Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
0
votes
1answer
20 views

“unable to execute /bin/bash”

We have Ldap running in our environment. Particular user X is provided sudo access on another Y. But when X tries command "sudo -u Y -I". System asks for passwd, after entering the passwd it throws an ...
0
votes
0answers
11 views

Securing OpenLDAP on Debian Buster

would this still be the way of securing an OpenLDAP server on Debian 9 (Stretch) and 10 (Buster). See Section 11.7.3.3. Securing LDAP Data Exchanges. Unfortunately the Debian manual seems to always be ...
0
votes
0answers
9 views

How to add new users by ldapadd command with ldif file?

Make a test.ldif file as cat test.ldif # Add test1 dn: uid=test1,dc=myenv,dc=myorg,dc=local changetype: add objectClass: inetOrgPerson cn: Test 1 ou: orgname sn: test1 uid: test1 Use ldapadd command ...
0
votes
0answers
51 views

pam_ldap: how to hide password hashes in getent output

My question is similar to this. I use pam_ldap for users auth. /etc/nsswitch.conf file contains: passwd: files ldap group: files ldap shadow: files ldap All seems to be OK, ...
0
votes
0answers
14 views

Use Active Directory via LDAPS for login

I have a Fedora 31 installation in a network where we also have an Active Directory. The AD is accessible via LDAPS. What I would like to do now is to use the AD to enable people to log in on the ...
0
votes
0answers
37 views

why does apache 2.4 with ldap authorization and starttls configured still does simple bind?

We have a recent apache 2.4 setup on suse enterprise linux 15 sp1. The apache server has kerberos authentication configured which works fine for authenticating users in a "joined" active directory ...
0
votes
0answers
20 views

Does samba have a chage inactive equivalent?

I am currently working with a slapd(ldap) + samba server, and trying to automatically disable accounts x amount of days after their password expires. chage -Inactive does exactly this, which works ...
0
votes
0answers
16 views

Does Samba have anything similar to /shadow/ sp_inact?

I am running Samba with slapd and I was wondering if there is any function similar to sp_inact — days after password expires that account is considered inactive and disabled. I need to disable ...
0
votes
1answer
27 views

groups command is working but groups <username> is not, inside a docker container. What's the reason?

Inside a docker container, if I type groups it works and gives 'root' in the result but when I type groups <username> it says groups: '<username>': no such user. What is the reason for ...
0
votes
2answers
65 views

how to catch response from server ping and sent alert

I have the below command I'm running: ping ldap.corp.XXXXX.com LDAP Server up: Pinging ldapeu.corp.XXXXX.com [XX.XXX.XXX.XX] with 32 bytes of data: Reply from XX.XXX.XXX.XX: bytes=32 time<1ms ...
0
votes
1answer
106 views

How to authenticate ldap in bash?

I am writing a bash script that needs ldap authenticate to do the next steps. However, I have not found a tool that can auth ldap and return whether the username and password are true. Is there a ...
0
votes
0answers
11 views

Put users into system group by LDAP group membership

Currently users can authenticate via SSSD using their LDAP user account. But there is no way of specifying special group memberships. Now I have a LDAP group like this: The user objects itself does ...
-1
votes
2answers
115 views

What will be the best alternative for NIS authentication? [closed]

Please provide me the best alternative for NIS ? As I have currently using NIS + AD authentication but we want to set up a new authentication system. Is there any alternative for NIS and it is ...
0
votes
1answer
203 views

getent only shows some of the users from ldap

I've a couple of Linux servers, one setup as a SAMBA AD (ubuntu 18.04), the other as a member server (ubuntu 16.04) setup as a file server. It was working for a time, but now newer users created (...
0
votes
0answers
46 views

How to do ldapsearch using TLS1.2 from linux

I am trying to establish a connection to an AD/ENT group using ldapsearch. i am unable to connect and getting below error. Error: ldap_bind: Can't contact LDAP server Syntax Used: /opt/oracle/...
0
votes
0answers
29 views

ds-389 won't import 10rfc2307bis.ldif

I've installed the ds-389 LDAP server on CentOS7 (package 389-ds-base). I tried extending the schema by adding the file 10rfc2307bis.ldif to the /etc/dirsrv/slapd-auth/schema folder. After the file ...
2
votes
2answers
1k views

Cisco Jabber for Linux?

Some people at our company are using a so called Cisco Jabber in Windows OS to improve handling of phone calls directly at the PC instead of using the telephone anymore. After installation, one has ...
1
vote
1answer
19 views

How to figure out if a host authenticates via LDAP

I would like to automate a check (in shells script) that verifies whether the account that is currently logged in is a local account or whether it authenticates via LDAP. Since there are various ...
0
votes
0answers
23 views

LDAP disable local account, and pub/private key on centos

I am currently setting LDAP/krb5 on Centos7. I followed the instruction on: https://wiki.cac.washington.edu/display/LDI/Configuring+Linux+Clients+for+LDI (thanks to Eric) http://staff.washington.edu/...
0
votes
0answers
108 views

ldap home directory permission issue on debian/ubuntu

I have joined the debian9 machine to microsoft AD when i run su - test1 it create the home directory but with below permission. root@debiantest:/home# ls -ltr drwxr-xr-x 2 test1 data 4096 Sep 18 22:...
2
votes
1answer
48 views

sudo-ldap works with !authenticate only

I'm trying to setup sudo-ldap in a clean CentOS 7 docker environment. I've successfully setup sssd and PAM authentication, and it works. However, sudo-ldap works only if !authenticate is set: dn: cn=...
1
vote
1answer
49 views

Linux LoginServer

I want a Linux server with the user accounts. The users will see a login screen after boot. So they can directly login on the server without noticing it. The user folders are also saved there, like ...
2
votes
2answers
157 views

Restricting openldap ldapsearch on attributes

I have the following query against my directory: ldapsearch -x -H ldaps://example.com -D "cn=gitlab,ou=Service Accounts,dc=example,dc=com" -w foobar -b "ou=Persons,dc=example,dc=com" With the ...
1
vote
1answer
50 views

LDAP connection through proxy

I have the following infrastructure: LDAP (Externe network) - SQUID - HOST1,HOST2,HOST3... All of them are Ubuntu Server. I need to be able to make LDAPS requests from the hosts through port 636, ...
0
votes
0answers
24 views

authenticate against LDAP on HP UX

Trying to develop a program that can only grant access to legitimate LDAP users. PHP has been compiled without LDAP support, so this will have to be effected through the a command line tool. Is there ...
0
votes
0answers
32 views

Redirect ldapsearch ldiff from Docker container to host while displaying password promt

Having an ApacheDS LDAP DC in a Docker container, I want to export it as ldiff to the host (not inside the container): docker exec -it apache-ds sh -c 'ldapsearch -D "uid=admin,ou=system" -W -p 10389 ...
0
votes
0answers
164 views

How to Use Single-Sign-On/Custom Auth/Django-login Authentication for Linux PAM?

I have a web application and i want to let all my application-users to access vsftpd server with the same login credentials. At any time, single source of truth for authentication should be my web ...
1
vote
1answer
19 views

Make a user log in for a host valid for all the other hosts in the same domain

Assume that several machines with Unix-like OSs are connected to a server, which for example runs LDAP. Its database includes many users: one of them is testuser. This way, testuser can perform a ...
2
votes
0answers
68 views

Overlapping local and LDAP usernames

We have several RHEL 6/7/8 machines where user authentication is done through LDAP. One of our sysadmins would like to set up local accounts for some users on some machines, with the local username ...
1
vote
1answer
197 views

cannot authenticate via LDAP as user has multiple UIDs

Upgrading from SLES11 to SLES 12 I had to replace a working Cyrus mail server with dovecot. Unfortunately I'm unable to authenticate via LDAP (which was not a problem with Cyrus): My LDAP user has ...
2
votes
1answer
582 views

User listed in group but not in getent passwd

On a specific machine with both local users and LDAP users, there is a user that is listed under getent group foo (let's say the user jdoe is listed), but when doing getent passwd jdoe I get no output....
0
votes
0answers
44 views

LDAP (Windows) login on Debian9

I've configured my Debian9 with Kerberus5, Samba and Winbind to login on a windows domain, all the configuration is already set and I've already tested it (it works!), but when I try to realize my ...
0
votes
0answers
23 views

Authentication nslcd with ssh key from AD

Nslcd support ssh key authentication, i can login correct with password. But with ssh key i can't login. Can with map or filter get the ssh key from AD ? Cheers
0
votes
1answer
109 views

Pamldap connection refused

I am trying to set up the ssh access through pamldap in Ubuntu 16.04 and after having everything configured I am not able to synchronize the /etc/passwd with the information of LDAP server. ...
1
vote
1answer
215 views

How do you cleanup after deleting an LDAP user on RHEL 7?

We have a small network using 389 Directory Server for LDAP. We make LDAP users, those users log on to various machines in the network, and then sometimes we delete those users. However, after ...
0
votes
1answer
794 views

Use AD Groups Instead of Linux Groups

On our file server, we are using a bunch of Linux groups that are still in use and need to be replaced by their counterparts in AD. The groups in AD and /etc/groups have an identical name, so, (I'm ...
1
vote
1answer
131 views

Authentication via LDAP: where is ldap_search_ext defined?

There are two RHEL 8 servers which have been provisioned from the same template, with some manual fix and tweaking done manually on the first server only. They allow SSH user authentication via a ...
0
votes
1answer
168 views

Change authentication order GNU/Linux

I've got a CentOS7 server joined to a Windows Active Directory Server. I'm trying to connect to CentOS using my Active Directory credentials but it seems that it checks the local account as first step ...
1
vote
0answers
29 views

Setup OpenLdap on Oracle Linux 6

I am currently trying to setup an openldap server on an Oracle Linux 6 VM (VirtualBox). Packagemanager yum installed openldap version 2.4.40-16. Following this setup guide: https://docs.oracle.com/cd/...
0
votes
0answers
31 views

Can't manage user accounts after using LDAP

I've added a ubuntu machine as an LDAP client by following the below steps. But now when trying to access my user accounts from the user accounts app I can't find any user profiles or information as ...
0
votes
0answers
254 views

slapadd error attribute type undefined

I try to add a new node called slave to my ldap server. But slapadd -l slave.ldif return error: 5cd2e848 <= str2entry: str2ad(address): attribute type undefined slapadd: could not parse entry (...
0
votes
1answer
190 views

lightdm and ldap authentication: how to display connectivity issues

I use LightDM als my display manager, entering user credentials via its greeter login. The system's PAM authenticates against a LDAP server. Unfortunately, the network is unreliable hence the LDAP ...
1
vote
1answer
17 views

How I can create accounts with command lines for my OpenLDAP server?

I'm in a Docker, in a VM (Ubuntu Serv). I have created a OpenLDAP server. I want to know simply : how to create groups and users. My DIT tree : dc=company,dc=com ou=group1 ou=group2 ou=group3 ou=...
0
votes
1answer
487 views

Mount internal drive to all users

I have an internal 8tb harddrive which I want it to be mounted to all users on my machine some of the users are local and some are ldap users. I've created a folder called 8tb in /media/8tb Then I ...
0
votes
0answers
14 views

How can I detect directories mounted via LDAP?

Is there any simple method where I can find information about mount points mounted via LDAP on Red Hat Enterprise Linux?
0
votes
1answer
23 views

Use LDAP Server to log into itself

I have an LDAP server (running 18.04LTS) and a bunch of Linux Ubuntu clients. LDAP works fine and we're just using it to authenticate a couple users. My question is as follows. I'd like to use the ...
3
votes
1answer
2k views

How to configure Linux to authenticate users based on Keycloak user database?

I have an existing user database in Keycloak. I want to build a Linux machine which logs in users according to the user database in Keycloak (username, password). How can I accomplish this?
0
votes
0answers
376 views

Permission denied issue while doing CD even after having group permission

I'm getting Permission denied while doing a cd into directory /tct/foxprod_t2b_002/cilin/cust_test/testcases/level1 and user is a member of this group; other users on the group can easily accessing ...
0
votes
0answers
926 views

How to use chsh with ldap authentication

How to use zsh as default when starting an ssh session to a remote chef server using LDAP for authentication? tom@chef:~$ chsh -s /usr/bin/zsh Password: chsh: user 'tom' does not exist in /etc/passwd ...
2
votes
1answer
135 views

Sorting structured file with bash commands

I need to sort a LDIF file, where several lines belonging to a parent one. Example dn: 2 attr1: b attr2: a attr1: a attr1: c dn: 3 attr2: a attr1: c attr1: b attr1: a dn: 1 attr1: a ...

1
2 3 4 5
7