the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

learn more… | top users | synonyms

5
votes
2answers
910 views

OpenLDAP Password Policy overlay error while loading

I'm trying to load the password policy overlay but i'm having the following error ldapadd -Wx -D "cn=Manager,cn=config" -f overlay.ldif Enter LDAP Password: adding new entry ...
4
votes
1answer
1k views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
2
votes
1answer
3k views

LDAP authentication broken with upgrade to CentOS 6.4 (sssd)

I have OpenLDAP server: @(#) $OpenLDAP: slapd 2.4.23 (Aug 8 2012 16:29:21) In my configuration have group: ldapsearch -x -b 'cn=groupname,ou=UnixShell,ou=Services,o=example,c=ru' # extended LDIF ...
1
vote
1answer
48 views

Do any openldap tools support the Authorization Identity Response Control?

I have a fedora 389 directory server and cannot use ldapwhoami because it is not supported. However, 389-ds does support the following controls which are supposed to offer similar functionality: ...
1
vote
1answer
187 views

How to filter group membership from the ldap server?

Context : We have a Ubuntu 12.04 with authentication done on a ldap server. Unfortunately, one (ldap) user belongs to a (ldap) group named "admin". I know there is the option ...
0
votes
1answer
96 views

phpldapadmin with STARTTLS

I'm trying to configure OpenLDAP on Ubuntu using the the Ubuntu server guide. I have enabled Start TLS with a certificate generated using my own CA certificate (since it is for internal use). I ...
-1
votes
1answer
490 views

SSH key based login bypasses password policies

I noticed that logins via an SSH key bypass the LDAP password policies (password ageing, password warning, and password lockout due to failed attempts, etc). Is there any way to force key-based ssh ...
4
votes
0answers
2k views

Autofs doesn't mount shares on startup

I am using OpenSuSE 12.1 with homes shared through LDAP and NFS. ldap stores the maps. My problem is I can't have the shares mounted on boot. It's only working when restarting the autofs service ...
3
votes
0answers
118 views

LDAP: view DIT structure from terminal

Can I get list of existing entries using any console utilities? For example - I can get a tree of my filesystem with tree: $ tree . ├── Catalina │   └── localhost │   ├── host-manager.xml │   ...
2
votes
0answers
26 views

ACL for a binddn user for PAM?

I've installed 389-ds and created a user and a couple groups. I then configured authconfig on a client to use the LDAP instance to authenticate the user. I've logged in successfully as that user. All ...
2
votes
0answers
32 views

Is it possible to login to a Linux machine with AD credentials without the machine beeing member of the AD?

I'm asking because as far as I know this is not possible with Windows machines since it's mandatory that a Windows machine is known to the AD in order to login with AD credentials. Is it possible to ...
2
votes
0answers
815 views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
2
votes
0answers
125 views

OpenLDAP error while adding an ACL

I'm trying to add an ACL to my DIT and I get the following: Enter LDAP Password: modifying entry "olcDatabase={0}bdb,cn=config" ldap_modify: No such object (32) matched DN: cn=config This ...
1
vote
0answers
40 views

How to configure postfix to send mail to external SMTP server?

I have a machine with http://phabricator.org/ set up on it and I would like to set up postfix to enable e-mail sending to my company's mailboxes (as for notification emails coming from e.g. ...
1
vote
0answers
124 views

postfix expand ldap group AND afterwards resolve alias

We have a postfix server which has the user config stored in a openldap directory. Recently we also implemented ldap groups which are expanded by postfix. This works fine, unless the group expands to ...
1
vote
0answers
23 views

Can a RHEL 6.4 DS sync with a CentOS 5.4 DS

I have two CentOS 5.4 Directory Servers that sync information on a daily bases. I'm wanting to replace them with two RHEL 6.4 Directory Servers. Before the existing two are decommissioned all four ...
1
vote
0answers
217 views

how to set up ldap and trac

I have set up kerberos authentication with trac which works well. Now I want to use AD groups and users for trac permissions using the trac plugin Configuration for LdapPlugin. I have been following ...
1
vote
0answers
92 views

RHEL6 LDAP client not listing all the groups

Using sssd I have a RHEL6 client configured to login using LDAPS. The login works, but if the user logged in is assigned to more than 1 group at the LDAP level, groups only returns 1 group? Could I ...
1
vote
0answers
168 views

AIX auditing for LDAP users

I've discovered a problem with the way AIX uses auditclasses to determine which system calls are audited. If a user is defined in LDAP, their auditclasses attribute is blank. I found an APAR which ...
1
vote
0answers
64 views

error with slap.d while installing software

I am trying to install wireshark (this issue is not specific to wireshark) on my ubuntu box and I keep getting the following error for slap.d: Setting up slapd (2.4.23-6ubuntu6.1) ... Creating ...
0
votes
0answers
8 views

While trying to ssh, pam_ldap always sends the password “INCORRECT” causing bind to fail

I installed ldap-auth-client nscd ldap-utils on lubuntu 14.04 running on a banana pi. I can successfully bind as the user using ldapwhoami, but I cannot log in via ssh: Auth.log: Oct 21 02:12:05 ...
0
votes
0answers
82 views

ldap user dose not exist in centos 6.5

Hope everyone doing good. Let me come to point, i have setup-ed a LDAP server and client machines Server works perfect, while make a search from client machine it too get the Query from LDAP server, ...
0
votes
0answers
40 views

Authenticating To Multiple LDAP Servers

Owing to a corporate strategy I am moving human user authentication from an implementation of LDAP locally to a centralized Active Directory domain. The problem is that we have a tightly constrained ...
0
votes
0answers
35 views

Mirror mode openldap perfromance is slow when either mirrored node fails

I'm managing two openldap servers in mirrored mode. When either server fails ldap performs poorly, 30 seconds to several minutes to authenticate. Affected services include ssh and X11 (XDMCP). A ...
0
votes
0answers
36 views

Uninstalling LDAP on Fedora

I'm attempting to maintain a legacy collection of Fedora VMs, all configured to a old LDAP server. However, it's very touchy, and whenever the VM running the LDAP server is slow or unresponsive for ...
0
votes
0answers
103 views

Setting up Kolab Mail Server on Cent OS. The port number '389' is not available for use error?

I use: setup-kolab and all goes well , except an error is returned: The port number '389' is not avaialble for use. This may be due to an invalid port number, or port already being in use by another ...
0
votes
0answers
2k views

Mounting NFS share from Linux client on Windows domain

I've got a client (Ubuntu 13.10) joined to a Windows domain through PBIS/Likewise, serving Samba shares and allowing domain users to login with domain credentials. Outside of the Windows domain, ...
0
votes
0answers
32 views

LDAP Server under Debian vs LDAP Server under Red Hat

i have read about Red Hat Directory Server: Red Hat released a directory service, that it acquired from AOL's Netscape Security Solutions unit,[1] as a commercial product running on top of ...
0
votes
0answers
85 views

Postfix mail how to debug transmission to mail handling agent

I have a postfix server running on Ubuntu (and Debian previously). The server is configured to read users and groups from an OpenLDAP server and delivers mail first the spam filter and then to a ...
0
votes
0answers
246 views

Override LDAP login shell for a specific user in RHEL

How in RHEL do I specify /sbin/nologin shell to limit a user to SFTP access only when their shell is determined by their LDAP profile? chsh only works with passwd file users I believe.
0
votes
0answers
229 views

How to get all ldap groups for a user

I have no direct access to LDAP, but I am a user in LDAP and can make queries using ldapsearch. How can I query LDAP to get all LDAP groups for a particular user? Also is there an easy way to get ...
0
votes
0answers
51 views

trac ldapplugin ERROR: LDAP error: Operations error

on version 0.10.4 on centos 32 bit using python 2.4 i am trying to install and use ldaplugin to assign permissions to users and groups in AD. i have followed this guide ...
0
votes
0answers
486 views

Segmentation fault while doing `sudo su -`

I am getting a segmentation fault error while doing sudo su - or sudo su - username in Linux Server (RHEL 4.7). Can any one help me resolve this issue? Linux server (RHEL 4.7) is a LDAP client.