Questions tagged [ldap]

Lightweight Directory Access Protocol (LDAP) for reading and editing directories over an IP network

Filter by
Sorted by
Tagged with
0 votes
2 answers
50 views

OpenLDAP authentication troubleshooting

I am running an OpenLDAP service using the slapd.d/ configuration style. I am testing creating users and authenticating as user. Here's my test script, which ends with a fail: ldap_bind: Invalid ...
0 votes
0 answers
23 views

slapd version not upgraded

I have just upgraded my openldap to 2.4.59. But when I execute slapd -V, it still shows my previous version : 2.4.44? root@VLDAP ~]# ldapsearch -V ldapsearch: @(#) $OpenLDAP: ldapsearch 2.4.59 (Mar 13 ...
0 votes
0 answers
22 views

Ceph s3 LDAP not working despite following instructions

I have a problem with LDAP configuration in Ceph. I have a fresh cluster (for testing purposes). No operation has been performed on it except adding certificates to Dashborad and Grafana and issuing . ...
0 votes
0 answers
16 views

FreeIPA replica - unable to login via web UI

I've installed a freeipa replica (almalinux-8-4.9.12) from my master (centos-7-4.6.8). Both running in docker. On web UI login I get Login failed due to an unknown reason. error. And any ipa command ...
3 votes
2 answers
9k views

Unable to log in to FreeIPA web ui - "Login failed due to an unknown reason."

After Fedora server update, my Freeipa broke and I am not sure how to deal with it. Does anyone have some ideas what might be the issue? I am unable to log in to web UI nor execute any IPA command. $...
0 votes
1 answer
5k views

LDAP query to get members for all groups in a sub OU

I need to get all users that are members of a set of groups that are configured on a sub OU. The DN for this sub OU is "OU=OU2,OU=1,DC=labo,DC=test". The groups would be in "CN="&...
0 votes
0 answers
35 views

Restricting Access to Kubernetes Ingress using LDAP and VPN

I'm working on securing access to my Kubernetes cluster, specifically for the domain name xyz.com. Currently, I'm using NGINX Ingress with the nginx.ingress.kubernetes.io/whitelist-source-range ...
0 votes
1 answer
4k views

ldap_add: Constraint violation (19) additional info: some attributes not unique

Well I have already gone through ldap_add: Constraint violation (19) but couldn't solve my problem! Problem I'm facing is that, when I'm trying to add users from bckup.ldif file by issuing following ...
10 votes
5 answers
37k views

How can I set up Redmine => Active Directory authentication?

First, I'm not an AD admin on site, but my manager has asked me to try to get my personal Redmine installation to integrate with ActiveDirectory in order to test-drive it for a larger-scale rollout. ...
3 votes
1 answer
7k views

slapd : attribute type undefined

I'm trying to put a config of slapd on the new server. I did it the same way, but it was probably two years ago and in slightly different environnement (I'm on the Debian actually and it was on CentOS ...
0 votes
0 answers
23 views

Reading LDAP attribute works, modifying it results in "attribute type undefined"

I have a Citrix ADC and want to setup multi-factor authentication using an OTP token. Since I do not have an AD but an LDAP directory only, the Authentication LDAP Server is set to NDS. The Citrix ADC ...
0 votes
1 answer
32 views

Samba4 User password is not updated correctly via LDAP message, only via smbpasswd

I have set up a Samba4 AD DC, and I can successfully authenticate with my Administrator user from .net code: var directoryIdentifier = new LdapDirectoryIdentifier("127.0.0.1", 636); var ...
0 votes
1 answer
1k views

openLDAP / Sasl - ldap_sasl_interactive_bind_s: Local error (-2)

I configure openldap with sasl bind. Trying connect: # ldapsearch -v -H ldaps:// -Y PLAIN -U [email protected] But getting error: ldap_sasl_interactive_bind_s: Local error (-2) I create a config ...
1 vote
1 answer
65 views

sssd allows switching via su to users blocked from ldap_access_filter for users that can log in

My department is switching to using sssd with ldap for logins on all of our linux hosts. I've got it all working, but there was one issue I was hoping to resolve before continuing testing in our dev ...
2 votes
0 answers
190 views

Why I can't activate SSL on my Ubuntu Server (20.04) with ldap auth? (ldaps)

I have to activate SSL for secure comunications with ldap, I count with Letsencrypt .pem files (chain, fullchain, cert & privkey). I followed the steps of some pages but it didn't had any effect ...
2 votes
2 answers
11k views

Zimbra 8.7.1 : Connect: Unable to determine enabled services from ldap

I'm currently moving my zimbra from Ubuntu 12.04 to Ubuntu 14.04 On both sides it's a zimbra OSE 8.7.1, I already did all these steps : Backuping zimbra with specificities : include all hidden ...
1 vote
1 answer
12k views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
2 votes
0 answers
53 views

ldap not working with svn

Authentication fails with password mismatch error whilst trying to login to svn repo. Following is the config for 10-subversion.conf Tried everything but nothing seemed to worked including changing ...
0 votes
2 answers
6k views

Enable SSL/LDAPS in openLDAP 2.4 on Ubuntu 16.04.5 LTS - ldap_result: Can't contact LDAP server (-1)

I have the following Problem and googled for weeks now. Because I´ve really no clue where the problem is I´m asking my question here with the hope to find some ldap or ssl genius :) I have a working ...
0 votes
1 answer
6k views

ldapsearch - Get all members of a CN (nisNetgroupTriple)

I'm a bit new to using LDAP, especially non AD LDAP. We use RedHat Directory Server and was trying to do an LDAP query (filter specifically) that would retrieve all the users (and their attributes) ...
1 vote
2 answers
10k views

Unable to bind to server: Can't contact LDAP server

Environment: LDAP Server Type: ActiveDirectory LdapRecord-Laravel Major Version: v2.5 PHP Version: 8.0 I'm using ldaprecord and I'm getting "ldap_bind(): Unable to bind to server: Can't contact ...
9 votes
2 answers
9k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
2 votes
1 answer
8k views

FreeRadius, login not working when using mschap

I've been trying to make RADIUS work with Zentyal without success, I've tried logging in with an Android phone and a Windows 10 PC but none of them worked. Joining the domain using LAN works fine, ...
2 votes
1 answer
5k views

Disabling LDAP Signing on Windows PDC in Local Policy

I just tripped over my own feet it seems. Playing around on a Windows 2008 R2 server (set up as domain controller), I was intrigued by certain warning event (event id 2886) which says: "To enhance ...
1 vote
1 answer
190 views

What is the best way to achieve SSO for Apache 2.4 within a Windows domain? [closed]

I would like to implement an SSO authentication (without login/password prompt) on a PHP 8 intranet app, which runs under Apache 2.4 x64 for Windows. My company has an Active Directory / LDAP / ...
1 vote
2 answers
11k views

Tortoise SVN: Initial connect timeout

I have a problem when connecting Tortoise SVN to my SVN server. The first connect seems to run into a timeout (SVN hangs about 20 seconds) and the second (automatic) try works instantly. I.e. every ...
1 vote
1 answer
4k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
2 votes
1 answer
145 views

Insufficient Acces (50) LDAP

I am trying to execute a custom .ldif file at the beggining of the startup of OpenLDAP server and have succeded using the following command: ldapadd -x -D cn=admin,dc=vlad,dc=lan -w admin -H ldap:// -...
0 votes
2 answers
104 views

Freeradius filter ldap by group

I would like freeradius to check for group membership and allow access based on group membership: My current config: ldap { identity = 'cn=radius,ou=bindings,dc=company,dc=com' ...
0 votes
1 answer
178 views

Authenticate with Freeradius from LDAP fails

I want to set up Freeradius to be able to authenticate via an LDAP database. Freeradius can connect and find the user in LDAP directory correctly: 2024-01-14T22:00:25.233318433Z (1) ldap: EXPAND (uid=%...
0 votes
1 answer
5k views

ldapsearch: How do I query pwdLastSet and have it make sense?

Hi all I have same problem as here: enter link description here, but I need it for ldapserach not in Powershell. my command: ldapsearch -LLL -H ldap://<HOST>:<POST> -D 'CN=<CN>' -w ...
1 vote
2 answers
1k views

FreeIPA unable to create a replica

I'm trying to create a replica of my single FreeIPA server to aid in migration and move to a clustered environment. I spun up a CentOS host, enrolled it as a client to the ipa server, and added it to ...
0 votes
0 answers
27 views

Can I Ldap Sync replication to a different backend?

My current OpenLDAP backend is BDB can I replicate (syncrepl) this to another server using a MDB backend? Probably a no but thought I'd ask. Thanks, Andy
0 votes
2 answers
346 views

Postfix/LDAP authentication - Restrict select users from connecting to smtp from public IP

In dovecot, I am able to use LDAP to restrict public access to specific users using LDAP user_filter and pass_filter queries. I would like to do the same thing in order to restrict specific users from ...
0 votes
0 answers
30 views

ssh-certificate LDAP schema existence?

Hello. I'm looking for an LDAP schema to make it possible to publish my ssh-certificates into user/host LDAP nodes. Is there any common one?
0 votes
1 answer
45 views

OpenLDAP failing to add new attributes

I want to create some user accounts with attributes like "gender", meaning I need to create custom attributes. I have created the following LDIF file: dn: cn=schema changetype: modify add: ...
0 votes
0 answers
66 views

LDAP log spam - TCP ERROR Bad Ber Tag or uncleanly closed connection - B1

I have a loadbalancer infront of my ldap servers. However, the healthchecks from the loadbalancer is spamming my dirsrv logs with following: { "date": "[XXXXXXXXXXX] ", "...
1 vote
1 answer
950 views

Unable to add users from Keycloack on FreeIPA via LDAP although Keycloack host has permissions set in FreeIPA

I have the following setup: FreeIPA 4.8.7 via docker (freeipa/freeipa-server:centos-8) Keycloack 12.0.1 The FreeIPA users are in cn=users,cn=accounts,dc=freeipa,dc=example,dc=com Keycloack DN: ...
0 votes
0 answers
121 views

OpenLDAP won't look at CA certificate

I have set up an LDAP server that I would like to connect to from a client machine. Ubuntu is OS of both server and client, TLS is active and since this is a practice project, all my certificates are ...
-1 votes
1 answer
174 views

How to pick the Base DN for LDAP?

I'm setting up an LDAP (LLDAP, for same-sign on) and I understand every directory needs a Base DN. I understand the Base DN works like a namespace containing all the entries of this directory. It ...
0 votes
2 answers
65 views

How to check which package/process updated nsswitch?

I've experincing problems with my /etc/nsswitch.conf. I'm not longer able to use sudo as my personal user (ldap). I've checked dpkg.log, and it seems it's been som upgrades on the packages which ...
3 votes
5 answers
16k views

Get an object by its objectGUID using ldapsearch

If I have the objectGUID attribute as returned by the ldapsearch command, how can I search the whole directory for an object with that objectGUID? For example, if I search a user getting its ...
1 vote
2 answers
6k views

ldapsearch show member entries without CN

I am using ldapsearch on a debian 9 Linux box to query a MS Active Directory. I would like to query/find all users in my group "mygroupname". The command ldapsearch -o ldif-wrap=no -xWLLL -D "...
4 votes
1 answer
5k views

Apache 2.4 with Kerberos Auth and LDAP Authorization

I am trying to setup an Apache SVN repository with Kerberos authentication and LDAP group membership authorization, so that only users that belong to a specific group can access it. Kerberos auth on ...
1 vote
1 answer
5k views

Openvas ldap authentication configuration

I'm stuck in the process of Openvas ldap authentication configuration. I use the following openvas components version from upstream: openvas libraries - 8.0.3 openvas manager - 6.0.3 (both ...
0 votes
1 answer
1k views

Should I allow LDAP through firewallD?

Setting up firewallD on Centos 7 servers. They use LDAP for authentication over SSH login. Do I need to explicitly allow port 389 LDAP on the default zone on FirewallD or because iv allowed SSH and ...
1 vote
1 answer
713 views

Guest Internet access for an hotel

First of all, thanks so much for all the help from all the techies on this site. We have to implement the ability for guests to use the internet over wireless for an hotel. When guests check into ...
0 votes
0 answers
56 views

OpenLDAP peername.ip ACL not working for subnets

I have the following ACL stored in my /etc/openldap/slapd.conf file: access to dn.regex="^([^,]+,)?ou=(groups|addressbook),dc=ldap$" by dn.exact="cn=directory,ou=users,dc=ldap&...
0 votes
1 answer
75 views

Creating ppolicy Overlay in OpenLDAP has no effect

I read +++ forums and docs. My OpenLDAP instance is configured in a Bitnami Container as follows: dn: cn=module,cn=config cn: module objectClass: olcModuleList olcModuleLoad: ppolicy.so olcModulePath: ...
0 votes
2 answers
86 views

Dovecot/Postfix: How to enforce an intial syntax check on user name before querying LDAP for authentication?

I have a Postfix/Dovecot setup and use OpenLDAP as the user/password backend. Users must login with their fully-qualified email address as their username due to virtual hosting and hence the domain ...

1
2 3 4 5
55