the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services
1
vote
1answer
35 views
Do any openldap tools support the Authorization Identity Response Control?
I have a fedora 389 directory server and cannot use ldapwhoami because it is not supported.
However, 389-ds does support the following controls which are supposed to offer similar functionality:
...
10
votes
2answers
276 views
Groups differ from the local ones when logging in remotely
We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
2
votes
2answers
37 views
Browse LDAP strcuture using Solaris pre-packaged command?
I have used ldapsearch to pull details on accounts but is there a way to browse the different levels in the LDAP directory just like we do with files in a directory?
2
votes
1answer
22 views
How do find the LDAP connection details that the Solaris box uses to authenticate users?
The Solaris box is configured to use LDAP and has no local user accounts.
This is the output of the nsswitch.conf file:
bash-3.2$ less /etc/nsswitch.conf
passwd: files [NOTFOUND=continue] ldap
...
2
votes
1answer
36 views
Openldap backup restore
I am trying to setup backup and restore and make sure it works.
Please note that database size on ldap.old is lot more then the ldap. The /var/lib/ldap.old is my existing database. I have renamed ...
0
votes
1answer
33 views
openldap supplementary groups not showing up on certain servers
i have a couple of servers that fail to display newly added supplementary groups. Example, I have a user, which you run id and his groups come up.
id
groupblah, groupblahblah , groupblahblahblah
...
3
votes
1answer
207 views
OpenLDAP Password Policy overlay error while loading
I'm trying to load the password policy overlay but i'm having the following error
ldapadd -Wx -D "cn=Manager,cn=config" -f overlay.ldif
Enter LDAP Password:
adding new entry ...
2
votes
1answer
339 views
Failed to start slapd in CentOS
I was trying to setup an LDAP server for my development. For this purpose, I have chose CentOS 6.3 install it in VirtualBox host in Fedora 17. I'm following this tutorial to guide me on this setup, ...
1
vote
1answer
142 views
Where does Samba 4 store user passwords?
Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4?
I am using my own LDAP server with samba 3, and the password hash is stored within the ...
1
vote
1answer
30 views
Nexenta (Solaris), strange user membership from LDAP
Anybody help me, why do run id command in the Nexenta OS (Solaris+Ubuntu), i get different result?
a_ay@nexenta:/etc$ id -G
513 512 1000 201 203 1010 1013 1019 1020 1036 1039 1040 1041 1045 1046 1047
...
0
votes
0answers
32 views
user permission with ldap server
I am trying to setup a ldap server which authenticate each user with its respected permissions i.e Full or read-only access to each server.
We don't want to create each user manually on each server.
...
2
votes
0answers
404 views
LDAP authentication broken with upgrade to CentOS 6.4 (sssd)
I have OpenLDAP server:
@(#) $OpenLDAP: slapd 2.4.23 (Aug 8 2012 16:29:21)
In my configuration have group:
ldapsearch -x -b 'cn=groupname,ou=UnixShell,ou=Services,o=example,c=ru'
# extended LDIF
...
1
vote
1answer
167 views
Set up chroot for LDAP users in RHEL6
I have been working on this for 2 days now and am about to give up so someone please help.
I have a Red Hat 6 server joined to my active directory domain. Logins work just fine under normal ...
4
votes
3answers
221 views
Restrict ssh login from LDAP to users who have a /home directory
I have an Apache server (RHEL 6) hosting multiple user web pages which currently is connected to my Active Directory environment to authenticate users. The server is used to automatically host content ...
2
votes
1answer
240 views
How to make ldapsearch working on SLES over tls using certificate?
We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here ...
3
votes
2answers
146 views
How do I create a hierarchy of UNIX groups as below?
I need to create a hierarchy of UNIX groups. Something like below:
A
|\
| \
B c
|\
D e
|\
f g
...where A, B and D are UNIX groups and c,e,f and g are UNIX accounts that are members of those ...
0
votes
1answer
437 views
samba with OpenLDAP - NT_STATUS_NO_SUCH_USER
To start off, shit's about to hit the fan and i need your help!
I'm so short of time that i can't begin to describe everything i've done and not done, but i have a problem and hope you can help!
...
1
vote
1answer
58 views
Automation of openldap installation
In my group we often install ldap on new servers. We have two different configurations currently. A mirrored configuration and just a regular standalone configuration.
The installation process gets ...
2
votes
0answers
62 views
OpenLDAP error while adding an ACL
I'm trying to add an ACL to my DIT and I get the following:
Enter LDAP Password:
modifying entry "olcDatabase={0}bdb,cn=config"
ldap_modify: No such object (32)
matched DN: cn=config
This ...
1
vote
0answers
53 views
AIX auditing for LDAP users
I've discovered a problem with the way AIX uses auditclasses to determine which system calls are audited. If a user is defined in LDAP, their auditclasses attribute is blank. I found an APAR which ...
0
votes
2answers
312 views
Samba not working through AD
I'm trying to get a samba to work with a windows AD. And i can't use my shares through samba.
My smb.conf
#GLOBAL PARAMETERS
[global]
workgroup = MY_DOMAIN
realm = MY_DOMAIN.COM
preferred ...
1
vote
2answers
92 views
ldapsearch error “Invalid general option name” for every option
Whenever I try to use ldapsearch with a -o option I get the following error:
Invalid general option name:
An example command I am trying to run (taken from redhat documentation):
ldapsearch ...
0
votes
0answers
91 views
Need help configuring Fedora client authentication for 389 server with Kerberos
Trying to setup kerberos authentication with 389-ds and having trouble figuring out how the two fit together.
Here is my setup:
A CentOS 6 VM (centos01) where I setup bind, 389 ds, and kdc services
...
3
votes
1answer
246 views
Multiple PCs network centralized system authentication
(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.)
I own a dozen ...
0
votes
0answers
60 views
HP-UX Directory Server Question
I have been tasked with installing HP Directory server(HPDS) 8.1,64-bit as a single sign on LDAP solution in my test environment and subsequently other environments.I am new to this product
We are ...
2
votes
0answers
79 views
Samba passwords expiring in x days - how do we fix them to not expire
We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
1
vote
0answers
74 views
How to filter group membership from the ldap server?
Context : We have a Ubuntu 12.04 with authentication done on a ldap server.
Unfortunately, one (ldap) user belongs to a (ldap) group named "admin".
I know there is the option ...
1
vote
1answer
73 views
openldap: add auxiliary class
I want to add an auxiliary class to OpenLDAP. What exactly do I have to do?
I'm using Apache Directory Studio as editor.
I've added a new core schema with olcObjectClasses "testclass" and an ...
3
votes
0answers
856 views
Autofs doesn't mount shares on startup
I am using OpenSuSE 12.1 with homes shared through LDAP and NFS.
ldap stores the maps.
My problem is I can't have the shares mounted on boot. It's only working when restarting the autofs service ...
1
vote
0answers
46 views
error with slap.d while installing software
I am trying to install wireshark (this issue is not specific to wireshark) on my ubuntu box and I keep getting the following error for slap.d:
Setting up slapd (2.4.23-6ubuntu6.1) ...
Creating ...
0
votes
0answers
229 views
Segmentation fault while doing `sudo su -`
I am getting a segmentation fault error while doing sudo su - or sudo su - username in Linux Server (RHEL 4.7).
Can any one help me resolve this issue? Linux server (RHEL 4.7) is a LDAP client.
1
vote
1answer
259 views
Centos directory server / 389 directory server - any differences?
I have very broad view that Redhat Directory Server, 389 Directory Server and Centos Directory Server are all the same. It's just the support you pay for on the RedHat version.
Is this true? Are ...
1
vote
1answer
1k views
Connect to LDAP with cn=config in Debian Squeeze
How can I connect with an LDAP-Browser to a Debian Squeeze default openldap-installation? (It uses cn=config only).
1
vote
2answers
594 views
LDAP on openSUSE
I'm trying to run an LDAP server on a openSUSE 12. But I have a couple of doubts.
What I whant is this: testing.com with 2 OU (Info and People ). So the right way would be ou=Info,dc=testing,dc=com.
...
1
vote
1answer
249 views
Can't su root after editing PAM confiugration on Rackspace Linux box
I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...
2
votes
1answer
378 views
OpenLDAP Centos 6
I am trying to set up some ACLs (starting off with a simple userpassword ACL) on a new OpenLdap deployment.
I am trying to get to grips with the new conf.d configuration format - but am struggling. ...
3
votes
1answer
273 views
How do I add a local user to a box that uses LDAP authenticaiton?
I'm working with a box that uses LDAP for user authentication. However, I need to add a local user to run some services and I don't want non-person users junking up the LDAP directory. Does anyone ...
0
votes
0answers
216 views
apache ldap authentication taking far too long
I configured apache2.2 (CentOS 5.6) to provide ldap authentication with Active Directory.
<Directory "/var/www/html">
AuthType Basic
AuthName "Authenticate with domain ...
1
vote
3answers
2k views
Howto set access control lists ACLs in OpenLDAP
I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with ldapmodify? There's no slapd.conf file in Debian, they use a slapd.d folder
1
vote
1answer
6k views
doing OpenLDAP config changes in RHEL 6
I've been configuring OpenLDAP on RHEL 6 and its seems you have run the following to rebuild the config dirs. I'm ok with that, but my issues is, say I want to change the server passwd, do I have to ...
3
votes
2answers
441 views
Is Open LDAP meant to work with the passwd command for Linux?
I've implemented an Open LDAP server in OpenSuSE 11.2 via the YaST GUI. I'm having success logging in from the local machine and other machines via LDAP. I am able to change LDAP user passwords via
...
2
votes
1answer
179 views
Resource needed to manage cert.db7 files for AIX
On AIX to get LDAP authentication working it has wanted to store the LDAP SSL certificate's trusted root in a cert.db7 file. Mozilla stopped supporting it in NSS (Netscape Security Services) a while ...
3
votes
2answers
3k views
ldap_bind: Invalid credentials (49)
I'm trying to set up an openLdap server and after following the instructions I'm stuck at the point where I can't add any data.
The error I'm getting is
ldap_bind: Invalid credentials (49)
Please ...
4
votes
6answers
799 views
Identity Management with ActiveDirectory
What is the best, or most reliable, way to manage my Unix/Linux user accounts with ActiveDirectory? Or, is this even feasible?
1
vote
1answer
168 views
Mass update of /etc/ldap.secret
I have a group of servers authenticating against an LDAP server. I would like to be able to periodically update the /etc/ldap.secret file with an updated secret. I've written a small script that reads ...
6
votes
3answers
169 views
Setting up a unix powered network
I want to set up several computers on a LAN, all connecting to one unix server.
The primary goal being that the user accounts should only exist on the server. So that any user could access his normal ...
5
votes
2answers
991 views
How would you migrate from a Windows AD to a Linux LDAP server?
I currently run a Windows server with Active Directory. But since we're no longer using Exchange 2007, it became a fancy file server with authentication.
I would like to move the AD to a Linux ...
