the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

learn more… | top users | synonyms

0
votes
1answer
12 views

OpenLDAP: How to add home directory for users?

I am experimenting with an OpenLDAP-Server and I'm not sure how to add /home directories for users. Also where are the files stored? If a user creates a file on a Windows machine in the domain, where ...
0
votes
0answers
11 views

very simple web ldap client

I need very simple ldap client with web only interface to work with OpenLdap, with such requirements: 1)Create/Delete/Rename organizationalUnit 2)Add/Remove/Edit inetOrgPerson (fields = cn,uid,Email) ...
0
votes
0answers
26 views

ldap user on samba share

I have two servers: one is ldap and the other is samba. I have an existing user on the ldap server for an ldap client. Now I want to use this user account with samba to give share access permissions ...
1
vote
1answer
15 views

Authentication token type [(null)] is not supported

I have configured sssd on my servers (some RHEL and CentOS 6), but on some of them, I get the following error in /var/log/sssd/sssd_example.com.log: [sssd[be[example.com]]] [sdap_auth_send] (1): ...
0
votes
0answers
35 views

Configure ldap client without yast

I'm configuring an LDAP client in a large number of Suse servers. The only way that I know to do this is using Yast, and this way is slow. I can't find another way. Anyone know another way to do ...
0
votes
0answers
25 views

OpenLDAP and vsftpd default directory

We are hosting a cluster of VMs all incorporating OpenLDAP. I came on after the server was setup, and the original sysadmin set a single FTP LDAP username for everyone inside and outside the ...
0
votes
3answers
48 views

modify file using awk or sed

I have a text file contains ldap data in the give below format, our default structure says every user must have its own respective "home directory" but in given below i found many users have the same ...
1
vote
1answer
48 views

LDAP Force Password Change Through HTTPS

We have a "master" server running Suse Enterprise with LDAP that controls user's access to our systems. We want to implement a 90 day expiration policy, but the issue is that most of our servers are ...
1
vote
0answers
86 views

How do I view multiple users groups using sssd?

SETUP OS = RHEL 6.4 Workstation System is part of an LDAP domain and was originally configured to authenticate using nscd. All recommended SSSD packages have been installed. ...
1
vote
0answers
22 views

How to configure dbox mail storage format for a single mail account?

I'm using ldap database at backend and I want to configure my mail server such a way that one mail id i.e. info@domain.au will be stored as dbox format while other mails will be stored in maildir ...
0
votes
1answer
7 views

How to limit bad logins via apache LDAP module?

We are using 2.2.22-1ubuntu1.8 on an Ubuntu 12.04 LTS: # cat /etc/apache2/sites-enabled/000-default ... DocumentRoot /var/www <Directory /> ... AuthType Basic AuthName "Please input password" ...
1
vote
1answer
37 views

Postfix Dovecot unix Error : missing '=' after attribute

According to multiple documents like https://help.ubuntu.com/community/Postfix/DovecotLDAP One of the configuration lines is: dovecot unix - n n - - pipe ...
1
vote
1answer
77 views

smd5 - generate by unix tool or perl

I have problem on Unix, have to create a lot of passwords in smd5 but don't know how to generate smd5 passwords using some unix tool or perl in a form: {smd5}DoZgZ.OE$vSg4ZH7Bpy0BCdXNzBj001 I have ...
1
vote
1answer
21 views

Directory Server doing lookups on one ldap server and authintication on another ldap server

I have an old Centos Directory Server and a new 389 Directory Server. I don't want to use sssd at the moment so lets keep that suggestion off the table. I do the following my RHEL 6.4 servers: ...
1
vote
1answer
18 views

common-account line read order

My authentication is centralized in a LDAP. I've one login system who is working without any ldap so it's present in my /etc/passwd file. This my common-account file in pam.d directory. account ...
0
votes
0answers
42 views

Disabling sslv3 on samba4

How can I disable sslv3 on samba4 ldaps and just have tlsv1 enabled? I have not been able to find any documentation or guides on disabling this feature. This is in regards to the poodle ...
4
votes
1answer
184 views

Adding a system user to an LDAP group with SSSD

Our LDAP server is running RFC 2307 groups (memberuid contains a username, not a DN). With our old nscd/nss_ldap/pam_ldap setup, you could list a non-LDAP user (a system user from /etc/passwd) in an ...
0
votes
0answers
72 views

migrating local users to LDAP

I have sucessfully setup LDAP and LAM on a raspberry pi in my home network. I have several Linux machines around the house, some Windows machines, aswell as a QNAP TS-210 NAS. They all have the same ...
2
votes
1answer
73 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
1
vote
1answer
31 views

Possible to deliver centrally configured login scripts on Linux?

In Windows you can assign login scripts to users which run whenever they log into a system which allowing admins to do things like map drives/printers and generally do anything for which there isn't a ...
0
votes
0answers
36 views

Looking for a new conf for HA Data Server and Virtual Machines with Glusterfs

I own three HP server for lots of users and email, web and a development machine. I want to make my virtual machines to be available all times, but have some issues. My configuration is as follows: ...
0
votes
1answer
98 views

authenicate OpenSUSE 10.2 client to CentOS 6.6 LDAP server

In our company, we have a network where I installed a working LDAP server for our CentOS 6 servers (FTP/WEB/Pydio/VOD/etc servers) about 25 of them. All working perfectly with LDAP authentication. ...
2
votes
1answer
80 views

Existing LDAP object not showing in ldapsearch

I have a couple of LDAP servers, redundant with replication enabled. I'm having trouble with Apache Directory Studio not being able to fetch the base DN of one of these LDAP servers, showing an ...
0
votes
0answers
116 views

LDAP and NFS on two different servers

I have an LDAP-server running on one server and an NFS-server running on another server. This arrangement seems to work providing I manually configure the LDAP users UID, GID home directory location ...
2
votes
1answer
225 views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...
1
vote
0answers
88 views

How to using Zimbra LDAP authentication to svn

I'm using Zimbra mail with LDAP extension. Now, I want to use Zimbra mail authentication accept to SVN (web server Apache). eg: config SVN in web server for me: AuthLDAPURL ...
1
vote
1answer
157 views

text based tool for ldap queries

I need a way to do LDAP queries through a text based interface. I use jXplorer on my own machine but that is a graphical client. Btw, I'm running Ubuntu server 14.04. The background: A server in my ...
2
votes
0answers
199 views

How does ldap work on a client?

This is on CentOS I read the various openldap howto's, they mention /etc/openldap/ldap.conf and editing /etc/nsswitch.conf for example: ...
0
votes
1answer
136 views

Authconfig doesn't find all ldap groups

My (soon to be) admin account is in two groups: # ldapsearch \ > -v \ > -H ldaps://localhost:636 \ > -D "${l_dirmgr}" \ > -w $(cat ${f_dirmgr_passphrase}) \ > -b ...
1
vote
0answers
156 views

Confirm DavMail connection

I am using DavMail to connect to my employers Outlook servers. Before I attempt to configure the email client to work with DavMail, I want to confirm that DavMail has been configured properly and is ...
1
vote
0answers
437 views

LDAP: Local and remote user with same username

I have configured an openLDAP server with LDAP user and group ids beginning at 10000. My client successfully binds to the LDAP server via ldapsearch. Additionally, getent passwd|group returns a full ...
1
vote
1answer
124 views

basic explanation on NSS , LDAP and PAM

can anyone give me a basic explanation on what are NSS , LDAP and PAM and what they used for and what is their relationship/differences ?
2
votes
1answer
2k views

Authenticate users via LDAP using nginx

I know how to auth the users via LDAP in apache2: # put the following in the VirtualHost <VirtualHost *:443> ServerAdmin user1@bar.foo.com DocumentRoot /var/www <Directory ...
1
vote
0answers
129 views

OpenLdap - restore backup - slapcat/slapadd

Im using slapcat to make backup like this: slapcat -n 1 > ${BACKUP_PATH}/ldap.domain.com.ldif Then import using slapadd: slapadd -F /etc/ldap/slapd.d -n 1 -l ldap.domain.com.ldif I can't ...
0
votes
0answers
475 views

While trying to ssh, pam_ldap always sends the password “INCORRECT” causing bind to fail

I installed ldap-auth-client nscd ldap-utils on lubuntu 14.04 running on a banana pi. I can successfully bind as the user using ldapwhoami, but I cannot log in via ssh: Auth.log: Oct 21 02:12:05 ...
1
vote
1answer
177 views

How to disallow usage of an LDAP root account

I am responsible for a couple of servers at my university. All of these machines are configured to talk to the LDAP server of my departement to allow centralised user logins. On this LDAP server there ...
1
vote
1answer
63 views

Given a domain-controlled group, how can I get its domain?

I'm working on an application which collects data on groups. In my application I need to collect data and the residing users of local groups and send meta-data on domain-controlled groups. My ...
1
vote
0answers
545 views

How to configure postfix to send mail to external SMTP server?

I have a machine with http://phabricator.org/ set up on it and I would like to set up postfix to enable e-mail sending to my company's mailboxes (as for notification emails coming from e.g. ...
20
votes
4answers
662 views

Linux solution for schools?

The school I'm working for as an administrator requested a system upgrade. Currently we are using a government-suggested Linux distribution called SuliXerver - it would be great, but most of the admin ...
1
vote
3answers
545 views

auto creation of bash profiles?

Following the instructions at this nice walkthrough here. I have successfully configured my CentOS 6.5 Server to authenticate with my domain. Additionally, it only allows domain users of the group ...
2
votes
0answers
103 views

ACL for a binddn user for PAM?

I've installed 389-ds and created a user and a couple groups. I then configured authconfig on a client to use the LDAP instance to authenticate the user. I've logged in successfully as that user. All ...
2
votes
0answers
38 views

Is it possible to login to a Linux machine with AD credentials without the machine beeing member of the AD?

I'm asking because as far as I know this is not possible with Windows machines since it's mandatory that a Windows machine is known to the AD in order to login with AD credentials. Is it possible to ...
0
votes
0answers
264 views

ldap user dose not exist in centos 6.5

Hope everyone doing good. Let me come to point, i have setup-ed a LDAP server and client machines Server works perfect, while make a search from client machine it too get the Query from LDAP server, ...
0
votes
1answer
193 views

Authenticating To Multiple LDAP Servers

Owing to a corporate strategy I am moving human user authentication from an implementation of LDAP locally to a centralized Active Directory domain. The problem is that we have a tightly constrained ...
-1
votes
2answers
517 views

phpldapadmin with STARTTLS

I'm trying to configure OpenLDAP on Ubuntu using the the Ubuntu server guide. I have enabled Start TLS with a certificate generated using my own CA certificate (since it is for internal use). I ...
2
votes
1answer
96 views

How to disconnect a server from LDAP

I have a Fedora server configured for LDAP. However, the LDAP server is gone, and now I'm unable to SSH into it. I've rebooted the server into single-user mode, brought up eth0 and started sshd, but ...
0
votes
0answers
57 views

Mirror mode openldap perfromance is slow when either mirrored node fails

I'm managing two openldap servers in mirrored mode. When either server fails ldap performs poorly, 30 seconds to several minutes to authenticate. Affected services include ssh and X11 (XDMCP). A ...
1
vote
0answers
112 views

Uninstalling LDAP on Fedora

I'm attempting to maintain a legacy collection of Fedora VMs, all configured to a old LDAP server. However, it's very touchy, and whenever the VM running the LDAP server is slow or unresponsive for ...
0
votes
0answers
185 views

Setting up Kolab Mail Server on Cent OS. The port number '389' is not available for use error?

I use: setup-kolab and all goes well , except an error is returned: The port number '389' is not avaialble for use. This may be due to an invalid port number, or port already being in use by another ...
1
vote
0answers
268 views

postfix expand ldap group AND afterwards resolve alias

We have a postfix server which has the user config stored in a openldap directory. Recently we also implemented ldap groups which are expanded by postfix. This works fine, unless the group expands to ...