the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

learn more… | top users | synonyms

20
votes
4answers
593 views

Linux solution for schools?

The school I'm working for as an administrator requested a system upgrade. Currently we are using a government-suggested Linux distribution called SuliXerver - it would be great, but most of the admin ...
11
votes
4answers
659 views

Groups differ from the local ones when logging in remotely

We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
7
votes
3answers
194 views

Setting up a unix powered network

I want to set up several computers on a LAN, all connecting to one unix server. The primary goal being that the user accounts should only exist on the server. So that any user could access his normal ...
6
votes
2answers
3k views

How would you migrate from a Windows AD to a Linux LDAP server?

I currently run a Windows server with Active Directory. But since we're no longer using Exchange 2007, it became a fancy file server with authentication. I would like to move the AD to a Linux ...
5
votes
1answer
1k views

Using LDAP for authentication, how can I safely disable/deactivate an account without deleting it?

We use LDAP for authentication for thousands of users. The primary tactic we have been employing to make a user unable to login, without removing their account, is to change the LDAP attribute ...
5
votes
1answer
2k views

Changing password in multiple boxes using script

I'm working in a environment which has around 400 AIX boxes. I don't have root access and I'm a normal user. The environment has no LDAP kind of centralized mechanism for authentication so the ...
5
votes
2answers
995 views

OpenLDAP Password Policy overlay error while loading

I'm trying to load the password policy overlay but i'm having the following error ldapadd -Wx -D "cn=Manager,cn=config" -f overlay.ldif Enter LDAP Password: adding new entry ...
4
votes
2answers
868 views

How do I create a hierarchy of UNIX groups as below?

I need to create a hierarchy of UNIX groups. Something like below: A |\ | \ B c |\ D e |\ f g ...where A, B and D are UNIX groups and c,e,f and g are UNIX accounts that are members of those ...
4
votes
6answers
978 views

Identity Management with ActiveDirectory

What is the best, or most reliable, way to manage my Unix/Linux user accounts with ActiveDirectory? Or, is this even feasible?
4
votes
1answer
971 views

Sudo permissions by ldap groups via nslcd

I have a problem with my sudo permissions in an MS ActiveDirectory to Debian LDAP authentication/authorization setup. What I have so far I've configured nslcd with libpam-ldap via ldaps and ssh login ...
4
votes
1answer
1k views

Why am I getting apparmor error messages in the syslog about NTP and LDAP?

On my newly installed Ubuntu 12.04 machine, with ntp and slapd installed, the following messages appear in /var/log/syslog at regular intervals: Feb 23 18:54:07 my-host kernel: [ 24.610703] ...
4
votes
3answers
1k views

Restrict ssh login from LDAP to users who have a /home directory

I have an Apache server (RHEL 6) hosting multiple user web pages which currently is connected to my Active Directory environment to authenticate users. The server is used to automatically host content ...
4
votes
1answer
1k views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
4
votes
0answers
2k views

Autofs doesn't mount shares on startup

I am using OpenSuSE 12.1 with homes shared through LDAP and NFS. ldap stores the maps. My problem is I can't have the shares mounted on boot. It's only working when restarting the autofs service ...
3
votes
2answers
802 views

Is Open LDAP meant to work with the passwd command for Linux?

I've implemented an Open LDAP server in OpenSuSE 11.2 via the YaST GUI. I'm having success logging in from the local machine and other machines via LDAP. I am able to change LDAP user passwords via ...
3
votes
1answer
5k views

Openldap backup restore

I am trying to setup backup and restore and make sure it works. Please note that database size on ldap.old is lot more then the ldap. The /var/lib/ldap.old is my existing database. I have renamed ...
3
votes
1answer
569 views

mod_authnz_ldap bind as authenticating user instead of anonymously

I'm attempting to move as close to single credential as possible. We have a web application that has a fairly limited set of available authentication mechanisms but will (luckily) allow admins to tell ...
3
votes
2answers
5k views

ldap_bind: Invalid credentials (49)

I'm trying to set up an openLdap server and after following the instructions I'm stuck at the point where I can't add any data. The error I'm getting is ldap_bind: Invalid credentials (49) Please ...
3
votes
1answer
3k views

LDAP authentication broken with upgrade to CentOS 6.4 (sssd)

I have OpenLDAP server: @(#) $OpenLDAP: slapd 2.4.23 (Aug 8 2012 16:29:21) In my configuration have group: ldapsearch -x -b 'cn=groupname,ou=UnixShell,ou=Services,o=example,c=ru' # extended LDIF ...
3
votes
2answers
4k views

How to make ldapsearch working on SLES over tls using certificate?

We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here ...
3
votes
1answer
2k views

Failed to start slapd in CentOS

I was trying to setup an LDAP server for my development. For this purpose, I have chose CentOS 6.3 install it in VirtualBox host in Fedora 17. I'm following this tutorial to guide me on this setup, ...
3
votes
1answer
447 views

Multiple PCs network centralized system authentication

(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.) I own a dozen ...
3
votes
0answers
124 views

LDAP: view DIT structure from terminal

Can I get list of existing entries using any console utilities? For example - I can get a tree of my filesystem with tree: $ tree . ├── Catalina │   └── localhost │   ├── host-manager.xml │   ...
3
votes
1answer
858 views

How do I add a local user to a box that uses LDAP authenticaiton?

I'm working with a box that uses LDAP for user authentication. However, I need to add a local user to run some services and I don't want non-person users junking up the LDAP directory. Does anyone ...
2
votes
1answer
658 views

Home Directories and pam.d using LDAP

Background: I'm not too familiar with the ins and outs of pam and LDAP authentication on a configuration side. I've used systems that use pam but I've only worked on applications, not systems ...
2
votes
1answer
456 views

How do I reset RHEL6 to autocreate home directory upon login?

I am using a RHEL6 host that is set up using LDAP for authenication. Upon first login it is supposed to create the home directory for the user (e.g. /home/gisle where gisle is my login username). I ...
2
votes
1answer
1k views

How do find the LDAP connection details that the Solaris box uses to authenticate users?

The Solaris box is configured to use LDAP and has no local user accounts. This is the output of the nsswitch.conf file: bash-3.2$ less /etc/nsswitch.conf passwd: files [NOTFOUND=continue] ldap ...
2
votes
1answer
494 views

OpenLDAP Centos 6

I am trying to set up some ACLs (starting off with a simple userpassword ACL) on a new OpenLdap deployment. I am trying to get to grips with the new conf.d configuration format - but am struggling. ...
2
votes
1answer
57 views

How to disconnect a server from LDAP

I have a Fedora server configured for LDAP. However, the LDAP server is gone, and now I'm unable to SSH into it. I've rebooted the server into single-user mode, brought up eth0 and started sshd, but ...
2
votes
1answer
370 views

Problem setting up iptables (LDAP traffic blocked)

My application server is on a network protected by a organization wide firewall, and my server is also using fail2ban. That said, I'd like to set up an additional layer of protection with iptables. ...
2
votes
1answer
39 views

The importance of the order in domain controler names for setting an LDAP server, is there any reason?

I wonder if there is any reason to speficically put the domain controlers in the proper order, when configurung a LDAP server using autofs. For example if specify on a RedHat/CentOS the dc domain ...
2
votes
2answers
137 views

Browse LDAP strcuture using Solaris pre-packaged command?

I have used ldapsearch to pull details on accounts but is there a way to browse the different levels in the LDAP directory just like we do with files in a directory?
2
votes
1answer
636 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
2
votes
1answer
206 views

Resource needed to manage cert.db7 files for AIX

On AIX to get LDAP authentication working it has wanted to store the LDAP SSL certificate's trusted root in a cert.db7 file. Mozilla stopped supporting it in NSS (Netscape Security Services) a while ...
2
votes
0answers
33 views

How does ldap work on a client?

This is on CentOS I read the various openldap howto's, they mention /etc/openldap/ldap.conf and editing /etc/nsswitch.conf for example: ...
2
votes
0answers
37 views

ACL for a binddn user for PAM?

I've installed 389-ds and created a user and a couple groups. I then configured authconfig on a client to use the LDAP instance to authenticate the user. I've logged in successfully as that user. All ...
2
votes
0answers
33 views

Is it possible to login to a Linux machine with AD credentials without the machine beeing member of the AD?

I'm asking because as far as I know this is not possible with Windows machines since it's mandatory that a Windows machine is known to the AD in order to login with AD credentials. Is it possible to ...
2
votes
0answers
905 views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
2
votes
0answers
132 views

OpenLDAP error while adding an ACL

I'm trying to add an ACL to my DIT and I get the following: Enter LDAP Password: modifying entry "olcDatabase={0}bdb,cn=config" ldap_modify: No such object (32) matched DN: cn=config This ...
2
votes
1answer
150 views

openldap: add auxiliary class

I want to add an auxiliary class to OpenLDAP. What exactly do I have to do? I'm using Apache Directory Studio as editor. I've added a new core schema with olcObjectClasses "testclass" and an ...
1
vote
1answer
39 views

basic explanation on NSS , LDAP and PAM

can anyone give me a basic explanation on what are NSS , LDAP and PAM and what they used for and what is their relationship/differences ?
1
vote
1answer
7k views

doing OpenLDAP config changes in RHEL 6

I've been configuring OpenLDAP on RHEL 6 and its seems you have run the following to rebuild the config dirs. I'm ok with that, but my issues is, say I want to change the server passwd, do I have to ...
1
vote
1answer
232 views

LDAP: ldapadduser - can I add to two different groups?

Usually - ldapadduser assumes only one attribute for group-name: # ldapadduser sysuser2 sysusers Can I add add this users in to two groups while creating user? If I try run like: # ldapadduser ...
1
vote
4answers
3k views

Howto set access control lists ACLs in OpenLDAP

I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with ldapmodify? There's no slapd.conf file in Debian, they use a slapd.d folder
1
vote
1answer
17 views

text based tool for ldap queries

I need a way to do LDAP queries through a text based interface. I use jXplorer on my own machine but that is a graphical client. Btw, I'm running Ubuntu server 14.04. The background: A server in my ...
1
vote
1answer
78 views

Authenticate users via LDAP using nginx

I know how to auth the users via LDAP in apache2: # put the following in the VirtualHost <VirtualHost *:443> ServerAdmin user1@bar.foo.com DocumentRoot /var/www <Directory ...
1
vote
1answer
35 views

How to disallow usage of an LDAP root account

I am responsible for a couple of servers at my university. All of these machines are configured to talk to the LDAP server of my departement to allow centralised user logins. On this LDAP server there ...
1
vote
1answer
55 views

Given a domain-controlled group, how can I get its domain?

I'm working on an application which collects data on groups. In my application I need to collect data and the residing users of local groups and send meta-data on domain-controlled groups. My ...
1
vote
1answer
103 views

OpenLDAP: how can I list active schemes, classes etc?

I'm using openldap-server-2.4.38_1 on FreeBSD 9.1-RELEASE-p5. 1) can I get list of active (connected) schemes without viewing slapd.conf file? 2) how can I get description of obectClasses and/or ...
1
vote
1answer
352 views

Can't su root after editing PAM confiugration on Rackspace Linux box

I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...