the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services
0
votes
1answer
20 views
Configuring proftpd and mod_ldap.c query not working - any ideas?
I'm trying to get a ProFTPD to ldap auth on a Active Directory base. I still couldn't figure out what could be wrong with my configuration since, executing a ldap query with ldapsearch seems fine
...
1
vote
2answers
28 views
Prevent root password change in ldap - debian
After setting up ldap authentication with pam in debian, evertything works fine.
Using the passwd command change the ldap password of the current user.
The problem is my ldap has been set up with an ...
2
votes
2answers
41 views
Browse LDAP strcuture using Solaris pre-packaged command?
I have used ldapsearch to pull details on accounts but is there a way to browse the different levels in the LDAP directory just like we do with files in a directory?
2
votes
1answer
37 views
How do find the LDAP connection details that the Solaris box uses to authenticate users?
The Solaris box is configured to use LDAP and has no local user accounts.
This is the output of the nsswitch.conf file:
bash-3.2$ less /etc/nsswitch.conf
passwd: files [NOTFOUND=continue] ldap
...
2
votes
1answer
69 views
Openldap backup restore
I am trying to setup backup and restore and make sure it works.
Please note that database size on ldap.old is lot more then the ldap. The /var/lib/ldap.old is my existing database. I have renamed ...
1
vote
1answer
211 views
Where does Samba 4 store user passwords?
Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4?
I am using my own LDAP server with samba 3, and the password hash is stored within the ...
1
vote
1answer
33 views
Nexenta (Solaris), strange user membership from LDAP
Anybody help me, why do run id command in the Nexenta OS (Solaris+Ubuntu), i get different result?
a_ay@nexenta:/etc$ id -G
513 512 1000 201 203 1010 1013 1019 1020 1036 1039 1040 1041 1045 1046 1047
...
0
votes
0answers
35 views
user permission with ldap server
I am trying to setup a ldap server which authenticate each user with its respected permissions i.e Full or read-only access to each server.
We don't want to create each user manually on each server.
...
2
votes
0answers
566 views
LDAP authentication broken with upgrade to CentOS 6.4 (sssd)
I have OpenLDAP server:
@(#) $OpenLDAP: slapd 2.4.23 (Aug 8 2012 16:29:21)
In my configuration have group:
ldapsearch -x -b 'cn=groupname,ou=UnixShell,ou=Services,o=example,c=ru'
# extended LDIF
...
0
votes
1answer
43 views
openldap supplementary groups not showing up on certain servers
i have a couple of servers that fail to display newly added supplementary groups. Example, I have a user, which you run id and his groups come up.
id
groupblah, groupblahblah , groupblahblahblah
...
1
vote
1answer
207 views
Set up chroot for LDAP users in RHEL6
I have been working on this for 2 days now and am about to give up so someone please help.
I have a Red Hat 6 server joined to my active directory domain. Logins work just fine under normal ...
4
votes
3answers
304 views
Restrict ssh login from LDAP to users who have a /home directory
I have an Apache server (RHEL 6) hosting multiple user web pages which currently is connected to my Active Directory environment to authenticate users. The server is used to automatically host content ...
2
votes
1answer
342 views
How to make ldapsearch working on SLES over tls using certificate?
We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here ...
3
votes
2answers
162 views
How do I create a hierarchy of UNIX groups as below?
I need to create a hierarchy of UNIX groups. Something like below:
A
|\
| \
B c
|\
D e
|\
f g
...where A, B and D are UNIX groups and c,e,f and g are UNIX accounts that are members of those ...
1
vote
1answer
64 views
Automation of openldap installation
In my group we often install ldap on new servers. We have two different configurations currently. A mirrored configuration and just a regular standalone configuration.
The installation process gets ...
0
votes
1answer
599 views
samba with OpenLDAP - NT_STATUS_NO_SUCH_USER
To start off, shit's about to hit the fan and i need your help!
I'm so short of time that i can't begin to describe everything i've done and not done, but i have a problem and hope you can help!
...
2
votes
1answer
386 views
Failed to start slapd in CentOS
I was trying to setup an LDAP server for my development. For this purpose, I have chose CentOS 6.3 install it in VirtualBox host in Fedora 17. I'm following this tutorial to guide me on this setup, ...
3
votes
1answer
216 views
OpenLDAP Password Policy overlay error while loading
I'm trying to load the password policy overlay but i'm having the following error
ldapadd -Wx -D "cn=Manager,cn=config" -f overlay.ldif
Enter LDAP Password:
adding new entry ...
2
votes
0answers
65 views
OpenLDAP error while adding an ACL
I'm trying to add an ACL to my DIT and I get the following:
Enter LDAP Password:
modifying entry "olcDatabase={0}bdb,cn=config"
ldap_modify: No such object (32)
matched DN: cn=config
This ...
1
vote
0answers
59 views
AIX auditing for LDAP users
I've discovered a problem with the way AIX uses auditclasses to determine which system calls are audited. If a user is defined in LDAP, their auditclasses attribute is blank. I found an APAR which ...
1
vote
1answer
35 views
Do any openldap tools support the Authorization Identity Response Control?
I have a fedora 389 directory server and cannot use ldapwhoami because it is not supported.
However, 389-ds does support the following controls which are supposed to offer similar functionality:
...
1
vote
2answers
96 views
ldapsearch error “Invalid general option name” for every option
Whenever I try to use ldapsearch with a -o option I get the following error:
Invalid general option name:
An example command I am trying to run (taken from redhat documentation):
ldapsearch ...
0
votes
0answers
101 views
Need help configuring Fedora client authentication for 389 server with Kerberos
Trying to setup kerberos authentication with 389-ds and having trouble figuring out how the two fit together.
Here is my setup:
A CentOS 6 VM (centos01) where I setup bind, 389 ds, and kdc services
...
11
votes
3answers
292 views
Groups differ from the local ones when logging in remotely
We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
0
votes
2answers
343 views
Samba not working through AD
I'm trying to get a samba to work with a windows AD. And i can't use my shares through samba.
My smb.conf
#GLOBAL PARAMETERS
[global]
workgroup = MY_DOMAIN
realm = MY_DOMAIN.COM
preferred ...
0
votes
0answers
63 views
HP-UX Directory Server Question
I have been tasked with installing HP Directory server(HPDS) 8.1,64-bit as a single sign on LDAP solution in my test environment and subsequently other environments.I am new to this product
We are ...
2
votes
1answer
89 views
Samba passwords expiring in x days - how do we fix them to not expire
We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
3
votes
1answer
259 views
Multiple PCs network centralized system authentication
(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.)
I own a dozen ...
1
vote
0answers
78 views
How to filter group membership from the ldap server?
Context : We have a Ubuntu 12.04 with authentication done on a ldap server.
Unfortunately, one (ldap) user belongs to a (ldap) group named "admin".
I know there is the option ...
1
vote
1answer
76 views
openldap: add auxiliary class
I want to add an auxiliary class to OpenLDAP. What exactly do I have to do?
I'm using Apache Directory Studio as editor.
I've added a new core schema with olcObjectClasses "testclass" and an ...
3
votes
0answers
888 views
Autofs doesn't mount shares on startup
I am using OpenSuSE 12.1 with homes shared through LDAP and NFS.
ldap stores the maps.
My problem is I can't have the shares mounted on boot. It's only working when restarting the autofs service ...
1
vote
0answers
46 views
error with slap.d while installing software
I am trying to install wireshark (this issue is not specific to wireshark) on my ubuntu box and I keep getting the following error for slap.d:
Setting up slapd (2.4.23-6ubuntu6.1) ...
Creating ...
0
votes
0answers
245 views
Segmentation fault while doing `sudo su -`
I am getting a segmentation fault error while doing sudo su - or sudo su - username in Linux Server (RHEL 4.7).
Can any one help me resolve this issue? Linux server (RHEL 4.7) is a LDAP client.
1
vote
2answers
602 views
LDAP on openSUSE
I'm trying to run an LDAP server on a openSUSE 12. But I have a couple of doubts.
What I whant is this: testing.com with 2 OU (Info and People ). So the right way would be ou=Info,dc=testing,dc=com.
...
2
votes
1answer
389 views
OpenLDAP Centos 6
I am trying to set up some ACLs (starting off with a simple userpassword ACL) on a new OpenLdap deployment.
I am trying to get to grips with the new conf.d configuration format - but am struggling. ...
3
votes
1answer
296 views
How do I add a local user to a box that uses LDAP authenticaiton?
I'm working with a box that uses LDAP for user authentication. However, I need to add a local user to run some services and I don't want non-person users junking up the LDAP directory. Does anyone ...
1
vote
1answer
253 views
Can't su root after editing PAM confiugration on Rackspace Linux box
I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...
0
votes
1answer
226 views
apache ldap authentication taking far too long
I configured apache2.2 (CentOS 5.6) to provide ldap authentication with Active Directory.
<Directory "/var/www/html">
AuthType Basic
AuthName "Authenticate with domain ...
1
vote
1answer
1k views
Connect to LDAP with cn=config in Debian Squeeze
How can I connect with an LDAP-Browser to a Debian Squeeze default openldap-installation? (It uses cn=config only).
1
vote
1answer
262 views
Centos directory server / 389 directory server - any differences?
I have very broad view that Redhat Directory Server, 389 Directory Server and Centos Directory Server are all the same. It's just the support you pay for on the RedHat version.
Is this true? Are ...
1
vote
1answer
6k views
doing OpenLDAP config changes in RHEL 6
I've been configuring OpenLDAP on RHEL 6 and its seems you have run the following to rebuild the config dirs. I'm ok with that, but my issues is, say I want to change the server passwd, do I have to ...
3
votes
2answers
459 views
Is Open LDAP meant to work with the passwd command for Linux?
I've implemented an Open LDAP server in OpenSuSE 11.2 via the YaST GUI. I'm having success logging in from the local machine and other machines via LDAP. I am able to change LDAP user passwords via
...
1
vote
1answer
170 views
Mass update of /etc/ldap.secret
I have a group of servers authenticating against an LDAP server. I would like to be able to periodically update the /etc/ldap.secret file with an updated secret. I've written a small script that reads ...
3
votes
2answers
3k views
ldap_bind: Invalid credentials (49)
I'm trying to set up an openLdap server and after following the instructions I'm stuck at the point where I can't add any data.
The error I'm getting is
ldap_bind: Invalid credentials (49)
Please ...
1
vote
3answers
2k views
Howto set access control lists ACLs in OpenLDAP
I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with ldapmodify? There's no slapd.conf file in Debian, they use a slapd.d folder
2
votes
1answer
179 views
Resource needed to manage cert.db7 files for AIX
On AIX to get LDAP authentication working it has wanted to store the LDAP SSL certificate's trusted root in a cert.db7 file. Mozilla stopped supporting it in NSS (Netscape Security Services) a while ...
6
votes
3answers
171 views
Setting up a unix powered network
I want to set up several computers on a LAN, all connecting to one unix server.
The primary goal being that the user accounts should only exist on the server. So that any user could access his normal ...
5
votes
2answers
1k views
How would you migrate from a Windows AD to a Linux LDAP server?
I currently run a Windows server with Active Directory. But since we're no longer using Exchange 2007, it became a fancy file server with authentication.
I would like to move the AD to a Linux ...
4
votes
6answers
807 views
Identity Management with ActiveDirectory
What is the best, or most reliable, way to manage my Unix/Linux user accounts with ActiveDirectory? Or, is this even feasible?
