the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

learn more… | top users | synonyms

0
votes
1answer
22 views

Does LDAP take care of all users and groups on a system?

I have been following the tutorial here to try out LDAP. I know that a Linux system has groups like mysql, sudo, video, dial-out etc. Do I need to add these to my directory? Are these served via LDAP ...
2
votes
0answers
25 views

howto login into system with LDAP creds when server with LDAP is offline

I have Ubuntu 14.04 and LDAP as center of authentication. It works fine until LDAP server is online. Sometimes network is going to down between LDAP and other servers and LDAP is unavailable, so ...
1
vote
1answer
15 views

Ldap error doesn't redirect to file

I'm running a loop querying ldap server for a single dn every time, just to see if it's running okay. I want to output both the successful and unsuccessful responses to a file and while the former ...
0
votes
0answers
36 views

FTP user home directory for LDAP group

My company uses LDAP server for users authentication. We are now planning to add FTP server. The complicated thing is - we need several users belonging to the one group in LDAP have same home (chroot) ...
0
votes
0answers
24 views

how to load an LDAP client cert RHEL7 authconfig-tui

I have a RHEL7 machine that needs to be configured as an LDAP client (user/auth, using authconfig-tui). When finishing authconfig-tui, it says, just copy the cert to /etc/openldap/cacerts, which I ...
1
vote
0answers
40 views

samba4's ldbsearch complains about authentication for basic searches

So I understand the concept of binding to a LDAP server of any kind and performing either authenticated or anonymous queries. And my goal is to get the full dn=...dc=example,dc=com for a specific ...
1
vote
1answer
33 views

How to start a service on boot after ldap account is available

I have a machine hosting an LDAP database and services on other machines run as users from that database. Because the user accounts does not exist locally, the services fail to start when those ...
0
votes
1answer
26 views

Use an alternate /etc/ldap.conf with ldap search

I would like to perform ldap queries using an alternate file (which is intended to be used with pam.d and so have the same format as /etc/ldap.conf) I think of using ldapsearch. In the manual, I ...
2
votes
0answers
28 views

Override local sudo defaults using sss or ldap

I'm trying to to configure an IPA domain to use the following sudo options for a specific command group: !authenticate !requiretty visiblepw Locally, the following defaults are set in /etc/sudoers: ...
0
votes
0answers
38 views

ldappasswd show error Result: No such object (32)

Why I get error No such object when I run ldappasswd command ? Below is my command to modify password : ldappasswd -H ldap://localhost -x -D "cn=admin,dc=enjaysun,dc=com" -W -S "uid=tbhandari,ou=...
0
votes
0answers
87 views

OpenLDAP 2.4: How to correctly implement TLS (ldaps) on CentOS 6.7

My environment: CentOS 6.7 / OpenDLAP 2.4 slapd -VV @(#) $OpenLDAP: slapd 2.4.40 (Nov 10 2015 09:41:16) $ mockbuild@c6b8.bsys.dev.centos.org:/builddir/build/BUILD/openldap-2.4.40/openldap-2....
0
votes
0answers
6 views

smbldap-tools + Samba 3.6.X - 2 groups exists

In a big corporation, there is several groups encoded in different domains on the same LDAP server. The server is member of the DOM1. root@testsmb3# smbldap-groupmod -m myUser myGroup Error: 2 ...
1
vote
0answers
112 views

Samba NT_STATUS_NO_TRUST_SAM_ACCOUNT

for a project we have several samba shares configured as following: [global] workgroup = <domain name> netbios name = <machine name> passdb backend = tdbsam security = ads ...
3
votes
1answer
62 views

getent group working, but sshd_config allowgroups does not retrieve appropriate group

I am trying to setup Kerberos MIT authentication with OpenLdap autorisation on Debian Jessie. Authentication part is working great, as I can login to SSH using my kerberos account. I even can create ...
1
vote
0answers
29 views

Strange X11 forwarding issue [closed]

I have a strange issue regarding ssh x11 forwarding. Assume I have an host named node71. Firstly, I start Cygwin/X and mintty in Windows, now the local DISPLAY=0.0 Next, I can do ssh root@node71 -Y, ...
0
votes
0answers
42 views

LDAP Authentication

I'm currently trying to set up an LDAP server for centralized authentication. I set up phpLDAPadmin and my structure is as follows: dc=example,dc=com cn=admin ou=users cn=system cn=testuser ou=...
0
votes
0answers
18 views

Unable to add host for user in LDAP

I tried to add hostobject for my user in LDAP setup but after typing in all the information and save, the host was not added to the user. Command I used: ldapmodify -x -D "cn=Manager,dc=domain,dc=...
0
votes
0answers
12 views

Samba with several LDAP servers

Is it possible for SAMBA to use several LDAP servers to authenticate users in addition to users from AD? LDAP can have, presumably, different bases to lookup users for.
0
votes
0answers
26 views

Autofs : Multi LDAP

I prepare the migration NIS to LDAP maps. I use autofs for mount nfs directory. ( User home & /usr/local/xxx ) To work with 1 ldap server but i would set to backup server. I test this : cat /...
0
votes
0answers
38 views

Mount network share at user logon Red Hat

I'm looking to mount a network share on Red Hat at the time the user logs on with their credentials. The user authenticates through LDAP using Kerberos and we have a network share that holds their ...
0
votes
1answer
27 views

How can I disable phpLDAPadmin without uninstalling it?

I installed phpLDAPadmin and it works via http://.../phpldapadmin Is there any good way to disable phpLDAPadmin without uninstalling it and later I can turn it on only when I need to do?
0
votes
0answers
81 views

linux + vastool + print password by vastool

please advice how to print the password from active directory ( LDAP ) of specific user by vastool ? user=admin1 /opt/quest/bin/vastool Copyright 2014 Quest Software, Inc. ALL RIGHTS RESERVED. ...
4
votes
1answer
149 views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
0
votes
1answer
97 views

authenticating ldap users with searchguard for elasticsearch

I have an elastic-search setup with search-guard plug-in. My elastic-search web access is behind single sign on proxy , and i want to authenticated users coming through SSO according to their roles in ...
1
vote
0answers
57 views

SLES 11SP4 LDAP - error trying to bind as user - (Invalid credentials)

I have LDAP server configured (with YaST) on SLES 11SP4 and I've created 3 users. I can su (from root) to any of the user but I cannot login as any of them or change their passwords. When I tried to ...
2
votes
0answers
60 views

ldap 389 server with sssd client, cannot modify password

I setup the 389 ldap server on a fedora system. I can authenticate against the system, but I cannot update/modify a password neither as root nor as user. user root gets a "Password reset by root is ...
3
votes
0answers
48 views

Changing LDAP server preference on Solaris 10

I've recently inherited a new environment running Solaris 10 and I was looking for information on how to change the LDAP server preference on an LDAP client, namely through modifying the ...
0
votes
0answers
17 views

Can Linux ldap users still available if ldap server is unlinked?

I have a Linux with some users have their password in /etc/shadow and other authenticate through LDAP. Is there a way to make user that have their password stored on ldap continuing to be available (...
0
votes
0answers
45 views

freerdp & ldap authentication

I have a linux desktop machine that authenticates upon login against an MS Active Directory Server using sssd. I wish to allow the user to run a remote desktop session and have setup freerdp to ...
-1
votes
1answer
44 views

Linux + LDAP/ActiveDirectory: Can't create a private group for the user like “username:username”

My apologies first for not phrasing this question very well, because it's difficult to Google. (Try finding a Google answer with the terms "self user group" in it.) Normally, with PAM in Linux, when ...
1
vote
1answer
34 views

Migrate LDAP from one machine to another

My current task is to migrate the content from one machine (source) to another (target). Both machines are identical. One is heavily used and the other is clean. I already have all the files that are ...
2
votes
1answer
26 views

Postfix database unreachable behaviour

I have a server running postfix and dovecot with a local mysql database to store virtual domains and users. I'm considering to move the database to another server and perhaps switch to using ldap ...
0
votes
0answers
14 views

LDAP/LDIF configuration option storage?

A LDAP server/database seems like a good solution for centralized/server-side as well as non-centralized/client-side configuration option storage to me: open, well-documented interface and interface ...
2
votes
2answers
451 views

How can I set up centralized home directories and user authentication using LDAP and NFS?

I am trying to configure my server to authenticate users using LDAP and save their home directories on a NFS-Directory, also located on the server. i.e.: I share a directory on my server: /nfsexport ...
0
votes
2answers
85 views

Configuring MSAD in RHEL [closed]

We are trying to configure MSAD in our LINUX VM(RHEL).So that users can login with there accounts directly to the LINUX VM(RHEL) instead of using service accounts.Can someone help me out here ? ...
1
vote
1answer
45 views

Thunderbird no longer starts after upgrade to 38.3.0

After I upgraded Thunderbird last Monday to version 38.3.0 on my Mint 17.2 XFce I was no longer able to start Thunderbird. First I made sure that the files in my profile were all owned by me. When ...
0
votes
2answers
134 views

acroread only runs as root

Note I already asked the exact same question here, with no success. I hope it's not a problem. I am working on a computer connected to a LDAP server. The computer is running under Linux Mint 17. I ...
0
votes
0answers
69 views

Doesn't these program respect nsswitch?

I've set up LDAP and nsswitch on ubuntu and to some extent it seem to work. For example getent passwd lists accounts from both /etc/passwd and LDAP server. However for example id <user>, sudo -...
0
votes
0answers
160 views

why md5 encrypted password insert into php ldap admin extra {md5}

I am using python script to inter encrypted password into php ldap admin but the problem I am facing is LDAP add extra {md5} before the encrypted password, I simulated the code by creating two files ...
0
votes
1answer
100 views

ldappassword for user without ldap password prompt

I installed pam,nss and ldap authentication. I have two rule host : 183 -- installed openldap server, 123-- installed openldap client. my ldap system works fine. But What i want to do is: when I ...
1
vote
0answers
23 views

read-only ldap client setup

I have a Debian Linux box hosted on the cloud that I want to provide mail services with (Postfix/Dovecot). I want it to access my openLDAP server at home for authentication and to provide users email ...
0
votes
0answers
65 views

SASL fails to with against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
0
votes
1answer
33 views

OS X Directory Services

I have been reading from Advanced Programming in the UNIX environment (Stevenson and Rago), and I am currently reading about how user data is stored on various systems, including Linux, FreeBSD, and ...
2
votes
2answers
516 views

Restarting LDAP client service

I have modified ldap.conf and slapd.conf. I'm wondering how I can restart the ldap/client service, filesystem/autofs and name-service/cache. OS: Solaris 11 but advice on linux should help too
0
votes
1answer
65 views

Relationship between limits.conf and LDAP?

This seems like a straight forward question: Is there a relationship between the groups defined in ldap ldif files and /etc/security/limits.conf ? I.e., does defining an LDAP user with ou=...
1
vote
1answer
125 views

How can I run unattended processes as authenticated AD/LDAP users?

I'm switching some servers over to Debian 8 and using realmd for Active Directory (LDAP/Kerberos) authentication. This has been working great and allows Domain Users to login to my server, etc. ...
1
vote
1answer
833 views

Allow username input sddm (LDAP/Kerberos)

The overarching question: How can I enable SDDM to accept username input in Debian? Underlying/implicit questions: How does SDDM recognize users? What is the Debian alternative to /etc/sddm....
0
votes
1answer
293 views

IPA server configuration: Cannot use IP network address

I am stuck with an error while configuring IdM server for my environment. I got this weird error invalid ip address 192.168.1.77 for server.example.com: cannot use ip network address The error came ...
0
votes
0answers
61 views

LDAP replication issues (duplication)

I initially thought this question might be more appropriate for SO, however as I believe it's more of a configuration problem I have posted it here. I'm running LDAP 2.4 on RHEL 6.4. I have 2 LDAP ...
0
votes
1answer
936 views

OpenLDAP: Invalid syntax error when trying to add LDIF

I keep getting an invalid syntax error when trying to create a user in OpenLDAP (CentOS 7). This is a new install of OpenLDAP for testing purposes. So far I've managed to create a group called "Lab ...