Questions tagged [ldap]

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

Filter by
Sorted by
Tagged with
0 votes
0 answers
4 views

How to setup LDAP Connection Timeout for apache 2.4 on centos 7

Here are my LDAP settings in my ssl.conf LDAPConnectionPoolTTL 0 LDAPConnectionTimeout 120 ExpiresActive On ExpiresDefault "access plus 30 seconds" Session On SessionCookieName hg path=/hg; ...
user avatar
1 vote
0 answers
12 views

How to configure group based LDAP access to Mercurial

I currently have LDAP authentication configured for Mercurial using the following Apache configuration: <Location /hg> AuthBasicProvider ldap AuthType basic AuthName "...
user avatar
0 votes
0 answers
11 views

VPC connection between LDAP server onsite and LDAP client in Amazon

I currently have a VPC connection between LDAP server onsite and LDAP client in Amazon. However, after some time the connection starts to fail. I can notice that, since this appears for my user (even ...
user avatar
  • 11
1 vote
1 answer
32 views

Can SSSD authenticate via LDAP with anonymous binding either forbidden in ACLs and with 'olcRequires: authc' enforced?

I manage a LAN with a list of users accessing their NFS-shared homes while being auhtenticated via NIS/YP (CentOS/Fedora-based clients and servers). I'm in the painful process of migrating out of NIS/...
user avatar
-1 votes
0 answers
12 views

sshd cipher and request.getRemoteUser()

I had a working application which fetches the username after ldap authentication using request.getRemoteUser() But after applying some sshd ciphers. The code is giving null as result. I want to know ...
user avatar
  • 71
2 votes
0 answers
21 views

Debugging Active Directory Login with MongoDB

I am trying to log into MongoDB using an active directory username. We're using Percona for MongoDB but I believe this really should be pretty similar to regular MongoDB 5.x authentication. We've ...
user avatar
  • 559
0 votes
0 answers
18 views

Why does my 389-ds configuration work over LDAP but not LDAPS?

Sorry if this has been asked before, but when I searched for similar issues, I got results like these (that make no sense to me). I've been trying to set up 389-ds using Red Hat's Directory Server 11 ...
user avatar
  • 1
0 votes
0 answers
14 views

Creating an OpenLdap specific administrator group on LDAP

I'am trying to create a simple specific administrator group on my OpenLdap server that is running slapd. There is currently no slapd file, and I have been working with the cn=config format. I want to ...
user avatar
0 votes
1 answer
57 views

Apache - Active Directory LDAP authorization

I'm running Apache 2.4 on Fedora 34. I've configured user authorization based on Active Directory usernames and passwords with "ldap_module" and "authnz_ldap_module" and this entry ...
user avatar
  • 21
0 votes
0 answers
21 views

How to increase the number of groups send by ADFS via SAML to Jenkins?

Yesterday we managed to integrate the CI Server Jenkins with Microsoft ADFS via SAML 2.0. When configuring the roles in Jenkins to the recieved groups of the user we noticed that only 80 groups are ...
user avatar
1 vote
1 answer
56 views

Postfix LDAP aliases - user unknown

I have server POSTFIX + DOVECOT with LDAP (ActiveDirectory) authorization. /etc/postfix/ldap_virtual_mailbox_maps.cf query_filter = (&(objectClass=person)(mail=%s)) result_filter = %s ...
user avatar
0 votes
0 answers
11 views

How a database appear on LDAP RHDS 11 vs RHDS 10

We are migrating RHDS 10 to 11. we have 4 databases that we have replicated thanks to 4 replications agreement. It's working fine. The 4 databases looks like this : dc=example,dc=com (example DB) ou=...
user avatar
  • 125
0 votes
0 answers
25 views

Apache2 LDAP Authentication - invalid Username leads to Error 500

I have a directory on my apache2 that only a certain group of my active directory should be able to access. This is in my apache2.conf: <Directory /var/www/html/mydirectory/> ...
user avatar
  • 1
0 votes
1 answer
24 views

Can't bind Macs to Active Directory, it's not time synchronization, what else could be wrong?

Mac computers are unable to bind to our Windows Active Directory server. The error is the unhelpful Node name wasn't found (2000). Windows and Samba clients have no problem. All the systems on our LAN ...
user avatar
  • 209
0 votes
1 answer
58 views

Connect to remote LDAP server via Guacamole

Ubuntu 20.04 Guacamole 1.3.0 guacamole-auth-ldap-1.3.0 /etc/guacamole/guacamole.properties: Ldap-hostname: x.x.x.x Ldap-port: 389 ldap-user-base-dn: CN=serv,OU=Invis,DC=invis,DC=com ...
user avatar
1 vote
0 answers
25 views

ejabberd: ldap_filter in LDAP Active Directory

TL;DR: How to setup ejabberd to only allow some Active Directory group members? Hello, After having successfully set up an ejabberd service plugged in to our AD, I'd like to narrow the allowed users ...
user avatar
  • 11
0 votes
0 answers
51 views

ldap connection with switch HP 5700 flexFabric

Can I restrict ssh login access to my HP Switch 5700, 5800 series using active directory groups? ldap is working fine when the search-base-dn is using an OrganisationUnit. search-base-dn OU=...
user avatar
  • 101
0 votes
0 answers
11 views

Open LDAP Add Authorization Rules

Good evening, I have a question of understanding: The users are already created in Open LDAP. Suppose I add authorization rules to the LDAP server via a script. If I were to run this script again to ...
user avatar
  • 1
0 votes
1 answer
34 views

ldapsearch Or other means to verify users

I tried a few answers on ldapsearch usage and yet couldn't authenticate with the ldap service from a linux server. I am not sure what parameters to use? I am trying this command ldp=ldap://ldap.xyz....
user avatar
  • 1
0 votes
1 answer
34 views

OpenLDAP Access handling

I have installed OpenLDAP on Ubuntu Server 20.04. It works fine so far. Now I want to restrict access to the server, as by now anyone can read all entries e.g. in Thunderbird. Therefore I created a ...
user avatar
1 vote
1 answer
94 views

Google Cloud Directory Sync java nullpointer exception

I'm trying to do some testing with Google Cloud Directory Sync and Active Directory, but whatever I do, I always get nullpointer exeptions. As far as I can find GCDS is a Java application. The GCDS ...
user avatar
  • 111
0 votes
0 answers
22 views

How to setup Ldap user to change password at first login

I am using ubuntu 20.4 with LDAP 6.7 on web browser. I am able to add users, groups and even logged in on client machine. but unable to setup Ldap user to change password at first login at the client ...
user avatar
0 votes
0 answers
68 views

How to Intercept and cache LDAP Search and Bind requests

I have a production web server running Django. Currently every request made requires an LDAP Bind and Search request. I can use the django-auth-ldap plugin to enable LDAP Search caching. However, my ...
user avatar
0 votes
0 answers
61 views

SSSD alternative for pam_authz_search option in nslcd

I have servers based on RHEL 7 and 8. RHEL 7 serevers use nslcd to work with a LDAP server, RHEL 8 use SSSD. For RHEL 7 I can provide access for users to allowed hosts only. This functions is covered ...
user avatar
0 votes
0 answers
20 views

SSH local authent takes 100s when LDAP server DOWN/unreachable

My use case is the following: I have EC2 in an autoscaling group. When my ldap servers are down (or network issue), I can't use ldap authentification so I have a local user on my servers. But when I ...
user avatar
0 votes
1 answer
25 views

Is it possible to restrict which object classes a dynamically linked auxiliary class can be added to when extending the AD schema?

I've created a custom auxiliary class for the purpose of adding attributes to AD Group objects. I'm dynamically linking the auxiliary class to individual Groups. I can successfully add it to the ...
user avatar
0 votes
1 answer
21 views

Deactivate user access to SAMBA file server in LDAP while maintaining access to other services

I am trying to cut off access of an ldap user to samba server. Disabling password is not an option, since the user needs to maintain access to other services like Nextcloud which is connected to the ...
user avatar
0 votes
0 answers
90 views

Active Directory/LDAP replication Windows/Ubuntu

I am trying to setup replication between a Windows AD and OpenLDAP on Ubuntu. Access to the Windows AD server seems to work OK, the OpenLDAP on Ubuntu also seems to work, however I am getting stuck on ...
user avatar
  • 1
0 votes
1 answer
41 views

How to increase OpenLDAP DN max length?

The maximum length of an OpenLDAP DN seems to be 255 characters. How can this value can be increased?
user avatar
  • 145
0 votes
0 answers
37 views

Filter for User Domain Name in LDAPv3 (not AD)

I try to get my UID out of the LDAP by a filter that can recognize the whole user with the (internal) domain. For example: (Internal) LDAP Domain is "office.intern" and the user (uid) is &...
user avatar
  • 1
0 votes
0 answers
47 views

SSH to Windows server, fetching public keys from LDAP

We've got an established process where users connecting to an Ubuntu server via SSH have their public keys retrieved from our LDAP infrastructure and then PAM sets up their home directory, etc. I need ...
user avatar
0 votes
1 answer
52 views

Dovecot Authenticating with Active Directory, username with period not going through

I have been struggling the past 2 days. My conf file is like this: hosts = 192.168.2.2 ldap_version = 3 auth_bind_userdn = %Ln auth_bind = yes dn = admin dnpass ...
user avatar
  • 3
0 votes
0 answers
131 views

Problems sudoing using a host connected to Active Directory (sssd, kerberos local sudoers file)

I am configuring Active Directory authentication for an Alma 8 box using SSSD, Kerberos, and initial SSH key for log in stored in an Active Directory object, and a local sudoers file that lists groups ...
user avatar
0 votes
1 answer
40 views

How to get Gravitee to do recursive group lookups

I have set up Gravitee APIM 3x (gateway, rest-api, console and portal). This work fine. When trying to replace the memory authentication with LDAP (FreeIPA) authentication, I am able to get the ...
user avatar
  • 101
0 votes
0 answers
55 views

Add attribute to existing objectClass in LDAP

I am very new to LDAP, but I drew the short straw at work, and I have a requirement to add an attribute to inetOrgPerson. Yes I know that this is bad practice. But this is an internal temporary ...
user avatar
0 votes
0 answers
83 views

use sssd-simple to restrict access to certain group

I have configured sssd to authenticate against ldap however i want to restrict the group that can connect to the server. the sssd.conf below allows users that are not member of the mentioned group to ...
user avatar
  • 33
0 votes
0 answers
101 views

syncrepl_message_to_entry: rid=002 mods check (objectClass: value #1 invalid per syntax)

I have a problem with my master master config database replication (i will add the data replication after this one). I am running on each master, openldap and freeradius. To have freeradius working ...
user avatar
1 vote
0 answers
322 views

Apache reverse proxy with Kerberos authenticate and LDAP authorization

Server version: Apache/2.4.37 (Red Hat Enterprise Linux) Apache is launched as a container in the Openshift cluster. I am using Apache as a forward and reverse proxy for Kibana. Mandatory requirement ...
user avatar
  • 11
0 votes
2 answers
29 views

Putting .k5login credentials in ldap with freeipa

On the systems I administer, in addition to human user accounts, we have a number of accounts associated with roles, software and specific data. By using a .k5login file in home directories, it is ...
user avatar
  • 140
1 vote
1 answer
194 views

Configuration Errors With A Clean Installation of Apache Directory Studio

I have a fresh install of Apache Directory Studio, with the goal of sanity testing some LDAP stuff without actually touching production. I followed the basic instructions to spin-up the server and it ...
user avatar
  • 123
0 votes
1 answer
41 views

Allow any user with specific uid to manager an entire OU

I have a domain (let's call it dc=example,dc=org) The domain has a branch (ou=users,ou=ftp,ou=services,dc=k9999,dc=z9999,dc=infra,dc=example,dc=org). There's a simpleSecurityObject in this domain (uid=...
user avatar
0 votes
1 answer
55 views

OpenLDAP: a custom base DN for a user

Is that possible to make OpenLDAP provide with different base DNs for different users? Let me explain what exactly I want to acheive. I have a domain (let's say, dc=example,dc=org). I also have a ...
user avatar
0 votes
2 answers
624 views

every LDAP user gives "permission denied" with LDAP and sssd (Centos7)

I am trying to limit LDAP logins to the "admin" group. This is my /etc/sssd/sssd.conf file: [domain/default] autofs_provider = ldap ldap_tls_reqcert = allow auth_provider = ldap ...
user avatar
  • 3
0 votes
2 answers
74 views

Tomcat with HTTPD front end. Manager app not accessible

I have an HTTPD server which does the LDAP Authentication in front of Tomcat server. My application resides in the Tomcat. I am proxying the authenticated requests via AJP connector of tomcat to my ...
user avatar
  • 71
0 votes
1 answer
127 views

Migrating OpenLDAP data from 2.4 to 2.5

I have gone through documentation online and on some forums but I am stuck on importing data from ldap 2.4 to 2.5 (Migrating to a new server as well). Here are the steps I did and the error I am ...
user avatar
  • 1
0 votes
1 answer
193 views

openldap / slapd return the error : "daemon: listen(ldap://my.server1.org, 5) failed errno=98 (Address already in use)"

I am trying to set up a master master replication between two openldap servers. To do so, the first steps make me configure theses two files : /etc/hosts, need to contain the DNS of the baseDN of the ...
user avatar
0 votes
0 answers
86 views

OpenLDAP/ds-389 Secure Hardening Guide

I am in the process of setting up an Open Ldap Server (ds-389) however, I cannot find many good resources which define a security or hardening guide which can be applied to the configuration or schema ...
user avatar
0 votes
0 answers
275 views

slapd service is not starting on centos 7

Hi while I was trying to install open-ldap in my centos 7 server, I think I runned yum remove ldap command(I am not sure exactly) and now slap service is not working at all [root@kwephispra28828 etc]# ...
user avatar
  • 101
0 votes
0 answers
50 views

Does the BaseDN need to be different than the olcServerID in openldap/slapd?

I am trying to configure a master master replication between two ldap servers. After configuring the olcServerID of slapd I get the following error : daemon: listen(ldap://my.server1.org, 5) failed ...
user avatar
0 votes
0 answers
28 views

Squid does not write into access.log with kerberos authentication

I finally managed to get squid with kerberos authentication and LDAP group checking to work. I am using squid 4.1, kerberos v5 and Linux Mint Cinnamon 20.1. Everything works fine, but I got a little ...
user avatar
  • 11

1
2 3 4 5
53