Questions tagged [ldap]

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

Filter by
Sorted by
Tagged with
0
votes
0answers
19 views

AD LDS (ADAM) replication error 5 - Access is denied

We have two domains - Prod & QA, we have one way sync between the two forests. Requirement is to setup a AD LDS instance between Prod (Master) & QA(Replica), the RPC & AD LDS ports are ...
0
votes
0answers
23 views

Can I use both LDAP and LDAPS on the same server​?

I have plan to push log from the windows server to log server. the log server use only LDAPS and my current server use LDAP. so it required to enable LDAPS on the windows server to do this task. Can I ...
0
votes
0answers
15 views

Using LDIF syntax, is it possible to add a posixGroup to LDAP, where gidNumber is taken from a user

I have successfully set up a 389 Directory Server, including the distributed numeric assignment (DNA) plugin. I followed the guide on the 389-ds website. When adding a user, both, gidNumber and ...
0
votes
0answers
39 views

Configure Single OpenLDAP server to manage a Centos 8 domain with multiple hosts

This is my planned org chart to be configured in my single OpenLDAP server. I tried to find some help on google search, but not find any close help. Basic requirement to fulfil this situation; single ...
0
votes
2answers
28 views

PostgresSQL not successfully doing a search+bind authentication

I'm attempting to configure my Postgresql server 12.6 [Ubuntu 20.04 build] to do authenticated LDAP user authentication against my 2012 Active Directory tree via LDAP. I've set up my pg_hba.conf file ...
0
votes
0answers
13 views

Where is the data about certificate is stored when i run dspublish in a domain joined computer?

When is run the command certutil -f -dspublish "CA01_Fabrikam Root CA.crt" RootCA Output is ldap:///CN=Fabrikam Root CA,CN=Certification Authorities,CN=Public Key Services,CN=Services,CN=...
1
vote
0answers
18 views

postfix transport to smtp or lmtp depending on LDAP attribute

In postfix, I usually route mails depending on "mailhost" attribute as follows: query_filter = (|(&(mail=%U@%d)(accountstatus=active))(&(mailalternateaddress=%U@%d)(accountstatus=...
1
vote
1answer
72 views

LDAP doesn't return a specifi sAMAccountName unless I explicitly search for it

i.e. I have a username - tonysmith, and when I run the query for all accounts in the DC, tonysmith isn't returned unless I specifically query for sAMAccountName=tonysmith. What gives?
0
votes
0answers
8 views

Jboss EAP 7.3 LDAP Security Realm Configuration with 389 Ldap server

Does any one can share me a set of Jboss EAP 7.3 LDAP Security Realm Configuration with 389 Ldap server please. 389 ldap server install and works fine (verified by cockpit) Configure LDAP outbound ...
0
votes
0answers
135 views

LDAPS + phpLDAPadmin on Ubuntu, can you see what I'm doing wrong?

Ubuntu 20.04, OpenLDAP, phpLDAPadmin I want to use LDAPS, LDAP over TLS, so that a connection can't even be made unless TLS connects first, so I'm not going the STARTLS route. Even though I can log in ...
0
votes
0answers
23 views

ldap proxy CN case-sensitive

Im trying to query AD info from this openLDAP-Proxy, but the responses are not case sensitive, therefore instead of getting member: CN=User,OU=Group,DC=Base,DC=local i get as a response member: cn=...
2
votes
0answers
29 views

Can OpenLDAP deliver operational attributes by default?

I have configured OpenLDAP with the memberOf overlay and everything works as expected for me. I can see the group memberships in the operational attributes of an object. Now i am running into the ...
0
votes
0answers
22 views

RabbitMQ LDAP - No LDAP server found

Cant seem to get these two plugins (backend_cache and backend_ldap) working together. My current ldap config is: ,{auth_backends, [rabbit_auth_backend_internal, rabbit_auth_backend_ldap,...
0
votes
0answers
33 views

LDAP Authentication: troubleshooting config issues

I am using LDAP's 389-Directory service to authenticate a newly migrated Alfresco server. I am suspecting a configuration issue because I'm able to log in as the "guest" user on the migrated ...
0
votes
0answers
24 views

How to change the error that we get from Openldap in case the account is locked or expired?

I have a question concerning openldap. Is there a solution to change errors via a proxy or any way with Openldap. Because as you maybe know Openldap returns the same error when the account is locked ...
0
votes
0answers
26 views

Apache 2.4 mod_ldap “Require ldap-group” not working

I have a RHEL 7 server running Apache 2.4 with multiple vhosts. I am having an issue with basic auth using mod_ldap to authenticate against Active Directory. My vhost config looks like this <...
0
votes
1answer
213 views

Group policy error 1006 with error code 49

Here's the situation: A single Domain Controller existed, Windows 2008 SBS server with 2008 functional level. At some point 3-4 years ago, the whole domain was successfully transferred to a 2016 ...
-1
votes
1answer
55 views

Give permissions of LDAP group files to specific user

Here is the situation: I want user usr to have the same permissions of a group grp, anywhere in the system. grp is not a local group, it comes from a LDAP server, of which I have no control over. I ...
0
votes
0answers
42 views

Interpreting my LDAP nslookup output

C:\Users\myuser1>nslookup Default Server: ns-xxx.xxxx.com Address: 1xx.xx.x.x > set types=all > _ldap._tcp Server: ns-xxx.xxxx.com Address: 1xx.xx.x.x Non-authoritative answer: _ldap....
1
vote
1answer
70 views

Errors structure in Openldap

I have a question concerning Openldap. I'm using a solution(PingFederate) that gets errors from openldap to do different things depending on the filter. For example i can say : detect the invalid DN ...
0
votes
0answers
123 views

LDAPs Simple Authentication on Tomcat 9

I have a web application running on Tomcat 9 and using LDAPS for user Authentication. When I connect via LDAP (non-secure) the authentication is successful but when I switch to LDAPS (Secure) I get &...
0
votes
0answers
88 views

Using openldap to connect to Active Directory SSL by trusting primary domain controller's CA cert

A lot has been written on this subject, but not quite my problem. The problem is that whatever I do, I can't get openldap tools (or PHP, which uses openldap), to accept a certificate signed by the ...
0
votes
0answers
239 views

Proxmox Active Directory AcceptSecurityContext Error

Overview I'm trying to get Proxmox to perform user authentication via LDAP with a Windows Server 2016 ADDS server. Proxmox is convinced that my credentials are incorrect. Environment Proxmox 6.3-1, ...
0
votes
0answers
12 views

Tuleap - force ldap attribute update

I have Tuleap linked with my AD and groups are syncing appropriately. Some of the users did not have an e-mail address in the ldap attribute when the group was synced. I have since added e-mail in ...
1
vote
0answers
41 views

FreeRADIUS cannot bind to FreeIPA

I have installed FreeRADIUS and FreeIPA on the same machine running Fedora 33. IPA is working as expected and can have clients join and authenticate. LDAP command line tools (ldapsearch, ldapmodify) ...
2
votes
0answers
58 views

Last login a user in OpenLdap

I am running openldap 2.4.45. Is there anyway I can get the last login time of a user using authtimestamp or any other attribute?
1
vote
0answers
27 views

Can't understand why libnss-pam-ldapd does not find LDAP library

I am trying to cross-compile libnss-pam-ldapd for an arm architecture. The configure command always gives the following error: checking for library containing ldap_search_ext... no checking for ...
1
vote
1answer
16 views

Migrate from IBM Directory Server 8 to MS Active Directory (Windows Server 2019)

We are in a project to migrate users and passwords from IBM Directory Server v8 to Microsoft Active Directory. Use of IBM Directory Integrator (LDAPSync) is referenced in official IBM documentation. I ...
1
vote
0answers
79 views

Why does LDAP work only for 64 bit but is slow for 32 bit? Why did my 1 line SQLNET.ORA change fix my issue?

I have two Oracle 12.1 clients installed on my laptop, a 32 install and a 64 bit install. The configurations were the same for both. My SQLNET.ORA file was set up to specify to first use OID and then ...
0
votes
0answers
20 views

Access Denied for the LDAP client authentication

I am new to LDAP setup and I tried setting up the LDAP server on Ubuntu 16.04 and the client on Centos 7. The issue is that the client wasn't authenticating the LDAP user with the message access ...
2
votes
1answer
85 views

What is the easiest way to set up composable POSIX groups for SSH & Samba authentication?

Background I'm putting together what I would consider to be a fairly ordinary chunk of infrastructure, but have been running into so many problems that I can't help but wonder if there's an easier way....
1
vote
0answers
118 views

LDAPS (Can’t contact LDAP server ) trusting CA-Cert on ubuntu

I installed my Ca-cert like this: chmod 644 /usr/local/share/ca-certificates/root-ca.crt && update-ca-certificates this is successful but somehow ldapsearch with ldaps still won't connect to ...
0
votes
0answers
30 views

Unknown extra mandatory attributes required while adding entry to Windows AD with LDAP client

I'm trying to add a simple key-value pair to AD via LDAP protocol. I created a new schema named customStringStorage, with only one mandatory attribute title. This should be simple enough for learning. ...
1
vote
0answers
10 views

Active Directory Limited Admin for Moodle LDAP integration

I have Moodle which I already integrated to Active Directory (LDAP). The integration needs user for binding (To authenticate users). I want to limit that user because its currently member of Domain ...
0
votes
0answers
69 views

Nextcloud Docker migration

I have the following setup for a small Nextcloud instance at the moment: Nextcloud v19 on a Docker host with the data stored in a docker volume with an LDAP integration. Now I want to upgrade the ...
0
votes
1answer
54 views

Is Nscd required on the client for accessing an LDAP server without anonymous access?

I have an Ubuntu-18.04 machine that I need to setup to access an LDAP server that does not support anonymous lookups. I'm wondering if Nscd is required to be running on this Ubuntu client? Most of the ...
0
votes
0answers
15 views

Apache mod_authz_ldap AD auth windows server 2019/2016

I want to config Apache proxy (2.4 windows version) to AD auth, but it doesn't work: httpd.conf: .. <Directory "${SRVROOT}/htdocs/test"> Options Indexes FollowSymlinks AuthType Basic ...
0
votes
1answer
32 views

Creating user accounts on Computers using LDAP

Scenario is , I have a LAN in which there are number of computers running linux that are connected with local network, Can i create account on different Computer over this network and give them sudo ...
0
votes
1answer
477 views

SSSD integration with Ldap Error 'Could not start TLS encryption. TLS: hostname does not match CN in peer certificate'

We are currently using Wildcard certificate with SAN. I can successfully run ldapsearch from my client machine when I added TLS_REQSAN allow in openldap configuration. Now i'm trying to integrate SSSD ...
0
votes
1answer
62 views

How can I tell what AD paths an AD user will be able to query over LDAP?

How can I tell what AD paths a user will be able to query over LDAP? Eg. when I connect to our mock AD controller server as a test user via Microsoft ADExplorer, I notice I can look at (what appears ...
0
votes
0answers
27 views

With Active Directory is CN unique across OUs?

If I find a user with a CN=Fred Bloggs in the OU=Users and another CN=Fred Bloggs in the OU=Contacts are they guaranteed to refer to the same human or can they refer to different people ?
1
vote
1answer
326 views

ldapsearch fails with TLS: hostname does not match CN in peer certificate

I'm trying to configure secure LDAP client using the certificates (RootCA, IntermediateCA, IssuingCA and Server certificate) and created the truststore. openssl s_client works successfully but when I ...
3
votes
0answers
99 views

How do I add an entryUUID field to the FreeIPA compat schema?

I am trying to add an entryUUID field to groups in the FreeIPA compat schema, but I am struggling to create the required attributeType. My LDIF for creating it is: dn: cn=schema changetype: modify add:...
0
votes
1answer
47 views

Implementing LDAP with Public IP

I'd like to implement an LDAP using FreeIPA for centralized authentication and for security sake (Kerberos). The problem is my servers (Ubuntu) running as public cloud with no private interface ...
1
vote
1answer
50 views

Openldap - slap_access_allowed: auth access denied by =0 - Not able to authenticate user

Recently I configured my openldap server to work with certificates. But in process of doing that messed up unsecure port also. Now, authentication is not working for any user at all. I am using python-...
0
votes
0answers
52 views

How can the other users from Slapd log on to Samba?

We run an open source image processing web application. This provides users with a Windows network drive for uploading gigabytes of image data. The application offers the convenience that a network ...
0
votes
1answer
204 views

Getting javax.naming.CommunicationException: Connection reset and AD “event ID 1216” while trying to perform LDAP search using JNDI and GSSAPI

I am trying to analyze the reason for exceptions/ failures during the Ldap search. I am performing operations using JNDI on Active directory domain controller. Here is the background for the things ...
0
votes
0answers
41 views

Can not send emails with delimiter in local part (Postfix + LDAP)

I just moved my mail server. With the move, an update from Postfix 3.1 to 3.4 happened (Ubuntu 16.04 to 20.04). On the Postfix 3.1 install, I was able to send and receive emails with the delimiter + ...
1
vote
0answers
77 views

Unable to add users from Keycloack on FreeIPA via LDAP although Keycloack host has permissions set in FreeIPA

I have the following setup: FreeIPA 4.8.7 via docker (freeipa/freeipa-server:centos-8) Keycloack 12.0.1 The FreeIPA users are in cn=users,cn=accounts,dc=freeipa,dc=example,dc=com Keycloack DN: ...
0
votes
1answer
47 views

Multiple LDAP servers

I have two OpenLDAP servers: the server A with Linux VMs a1 and a2 connected to it (PAM LDAP) the server B with Linux VMs b1 and b2 connected to it (PAM LDAP) The servers have different users stored ...

1
2 3 4 5
52