Skip to main content

Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
0 votes
0 answers
37 views

Can't login to my server using LDAP credentials

I'm trying to setup, on my CentOS7 server, a way to ssh IN using some LDAP credentials from an external server. The installation went well until I tried to connect. I get this error using the debug ...
schadenfreude's user avatar
1 vote
0 answers
29 views

Simple user database / LDAP lookup options for containers

In my environment we launch containers with a specific uid/gid that our users use as workspaces. It's a bit finicky and one of the drawbacks is that there won't be a matching user in /etc/passwd, ...
vadimb's user avatar
  • 11
0 votes
1 answer
35 views

Enabling Java JNDI LDAP connection to Active Directory using SSH through remote SSH tunnelling

Firstly, I would like to validate my idea for the PoC, specifically I would like to understand whether this can be possible or not and furthermore some pointers with regards to how it can be done ...
theimpatientcoder's user avatar
0 votes
1 answer
241 views

"no such user" - LDAP authentication with sssd

I am struggling with making sssd use LDAP users to login on my Linux-Server (Oracle Linux 8.9, basically identical to RHEL, but free). Goal Using the users (e.g. "John") existing on the LDAP-...
mikro_do's user avatar
1 vote
1 answer
213 views

Why is pam_unix.so set "required" even when LDAP is enabled?

On my Rocky Linux 9.3 machine, LDAP authentication is enabled by authselect and is working fine. I can ssh into this machine by both local accounts and LDAP-only accounts. However, my /etc/pam.d/...
biochem_fan's user avatar
1 vote
0 answers
20 views

ldapsearch with mTLS (and selective curves)

I have to request a LDAP-server. It is strictly mutual-TLS secured. If I try TLS with openssl it works. But I have to provide -cert, -key and -curves to openssl s_client to make it work. Without ...
chris01's user avatar
  • 615
0 votes
0 answers
14 views

shibboleth 5 openldap login

My Environment: Shibboleth 5 IdP configured to run inside Jetty 11 servlet (no apache) openldap (on same server) mod_auth_mellon SP on various dev servers I have gotten the IdP itself working. I ...
Christopher Biessener's user avatar
0 votes
0 answers
26 views

fedora - login to cockpit web gui using ldap credentials

Fedora 39 server configured to allow ldap users to login if they are member of a specific ldap group. The same ldap group is in the sudoers file, so after login users can sudo (set to allow sudo ...
robydago's user avatar
1 vote
1 answer
99 views

How to run a command/program using system account in Linux

My goal is to run LDAP search and get a password for a gMSA account. I have an Ubuntu VM which is Dev_Linux. My user account is sja. I want to run LDAP search using the Dev_Linux account. I refer to ...
sachyy's user avatar
  • 111
0 votes
1 answer
60 views

Understanding risks of setting nscd positive-time-to-live to a longer duration

as I mentioned in another thread, I have an LDAP system supporting two dozen Linux servers. When LDAP server is down for various reasons (firewall rule changes, power outage etc), my rest of the ...
FangQ's user avatar
  • 123
0 votes
0 answers
57 views

Is it possible to integrate Linux servers SSH with ADFS for authentication?

I'm having trouble managing users on 30 servers I have on AWS. From my research, I saw that it's possible to do this using FreeIPA and SSSD, but the communication is direct between the Linux servers ...
Fabio Pereira's user avatar
0 votes
0 answers
154 views

Ubuntu, failed to join an AD over TLS/SSL with realmd

actualy I tried to establish a connection between a Ubuntu-Host and an Active Directory, with the goal to authentification my Linux-Host over the AD. For this, I use SSSD and Realmd, but not ADSys. We ...
Alphabeit's user avatar
0 votes
2 answers
70 views

Ubuntu doesn't translate /home/testuser to ~

In Ubuntu 22.04.3 LTS, if I log in with the credentials of the LDAP user testuser, in several different programs the path of the $HOME directory is not replaced by ~ (as instead it happens for local ...
BowPark's user avatar
  • 4,955
0 votes
0 answers
383 views

ssh fails with "No user exists for uid X" on LDAP user on Ubuntu

I have an Ubuntu Laptop connected to Windows AD. When I use SSH to connect to a server (e.g. ssh 192.168.1.1), logged in with an LDAP account, I get the error No user exits for uid 213321 If I use a ...
M41DZ3N's user avatar
  • 101
0 votes
0 answers
480 views

How to implement MemberOf overlay in OpenLDAP?

I need a step by step guide from start to end on how to implement the memberOf overlay in OpenLDAP (version 2.5.13). I have read many guides including the official one. Unfortunately none of them work....
BloodhunterD's user avatar
4 votes
1 answer
492 views

What is the LDAP mechanism to resolve duplicated username on a LDAP client?

On a LDAP client, there are two users having the same username, say "abc". One is the local user with UID 1000, another is the LDAP user with UID 1001. If I run getent passwd 1000, the ...
zzzhhh's user avatar
  • 95
0 votes
1 answer
36 views

How to syncronize credentials in a small laboratory? (very slim alternative to ldap)

We run a small lab with 20 Linux systems (RaspberryPI, NAS, Desktop PCs) for research with 4 scientists who all need sudo permissions. We trust all 4 users as they have sudo permission and physical ...
Jonas Stein's user avatar
  • 4,138
0 votes
1 answer
108 views

389ds How to assign permission to a user?

I try to configure 389ds LDAP server. I need 389ds LDAP server only for tests, I do NOT configure any production environment. I use 389ds/dirsrv docker image. I added user01 user using ldapmodify ...
Mariusz's user avatar
  • 349
0 votes
2 answers
187 views

SSH by LDAP groups - not work

There are "31" servers configured from the same RedOS image (CentOS 7-based). They are entered into the LDAP samba domain, and are configured for authorization via ssh based on ldap user ...
SLY's user avatar
  • 3
0 votes
0 answers
141 views

FREEIPA Identity Provider server: Azure Active Directory

I am trying to add AAD as the identity server provider in Freeipa and configured it as shown in the below screenshot. There isn't much available in the documentation. Can anyone help with what else ...
Muhammad Naeem Akhtar's user avatar
0 votes
1 answer
159 views

How does kpasswd change password?

When you change password via kpasswd, does it change your password that is stored on the Kerberos server, or does it change your password that is stored in the OpenLDAP server?
JLC's user avatar
  • 317
0 votes
0 answers
129 views

How to enable LDAP login in docker rundeck?

I use the following script to start the container, but it keeps using the realm.properties instead of the LDAP setup. The file jaas-ldap.conf works as is in rundeck2 which was set up with a different ...
Kaiyou's user avatar
  • 1
0 votes
1 answer
1k views

Completely locked out of the admin account with FreeIPA

I have a FreeIPA server set up with a single replica. The admin account has been locked. Here's the log from a kinit admin: [root@idm-00 ~]# kinit admin kinit: Client's credentials have been revoked ...
Franz Kafka's user avatar
0 votes
0 answers
1k views

How to configure OpenLDAP with SSL as proxy for Active Directory with LDIF method

EDITED: As it seems nobody seems to really know how OpenLDAP works (beside their developers), I finally dropped it in favor of GLAuth, which is quite easier to set up, with a simple configuration file....
malevolent's user avatar
0 votes
1 answer
2k views

How to fix "PAM unable to dlopen(/lib64/security/pam_ldap.so)" in SLES 15 SP4?

Somehow I ended up in SLES 15 with error messages like this: (systemd)[6729]: PAM unable to dlopen(/lib64/security/pam_ldap.so): /lib64/security/pam_ldap.so: cannot open shared object file: No such ...
U. Windl's user avatar
  • 1,493
0 votes
1 answer
553 views

Cant login on PhpLdapAdmin using admin user

im trying to configure an LDAP using slapd and PhpLdapAdmin using the non-official version from github on my Ubuntu server. the slapd and phpldapadmin works perfectly but i have a problem while login ...
LM.'s user avatar
  • 3
1 vote
0 answers
90 views

Splitting long lines in sssd.conf

I have an MS-AD domain joined SLES server, using sssd to control access. Is there a way to break long lines in /etc/sssd/sssd.conf file for readability purposes? From this: ldap_group_search_base = ou=...
Norskyi's user avatar
  • 11
1 vote
1 answer
2k views

RHEL 9 - Upgrading authselect causes overwrite

I've been configuring my system to use the desired /etc/nsswitch, /etc/authselect/system-auth and /etc/authselect/password-auth configuration including SSSD to access my LDAP server. After running a ...
N. J's user avatar
  • 177
0 votes
1 answer
226 views

Linux Apache hybrid basic auth - ldap and .htpasswd file credentials at the same time

I have some api covered by reverse proxy. I have configured basic auth with ldap AD credentials and it works like a charm. But there are some users from external organization that don't have AD ...
karpiu's user avatar
  • 1
-1 votes
2 answers
41 views

Modify LDAP data given list of identifiers

I have a file with below content, where few lines are of length 15 while rest are less than 15. AAAAAAAAAAAAA BBBBBBBB cccc I need an output in below way. Delete Subscriber: AAAAAAAAAAAAA in IMSI=...
Surya Shukla's user avatar
0 votes
1 answer
191 views

Samba AD DC - Directory entry for a shared folder

Suppose that you have: a Linux machine (A) running a Samba AD DC, a Windows machine (B), with a shared folder \\B\shared_folder. I would like to know if there is an entry in the directory for this ...
Léa Massiot's user avatar
0 votes
0 answers
503 views

PAM LDAP: why does passwd command ask for "(current) LDAP Password: "?

I have an openLDAP service on a Debian 11 server, and I have set up PAM on a Ubuntu 22.04 PC; I am beginning to be very confused. I can log in withouot a problem, but when I want to change password, I ...
j4nd3r53n's user avatar
  • 717
0 votes
1 answer
638 views

WEBMIN LDAP authentication: passwd returns "Authentication token manipulation error"

Update:jan 25 2023 I believe I have sssd and nslcd working properly I also adjusted the pam modules in webmin. I also added db to nsswitch.conf so I checks there first. As of right now I can use ...
raultechxd's user avatar
1 vote
0 answers
303 views

Setup mail server in Docker with FreeIPA and Roundcube

I try to setup my own mail server with authentication against a Ldap(FreeIPA). All of them must running within a docker container. I don't know what I'm doing wrong. Maybe it's my ldap configuration. ...
Jayser's user avatar
  • 111
0 votes
2 answers
583 views

Help removing a failed replica from a FreeIPA setup

I have two FreeIPA servers in my system; ns-1 and ns-2. To my limited knowledge, ns-1 is our main ipa server and ns-2 was setup as a replica. But I may be incorrect in that regard. In my attempts to ...
dutsnekcirf's user avatar
1 vote
0 answers
698 views

Linux server - AD Login enabled - how to add AD group to local group

My RHEL servers are enabled with Active Directory authentication configured in sssd.conf I have allowed few AD groups in sssd.conf to login to the Linux server. the issue is I need to know how do I ...
judi's user avatar
  • 71
1 vote
1 answer
218 views

How to add utility ldapsearch to yocto image?

I have successfully added the recipe openldap to my yocto-base Linux distribution, by the instruction: IMAGE_INSTALL += "openldap" After that I've created a path/to/my-layer/recipes-support/...
User051209's user avatar
1 vote
1 answer
173 views

What LDAP server can I install only for test LDAP authentication?

I need to do practice with LDAP so I think that is a good idea to install a LDAP server only for do some test. For client side I'm using a LInux Mint distribution and I have installed all the software ...
User051209's user avatar
3 votes
1 answer
192 views

How does a Linux Workstation interact with Windows Active Directory?

I'm studying LDAP and in my company there is an Active Directory Server. In my workstation is installed Linux Mint. I try to show the context that arise my question: open a new window for browsing ...
User051209's user avatar
0 votes
0 answers
742 views

LDAP Entry-Adding/Installation Error "ldap_bind: Invalid credentials (49)"

I am new to LDAP and am trying to install it for a computer cluster. I have been going through this technical guide https://www.openldap.org/doc/admin26/quickstart.html. I have reached step 11 and am ...
Nidhish Sharma's user avatar
1 vote
1 answer
6k views

LDAP Installation Error "slapadd: could not add entry dn="cn=config" (line=1):"

I am new to LDAP and am trying to install it for a computer cluster. I have been going through this technical quick-start guide https://www.openldap.org/doc/admin26/quickstart.html. I have completed ...
Nidhish Sharma's user avatar
0 votes
0 answers
692 views

Sudo not working as expected via LDAP

I have provisioned an IP server with sudo rules associated with a group. But on a relying host, sudo -l returns Sorry, user symcbean may not run sudo on host.example.com. I have logged in as user from ...
symcbean's user avatar
  • 5,821
0 votes
1 answer
499 views

Supplying multiple names in a single olcRefintAttribute value is unsupported and will be disallowed in a future version

Since a few time with OpenLDAP 2.6.2 on AlpineLinux 3.15, running the slapcat command generates this warning: Supplying multiple names in a single olcRefintAttribute value is unsupported and will be ...
azmeuk's user avatar
  • 139
1 vote
1 answer
4k views

'getent passwd' not showing LDAP users, athough users can log in

I have an administration node running LDAP and a login node which uses LDAP on the other node to authorize users. Users are able to log into the login node successfully. When I run getent passwd, on ...
loris's user avatar
  • 195
1 vote
1 answer
2k views

How to get list of users with a given group as primary group

With getent group xyz I get a list of users who are members of xyz with xyz either as a primary group or as secondary group. How do I get a list of just those users who have xyz as their primary ...
loris's user avatar
  • 195
2 votes
0 answers
361 views

sudo takes a long time when connected to a VPN on Ubuntu 22.04

I am using Ubuntu 22.04. My machine is joined to my company's domain using Realm. I am not using Adsys. PAM is configured for Unix and SSS authentication. While logged in as my domain user sudo is ...
Nick's user avatar
  • 153
8 votes
2 answers
2k views

Why does LibreOffice (at least as packaged for Debian) depend on libldap?

The Debian package libreoffice-core (which is described in the Debian repositories as containing " the architecture-dependent core files of LibreOffice," and which is itself a dependency for ...
Chris Henry's user avatar
0 votes
1 answer
1k views

create zsh function with argument for ldapsearch

I have a couple commands I can run directly on the command line without issue, when I run them and replace $1 with the actual group name I want to check in LDAP. Now I want to turn it into a ...
ADataGMan's user avatar
  • 103
0 votes
2 answers
2k views

Joining hosts to freeIPA without changing hostname

I've been asked to join linux hosts in my company to freeIPA. But the problem is that I'm not allowed to change hostnames. So I should leave hosts NetBios names intact. I am wondering if there is any ...
marrowsh's user avatar
2 votes
0 answers
832 views

Add user from LDAP db to local linux group

My user to login to RHEL server is: e5614 I do not see that user in /etc/passwd. But I do see it with getent command getent passwd | grep e5614 e5614:x:613869764:10104:JohnJohn:/home/e5614:/bin/bash ...
AndreyS's user avatar
  • 258

1
2 3 4 5
9