Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
0
votes
1answer
16 views

symbol lookup error: ldapdelete: undefined symbol: ldap_pvt_conf_option

I'am trying to delete an entry from my LDAP database and it works fine, but for some reason after Linux update I am getting the below error; symbol lookup error: ldapdelete: undefined symbol: ...
0
votes
1answer
21 views

Where to find reference of all/common ObjectClasses of ldap using their English names not OID numbers?

I know the following questions could be naive, but I an ldap beginner and tried searching but i didn't find what am looking for exactly I am trying to get a reference about ldap object classes and ...
0
votes
0answers
12 views

Time limited group membership in OpenLDAP

Has anybody an idea how to implement time limited group membership in OpenLDAP? IMO one way could be to have SQL backend for OpenLDAP and have eg. 'expiretime' column, to use custom view which would ...
0
votes
1answer
11 views

I have Some Problem retrieving information from ldap

I have installed openldap from symas on centos 8, I modified /etc/openldap/slapd.d/cn=config/olcDatabase={2}mdb.ldif by adding the following olcRootPW: {SSHA}......etc line to make a password ...
0
votes
1answer
31 views

How can I see if a Linux Embedded system authenticates with PAM or passwd only?

I cross compiled Linux-PAM and OpenLDAP for my linux embedded system (with ARM architecture) and copied the compiled files and folders into it. I create a /etc/pam.d/ folder and i put inside of it the ...
0
votes
1answer
17 views

How to automatically create local home directories for LDAP authenticated users if the home directory does not already exist?

I have configured a raspberry pi 4 running raspian to authenticate users using LDAP. The LDAP server is hosted elsewhere. I am able to log in to the system as an LDAP user, but the user has no home ...
0
votes
2answers
17 views

Authentication precedence

In nsswitch.conf file I have an entry "passwd files sss". Also I have the evidence that the server is having LDAP authentication. Since the "files" for passwd is enabled and it ...
1
vote
1answer
21 views

Solaris client ldap and Samba4 AD ldap server: some strange things

I have configured Solaris to use ldap users. The ldap server is Samba4 DC, the client is Solaris 11.4. I have "join" the server with this command ldapclient manual \ -a credentialLevel=...
0
votes
0answers
17 views

openldap - constraintViolation Password policy only allows one password value

Im using a openldap (slapd) Server on Version 2.4.49. But i cannot change my password because the password policy seems to be wrong and the only helpful thing i found was that ppolicy seems to not ...
0
votes
0answers
20 views

how move an user from 1 OU to another OU in IBM LDAP

Does anyone have an idea how to move a user from 1 OU to another OU in IBM SDS LDAP? Using command or via LDIF file? From Ou= Staff To OU=System ID: testuser1
0
votes
0answers
20 views

Converting legacy LDAP backend HDB to new MDB

Been trying to figure out how to convert a legacy LDAP database with a backend on HDB to MDB on a new system. Here are the relevant config file sections from the old: /etc/ldap/slapd.d/cn=config/...
0
votes
0answers
10 views

How do I automatically display aci in 389-ds?

I'm running a 389-ds (1.4.0) on a up-to-date stable Debian system. I'm able to access aci lines by running ldapsearch aci or ldapsearch *. The acis, however, do not show up when running simply ...
0
votes
0answers
18 views

id/groups inconsistent with members/getent

I was just suffering from the situation that one LDAP user john lost its group memberships. Things were working for years and it happened out of a sudden. No configuration was changed. This is what I ...
0
votes
1answer
20 views

How to allow anonymous access to create objects in LDAP subtree?

I'm having a hard time trying to populate an LDAP with PGP keys. I have set up my LDAP (OpenLDAP if that matters) for a PGP key server structure as explained here which worked well so far. Now I want ...
0
votes
1answer
41 views

How to search for an object by class in the LDAP base?

I'm trying to search an LDAP for an object of a specific class, but it always returns result: 32 No such object Background: I'm trying to access a PGP Universal server at keyserver.pgp.com which is a ...
2
votes
1answer
73 views

openldap: is possible to force the starttls from a client?

I don't explain how to configure tls-ldap on server, on google there is a lot of stuff to configure it(create tls certs, create ldif, import ldif, try ldapsearch -ZZ, etc..). Is also easy to force the ...
0
votes
0answers
34 views

LDAP (FreeIPA) saying invalid credentials when they aren't

I'm debugging some software that's trying to authenticate against FreeIPA 4.8.4 running on RHEL 8. The software is sending a query for user login against FreeIPA. Here is that exchange: ​[23/Oct/2020:...
0
votes
0answers
11 views

Allow LDAP login for selected users only on SLES 12 SP 5

I have configured a LDAP Client on SLES 12 SP5. Now I want to allow only a selected group of users to login to the system. This group comprises 2 or 3 users. For all other users login must be ...
0
votes
0answers
29 views

ldapscript template placeholders

We have our own ldapscript to create new users. I'd like to modify the template that is used for that. For example, I would like to have the cn entry created by combining what was entered for ...
1
vote
1answer
24 views

Unable to authenticate to ldaps with sssd

I have a docker container running debian stretch and sssd 1.15.0. The plan is to use it for SFTP purposes, and to authenticate users through LDAPS. The LDAP provider in this case is Azure Active ...
0
votes
0answers
271 views

Unable to open tdb '/var/lib/sss/db/config.ldb'

I have an Oracle Linux Server release 8.2 system that I recently updated via yum. Before the update ssh could authenticate against a LDAP server, sles linux. In the logs I now see (details below): [...
0
votes
1answer
150 views

Why is LDAP with STARTTLS preferred over LDAPS

I am just wondering why is LDAP with STARTTLS is a more preferred industry standard over LDAPS. LDAPS start the communication with encrypted information to begin with whereas STARTTLS only upgrades to ...
1
vote
1answer
127 views

Sync OpenLDAP - Active Directory

Today, we have an OpenLDAP that works very well. We would like to create a Domain & AD (Windows) that would be populated and synchronized by OpenLDAP. I could read some topics for reverse ...
2
votes
1answer
104 views

Groups from LDAP: “getent” reports membership correctly but missing in output of “id”

I have a Debian 10 machine which uses PAM LDAP for authentication. In LDAP I have two users alice and bob which are both members of group mygroup. Everything has worked fine (so the configuration ...
0
votes
0answers
27 views

How to download certificate from LDAPS (not LDAP) using Linux Utilities?

I tried following in linux: [wildfly@alq-esb-app02 log]$ echo -n | openssl s_client -connect cdc201.cop.copcommon.com:636 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ldapserver.pem ...
1
vote
1answer
92 views

How to extract an attribute from the ldapsearch output

I have an ldap directory which contains some instances of a class called store, like this: # ldapsearch -LLL -x -b "utente=las,dc=labammsis" -s base dn: utente=las,dc=labammsis objectClass: ...
0
votes
0answers
270 views

How to add LDAP user to a local group?

We are trying to add a user in Azure AD to a local group but when we do that we get this error #-> gpasswd -a sjain68 docker gpasswd: user 'sjain68' does not exist It is true this user does not ...
0
votes
1answer
67 views

How to query openLDAP servers cert?

From the "service sssd status" we can see: Could not start TLS encryption. TLS: hostname does not match CN in peer certificate But how could we query the cert to know, that it is really some ...
0
votes
1answer
68 views

LDAP Synchronization with Local Users

How would I go about regularly copying user account data from /etc/passwd on one machine into LDAP? The situation I'm in is that I'm the sysadmin for an academic computer cluster. We have one master ...
0
votes
1answer
78 views

“unable to execute /bin/bash”

We have Ldap running in our environment. Particular user X is provided sudo access on another Y. But when X tries command "sudo -u Y -I". System asks for passwd, after entering the passwd it throws an ...
0
votes
1answer
34 views

Securing OpenLDAP on Debian Buster

would this still be the way of securing an OpenLDAP server on Debian 9 (Stretch) and 10 (Buster). See Section 11.7.3.3. Securing LDAP Data Exchanges. Unfortunately the Debian manual seems to always be ...
0
votes
0answers
34 views

How to add new users by ldapadd command with ldif file?

Make a test.ldif file as cat test.ldif # Add test1 dn: uid=test1,dc=myenv,dc=myorg,dc=local changetype: add objectClass: inetOrgPerson cn: Test 1 ou: orgname sn: test1 uid: test1 Use ldapadd command ...
0
votes
1answer
139 views

pam_ldap: how to hide password hashes in getent output

My question is similar to this. I use pam_ldap for users auth. /etc/nsswitch.conf file contains: passwd: files ldap group: files ldap shadow: files ldap All seems to be OK, ...
0
votes
0answers
22 views

Use Active Directory via LDAPS for login

I have a Fedora 31 installation in a network where we also have an Active Directory. The AD is accessible via LDAPS. What I would like to do now is to use the AD to enable people to log in on the ...
0
votes
0answers
21 views

Does samba have a chage inactive equivalent?

I am currently working with a slapd(ldap) + samba server, and trying to automatically disable accounts x amount of days after their password expires. chage -Inactive does exactly this, which works ...
0
votes
1answer
65 views

groups command is working but groups <username> is not, inside a docker container. What's the reason?

Inside a docker container, if I type groups it works and gives 'root' in the result but when I type groups <username> it says groups: '<username>': no such user. What is the reason for ...
0
votes
2answers
77 views

how to catch response from server ping and sent alert

I have the below command I'm running: ping ldap.corp.XXXXX.com LDAP Server up: Pinging ldapeu.corp.XXXXX.com [XX.XXX.XXX.XX] with 32 bytes of data: Reply from XX.XXX.XXX.XX: bytes=32 time<1ms ...
0
votes
1answer
1k views

How to authenticate ldap in bash?

I am writing a bash script that needs ldap authenticate to do the next steps. However, I have not found a tool that can auth ldap and return whether the username and password are true. Is there a ...
0
votes
2answers
553 views

What will be the best alternative for NIS authentication? [closed]

Please provide me the best alternative for NIS ? As I have currently using NIS + AD authentication but we want to set up a new authentication system. Is there any alternative for NIS and it is ...
0
votes
1answer
800 views

getent only shows some of the users from ldap

I've a couple of Linux servers, one setup as a SAMBA AD (ubuntu 18.04), the other as a member server (ubuntu 16.04) setup as a file server. It was working for a time, but now newer users created (...
0
votes
0answers
619 views

How to do ldapsearch using TLS1.2 from linux

I am trying to establish a connection to an AD/ENT group using ldapsearch. i am unable to connect and getting below error. Error: ldap_bind: Can't contact LDAP server Syntax Used: /opt/oracle/...
3
votes
3answers
5k views

Cisco Jabber for Linux?

Some people at our company are using a so called Cisco Jabber in Windows OS to improve handling of phone calls directly at the PC instead of using the telephone anymore. After installation, one has ...
1
vote
1answer
21 views

How to figure out if a host authenticates via LDAP

I would like to automate a check (in shells script) that verifies whether the account that is currently logged in is a local account or whether it authenticates via LDAP. Since there are various ...
0
votes
0answers
278 views

ldap home directory permission issue on debian/ubuntu

I have joined the debian9 machine to microsoft AD when i run su - test1 it create the home directory but with below permission. root@debiantest:/home# ls -ltr drwxr-xr-x 2 test1 data 4096 Sep 18 22:...
2
votes
1answer
163 views

sudo-ldap works with !authenticate only

I'm trying to setup sudo-ldap in a clean CentOS 7 docker environment. I've successfully setup sssd and PAM authentication, and it works. However, sudo-ldap works only if !authenticate is set: dn: cn=...
1
vote
1answer
59 views

Linux LoginServer

I want a Linux server with the user accounts. The users will see a login screen after boot. So they can directly login on the server without noticing it. The user folders are also saved there, like ...
2
votes
2answers
341 views

Restricting openldap ldapsearch on attributes

I have the following query against my directory: ldapsearch -x -H ldaps://example.com -D "cn=gitlab,ou=Service Accounts,dc=example,dc=com" -w foobar -b "ou=Persons,dc=example,dc=com" With the ...
1
vote
1answer
111 views

LDAP connection through proxy

I have the following infrastructure: LDAP (Externe network) - SQUID - HOST1,HOST2,HOST3... All of them are Ubuntu Server. I need to be able to make LDAPS requests from the hosts through port 636, ...
0
votes
0answers
29 views

authenticate against LDAP on HP UX

Trying to develop a program that can only grant access to legitimate LDAP users. PHP has been compiled without LDAP support, so this will have to be effected through the a command line tool. Is there ...
1
vote
1answer
23 views

Make a user log in for a host valid for all the other hosts in the same domain

Assume that several machines with Unix-like OSs are connected to a server, which for example runs LDAP. Its database includes many users: one of them is testuser. This way, testuser can perform a ...

1
2 3 4 5
7