the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

learn more… | top users | synonyms

20
votes
5answers
888 views

Linux solution for schools?

The school I'm working for as an administrator requested a system upgrade. Currently we are using a government-suggested Linux distribution called SuliXerver - it would be great, but most of the admin ...
13
votes
4answers
977 views

Groups differ from the local ones when logging in remotely

We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
9
votes
3answers
207 views

Setting up a unix powered network

I want to set up several computers on a LAN, all connecting to one unix server. The primary goal being that the user accounts should only exist on the server. So that any user could access his normal ...
7
votes
2answers
2k views

OpenLDAP Password Policy overlay error while loading

I'm trying to load the password policy overlay but i'm having the following error ldapadd -Wx -D "cn=Manager,cn=config" -f overlay.ldif Enter LDAP Password: adding new entry "olcOverlay=ppolicy,...
6
votes
2answers
4k views

How would you migrate from a Windows AD to a Linux LDAP server?

I currently run a Windows server with Active Directory. But since we're no longer using Exchange 2007, it became a fancy file server with authentication. I would like to move the AD to a Linux server....
5
votes
6answers
1k views

Identity Management with ActiveDirectory

What is the best, or most reliable, way to manage my Unix/Linux user accounts with ActiveDirectory? Or, is this even feasible?
5
votes
1answer
6k views

Why am I getting apparmor error messages in the syslog about NTP and LDAP?

On my newly installed Ubuntu 12.04 machine, with ntp and slapd installed, the following messages appear in /var/log/syslog at regular intervals: Feb 23 18:54:07 my-host kernel: [ 24.610703] type=...
5
votes
1answer
1k views

Adding a system user to an LDAP group with SSSD

Our LDAP server is running RFC 2307 groups (memberuid contains a username, not a DN). With our old nscd/nss_ldap/pam_ldap setup, you could list a non-LDAP user (a system user from /etc/passwd) in an ...
5
votes
2answers
13k views

Sudo permissions by ldap groups via nslcd

I have a problem with my sudo permissions in an MS ActiveDirectory to Debian LDAP authentication/authorization setup. What I have so far I've configured nslcd with libpam-ldap via ldaps and ssh login ...
5
votes
1answer
10k views

Openldap backup restore

I am trying to setup backup and restore and make sure it works. Please note that database size on ldap.old is lot more then the ldap. The /var/lib/ldap.old is my existing database. I have renamed /...
5
votes
1answer
3k views

Using LDAP for authentication, how can I safely disable/deactivate an account without deleting it?

We use LDAP for authentication for thousands of users. The primary tactic we have been employing to make a user unable to login, without removing their account, is to change the LDAP attribute "...
5
votes
1answer
4k views

Changing password in multiple boxes using script

I'm working in a environment which has around 400 AIX boxes. I don't have root access and I'm a normal user. The environment has no LDAP kind of centralized mechanism for authentication so the ...
5
votes
3answers
3k views

Restrict ssh login from LDAP to users who have a /home directory

I have an Apache server (RHEL 6) hosting multiple user web pages which currently is connected to my Active Directory environment to authenticate users. The server is used to automatically host content ...
5
votes
1answer
4k views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
5
votes
0answers
2k views

Autofs doesn't mount shares on startup

I am using OpenSuSE 12.1 with homes shared through LDAP and NFS. ldap stores the maps. My problem is I can't have the shares mounted on boot. It's only working when restarting the autofs service ...
4
votes
2answers
2k views

How do I create a hierarchy of UNIX groups as below?

I need to create a hierarchy of UNIX groups. Something like below: A |\ | \ B c |\ D e |\ f g ...where A, B and D are UNIX groups and c,e,f and g are UNIX accounts that are members of those ...
4
votes
2answers
10k views

How to make ldapsearch working on SLES over tls using certificate?

We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here http://stackoverflow.com/questions/15260252/how-to-use-multiple-tls-...
4
votes
1answer
150 views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
3
votes
4answers
8k views

Howto set access control lists ACLs in OpenLDAP

I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with ldapmodify? There's no slapd.conf file in Debian, they use a slapd.d folder
3
votes
1answer
837 views

basic explanation on NSS , LDAP and PAM

can anyone give me a basic explanation on what are NSS , LDAP and PAM and what they used for and what is their relationship/differences ?
3
votes
2answers
6k views

Authenticate users via LDAP using nginx

I know how to auth the users via LDAP in apache2: # put the following in the VirtualHost <VirtualHost *:443> ServerAdmin user1@bar.foo.com DocumentRoot /var/www <Directory /&...
3
votes
2answers
1k views

Is Open LDAP meant to work with the passwd command for Linux?

I've implemented an Open LDAP server in OpenSuSE 11.2 via the YaST GUI. I'm having success logging in from the local machine and other machines via LDAP. I am able to change LDAP user passwords via ...
3
votes
1answer
66 views

getent group working, but sshd_config allowgroups does not retrieve appropriate group

I am trying to setup Kerberos MIT authentication with OpenLdap autorisation on Debian Jessie. Authentication part is working great, as I can login to SSH using my kerberos account. I even can create ...
3
votes
1answer
7k views

Home Directories and pam.d using LDAP

Background: I'm not too familiar with the ins and outs of pam and LDAP authentication on a configuration side. I've used systems that use pam but I've only worked on applications, not systems ...
3
votes
1answer
4k views

mod_authnz_ldap bind as authenticating user instead of anonymously

I'm attempting to move as close to single credential as possible. We have a web application that has a fairly limited set of available authentication mechanisms but will (luckily) allow admins to tell ...
3
votes
2answers
1k views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
3
votes
2answers
8k views

ldap_bind: Invalid credentials (49)

I'm trying to set up an openLdap server and after following the instructions I'm stuck at the point where I can't add any data. The error I'm getting is ldap_bind: Invalid credentials (49) Please ...
3
votes
1answer
3k views

LDAP authentication broken with upgrade to CentOS 6.4 (sssd)

I have OpenLDAP server: @(#) $OpenLDAP: slapd 2.4.23 (Aug 8 2012 16:29:21) In my configuration have group: ldapsearch -x -b 'cn=groupname,ou=UnixShell,ou=Services,o=example,c=ru' # extended LDIF #...
3
votes
1answer
5k views

Failed to start slapd in CentOS

I was trying to setup an LDAP server for my development. For this purpose, I have chose CentOS 6.3 install it in VirtualBox host in Fedora 17. I'm following this tutorial to guide me on this setup, ...
3
votes
2answers
739 views

Multiple PCs network centralized system authentication

(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.) I own a dozen ...
3
votes
0answers
48 views

Changing LDAP server preference on Solaris 10

I've recently inherited a new environment running Solaris 10 and I was looking for information on how to change the LDAP server preference on an LDAP client, namely through modifying the ...
3
votes
0answers
265 views

LDAP: view DIT structure from terminal

Can I get list of existing entries using any console utilities? For example - I can get a tree of my filesystem with tree: $ tree . ├── Catalina │   └── localhost │   ├── host-manager.xml │   ...
3
votes
0answers
2k views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
3
votes
1answer
2k views

How do I add a local user to a box that uses LDAP authenticaiton?

I'm working with a box that uses LDAP for user authentication. However, I need to add a local user to run some services and I don't want non-person users junking up the LDAP directory. Does anyone ...
2
votes
2answers
520 views

Restarting LDAP client service

I have modified ldap.conf and slapd.conf. I'm wondering how I can restart the ldap/client service, filesystem/autofs and name-service/cache. OS: Solaris 11 but advice on linux should help too
2
votes
1answer
541 views

LDAP: ldapadduser - can I add to two different groups?

Usually - ldapadduser assumes only one attribute for group-name: # ldapadduser sysuser2 sysusers Can I add add this users in to two groups while creating user? If I try run like: # ldapadduser ...
2
votes
1answer
2k views

text based tool for ldap queries

I need a way to do LDAP queries through a text based interface. I use jXplorer on my own machine but that is a graphical client. Btw, I'm running Ubuntu server 14.04. The background: A server in my ...
2
votes
1answer
1k views

Problem setting up iptables (LDAP traffic blocked)

My application server is on a network protected by a organization wide firewall, and my server is also using fail2ban. That said, I'd like to set up an additional layer of protection with iptables. ...
2
votes
1answer
901 views

How do I reset RHEL6 to autocreate home directory upon login?

I am using a RHEL6 host that is set up using LDAP for authenication. Upon first login it is supposed to create the home directory for the user (e.g. /home/gisle where gisle is my login username). I ...
2
votes
1answer
4k views

How do find the LDAP connection details that the Solaris box uses to authenticate users?

The Solaris box is configured to use LDAP and has no local user accounts. This is the output of the nsswitch.conf file: bash-3.2$ less /etc/nsswitch.conf passwd: files [NOTFOUND=continue] ldap ...
2
votes
1answer
9k views

samba with OpenLDAP - NT_STATUS_NO_SUCH_USER

To start off, shit's about to hit the fan and i need your help! I'm so short of time that i can't begin to describe everything i've done and not done, but i have a problem and hope you can help! ...
2
votes
1answer
561 views

OpenLDAP Centos 6

I am trying to set up some ACLs (starting off with a simple userpassword ACL) on a new OpenLdap deployment. I am trying to get to grips with the new conf.d configuration format - but am struggling. ...
2
votes
1answer
26 views

Postfix database unreachable behaviour

I have a server running postfix and dovecot with a local mysql database to store virtual domains and users. I'm considering to move the database to another server and perhaps switch to using ldap ...
2
votes
1answer
194 views

How to disconnect a server from LDAP

I have a Fedora server configured for LDAP. However, the LDAP server is gone, and now I'm unable to SSH into it. I've rebooted the server into single-user mode, brought up eth0 and started sshd, but ...
2
votes
1answer
47 views

The importance of the order in domain controler names for setting an LDAP server, is there any reason?

I wonder if there is any reason to speficically put the domain controlers in the proper order, when configurung a LDAP server using autofs. For example if specify on a RedHat/CentOS the dc domain ...
2
votes
2answers
209 views

Browse LDAP strcuture using Solaris pre-packaged command?

I have used ldapsearch to pull details on accounts but is there a way to browse the different levels in the LDAP directory just like we do with files in a directory?
2
votes
1answer
63 views

Directory Server doing lookups on one ldap server and authintication on another ldap server

I have an old Centos Directory Server and a new 389 Directory Server. I don't want to use sssd at the moment so lets keep that suggestion off the table. I do the following my RHEL 6.4 servers: ...
2
votes
1answer
1k views

How do I change login shell to nologin for an LDAP user RHEL 6?

yum install ypchsh and yum install ldapmodify both don't find a package. I only want to change the shell for certain ldap users on this one server. Someone please help, I can't seem to figure this ...
2
votes
1answer
2k views

Attempting to detect acceptable LDAP base DN defaults for various directory servers in a bash script

Basically, I'm writing a script that determines an acceptable default for a base DN when pointed at a particular hostname. I'm wrapping it around ldapsearch output. I can do Active Directory by ...
2
votes
1answer
217 views

Resource needed to manage cert.db7 files for AIX

On AIX to get LDAP authentication working it has wanted to store the LDAP SSL certificate's trusted root in a cert.db7 file. Mozilla stopped supporting it in NSS (Netscape Security Services) a while ...