Questions tagged [ldap]
Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network
2,756
questions
2
votes
1
answer
3k
views
PAM, nsswitch and LDAP configuration
I have a technical and precise question about two type of configuration about LDAP, pam configuration files and nsswitch.conf.
Wich is the difference between the passwd_compat configuration and the ...
- 185
12
votes
3
answers
933
views
Dynamically Authenticate Apache with LDAP Based on Request String?
It is possible to use a portion of the request URI as an input into mod_authnz_ldap's Require ldap-group directive?
I'm trying to dynamically check access to a bunch of different project directories, ...
- 405
1
vote
4
answers
3k
views
2 instances of LDAP on same server
I need to run 2 LDAP instances on the same ubuntu server which have the same structure (both writing to ou=People,dc=example,dc=org for instance) but have data which should remain separate. The 2 LDAP ...
- 3,563
0
votes
1
answer
80
views
What is the best way to control access at the level of MySQL Client?
What is the best way to implement access control to production MySQL instances?
The aim is not ban the developers from accessing the MySQL but performing LDAP authentication and audit logging of ...
- 101
1
vote
1
answer
11k
views
Samba + LDAP: smbclient -L localhost fails (NT_STATUS_CONNECTION_REFUSED)
I'm following Tuxnetworks tutorial, at the last line of the first part and I'm getting this error:
sysadmin@samba:~$ sudo smbclient -L localhost
Enter root's password:
Connection to localhost failed (...
- 429
8
votes
1
answer
23k
views
How to manage groups and users in Jenkins
I'm trying to use role based security plugin in Jenkins, but i'm not sue i am using it right.
I've decided to go with jenkin's own user database as a security realm instead of LDAP. i'm adding the ...
- 263
0
votes
1
answer
1k
views
Dansguardian - Allowing some user to view some websites
I have configured squid+ldap with dansguardian. Now the requirement is all the users should not get all the websites opened.
Can I configure dansguardian in a such a way that it should allow only ...
- 1,142
3
votes
1
answer
2k
views
search and replace ldap attribute
I have a reasonably large set of data in an LDAP server. Some of the attributes appear in many places, and I would like to replace them.
The data is not enormous, but it is enough to rule out editing ...
- 683
3
votes
3
answers
26k
views
Jenkins/Hudson - LDAP group *lookup* does not work
I'm trying to get Jenkins to authenticate users via our active directory groups.
If I insert users they are correctly looked up.
If I insert group names, they are not found.
Edit: Through trial &...
- 599
3
votes
2
answers
267
views
What is the term for single source authentication that is not Single Sign-On?
I've been using the term "Single Source" for authentication schemes that use a single authentication source (e.g. a single LDAP service) but are not Single Sign-on. i.e. You have to log on more than ...
- 2,628
0
votes
1
answer
287
views
Which objectClasses are compatible for Ubuntu Ldap Authentication
I have an Ubuntu server running slapd. I've configured the same box as an ldap client. Logging into Ubuntu via LDAP works great as long as I follow these steps:
Create group named 'testgroup1' using ...
- 241
4
votes
1
answer
2k
views
Force SHA when user changes LDAP password using passwd
I'm trying to setup PAM/LDAP so that when a logged in SSH user changes their password using passwd, it encrypts the password with SHA1 before updating the LDAP entry. I have this
# /etc/ldap.conf
...
...
- 8,944
1
vote
2
answers
3k
views
disallow anonymous bind in openldap [duplicate]
Folks,
I have followed the instructions here http://tuxnetworks.blogspot.com/2010/06/howto-ldap-server-on-1004-lucid-lynx.html to setup my OpenLdap and its working just fine, except an anonymous user ...
shashank prasad
14
votes
3
answers
9k
views
libpam-ldap or libpam-ldapd?
I'm setting up LDAP authentication on my personal VPS, and Ubuntu has two packages for the same purpose: libpam-ldap and libpam-ldapd. Which should I use?
- 14.5k
4
votes
1
answer
19k
views
ldapsearch against Active Directory fails authentication + search params wrong
I am using ldapsearch from OpenLDAP tools to search our corporate Active Directory for my email and phone number. This query is a test to ensure that I can authenticate against the domain so I can ...
- 8,349
7
votes
2
answers
667
views
Centralised Authentication - Recommendations?
I have a challenge presented before me, and that is to centralise authentication. Period.
That's because me and my big mouth said I like LDAP, and anything can authenticate against it. I have pretty ...
- 1,188
0
votes
2
answers
1k
views
Error on LDAP Login - xsessions error - Session lasted less than 10 seconds
I have two machines both running CentOS 5.6 64bit.
On the LDAP Machine it has a DHCP, BIND and OpenLDAP Server. LDAP is correctly configured and users can authenticate against it.
Using root I ...
- 153
1
vote
1
answer
2k
views
ldapsearch display objectClass content
With ldapsearch I get something like this:
#ldapsearch -x -b dc=my,dc=org uid=test -LLL
...
displayName: Some Name
uid: test
....
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: ...
- 203
0
votes
1
answer
1k
views
Whats the meaning of sambaNTPassword in a machine account?
After running samba3 for quite some time I was wondering what the exact meaning of sambaNTPassword in a samba machine account in the LDAP Database is. I never set it myself (Samba must have set it, ...
- 121
0
votes
2
answers
7k
views
Is it necessary to synchronize users between Ubuntu client and ldap?
I posted a similar question over on super user
I'm trying to configure Ubuntu to login to ldap. I've come across several related posts, but I'm still confused:
How does pam_ldap find ldap users? Do ...
- 241
4
votes
2
answers
2k
views
NetApp FAS 2040 LDAP Win2k8R2
I am trying to get my FAS2040 to action user lookups using LDAP, below is the filer configuration options:
filer> options ldap
ldap.ADdomain dc1.colour.domain.local
ldap.base ...
- 41
0
votes
1
answer
136
views
Hosted (external firewalled) ASP.Net application to customer LDAP
Situation:
I manage a hosted ASP.Net application that employs winform authentication. The application has role based security, and access control list to various assets. Multiple customer use the same ...
- 63
1
vote
0
answers
522
views
How to enable LDAP with php IIS 6 and windows server 2003
I have been reading this answer and trying to understand it:
How can I enable LDAP in PHP - Windows Server 2008
LDAP is not showing up with phpinfo()
I installed PHP the same way as this person with ...
- 115
0
votes
3
answers
2k
views
Redmine LDAP authentication
I have a Mac Mini server running Snow Leopard and installed Redmine.
I would now like my users to be able to authenticate against the Open Directory server, but can't get it to work.
Here's how I ...
- 361
14
votes
3
answers
98k
views
How do you trace/debug LDAP connections against Active Directory?
I am spoiled, and have been doing most of my LDAP work with eDirectory, which has a utility called DSTrace which is lovely, and for LDAP specifically, will show you all the bind attempts, the source ...
- 2,185
3
votes
3
answers
5k
views
Is there an open-source alternative to Apple Open Directory?
On my company's network there are a small collection of iMacs. Currently they use Active Directory. We looked in to Apple Open Directory, but $500 for a copy of OSX Server (not to mention the Apple ...
- 53
1
vote
2
answers
4k
views
Convert linux ldapsearch to Windows dsquery
I am converting a website fro being hosted on Linux and Apache to Windows and IIS. The pages are currently written in php but new functionality will be in something along the lines of C#.net
In the ...
- 13
0
votes
1
answer
1k
views
What would prevent me from modifying my LDAP schema?
I am trying to follow this guide to configure kerberos on my Ubuntu server. I got up the part where they want to add the new schema to my server user ldapadd I follow the instructions as they say.
I ...
- 1,985
5
votes
4
answers
4k
views
Login using Active Directory in Linux using Kerberos 5
I have a problem with setting up auth for users on Linux (Fedora Core 15 to be exact) using Active Directory on Windows 2008 Server with installed support for UNIX systems. I've successfully setup ...
- 101
2
votes
2
answers
4k
views
FreeBSD: OpenLDAP, SASL, and GSSAPI
I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
- 44.9k
3
votes
2
answers
4k
views
Authenticate CentOS against AD without Samba/Winbind
We currently have our CentOS 5.5 servers authenticating against our Active Directory environment (Windows 2003 R2) utilizing Samba & Winbind. It's served us well but we need something more robust ...
- 31
2
votes
4
answers
8k
views
LDAP Migration to new LDAP Server
I need to move my ldap server to a newer one. It is currently running on Ubuntu 7.04 server.
Is there a way of backing up this server, installing a fresh openldap server on a newer Ubuntu 11.04 server,...
- 23
2
votes
1
answer
3k
views
LDAP (389 Directory Service) and Pacemaker with Multi-Master
I'm trying to setup a pair of LDAP servers running 389 (formerly Fedora DS) in high availability using Pacemaker with a floating IP. In addition, 389 supports multi-master replication, where all ...
- 1,071
6
votes
2
answers
3k
views
What's the default hash format / algorithm of Active Directory?
I'm wondering what format I need to put hashes in to write to userPassword via LDAP. Apache Directory Studio gives me several options, but I don't think any of them are it. Can anyone document the ...
- 14.5k
0
votes
1
answer
141
views
Why is my user prompt different than the current user logged in?
I am kinda stumped with this one.
I setup an OpenLDAP server for centralized login to all of the VM servers ... and a test VBOX Ubuntu Desktop.
Getting LDAP authentication to work was not terribly ...
- 1,985
2
votes
2
answers
3k
views
How to retrieve last logon/logoff time in Active Directory (ADAM)?
I need to write code (C# or Java) to retrieve user logon/logoff information from ADAM, but i'm not sure where to start or if it's even possible.
- 187
3
votes
1
answer
402
views
Active Directory lookups from bound Mac without user credentials
One of my Mac boot scripts needs to grab a property from AD that is not one of the ones I can see with the built in tool called dscl, which is pretty much limited to Users, Groups, and Computer ...
2
votes
1
answer
1k
views
Computer not showing up in network (Samba and LDAP configuration)
For some reason I have not been able to pinpoint yet, going to Network on my Windows 7 computer, the Samba server does not show up.
I have configured Samba with LDAP and managed to successfully ...
- 429
18
votes
1
answer
66k
views
LDAP: How to add a person to an existing group?
Using command-line (Linux) or LDIF, I could find many examples of creating a new group and defining its members, but no examples of this:
How to add a user to an existing group?
Let's say the person ...
- 1,374
3
votes
1
answer
2k
views
Active Directory memberOf LDAP syntax
I want to add a user (from Sun IDM to Active Directory) to more than one group.
The command memberOf: CN=AAA,OU=AAA,DC=AAA,DC=AAA is for only one and I want to add a second one immediatly after the ...
- 185
2
votes
2
answers
4k
views
OpenLDAP on Ubuntu Server 10.04
I've configured OpenLDAP following the Ubuntu guide (with some minor edits, such as setting a proper password, my own domain name, and creating a staff group instead of an example one under people) ...
- 123
2
votes
1
answer
594
views
Authenticating Apache/SVN via Active Directory
I am absolutely tearing my hair out with this one, largely as a result of not being able to find any real documentation on the topic. My box is ubuntu server, and my repository is fully browsable - I ...
- 29
2
votes
1
answer
40k
views
LDAP Authentication though a Firewall
I have a Rails Gem that does Active Directory authentication and its test suite has quite a lot of authentication checks. When I run the test suite on our LAN everything works no problem (as one would ...
- 523
1
vote
2
answers
3k
views
LDAP authentication apache 2.2 error 500
This is my LDAP configuration in Apache2.2.x
Order deny,allow
AuthType Basic
AuthName "Test"
AuthBasicProvider ldap
AuthLDAPURL "ldap://dc1.domain.com:389/DC=domain,DC=com?sAMAccountName" ...
- 21
1
vote
1
answer
6k
views
LDAP authentication apache 2.2
I am trying to install basic ldap authentication on a website on an apache 2.2 server. I put this in my /etc/apache2/apache2.conf file
LoadModule ldap_module /usr/lib/apache2/modules/mod_ldap.so
...
- 21
0
votes
2
answers
2k
views
How to easily rename a domain that contains only LDAP users?
I need to rename/recreate a domain from example to lan.example.com.
Current PDC for "example" Windows 2003 SBS domain with 0 computers
added to domain
It has user accounts created that
users use to ...
- 1,605
0
votes
1
answer
304
views
Apache caching ldaprc/SSL settings?
I have an Apache, a ldaprc file fol TLS certificates and a PHP script for connection to an Active Directory server.
All settings from ldaprc are properly read by Apache when I start it. If I change ...
- 205
1
vote
1
answer
435
views
Configuring a LDAP client
I have an existing LDAP (openldap) server that I'm trying to get CentOS servers to authenticate to and for the life of me I cannot make this happen. For example, I want to do # ssh some_ldap_user@...
- 31
0
votes
2
answers
148
views
Setting up OpenLDAP
I am trying to setup OpenLDAP for the first time. I have read through the admin guide but I am still stumped at hows things work and am looking for an explanation on a few things. I would like to ...
- 143
3
votes
1
answer
1k
views
Purging database when slapd is purged
While configuring the slapd package in Debian 5, I found one of the questions intriguing:
Do you want the database to be removed when slapd is purged?
What does it mean to purge the slapd database ...
- 311