New answers tagged

0 votes

OpenLDAP syncrepl with plaintext authentication

To answer my own question, yes in the end it turned out that syncrepl does require encryption.
user avatar
  • 3,761
0 votes

Custom LDAP Schema

Note that "schema" in context with LDAP has a special meaning: RFC 4512 The Directory Schema is a set of definitions and constraints concerning the structure of the DIT, the possible ...
user avatar
  • 71.5k
2 votes
Accepted

Unable to create inetOrgPerson in LDAP structure

The inetOrgPerson objectClass supplements organizationalPerson, which supplements person, which in turn supplements top. This means, it inherits all the attributes that defined in those objectClasses. ...
user avatar
0 votes
Accepted

FreeIPA and Kerberos [Cannot contact any KDC for realm while getting initial credentials]

Problem solved, the firewall was misconfigured, i.e. the interface was in the public zone. Moving it to the trusted zone fixed the error. Precise steps: # firewall-cmd --zone=trusted --change-...
user avatar
0 votes

Nextcloud ignores openLDAP password policy

You cannot use the admin account to connect the NextCloud to the LDAP server because it circumvents your password policy. You need another user with special rights. I used an LDIF file containing this ...
user avatar
0 votes
Accepted

How can I make an attribute mandatory in OpenLDAP?

This is done through the directory schema – the entries' objectClass definitions. The main purpose of each objectClass is to specify which attributes are required, and which are optional but permitted....
user avatar
  • 8,592
0 votes

Changing default values for LDAP loginShell and homeDirectory

If you use sssd to manage users, then you can update the /etc/sssd/sssd.conf file to overwrite the defaults. For example to enforce /bin/false to all users except root: [sssd] domains = LDAP services =...
user avatar
  • 4,288

Top 50 recent answers are included