm following the instructions here, which recommend I run the following openssl command: openssl s_client -...
0
votes
0answers
17 views

macOS: LDAP authentication to Time Machine Server doesn't work

I have a Synology RackStation 815+ running with its builtin "Directory Server" app as an LDAP provider. I also have a Mac Mini Server that is bound to authenticate against the Synology, using the ...
0
votes
0answers
59 views

ldap users are not able to login in centOS 7

i'm not able to login using ldap user, getting authentication failure. here are some o/p's - please let me know if anything is required. [root@server01 pam.d]# getent passwd testuser testuser:*:...
0
votes
0answers
14 views

ldapsearch.exe on Domino Server to connect to Address Book

Good Evening. I have a Domino Server running and two Global Address Books. I would like to access Global Address Book Records using the LDAPSearch.exe tool. When I run below command it lists the ...
0
votes
0answers
231 views

How to query LDAP via port 636 from powershell?

I use adsi to connect to AD and measure the latency of the connection. For same query when i replace server with server:636 , it fails. What is the easiest way to do a ldap "find" through 636 port?
0
votes
1answer
193 views

pfSense unable to LDAP bind to Active Directory Server

I've been instructed to setup an OpenVPN Server on our local pfSense VM. I've combed over tutorials and guides, netgate, openvpn documentation and I feel I must be missing something. I've tested the ...
0
votes
0answers
24 views

LDAP Search Filter failing to retrieve objects?

I am performing an LDAP Customer Query. I have a Vormetric Cloud Encryption Gateway configured and I want to authenticate a select group of users to authenticate with the VCEG application. My domain ...
0
votes
0answers
13 views

AD doesn't return baseSessionKey when authentificate via NTLM

I have a question about NTLM authentication in a Active Directory. So, I try to retranslate NTLM messages from client to AD to be aware, that AD can authenticate this client. All steps work fine, 1)...
1
vote
1answer
104 views

Vsftpd user authentication

I've set up a virtual machine running Centos 7 and VSFTPD. VSFTPD is working great when connecting with local users. It chroots the user into his previously created home in /ftp/pub/{user_name} with ...
0
votes
2answers
128 views

Trying to connect to LDAPS (Windows active directory) but keep receiving Verify return code: 20 (unable to get local issuer certificate) error

I've been given a certificate by the person who runs our Active Directory server so I can use LDAPS but I can't get it to work. When verifying with openssl: openssl s_client -connect domain.com:636 -...
0
votes
0answers
109 views

Freeradius multi-factor auth with LDAP and Yubikey

I just set up a freeradius server and would like to be able to authenticate using both the password of a ldap user and the yubico otp generated from their yubikey. It is working using the ldap ...
0
votes
0answers
25 views

Using OpenLDAP as network resource access control

We have configured basic LDAP in our small office of 15 sytems, Where 15 accounts have been created on LDAP server and all other system has been configured to act as clients. Now we want to add ...
0
votes
1answer
132 views

LDAP on Ubuntu 16 won't connect

I've installed LDAP on an Ubuntu 16.04 machine, using this command: sudo apt install slapd ldap-utils This is my config file /etc/ldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details #...
1
vote
0answers
54 views

SFTP chroot jail on Centos system with Active Directory integration

I am trying to set up a SFTP chroot jail environment on one of our Centos, which is integrated with Active Directory for user authentication (set up with Realmd/oddjob). I would like to chroot each ...
0
votes
1answer
88 views

Openldap and SSL certificate chain validation

I just set up TLS for slapd on one server, using a simple PKI, like this one: ldap cert < intermediate CA cert < root CA cert In order to connect to the ldap server using TLS from a client, I ...
0
votes
2answers
52 views

Set ACL in OpenLDAP so that user can find its own entry from filtered subtree

I have a user directory in an openldap server under the base DN ou=users,dc=mydomain. The user entries are uid=user1,ou=users,dc=mydomain My current ACLs are: {5}to * by self write by dn="cn=admin,...