the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

learn more… | top users | synonyms

0
votes
0answers
11 views

How do keberos, an ldap server, samba, and linux / unix file permission acls work together? [on hold]

There's alot of scattered documentation about these, but I'm trying to determine how these might work together. Is it possible to have Samba as your Domain Controller, with Samba file sharing ...
0
votes
0answers
4 views

smbldap-tools + Samba 3.6.X - 2 groups exists

In a big corporation, there is several groups encoded in different domains on the same LDAP server. The server is member of the DOM1. root@testsmb3# smbldap-groupmod -m myUser myGroup Error: 2 ...
1
vote
0answers
18 views

Samba NT_STATUS_NO_TRUST_SAM_ACCOUNT

for a project we have several samba shares configured as following: [global] workgroup = <domain name> netbios name = <machine name> passdb backend = tdbsam security = ads ...
3
votes
1answer
20 views

getent group working, but sshd_config allowgroups does not retrieve appropriate group

I am trying to setup Kerberos MIT authentication with OpenLdap autorisation on Debian Jessie. Authentication part is working great, as I can login to SSH using my kerberos account. I even can create ...
1
vote
0answers
24 views

Strange X11 forwarding issue [closed]

I have a strange issue regarding ssh x11 forwarding. Assume I have an host named node71. Firstly, I start Cygwin/X and mintty in Windows, now the local DISPLAY=0.0 Next, I can do ssh root@node71 -Y, ...
5
votes
1answer
9k views

Openldap backup restore

I am trying to setup backup and restore and make sure it works. Please note that database size on ldap.old is lot more then the ldap. The /var/lib/ldap.old is my existing database. I have renamed ...
0
votes
0answers
33 views

LDAP Authentication

I'm currently trying to set up an LDAP server for centralized authentication. I set up phpLDAPadmin and my structure is as follows: dc=example,dc=com cn=admin ou=users cn=system cn=testuser ...
13
votes
4answers
950 views

Groups differ from the local ones when logging in remotely

We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
0
votes
0answers
7 views

Unable to add host for user in LDAP

I tried to add hostobject for my user in LDAP setup but after typing in all the information and save, the host was not added to the user. Command I used: ldapmodify -x -D ...
0
votes
0answers
11 views

Samba with several LDAP servers

Is it possible for SAMBA to use several LDAP servers to authenticate users in addition to users from AD? LDAP can have, presumably, different bases to lookup users for.
0
votes
0answers
18 views

Autofs : Multi LDAP

I prepare the migration NIS to LDAP maps. I use autofs for mount nfs directory. ( User home & /usr/local/xxx ) To work with 1 ldap server but i would set to backup server. I test this : cat ...
0
votes
0answers
24 views

Mount network share at user logon Red Hat

I'm looking to mount a network share on Red Hat at the time the user logs on with their credentials. The user authenticates through LDAP using Kerberos and we have a network share that holds their ...
3
votes
1answer
66 views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
0
votes
1answer
19 views

How can I disable phpLDAPadmin without uninstalling it?

I installed phpLDAPadmin and it works via http://.../phpldapadmin Is there any good way to disable phpLDAPadmin without uninstalling it and later I can turn it on only when I need to do?
0
votes
0answers
37 views

linux + vastool + print password by vastool

please advice how to print the password from active directory ( LDAP ) of specific user by vastool ? user=admin1 /opt/quest/bin/vastool Copyright 2014 Quest Software, Inc. ALL RIGHTS RESERVED. ...
0
votes
0answers
33 views

authenticating ldap users with searchguard for elasticsearch

I have an elastic-search setup with search-guard plug-in. My elastic-search web access is behind single sign on proxy , and i want to authenticated users coming through SSO according to their roles in ...
1
vote
0answers
22 views

SLES 11SP4 LDAP - error trying to bind as user - (Invalid credentials)

I have LDAP server configured (with YaST) on SLES 11SP4 and I've created 3 users. I can su (from root) to any of the user but I cannot login as any of them or change their passwords. When I tried to ...
2
votes
0answers
32 views

ldap 389 server with sssd client, cannot modify password

I setup the 389 ldap server on a fedora system. I can authenticate against the system, but I cannot update/modify a password neither as root nor as user. user root gets a "Password reset by root is ...
0
votes
1answer
204 views

IPA server configuration: Cannot use IP network address

I am stuck with an error while configuring IdM server for my environment. I got this weird error invalid ip address 192.168.1.77 for server.example.com: cannot use ip network address The error came ...
3
votes
0answers
26 views

Changing LDAP server preference on Solaris 10

I've recently inherited a new environment running Solaris 10 and I was looking for information on how to change the LDAP server preference on an LDAP client, namely through modifying the ...
0
votes
0answers
16 views

Can Linux ldap users still available if ldap server is unlinked?

I have a Linux with some users have their password in /etc/shadow and other authenticate through LDAP. Is there a way to make user that have their password stored on ldap continuing to be available ...
2
votes
1answer
24 views

Postfix database unreachable behaviour

I have a server running postfix and dovecot with a local mysql database to store virtual domains and users. I'm considering to move the database to another server and perhaps switch to using ldap ...
0
votes
0answers
37 views

freerdp & ldap authentication

I have a linux desktop machine that authenticates upon login against an MS Active Directory Server using sssd. I wish to allow the user to run a remote desktop session and have setup freerdp to ...
-1
votes
1answer
33 views

Linux + LDAP/ActiveDirectory: Can't create a private group for the user like “username:username”

My apologies first for not phrasing this question very well, because it's difficult to Google. (Try finding a Google answer with the terms "self user group" in it.) Normally, with PAM in Linux, when ...
3
votes
2answers
696 views

Multiple PCs network centralized system authentication

(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.) I own a dozen ...
1
vote
1answer
29 views

Migrate LDAP from one machine to another

My current task is to migrate the content from one machine (source) to another (target). Both machines are identical. One is heavily used and the other is clean. I already have all the files that are ...
2
votes
1answer
945 views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...
0
votes
0answers
13 views

LDAP/LDIF configuration option storage?

A LDAP server/database seems like a good solution for centralized/server-side as well as non-centralized/client-side configuration option storage to me: open, well-documented interface and interface ...
1
vote
1answer
34 views

Thunderbird no longer starts after upgrade to 38.3.0

After I upgraded Thunderbird last Monday to version 38.3.0 on my Mint 17.2 XFce I was no longer able to start Thunderbird. First I made sure that the files in my profile were all owned by me. When ...
1
vote
2answers
256 views

How can I set up centralized home directories and user authentication using LDAP and NFS?

I am trying to configure my server to authenticate users using LDAP and save their home directories on a NFS-Directory, also located on the server. i.e.: I share a directory on my server: /nfsexport ...
4
votes
1answer
5k views

Why am I getting apparmor error messages in the syslog about NTP and LDAP?

On my newly installed Ubuntu 12.04 machine, with ntp and slapd installed, the following messages appear in /var/log/syslog at regular intervals: Feb 23 18:54:07 my-host kernel: [ 24.610703] ...
0
votes
2answers
71 views

Configuring MSAD in RHEL [closed]

We are trying to configure MSAD in our LINUX VM(RHEL).So that users can login with there accounts directly to the LINUX VM(RHEL) instead of using service accounts.Can someone help me out here ? ...
0
votes
1answer
95 views

acroread only runs as root

Note I already asked the exact same question here, with no success. I hope it's not a problem. I am working on a computer connected to a LDAP server. The computer is running under Linux Mint 17. I ...
0
votes
0answers
55 views

Doesn't these program respect nsswitch?

I've set up LDAP and nsswitch on ubuntu and to some extent it seem to work. For example getent passwd lists accounts from both /etc/passwd and LDAP server. However for example id <user>, sudo ...
0
votes
2answers
698 views

what is the right ldapsearch version for my linux red-hat machine

I am little a confused about the following: I want to install the binary ldapsearch tool on my Linux machine, in order to use this tool to test LDAP connections with my Linux (Linux version 5.8 , ...
0
votes
1answer
63 views

ldappassword for user without ldap password prompt

I installed pam,nss and ldap authentication. I have two rule host : 183 -- installed openldap server, 123-- installed openldap client. my ldap system works fine. But What i want to do is: when I ...
0
votes
0answers
130 views

why md5 encrypted password insert into php ldap admin extra {md5}

I am using python script to inter encrypted password into php ldap admin but the problem I am facing is LDAP add extra {md5} before the encrypted password, I simulated the code by creating two files ...
1
vote
1answer
562 views

openldap supplementary groups not showing up on certain servers

I have a couple of servers that fail to display newly added supplementary groups. For example, I have a user which you run id and his groups come up. id <username> groupblah, groupblahblah ...
1
vote
0answers
22 views

read-only ldap client setup

I have a Debian Linux box hosted on the cloud that I want to provide mail services with (Postfix/Dovecot). I want it to access my openLDAP server at home for authentication and to provide users email ...
5
votes
2answers
12k views

Sudo permissions by ldap groups via nslcd

I have a problem with my sudo permissions in an MS ActiveDirectory to Debian LDAP authentication/authorization setup. What I have so far I've configured nslcd with libpam-ldap via ldaps and ssh login ...
1
vote
2answers
357 views

Trying to install a cluster, DHCP failing to start

Trying to install a linux cluster using this tutorial. I am running CentOS 6.3. When I try to start DHCP with service dhcpd start, it fails. I've used tail -f /var/log/messages and dhcpd -t, but I ...
0
votes
0answers
49 views

SASL fails to with against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
0
votes
1answer
29 views

OS X Directory Services

I have been reading from Advanced Programming in the UNIX environment (Stevenson and Rago), and I am currently reading about how user data is stored on various systems, including Linux, FreeBSD, and ...
1
vote
1answer
626 views

Allow username input sddm (LDAP/Kerberos)

The overarching question: How can I enable SDDM to accept username input in Debian? Underlying/implicit questions: How does SDDM recognize users? What is the Debian alternative to ...
2
votes
2answers
345 views

Restarting LDAP client service

I have modified ldap.conf and slapd.conf. I'm wondering how I can restart the ldap/client service, filesystem/autofs and name-service/cache. OS: Solaris 11 but advice on linux should help too
0
votes
1answer
53 views

Relationship between limits.conf and LDAP?

This seems like a straight forward question: Is there a relationship between the groups defined in ldap ldif files and /etc/security/limits.conf ? I.e., does defining an LDAP user with ...
0
votes
2answers
341 views

OpenLDAP: How to add home directory for users?

I am experimenting with an OpenLDAP-Server and I'm not sure how to add /home directories for users. Also where are the files stored? If a user creates a file on a Windows machine in the domain, where ...
1
vote
1answer
101 views

How can I run unattended processes as authenticated AD/LDAP users?

I'm switching some servers over to Debian 8 and using realmd for Active Directory (LDAP/Kerberos) authentication. This has been working great and allows Domain Users to login to my server, etc. ...
0
votes
0answers
55 views

LDAP replication issues (duplication)

I initially thought this question might be more appropriate for SO, however as I believe it's more of a configuration problem I have posted it here. I'm running LDAP 2.4 on RHEL 6.4. I have 2 LDAP ...
0
votes
1answer
534 views

OpenLDAP: Invalid syntax error when trying to add LDIF

I keep getting an invalid syntax error when trying to create a user in OpenLDAP (CentOS 7). This is a new install of OpenLDAP for testing purposes. So far I've managed to create a group called "Lab ...