2
votes
0answers
28 views

Is it possible to login to a Linux machine with AD credentials without the machine beeing member of the AD?

I'm asking because as far as I know this is not possible with Windows machines since it's mandatory that a Windows machine is known to the AD in order to login with AD credentials. Is it possible to ...
0
votes
0answers
231 views

Override LDAP login shell for a specific user in RHEL

How in RHEL do I specify /sbin/nologin shell to limit a user to SFTP access only when their shell is determined by their LDAP profile? chsh only works with passwd file users I believe.
1
vote
2answers
798 views

Edit home directory for an LDAP user in Linux

I have an LDAP user who accesses a server based on having the appropriate LDAP host attribute via sssd. This user does not show up in /etc/passwd because he is not local. How do I modify his home ...
0
votes
0answers
91 views

Local servers (behind NAT) on vpn with email servers and sync with a central email server open to internet

What I have I have a number of Linux (Ubuntu) servers (20 as of now but may grow over time to hundreds) connected to each other via private VPN (OpenVPN) which serve intranet web application (Apache ...
1
vote
1answer
631 views

Attempting to detect acceptable LDAP base DN defaults for various directory servers in a bash script

Basically, I'm writing a script that determines an acceptable default for a base DN when pointed at a particular hostname. I'm wrapping it around ldapsearch output. I can do Active Directory by ...
1
vote
0answers
87 views

RHEL6 LDAP client not listing all the groups

Using sssd I have a RHEL6 client configured to login using LDAPS. The login works, but if the user logged in is assigned to more than 1 group at the LDAP level, groups only returns 1 group? Could I ...
1
vote
1answer
85 views

Nexenta (Solaris), strange user membership from LDAP

Anybody help me, why do run id command in the Nexenta OS (Solaris+Ubuntu), i get different result? a_ay@nexenta:/etc$ id -G 513 512 1000 201 203 1010 1013 1019 1020 1036 1039 1040 1041 1045 1046 1047 ...
2
votes
1answer
3k views

LDAP authentication broken with upgrade to CentOS 6.4 (sssd)

I have OpenLDAP server: @(#) $OpenLDAP: slapd 2.4.23 (Aug 8 2012 16:29:21) In my configuration have group: ldapsearch -x -b 'cn=groupname,ou=UnixShell,ou=Services,o=example,c=ru' # extended LDIF ...
4
votes
2answers
755 views

How do I create a hierarchy of UNIX groups as below?

I need to create a hierarchy of UNIX groups. Something like below: A |\ | \ B c |\ D e |\ f g ...where A, B and D are UNIX groups and c,e,f and g are UNIX accounts that are members of those ...
5
votes
2answers
835 views

OpenLDAP Password Policy overlay error while loading

I'm trying to load the password policy overlay but i'm having the following error ldapadd -Wx -D "cn=Manager,cn=config" -f overlay.ldif Enter LDAP Password: adding new entry ...
2
votes
0answers
117 views

OpenLDAP error while adding an ACL

I'm trying to add an ACL to my DIT and I get the following: Enter LDAP Password: modifying entry "olcDatabase={0}bdb,cn=config" ldap_modify: No such object (32) matched DN: cn=config This ...
1
vote
1answer
346 views

Can't su root after editing PAM confiugration on Rackspace Linux box

I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...
0
votes
1answer
500 views

apache ldap authentication taking far too long

I configured apache2.2 (CentOS 5.6) to provide ldap authentication with Active Directory. <Directory "/var/www/html"> AuthType Basic AuthName "Authenticate with domain ...
1
vote
1answer
186 views

Mass update of /etc/ldap.secret

I have a group of servers authenticating against an LDAP server. I would like to be able to periodically update the /etc/ldap.secret file with an updated secret. I've written a small script that reads ...
3
votes
2answers
4k views

ldap_bind: Invalid credentials (49)

I'm trying to set up an openLdap server and after following the instructions I'm stuck at the point where I can't add any data. The error I'm getting is ldap_bind: Invalid credentials (49) Please ...