the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

learn more… | top users | synonyms

2
votes
0answers
28 views

Is it possible to login to a Linux machine with AD credentials without the machine beeing member of the AD?

I'm asking because as far as I know this is not possible with Windows machines since it's mandatory that a Windows machine is known to the AD in order to login with AD credentials. Is it possible to ...
0
votes
0answers
19 views

ldap user dose not exist in centos 6.5

Hope everyone doing good. Let me come to point, i have setup-ed a LDAP server and client machines Server works perfect, while make a search from client machine it too get the Query from LDAP server, ...
0
votes
0answers
25 views

Authenticating To Multiple LDAP Servers

Owing to a corporate strategy I am moving human user authentication from an implementation of LDAP locally to a centralized Active Directory domain. The problem is that we have a tightly constrained ...
0
votes
0answers
35 views

phpldapadmin with STARTTLS

I'm trying to configure OpenLDAP on Ubuntu using the the Ubuntu server guide. I have enabled Start TLS with a certificate generated using my own CA certificate (since it is for internal use). I ...
2
votes
1answer
32 views

How to disconnect a server from LDAP

I have a Fedora server configured for LDAP. However, the LDAP server is gone, and now I'm unable to SSH into it. I've rebooted the server into single-user mode, brought up eth0 and started sshd, but ...
0
votes
0answers
28 views

Mirror mode openldap perfromance is slow when either mirrored node fails

I'm managing two openldap servers in mirrored mode. When either server fails ldap performs poorly, 30 seconds to several minutes to authenticate. Affected services include ssh and X11 (XDMCP). A ...
0
votes
0answers
20 views

Uninstalling LDAP on Fedora

I'm attempting to maintain a legacy collection of Fedora VMs, all configured to a old LDAP server. However, it's very touchy, and whenever the VM running the LDAP server is slow or unresponsive for ...
0
votes
0answers
66 views

Setting up Kolab Mail Server on Cent OS. The port number '389' is not available for use error?

I use: setup-kolab and all goes well , except an error is returned: The port number '389' is not avaialble for use. This may be due to an invalid port number, or port already being in use by another ...
1
vote
0answers
87 views

postfix expand ldap group AND afterwards resolve alias

We have a postfix server which has the user config stored in a openldap directory. Recently we also implemented ldap groups which are expanded by postfix. This works fine, unless the group expands to ...
1
vote
1answer
192 views

Home Directories and pam.d using LDAP

Background: I'm not too familiar with the ins and outs of pam and LDAP authentication on a configuration side. I've used systems that use pam but I've only worked on applications, not systems ...
2
votes
1answer
177 views

Problem setting up iptables (LDAP traffic blocked)

My application server is on a network protected by a organization wide firewall, and my server is also using fail2ban. That said, I'd like to set up an additional layer of protection with iptables. ...
4
votes
1answer
479 views

Sudo permissions by ldap groups via nslcd

I have a problem with my sudo permissions in an MS ActiveDirectory to Debian LDAP authentication/authorization setup. What I have so far I've configured nslcd with libpam-ldap via ldaps and ssh login ...
1
vote
1answer
36 views

How does the authentication process with the salted hash in shadow work

Does the supplied password during login get converted to a salted hash and then compared to the one in /etc/shadow? /what if the user is in LDAP but not in the shadow file? Would it use kerberos?
1
vote
0answers
22 views

Can a RHEL 6.4 DS sync with a CentOS 5.4 DS

I have two CentOS 5.4 Directory Servers that sync information on a daily bases. I'm wanting to replace them with two RHEL 6.4 Directory Servers. Before the existing two are decommissioned all four ...
0
votes
0answers
1k views

Mounting NFS share from Linux client on Windows domain

I've got a client (Ubuntu 13.10) joined to a Windows domain through PBIS/Likewise, serving Samba shares and allowing domain users to login with domain credentials. Outside of the Windows domain, ...
0
votes
0answers
29 views

LDAP Server under Debian vs LDAP Server under Red Hat

i have read about Red Hat Directory Server: Red Hat released a directory service, that it acquired from AOL's Netscape Security Solutions unit,[1] as a commercial product running on top of ...
3
votes
1answer
303 views

mod_authnz_ldap bind as authenticating user instead of anonymously

I'm attempting to move as close to single credential as possible. We have a web application that has a fairly limited set of available authentication mechanisms but will (luckily) allow admins to tell ...
4
votes
1answer
558 views

Why am I getting apparmor error messages in the syslog about NTP and LDAP?

On my newly installed Ubuntu 12.04 machine, with ntp and slapd installed, the following messages appear in /var/log/syslog at regular intervals: Feb 23 18:54:07 my-host kernel: [ 24.610703] ...
4
votes
1answer
625 views

Using LDAP for authentication, how can I safely disable/deactivate an account without deleting it?

We use LDAP for authentication for thousands of users. The primary tactic we have been employing to make a user unable to login, without removing their account, is to change the LDAP attribute ...
2
votes
1answer
285 views

How do I reset RHEL6 to autocreate home directory upon login?

I am using a RHEL6 host that is set up using LDAP for authenication. Upon first login it is supposed to create the home directory for the user (e.g. /home/gisle where gisle is my login username). I ...
0
votes
0answers
78 views

Postfix mail how to debug transmission to mail handling agent

I have a postfix server running on Ubuntu (and Debian previously). The server is configured to read users and groups from an OpenLDAP server and delivers mail first the spam filter and then to a ...
1
vote
1answer
165 views

What's wrong with my AD/LDAP integration?

I upgraded a system from openSuSE 12.3 to 13.1 earlier this week. The upgrade trashed the networking and LDAP. The networking I was able to fix by deleting the bad adapter that the upgrade added, ...
1
vote
1answer
190 views

LDAP: ldapadduser - can I add to two different groups?

Usually - ldapadduser assumes only one attribute for group-name: # ldapadduser sysuser2 sysusers Can I add add this users in to two groups while creating user? If I try run like: # ldapadduser ...
3
votes
0answers
114 views

LDAP: view DIT structure from terminal

Can I get list of existing entries using any console utilities? For example - I can get a tree of my filesystem with tree: $ tree . ├── Catalina │   └── localhost │   ├── host-manager.xml │   ...
1
vote
1answer
482 views

How do I change login shell to nologin for an LDAP user RHEL 6?

yum install ypchsh and yum install ldapmodify both don't find a package. I only want to change the shell for certain ldap users on this one server. Someone please help, I can't seem to figure this ...
1
vote
1answer
91 views

OpenLDAP: how can I list active schemes, classes etc?

I'm using openldap-server-2.4.38_1 on FreeBSD 9.1-RELEASE-p5. 1) can I get list of active (connected) schemes without viewing slapd.conf file? 2) how can I get description of obectClasses and/or ...
1
vote
2answers
112 views

Mac OS X LDAP query via dscl yields different results for same user with same datasource

Where is the NFSHomeDirectory attribute stored for a Mac user who authenticates via LDAP? It doesn't seem to be in the LDAP database on the backend so I assume Open Directory is involved. I have 2 ...
0
votes
0answers
228 views

Override LDAP login shell for a specific user in RHEL

How in RHEL do I specify /sbin/nologin shell to limit a user to SFTP access only when their shell is determined by their LDAP profile? chsh only works with passwd file users I believe.
1
vote
2answers
783 views

Edit home directory for an LDAP user in Linux

I have an LDAP user who accesses a server based on having the appropriate LDAP host attribute via sssd. This user does not show up in /etc/passwd because he is not local. How do I modify his home ...
0
votes
1answer
567 views

getent passwd when nsswitch passwd setting is: files ldap

If nsswitch has passwd: files ldap set, and I do getent passwd will it first run down the /etc/passwd list and then go through every user in LDAP? That seems to be what happens. I tried it on a ...
0
votes
1answer
2k views

Why am I getting git error “remote: error: unable to create temporary file: No such file or directory” on push?

This problem is getting weirder. My original post follows, but here is the new thing I discovered: I executed git push and it gave me its usual error: Counting objects: 9, done. Delta ...
0
votes
0answers
201 views

How to get all ldap groups for a user

I have no direct access to LDAP, but I am a user in LDAP and can make queries using ldapsearch. How can I query LDAP to get all LDAP groups for a particular user? Also is there an easy way to get ...
0
votes
0answers
50 views

trac ldapplugin ERROR: LDAP error: Operations error

on version 0.10.4 on centos 32 bit using python 2.4 i am trying to install and use ldaplugin to assign permissions to users and groups in AD. i have followed this guide ...
1
vote
0answers
173 views

how to set up ldap and trac

I have set up kerberos authentication with trac which works well. Now I want to use AD groups and users for trac permissions using the trac plugin Configuration for LdapPlugin. I have been following ...
2
votes
0answers
701 views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
2
votes
1answer
39 views

The importance of the order in domain controler names for setting an LDAP server, is there any reason?

I wonder if there is any reason to speficically put the domain controlers in the proper order, when configurung a LDAP server using autofs. For example if specify on a RedHat/CentOS the dc domain ...
0
votes
0answers
91 views

Local servers (behind NAT) on vpn with email servers and sync with a central email server open to internet

What I have I have a number of Linux (Ubuntu) servers (20 as of now but may grow over time to hundreds) connected to each other via private VPN (OpenVPN) which serve intranet web application (Apache ...
0
votes
0answers
41 views

setup domain master and ldap master

I want to build active domain controller master - master as below: 1 server run windows server 2008 R2 make domain controller 1 server run CentOS 6.4 make LDAP + SAMBA Can I do this problem? Now, My ...
1
vote
2answers
457 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
1
vote
1answer
627 views

Attempting to detect acceptable LDAP base DN defaults for various directory servers in a bash script

Basically, I'm writing a script that determines an acceptable default for a base DN when pointed at a particular hostname. I'm wrapping it around ldapsearch output. I can do Active Directory by ...
1
vote
0answers
87 views

RHEL6 LDAP client not listing all the groups

Using sssd I have a RHEL6 client configured to login using LDAPS. The login works, but if the user logged in is assigned to more than 1 group at the LDAP level, groups only returns 1 group? Could I ...
5
votes
1answer
1k views

Changing password in multiple boxes using script

I'm working in a environment which has around 400 AIX boxes. I don't have root access and I'm a normal user. The environment has no LDAP kind of centralized mechanism for authentication so the ...
-1
votes
1answer
439 views

SSH key based login bypasses password policies

I noticed that logins via an SSH key bypass the LDAP password policies (password ageing, password warning, and password lockout due to failed attempts, etc). Is there any way to force key-based ssh ...
1
vote
1answer
137 views

LDAP : one suffix : search multiple separate Active Directory

I have configured an OpenLDAP 2.4.23 as a proxy to multiple separate Active Directory, it works fine when each AD as a different suffix/search base. I have an use case to fullfil : one application ...
0
votes
1answer
760 views

Configuring proftpd and mod_ldap.c query not working - any ideas?

I'm trying to get a ProFTPD to ldap auth on a Active Directory base. I still couldn't figure out what could be wrong with my configuration since, executing a ldap query with ldapsearch seems fine ...
1
vote
2answers
494 views

Prevent root password change in ldap - debian

After setting up ldap authentication with pam in debian, evertything works fine. Using the passwd command change the ldap password of the current user. The problem is my ldap has been set up with an ...
2
votes
2answers
126 views

Browse LDAP strcuture using Solaris pre-packaged command?

I have used ldapsearch to pull details on accounts but is there a way to browse the different levels in the LDAP directory just like we do with files in a directory?
2
votes
1answer
872 views

How do find the LDAP connection details that the Solaris box uses to authenticate users?

The Solaris box is configured to use LDAP and has no local user accounts. This is the output of the nsswitch.conf file: bash-3.2$ less /etc/nsswitch.conf passwd: files [NOTFOUND=continue] ldap ...
3
votes
1answer
4k views

Openldap backup restore

I am trying to setup backup and restore and make sure it works. Please note that database size on ldap.old is lot more then the ldap. The /var/lib/ldap.old is my existing database. I have renamed ...
2
votes
1answer
588 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...