Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
0 votes
0 answers
37 views

What LDAP server can I install only for test LDAP authentication?

I need to do practice with LDAP so I think that is a good idea to install a LDAP server only for do some test. For client side I'm using a LInux Mint distribution and I have installed all the software ...
1 vote
1 answer
30 views

What's enabled my Linux Workstation to access to Windows network directories?

I'm studying LDAP and in my company there is an Active Directory Server. In my workstation is installed Linux Mint. I know that when I open a new window for browsing the filesystem of my workstation, ...
0 votes
0 answers
64 views

LDAP Entry-Adding/Installation Error "ldap_bind: Invalid credentials (49)"

I am new to LDAP and am trying to install it for a computer cluster. I have been going through this technical guide https://www.openldap.org/doc/admin26/quickstart.html. I have reached step 11 and am ...
0 votes
1 answer
197 views

LDAP Installation Error "slapadd: could not add entry dn="cn=config" (line=1):"

I am new to LDAP and am trying to install it for a computer cluster. I have been going through this technical quick-start guide https://www.openldap.org/doc/admin26/quickstart.html. I have completed ...
0 votes
0 answers
39 views

Sudo not working as expected via LDAP

I have provisioned an IP server with sudo rules associated with a group. But on a relying host, sudo -l returns Sorry, user symcbean may not run sudo on host.example.com. I have logged in as user from ...
  • 4,374
0 votes
1 answer
39 views

Supplying multiple names in a single olcRefintAttribute value is unsupported and will be disallowed in a future version

Since a few time with OpenLDAP 2.6.2 on AlpineLinux 3.15, running the slapcat command generates this warning: Supplying multiple names in a single olcRefintAttribute value is unsupported and will be ...
  • 139
1 vote
1 answer
142 views

'getent passwd' not showing LDAP users, athough users can log in

I have an administration node running LDAP and a login node which uses LDAP on the other node to authorize users. Users are able to log into the login node successfully. When I run getent passwd, on ...
  • 175
1 vote
1 answer
190 views

How to get list of users with a given group as primary group

With getent group xyz I get a list of users who are members of xyz with xyz either as a primary group or as secondary group. How do I get a list of just those users who have xyz as their primary ...
  • 175
0 votes
0 answers
18 views

nsswitch.conf console login delay and LDAP

Question regarding /etc/nsswitch.conf I am running a cluster manager setup using RHEL 7.9, booting to runlevel 5 gaphical.target. User accounts are done via LDAP with the cluster mgr software. There ...
  • 4,633
1 vote
0 answers
60 views

sudo takes a long time when connected to a VPN on Ubuntu 22.04

I am using Ubuntu 22.04. My machine is joined to my company's domain using Realm. I am not using Adsys. PAM is configured for Unix and SSS authentication. While logged in as my domain user sudo is ...
  • 133
8 votes
2 answers
1k views

Why does LibreOffice (at least as packaged for Debian) depend on libldap?

The Debian package libreoffice-core (which is described in the Debian repositories as containing " the architecture-dependent core files of LibreOffice," and which is itself a dependency for ...
0 votes
0 answers
28 views

Inconsistency between selang showgrp and id -a command output

On an etrust enabled Solaris 11 server, I see inconsistency in the output of selang showgrp and getent group commands. User 'user1' exists in LDAP. New LDAP netgroup is created, added user 'user1' to ...
  • 15
0 votes
1 answer
133 views

create zsh function with argument for ldapsearch

I have a couple commands I can run directly on the command line without issue, when I run them and replace $1 with the actual group name I want to check in LDAP. Now I want to turn it into a ...
  • 103
0 votes
2 answers
107 views

Joining hosts to freeIPA without changing hostname

I've been asked to join linux hosts in my company to freeIPA. But the problem is that I'm not allowed to change hostnames. So I should leave hosts NetBios names intact. I am wondering if there is any ...
1 vote
0 answers
119 views

Add user from LDAP db to local linux group

My user to login to RHEL server is: e5614 I do not see that user in /etc/passwd. But I do see it with getent command getent passwd | grep e5614 e5614:x:613869764:10104:JohnJohn:/home/e5614:/bin/bash ...
  • 198
2 votes
0 answers
51 views

What dictates the order of group listing with id and groups command

I am trying to work out what order the groups are listed by id and groups command (coreutils v8.22) I am using LDAP and have configured SSSD to read user and group information. My ldap server always ...
  • 39
4 votes
1 answer
947 views

How to troubleshoot a LDAP error 53 (WILL_NOT_PERFORM)?

I am trying to make a CentOS 7 server join an AD, but it results in an error: AD LDAP ERROR: 53 (Server is unwilling to perform): 0000216D: SvcErr: DSID-031A1241, problem 5003 (WILL_NOT_PERFORM), ...
  • 26.7k
1 vote
0 answers
123 views

Recent LDAP user list missing in greeter using lightdm

I am switching our desktop manager from xfce to mate on centos 7.4. This means that we are switching from gdm to lightdm. For some reasons, it is impossible for our recent user authenticated via a ...
2 votes
1 answer
72 views

sssd doesn't query LDAP for loginshell

I have configured an LDAP server and created a user. ldapsearch delivers the following results: # user, People, brave-vesperia.com dn: uid=masc,ou=People,dc=brave-vesperia,dc=com objectClass: top ...
  • 217
0 votes
0 answers
14 views

Ldap Authentication, searches, necessity

I currently have a client where I use several sites with ldap authentication using mod_authnz_ldap in apache2 For my understanding it is not relevant to search the authenticated user within the ldap ...
  • 13
1 vote
0 answers
35 views

Freebsd Common User Access Management (tried with OpenLDAP, not working) (Open to other suggestions)

What I have are a large number of servers (all freebsd). I need to build a common user access management for it (as new developers are joining, want to add their access details on 1 server, and no ...
0 votes
1 answer
96 views

How can I best troubleshoot LDAP?

I'm trying to configure Red Hat Ansible Tower to authenticate via LDAPS. It has a web GUI to configure LDAPS settings but the only way to test it is via the ldapsearch CLI utility. I've never used ...
0 votes
0 answers
11 views

Postfix: Getting a macro from ldap map and using it with an LDA

I want to use a mailbox defined in an ldap attribute. It's easy to resolve the mailbox from the email address with a simple query in an ldap map, but I can't figure out how to use that resulting ...
  • 1
0 votes
0 answers
106 views

SSSD is running, but not working

I cross-compiled and installed SSSD on my Linux-based board (ARM architecture). This is my /etc/sssd/sssd.conf configuration file: [sssd] domains = LDAP_DOMAIN config_file_version = 2 services = nss, ...
0 votes
1 answer
28 views

smbldap-useradd: what are the different addresses for?

smbldap-useradd has some parameters to specify addresses for the user: # smbldap-useradd --help | grep -i addr -M e-mail address (comma separated) -O localMailAddress (comma separated) -T ...
  • 558
0 votes
0 answers
207 views

LDAP bind with TLS: Start TLS request accepted but not working

I am trying in vain to do a LDAP bind from a linux based device to a ldap server with TLS. The server supports both simple authentication and TLS authentication. First, I successfully bind without TLS ...
1 vote
1 answer
182 views

Unexpected critical dependency on LDAP

I'm using LDAP for user authentication only (nsswitch.conf below) on Ubuntu 18.04. However if the host cannot connect to the LDAP server at boot time, startup is blocked by NTP and DNS. The LDAP ...
  • 4,374
2 votes
0 answers
537 views

Unsupported option UsePAM even though OpenSSH is PAM-aware

For my ARM-based Linux system, I crosscompiled OpenSSH, as I need to have a ssh server. In my sshd_config file I set the UsePAM option to yes, because I want to use PAM for the authentication (I need ...
0 votes
1 answer
253 views

Using a shell script to parse through a CSV file and add users using the ldapadd command

Good evening all, As the title says, I am attempting to parse through a csv file of about 400 lines and add each one using the below script. This is part of a homework assignment and I am not sure ...
  • 3
1 vote
0 answers
325 views

SSSD with LDAP authentication, old password works

My client is Centos 7 and the LDAP server is Active Directory (Windows 2008 R2). I'm using sssd in order to authenticate to my machine with LDAP users (ad). My problem is that I manage to connect with ...
  • 11
0 votes
0 answers
63 views

Apache PAM Credential Caching

I use FreeIPA Authentication on Apache via PAM. I am trying to enable credential caching for PAM, however socache does not cache PAM Credentials. I have tested socache using local accounts in htpasswd ...
0 votes
1 answer
245 views

GlobalProtect (alternative) on Linux

My new company gave me a Mac and I'm having a nasty time getting used to it. This post will likely irritate some of you, but please bare in mind I've been using Linux and Windows computers for years, ...
  • 131
0 votes
1 answer
59 views

baseDN on ldapsearch vs ldapadd

I am learning to use OpenLDAP and I can not understand why you need to specify a base dn to search in the ldap tree but you do not need it in order to add stuff ldapsearch -x -b "dc=foo,dc=local&...
  • 21
3 votes
0 answers
66 views

Infer LDAP domain for SSH login

We have some SSH servers that our users connect to using a Windows hosted LDAP domain. Currently, we instruct users to log in with usernames in the format of user@domain@sshHost, which works fine, but ...
0 votes
1 answer
211 views

How it comes that ldapsearch output can't be piped

ldapsearch always outputs an authentication message with every query at the beginning: SASL/GSS-SPNEGO authentication started SASL username: user.principal@DOMAIN.NAME SASL SSF: 56 SASL data security ...
  • 1
1 vote
0 answers
165 views

Fully replace sssd->ldap with web APIs in Linux

My organization has to get rid of their ldap servers, so I am facing the task of replacing it's functionality. To make this as customizable and future-proof as I can, I am looking for something that ...
  • 11
2 votes
0 answers
132 views

Sync LDAP groups and UIDs with Active Directory

Currently, our organization has a working OpenLDAP server that we use to login to our Linux environments. However, due to the increase in Windows devices, the higher-ups have decided to migrate to an ...
  • 121
0 votes
0 answers
451 views

AD authentication failure Ubutnu || Access denied for user 4 (System error)

Facing this issue tried all the steps available online, but still having issue. need some expert solutions. ssh -vvv view OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017 debug1: Reading configuration ...
  • 3,005
0 votes
1 answer
632 views

How can I get the current time as an LDAP timestamp in Unix?

I want to be able to generate an ActiveDirectory LDAP timestamp in Unix for some tests I need to run. Active Directory stores date/time values as the number of 100-nanosecond intervals that have ...
1 vote
1 answer
421 views

How to reconfigure ldap server connection on Debian 10 client?

I have a Debian 10 system which was configured to talk to an OpenLDAP server (10.5.5.35) for password, group and shadow. I need to switch the host over to a Duo Auth Proxy (10.5.5.50). I thought I ...
0 votes
0 answers
26 views

p99 spikes in springboot api which communicates with MS AD

dont know if this question belongs to unix.stackechange/stackoverflow/devops.stackexchange. I open it here because i think it could be somehow unix/linux related. We have a custom java/springboot api, ...
1 vote
2 answers
616 views

Why is PAM broken after installing nis?

I'm a Software Engineer with some system admin experience currently trying to setup some Linux infrastructure at a new workplace which previously only had Windows infrastucture. For Political reasons ...
  • 45
-1 votes
1 answer
237 views

How to give full access for LDAP users on a NFS volume?

I have a NFS volume which is mounted on a RHEL VM. I'm accessing the files via a LDAP server. When a LDAP usera accesses somefile, the same file can not be modified (for example, touched) by another ...
  • 1
1 vote
0 answers
494 views

Standalone Linux Samba Server Authenticated by AD LDAP Backend?

I'm trying to get a Standalone Samba server (non-domain joined) to authenticate via a Windows AD DS LDAP. I think the documentation is not quite right here, as I cannot get it to work that way. I have ...
0 votes
1 answer
125 views

SSH login fails in one of the cluster node when login with user authenticated by a LDAP server

I am not able to login from one server to another node but not vice-versa (let's say from B --> A SSH login works but A --> B login fails). The user is authenticated via remote LDAP server and ...
0 votes
1 answer
431 views

How to convert local user to authenticate against LDAP directory?

I created a normal linux user (on Raspbian Buster). Now I have set up an LDAP directory and would like this user to instead authenticate using LDAP. I added a user to the directory with the same user ...
  • 171
0 votes
1 answer
347 views

symbol lookup error: ldapdelete: undefined symbol: ldap_pvt_conf_option

I'am trying to delete an entry from my LDAP database and it works fine, but for some reason after Linux update I am getting the below error; symbol lookup error: ldapdelete: undefined symbol: ...
  • 1
0 votes
1 answer
77 views

Where to find reference of all/common ObjectClasses of ldap using their English names not OID numbers?

I know the following questions could be naive, but I an ldap beginner and tried searching but i didn't find what am looking for exactly I am trying to get a reference about ldap object classes and ...
0 votes
1 answer
138 views

I have Some Problem retrieving information from ldap

I have installed openldap from symas on centos 8, I modified /etc/openldap/slapd.d/cn=config/olcDatabase={2}mdb.ldif by adding the following olcRootPW: {SSHA}......etc line to make a password ...
0 votes
1 answer
116 views

How can I see if a Linux Embedded system authenticates with PAM or passwd only?

I cross compiled Linux-PAM and OpenLDAP for my linux embedded system (with ARM architecture) and copied the compiled files and folders into it. I create a /etc/pam.d/ folder and i put inside of it the ...

1
2 3 4 5
8