the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

learn more… | top users | synonyms

2
votes
1answer
20 views

How to disconnect a server from LDAP

I have a Fedora server configured for LDAP. However, the LDAP server is gone, and now I'm unable to SSH into it. I've rebooted the server into single-user mode, brought up eth0 and started sshd, but ...
0
votes
0answers
20 views

Mirror mode openldap perfromance is slow when either mirrored node fails

I'm managing two openldap servers in mirrored mode. When either server fails ldap performs poorly, 30 seconds to several minutes to authenticate. Affected services include ssh and X11 (XDMCP). A ...
0
votes
0answers
12 views

Uninstalling LDAP on Fedora

I'm attempting to maintain a legacy collection of Fedora VMs, all configured to a old LDAP server. However, it's very touchy, and whenever the VM running the LDAP server is slow or unresponsive for ...
0
votes
0answers
22 views

Setting up Kolab Mail Server on Cent OS. The port number '389' is not available for use error?

I use: setup-kolab and all goes well , except an error is returned: The port number '389' is not avaialble for use. This may be due to an invalid port number, or port already being in use by another ...
1
vote
0answers
52 views

postfix expand ldap group AND afterwards resolve alias

We have a postfix server which has the user config stored in a openldap directory. Recently we also implemented ldap groups which are expanded by postfix. This works fine, unless the group expands to ...
1
vote
1answer
80 views

Home Directories and pam.d using LDAP

Background: I'm not too familiar with the ins and outs of pam and LDAP authentication on a configuration side. I've used systems that use pam but I've only worked on applications, not systems ...
2
votes
1answer
94 views

Problem setting up iptables (LDAP traffic blocked)

My application server is on a network protected by a organization wide firewall, and my server is also using fail2ban. That said, I'd like to set up an additional layer of protection with iptables. ...
4
votes
1answer
192 views

Sudo permissions by ldap groups via nslcd

I have a problem with my sudo permissions in an MS ActiveDirectory to Debian LDAP authentication/authorization setup. What I have so far I've configured nslcd with libpam-ldap via ldaps and ssh login ...
1
vote
1answer
30 views

How does the authentication process with the salted hash in shadow work

Does the supplied password during login get converted to a salted hash and then compared to the one in /etc/shadow? /what if the user is in LDAP but not in the shadow file? Would it use kerberos?
1
vote
0answers
21 views

Can a RHEL 6.4 DS sync with a CentOS 5.4 DS

I have two CentOS 5.4 Directory Servers that sync information on a daily bases. I'm wanting to replace them with two RHEL 6.4 Directory Servers. Before the existing two are decommissioned all four ...
1
vote
0answers
727 views

Mounting NFS share from Linux client on Windows domain

I've got a client (Ubuntu 13.10) joined to a Windows domain through PBIS/Likewise, serving Samba shares and allowing domain users to login with domain credentials. Outside of the Windows domain, ...
0
votes
0answers
26 views

LDAP Server under Debian vs LDAP Server under Red Hat

i have read about Red Hat Directory Server: Red Hat released a directory service, that it acquired from AOL's Netscape Security Solutions unit,[1] as a commercial product running on top of ...
3
votes
1answer
182 views

mod_authnz_ldap bind as authenticating user instead of anonymously

I'm attempting to move as close to single credential as possible. We have a web application that has a fairly limited set of available authentication mechanisms but will (luckily) allow admins to tell ...
4
votes
1answer
329 views

Why am I getting apparmor error messages in the syslog about NTP and LDAP?

On my newly installed Ubuntu 12.04 machine, with ntp and slapd installed, the following messages appear in /var/log/syslog at regular intervals: Feb 23 18:54:07 my-host kernel: [ 24.610703] ...
3
votes
1answer
259 views

Using LDAP for authentication, how can I safely disable/deactivate an account without deleting it?

We use LDAP for authentication for thousands of users. The primary tactic we have been employing to make a user unable to login, without removing their account, is to change the LDAP attribute ...
2
votes
1answer
195 views

How do I reset RHEL6 to autocreate home directory upon login?

I am using a RHEL6 host that is set up using LDAP for authenication. Upon first login it is supposed to create the home directory for the user (e.g. /home/gisle where gisle is my login username). I ...
0
votes
0answers
66 views

Postfix mail how to debug transmission to mail handling agent

I have a postfix server running on Ubuntu (and Debian previously). The server is configured to read users and groups from an OpenLDAP server and delivers mail first the spam filter and then to a ...
1
vote
1answer
141 views

What's wrong with my AD/LDAP integration?

I upgraded a system from openSuSE 12.3 to 13.1 earlier this week. The upgrade trashed the networking and LDAP. The networking I was able to fix by deleting the bad adapter that the upgrade added, ...
1
vote
1answer
160 views

LDAP: ldapadduser - can I add to two different groups?

Usually - ldapadduser assumes only one attribute for group-name: # ldapadduser sysuser2 sysusers Can I add add this users in to two groups while creating user? If I try run like: # ldapadduser ...
3
votes
0answers
107 views

LDAP: view DIT structure from terminal

Can I get list of existing entries using any console utilities? For example - I can get a tree of my filesystem with tree: $ tree . ├── Catalina │   └── localhost │   ├── host-manager.xml │   ...
1
vote
1answer
413 views

How do I change login shell to nologin for an LDAP user RHEL 6?

yum install ypchsh and yum install ldapmodify both don't find a package. I only want to change the shell for certain ldap users on this one server. Someone please help, I can't seem to figure this ...
1
vote
1answer
82 views

OpenLDAP: how can I list active schemes, classes etc?

I'm using openldap-server-2.4.38_1 on FreeBSD 9.1-RELEASE-p5. 1) can I get list of active (connected) schemes without viewing slapd.conf file? 2) how can I get description of obectClasses and/or ...
1
vote
2answers
81 views

Mac OS X LDAP query via dscl yields different results for same user with same datasource

Where is the NFSHomeDirectory attribute stored for a Mac user who authenticates via LDAP? It doesn't seem to be in the LDAP database on the backend so I assume Open Directory is involved. I have 2 ...
0
votes
0answers
198 views

Override LDAP login shell for a specific user in RHEL

How in RHEL do I specify /sbin/nologin shell to limit a user to SFTP access only when their shell is determined by their LDAP profile? chsh only works with passwd file users I believe.
1
vote
2answers
629 views

Edit home directory for an LDAP user in Linux

I have an LDAP user who accesses a server based on having the appropriate LDAP host attribute via sssd. This user does not show up in /etc/passwd because he is not local. How do I modify his home ...
0
votes
1answer
456 views

getent passwd when nsswitch passwd setting is: files ldap

If nsswitch has passwd: files ldap set, and I do getent passwd will it first run down the /etc/passwd list and then go through every user in LDAP? That seems to be what happens. I tried it on a ...
0
votes
1answer
2k views

Why am I getting git error “remote: error: unable to create temporary file: No such file or directory” on push?

This problem is getting weirder. My original post follows, but here is the new thing I discovered: I executed git push and it gave me its usual error: Counting objects: 9, done. Delta ...
0
votes
0answers
159 views

How to get all ldap groups for a user

I have no direct access to LDAP, but I am a user in LDAP and can make queries using ldapsearch. How can I query LDAP to get all LDAP groups for a particular user? Also is there an easy way to get ...
0
votes
0answers
45 views

trac ldapplugin ERROR: LDAP error: Operations error

on version 0.10.4 on centos 32 bit using python 2.4 i am trying to install and use ldaplugin to assign permissions to users and groups in AD. i have followed this guide ...
1
vote
0answers
140 views

how to set up ldap and trac

I have set up kerberos authentication with trac which works well. Now I want to use AD groups and users for trac permissions using the trac plugin Configuration for LdapPlugin. I have been following ...
2
votes
0answers
567 views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
2
votes
1answer
39 views

The importance of the order in domain controler names for setting an LDAP server, is there any reason?

I wonder if there is any reason to speficically put the domain controlers in the proper order, when configurung a LDAP server using autofs. For example if specify on a RedHat/CentOS the dc domain ...
0
votes
0answers
82 views

Local servers (behind NAT) on vpn with email servers and sync with a central email server open to internet

What I have I have a number of Linux (Ubuntu) servers (20 as of now but may grow over time to hundreds) connected to each other via private VPN (OpenVPN) which serve intranet web application (Apache ...
0
votes
0answers
41 views

setup domain master and ldap master

I want to build active domain controller master - master as below: 1 server run windows server 2008 R2 make domain controller 1 server run CentOS 6.4 make LDAP + SAMBA Can I do this problem? Now, My ...
1
vote
2answers
333 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
1
vote
1answer
517 views

Attempting to detect acceptable LDAP base DN defaults for various directory servers in a bash script

Basically, I'm writing a script that determines an acceptable default for a base DN when pointed at a particular hostname. I'm wrapping it around ldapsearch output. I can do Active Directory by ...
1
vote
0answers
80 views

RHEL6 LDAP client not listing all the groups

Using sssd I have a RHEL6 client configured to login using LDAPS. The login works, but if the user logged in is assigned to more than 1 group at the LDAP level, groups only returns 1 group? Could I ...
5
votes
1answer
988 views

Changing password in multiple boxes using script

I'm working in a environment which has around 400 AIX boxes. I don't have root access and I'm a normal user. The environment has no LDAP kind of centralized mechanism for authentication so the ...
-1
votes
1answer
382 views

SSH key based login bypasses password policies

I noticed that logins via an SSH key bypass the LDAP password policies (password ageing, password warning, and password lockout due to failed attempts, etc). Is there any way to force key-based ssh ...
1
vote
1answer
120 views

LDAP : one suffix : search multiple separate Active Directory

I have configured an OpenLDAP 2.4.23 as a proxy to multiple separate Active Directory, it works fine when each AD as a different suffix/search base. I have an use case to fullfil : one application ...
0
votes
1answer
614 views

Configuring proftpd and mod_ldap.c query not working - any ideas?

I'm trying to get a ProFTPD to ldap auth on a Active Directory base. I still couldn't figure out what could be wrong with my configuration since, executing a ldap query with ldapsearch seems fine ...
1
vote
2answers
453 views

Prevent root password change in ldap - debian

After setting up ldap authentication with pam in debian, evertything works fine. Using the passwd command change the ldap password of the current user. The problem is my ldap has been set up with an ...
2
votes
2answers
121 views

Browse LDAP strcuture using Solaris pre-packaged command?

I have used ldapsearch to pull details on accounts but is there a way to browse the different levels in the LDAP directory just like we do with files in a directory?
2
votes
1answer
664 views

How do find the LDAP connection details that the Solaris box uses to authenticate users?

The Solaris box is configured to use LDAP and has no local user accounts. This is the output of the nsswitch.conf file: bash-3.2$ less /etc/nsswitch.conf passwd: files [NOTFOUND=continue] ldap ...
2
votes
1answer
3k views

Openldap backup restore

I am trying to setup backup and restore and make sure it works. Please note that database size on ldap.old is lot more then the ldap. The /var/lib/ldap.old is my existing database. I have renamed ...
2
votes
1answer
550 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
1
vote
1answer
83 views

Nexenta (Solaris), strange user membership from LDAP

Anybody help me, why do run id command in the Nexenta OS (Solaris+Ubuntu), i get different result? a_ay@nexenta:/etc$ id -G 513 512 1000 201 203 1010 1013 1019 1020 1036 1039 1040 1041 1045 1046 1047 ...
2
votes
0answers
2k views

LDAP authentication broken with upgrade to CentOS 6.4 (sssd)

I have OpenLDAP server: @(#) $OpenLDAP: slapd 2.4.23 (Aug 8 2012 16:29:21) In my configuration have group: ldapsearch -x -b 'cn=groupname,ou=UnixShell,ou=Services,o=example,c=ru' # extended LDIF ...
1
vote
1answer
202 views

openldap supplementary groups not showing up on certain servers

i have a couple of servers that fail to display newly added supplementary groups. Example, I have a user, which you run id and his groups come up. id groupblah, groupblahblah , groupblahblahblah ...
1
vote
1answer
1k views

Set up chroot for LDAP users in RHEL6

I have been working on this for 2 days now and am about to give up so someone please help. I have a Red Hat 6 server joined to my active directory domain. Logins work just fine under normal ...