Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [pam-ldap]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

nslcd pam_ldap Windows 2019 unknown issue

Hopefully someone can point out what I may be doing wrong. We have been running CentOS6/7 systems with AD integration for a couple of years now. The setup on the AD side was Windows 2012R2. About 2 ...
0
votes
1answer
96 views

Unable to login with ldapuser [closed]

I have configured openldap with back-sql on ubuntu 18.04 but unable to login with ldapusers on client machine (centos 7). I am able to fetch user details using ldapsearch command on client machine but ...
0
votes
1answer
93 views

changing password - issue with ldap update

I have set directory 389 and 1 server to be client for testing authentication of users, etc. For installation of Directory I have used this tutorial: Install And Configure LDAP Server In CentOS 7 ...
0
votes
1answer
181 views

nslcd with domain.com and sub.domain.com

i'm trying to setup our linux server with nslcd within multiple AD Domains, example.com and sub.exmaple.com. The current setup with nslcd is pretty easy and works for the domain example.com: uid ...
0
votes
1answer
1k views

openldap with haproxy - (ldap_result() failed: Can't contact LDAP server)

I'm having an issue with openldap proxied via haproxy. The authentication works perfectly fine on CentOS (7.5.1804) and Debian (9.4). The only problem is that I'm getting errors in syslog and authlog: ...
0
votes
1answer
101 views

ppolicy not enforced on OpenLDAP Client when using 'passwd'

The issue: Password Policy is not being enforced when I change the password using the 'passwd' command. It is enforced when I use the 'ldappaswd' command. But the OpenLDAP password still changes using ...
1
vote
0answers
1k views

SSH and LDAP auth with groups

I have SSH/LDAP working just fine with public keys and all on an AWS Linux instance. I'm using nss-pam-ldapd and pam_ldap. But when I set /etc/pam_ldap.conf as follows to restrict login to a LDAP ...
1
vote
1answer
619 views

Suppress weird “authentication failure” log while using pam_ldap with ssh on CentOS 7

We have successfully setup ssh daemon with LDAP authentication on CentOS 7. But there are weird log messages in /var/log/secure even the user successfully login ( first line ) : Dec 5 08:28:13 ...
0
votes
1answer
556 views

LDAP completely ignores pam_groupdn and pam_filter attribute in ldap.conf

OS: Ubuntu 17.10 I currently installed ldap on an Ubuntu to access a ldap server. I configured nls, pam and ldap like in many tutorials proposed. So it worked but now any ldap user can login to the ...
-2
votes
1answer
934 views

Ubuntu LDAP Client: Caching not working

I have an LDAP server, and I want to be able to login on my machines using that LDAP server. This works basically, but when the LDAP server is out of reach (e.g. a laptop is used outside the office) ...
6
votes
0answers
122 views

Write arbitrary attribute into ENV from LDAP upon successful PAM authentication

Is it possible during the authentication phase of pam_ldap to map an arbitrary LDAP attribute of the user's record into the resulting user's environment? The specifics of my situation, in case you ...
0
votes
1answer
1k views

nss-pam-ldapd ldap group filtering

I'm attempting to setup authentication via ldap for OpenSSH connections on our FreeBSD servers in AWS. The actual ldap server is external to AWS and is accessed over the Internet. I've run into a ...
0
votes
2answers
4k views

CentOS 7 LDAP SSH Error “cannot find name for group ID”

I'm running a CentOS 7 VirtualBox instance. I have LDAP authentication set up through our company Active Directory server. Note: The AD server DOES NOT have Unix extensions installed. What I'm ...
1
vote
1answer
4k views

CentOS 7 LDAP Authentication: “Permission denied”

I'm running a CentOS 7 VirtualBox instance. I am trying to set up LDAP authentication through our company Active Directory server. Note: The AD server DOES NOT have Unix extensions installed. Setup: ...
5
votes
2answers
8k views

Does Linux keeps a cache of groups members if on LDAP ? (Difference between groups vs getent group))

Our users and groups LDAP configuration is working. Our server is using LDAP to store users and groups. # /etc/nsswitch.conf : passwd: compat ldap group: compat ldap shadow: ...
1
vote
1answer
415 views

Active Directory (LDAP) and pam using kerberos instead of bindpw or anonymous access

I have a system that currently uses an LDAP/AD server for authentication via pam and the pam_ldap module. In order to use this server for authentication pam_ldap requires an account which exposes the ...
2
votes
1answer
1k views

Can't make sshd+pam+ldap to work (AuthorizedKeysCommand?)

What I did: Installed libpam-ldapd Set up /etc/ldap/ldap.conf Set up /etc/ssh/ldap-keys.sh as root:root 0755, confirmed it works (/etc/ssh/ldap_keys.sh amadan returns my public keys from LDAP). Set ...
0
votes
1answer
2k views

Automatically create home directory on NFS after LDAP login

My current situation is that I can successfully authenticate using ldap and pam, I also succeeded to use pam_mkdir to autocreate home directories in the /home filesystem. What now I'm trying to ...
0
votes
1answer
2k views

Getting error when Integrating LDAP with Wordpress

I have installed Ldap on Ubuntu 14.04 and wordpress on amazon linux ami. I'm able to login in ldap console. I have created a user in it. On wordpress i have installed simpleLDAP plugin. I don't know ...
0
votes
1answer
75 views

Numeric User IDs and PAM_LDAP

We are working on to configure our Linux servers to use LDAP for Authentication using PAM_LDAP + SSSD. Our LDAP Usernames are based on staff numbers (all numeric starting at 1). This will cause a ...
0
votes
1answer
288 views

LDAP SSH + PubKey auth Fallback

I have followed this guide here : https://github.com/jirutka/ssh-ldap-pubkey In order to setup a LDAP server that allows authentication requesting both Password and Public Key in order to login. Now ...
0
votes
1answer
67 views

SunLDAP Schema Extensions to support Linux/Unix Authentication + Sudo

We are running SunLDAP (Sun/Oracle Directory server 11), and would like our Linux/Unix machines to authenticate against LDAP and also use LDAP for storing SUDO policies. What Schema Extensions are ...
0
votes
1answer
233 views

Weird behavior with ldap and getent or repquota

I've observed a weird behavior in my network. I have my network users stored in OpenLDAP 2.4 which also serves a samba 3.6 Domain. I have user quotas on my NFS servers and that is where I stumbled ...
0
votes
0answers
104 views

Centos 6 nss-pam-ldapd delay?

I have configured Centos with nss-pam-ldapd and seems to work fine. ( I can login with my AD credentioals). Except there seems to be a delay of about 20-30 seconds before I can log in. I also set-up ...
0
votes
1answer
155 views

pam_mkhomdir + nfs creates noboy:nogroup owned home dirs

this is a strange issue I've been struggling with some time now. I have a working ldap and authentication via pam on debian 8. I have successful tested pam_mkhomedir and I got a home directory for the ...
2
votes
1answer
767 views

LDAP Remote Login Logs

How would I log who authenticated against my ldap system on Linux in my lab? I have a lab with several workstations, and one server running openldap. I would like to have similar functionality as with ...
1
vote
1answer
853 views

LDAP - how to use attribute from objectclass:account and objectclass:inetOrgPerson?

I have an openLDAP which I use for authenticating users to various servers, where each user can have access to a varying number of hosts. I am solving that requirement by using the "host" attribute, ...
0
votes
2answers
2k views

how to join centos 7 to samba domain?

In my office, we use samba domain + ldap. I already join some Windows 7 machines, but now I need to join CentOS 7 to that domain. How can I do that? Below are steps that I already did: install nss-...
0
votes
0answers
36 views

do not allow multiple sessions if user have different IPs

I am running Red Hat Enterprise Linux 6.6 and for authentication we use LDAP authentication. We have running application on a server (doesn't really matter which one it is) and the way application ...
0
votes
0answers
202 views

Why I cannot find ldap.conf file when I want to integrate 389-ds and samba on centos 7?

I am working on two servers, a samba server and a 389-ds server. Now I want to integrate them so that samba shares are authenticated via ldap server. I have followed instructions on http://directory....
6
votes
2answers
1k views

Unable to login via PAM and ldap: failed to get password

I'm trying to have OpenVPN authenticate users via PAM over LDAP to an Active Directory server. Here are the relevant parts of my configuration files: /etc/openvpn/server.conf: # ... plugin /...
0
votes
2answers
82 views

PAM - LDAP authentication interaction

So far from what I understand it gets given a username/password pair, it then searches the LDAP for the username and tries to log into the LDAP using the distinguished name and the password pair, if ...
0
votes
0answers
343 views

PAM - Ignore local user, if LDAP-connection works

I have configured some SLED10SP1 (not allowed to update) machines to use LDAP for user authentication. Because SLED10 doesn't have official packages for pam_ccreds or sssd, I have to find a way to ...
1
vote
1answer
161 views

migrate debian 8 user (SHA512 encrypted with $6 tag) to LDAP

I have a problem with migrating local user from debian 8 to LDAP. As you know debian 6 and above use SHA512 as standard user password encryption. in the shadow file it shows the password with "$6" ...
0
votes
1answer
811 views

pam google authenticator can't compute location of secret file

I've installed Google Authentication on all the machines in our system, and while the authentication during login works fine, our machines are producing logs that have this line over and over: sshd(...
0
votes
2answers
1k views

pam_ldap user password changes using rootbinddn on Debian Jessie

When configuring pam_ldap on Debian Jessie, end user password changes are utilizing the rootbinddn, circumventing OpenLDAP's ppolicy overlay. This is allowing end users to change their passwords ...
2
votes
0answers
641 views

LDAP Not working for SSH connections on ubuntu 12.04

Connecting from the client to the server: $ ssh -vvv user@10.0.50.170 OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 debug1: Reading configuration data /etc/ssh_config debug1: /etc/ssh_config line 20: ...
1
vote
0answers
33 views

The differences between libpam-ldap and libpam-ldapd, included packages and modules? [duplicate]

May I ask what's the differences between libpam-ldap and libpam-ldapd when it comes to included packages and modules? As i understand is nss-pam-ldapd the project of libpam-ldapd, which is an ...
0
votes
0answers
50 views

What are the minimum permissions for a libpam-ldap unix domain socket?

I'm setting up an LDAP server and libpam-ldap to run on the same host, communicating via a UNIX domain socket. I'd like to give this socket the minimum permissions necessary, so random local users can'...
1
vote
0answers
105 views

vlock/pam_ldap based authentications fails when adding TLS/SSL

I have working centralized authentication configuration setup on Debian Wheezy based servers, utilizing OpenLDAP (2.4.31), pam_ldap (184-8), and libnss-ldap (264-2). I have successfully configured ...
0
votes
2answers
4k views

how to use authconfig for ssh through LDAP connection

I'm newbies on Centos7. The ssh connection is working for all user which is the /etc/passwd. That's meaning I can connect to my server with this kind of users I added The other users which are ...
5
votes
2answers
2k views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
1
vote
0answers
727 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
1
vote
1answer
8k views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for authentication;...
2
votes
0answers
668 views

Set Linux GID based on LDAP OU in ldap.conf

In our company we have a given LDAP Server, which represents the Users of our Windows Active Directory. Unfortunately the gidNumber sent to the LDAP client is always containing the Value "1001" for ...
8
votes
1answer
18k views

What is nsswitch compat mode?

Red Hat recommended me compat mode in /etc/nsswitch.conf as one of the options to enumerate LDAP users, but later said that it's not a much-used method. nsswitch.conf passwd: files compat ...
0
votes
1answer
1k views

What are disadvantages of using nsswitch compat?

In my current LDAP set-up "getent passwd" shows all 600+ users that exist in the LDAP, not enumerating only the 20 LDAP-users that have permission to access this netgroup/server. This can be solved ...
0
votes
1answer
129 views

Users seeing all other LDAP users on RHEL default behavior?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent passwd"...
6
votes
3answers
20k views

How come all LDAP users are shown with getent passwd?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When I type "getent ...
1
vote
2answers
1k views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...