Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Allow LDAP login for selected users only on SLES 12 SP 5

I have configured a LDAP Client on SLES 12 SP5. Now I want to allow only a selected group of users to login to the system. This group comprises 2 or 3 users. For all other users login must be ...
0
votes
0answers
20 views

ldapscript template placeholders

We have our own ldapscript to create new users. I'd like to modify the template that is used for that. For example, I would like to have the cn entry created by combining what was entered for ...
1
vote
1answer
13 views

Unable to authenticate to ldaps with sssd

I have a docker container running debian stretch and sssd 1.15.0. The plan is to use it for SFTP purposes, and to authenticate users through LDAPS. The LDAP provider in this case is Azure Active ...
0
votes
0answers
48 views

Unable to open tdb '/var/lib/sss/db/config.ldb'

I have an Oracle Linux Server release 8.2 system that I recently updated via yum. Before the update ssh could authenticate against a LDAP server, sles linux. In the logs I now see (details below): [...
0
votes
1answer
18 views

Why is LDAP with STARTTLS preferred over LDAPS

I am just wondering why is LDAP with STARTTLS is a more preferred industry standard over LDAPS. LDAPS start the communication with encrypted information to begin with whereas STARTTLS only upgrades to ...
1
vote
1answer
27 views

Sync OpenLDAP - Active Directory

Today, we have an OpenLDAP that works very well. We would like to create a Domain & AD (Windows) that would be populated and synchronized by OpenLDAP. I could read some topics for reverse ...
2
votes
1answer
25 views

Groups from LDAP: “getent” reports membership correctly but missing in output of “id”

I have a Debian 10 machine which uses PAM LDAP for authentication. In LDAP I have two users alice and bob which are both members of group mygroup. Everything has worked fine (so the configuration ...
0
votes
0answers
21 views

How to download certificate from LDAPS (not LDAP) using Linux Utilities?

I tried following in linux: [wildfly@alq-esb-app02 log]$ echo -n | openssl s_client -connect cdc201.cop.copcommon.com:636 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ldapserver.pem ...
1
vote
1answer
26 views

How to extract an attribute from the ldapsearch output

I have an ldap directory which contains some instances of a class called store, like this: # ldapsearch -LLL -x -b "utente=las,dc=labammsis" -s base dn: utente=las,dc=labammsis objectClass: ...
0
votes
0answers
70 views

How to add LDAP user to a local group?

We are trying to add a user in Azure AD to a local group but when we do that we get this error #-> gpasswd -a sjain68 docker gpasswd: user 'sjain68' does not exist It is true this user does not ...
0
votes
1answer
42 views

How to query openLDAP servers cert?

From the "service sssd status" we can see: Could not start TLS encryption. TLS: hostname does not match CN in peer certificate But how could we query the cert to know, that it is really some ...
0
votes
1answer
34 views

LDAP Synchronization with Local Users

How would I go about regularly copying user account data from /etc/passwd on one machine into LDAP? The situation I'm in is that I'm the sysadmin for an academic computer cluster. We have one master ...
0
votes
1answer
53 views

“unable to execute /bin/bash”

We have Ldap running in our environment. Particular user X is provided sudo access on another Y. But when X tries command "sudo -u Y -I". System asks for passwd, after entering the passwd it throws an ...
0
votes
1answer
24 views

Securing OpenLDAP on Debian Buster

would this still be the way of securing an OpenLDAP server on Debian 9 (Stretch) and 10 (Buster). See Section 11.7.3.3. Securing LDAP Data Exchanges. Unfortunately the Debian manual seems to always be ...
0
votes
0answers
21 views

How to add new users by ldapadd command with ldif file?

Make a test.ldif file as cat test.ldif # Add test1 dn: uid=test1,dc=myenv,dc=myorg,dc=local changetype: add objectClass: inetOrgPerson cn: Test 1 ou: orgname sn: test1 uid: test1 Use ldapadd command ...
0
votes
1answer
90 views

pam_ldap: how to hide password hashes in getent output

My question is similar to this. I use pam_ldap for users auth. /etc/nsswitch.conf file contains: passwd: files ldap group: files ldap shadow: files ldap All seems to be OK, ...
0
votes
0answers
21 views

Use Active Directory via LDAPS for login

I have a Fedora 31 installation in a network where we also have an Active Directory. The AD is accessible via LDAPS. What I would like to do now is to use the AD to enable people to log in on the ...
0
votes
0answers
155 views

why does apache 2.4 with ldap authorization and starttls configured still does simple bind?

We have a recent apache 2.4 setup on suse enterprise linux 15 sp1. The apache server has kerberos authentication configured which works fine for authenticating users in a "joined" active directory ...
0
votes
0answers
20 views

Does samba have a chage inactive equivalent?

I am currently working with a slapd(ldap) + samba server, and trying to automatically disable accounts x amount of days after their password expires. chage -Inactive does exactly this, which works ...
0
votes
0answers
17 views

Does Samba have anything similar to /shadow/ sp_inact?

I am running Samba with slapd and I was wondering if there is any function similar to sp_inact — days after password expires that account is considered inactive and disabled. I need to disable ...
0
votes
1answer
35 views

groups command is working but groups <username> is not, inside a docker container. What's the reason?

Inside a docker container, if I type groups it works and gives 'root' in the result but when I type groups <username> it says groups: '<username>': no such user. What is the reason for ...
0
votes
2answers
70 views

how to catch response from server ping and sent alert

I have the below command I'm running: ping ldap.corp.XXXXX.com LDAP Server up: Pinging ldapeu.corp.XXXXX.com [XX.XXX.XXX.XX] with 32 bytes of data: Reply from XX.XXX.XXX.XX: bytes=32 time<1ms ...
0
votes
1answer
688 views

How to authenticate ldap in bash?

I am writing a bash script that needs ldap authenticate to do the next steps. However, I have not found a tool that can auth ldap and return whether the username and password are true. Is there a ...
0
votes
0answers
14 views

Put users into system group by LDAP group membership

Currently users can authenticate via SSSD using their LDAP user account. But there is no way of specifying special group memberships. Now I have a LDAP group like this: The user objects itself does ...
0
votes
2answers
331 views

What will be the best alternative for NIS authentication? [closed]

Please provide me the best alternative for NIS ? As I have currently using NIS + AD authentication but we want to set up a new authentication system. Is there any alternative for NIS and it is ...
0
votes
1answer
498 views

getent only shows some of the users from ldap

I've a couple of Linux servers, one setup as a SAMBA AD (ubuntu 18.04), the other as a member server (ubuntu 16.04) setup as a file server. It was working for a time, but now newer users created (...
0
votes
0answers
301 views

How to do ldapsearch using TLS1.2 from linux

I am trying to establish a connection to an AD/ENT group using ldapsearch. i am unable to connect and getting below error. Error: ldap_bind: Can't contact LDAP server Syntax Used: /opt/oracle/...
0
votes
0answers
79 views

ds-389 won't import 10rfc2307bis.ldif

I've installed the ds-389 LDAP server on CentOS7 (package 389-ds-base). I tried extending the schema by adding the file 10rfc2307bis.ldif to the /etc/dirsrv/slapd-auth/schema folder. After the file ...
2
votes
3answers
3k views

Cisco Jabber for Linux?

Some people at our company are using a so called Cisco Jabber in Windows OS to improve handling of phone calls directly at the PC instead of using the telephone anymore. After installation, one has ...
1
vote
1answer
19 views

How to figure out if a host authenticates via LDAP

I would like to automate a check (in shells script) that verifies whether the account that is currently logged in is a local account or whether it authenticates via LDAP. Since there are various ...
0
votes
0answers
201 views

ldap home directory permission issue on debian/ubuntu

I have joined the debian9 machine to microsoft AD when i run su - test1 it create the home directory but with below permission. root@debiantest:/home# ls -ltr drwxr-xr-x 2 test1 data 4096 Sep 18 22:...
2
votes
1answer
123 views

sudo-ldap works with !authenticate only

I'm trying to setup sudo-ldap in a clean CentOS 7 docker environment. I've successfully setup sssd and PAM authentication, and it works. However, sudo-ldap works only if !authenticate is set: dn: cn=...
1
vote
1answer
54 views

Linux LoginServer

I want a Linux server with the user accounts. The users will see a login screen after boot. So they can directly login on the server without noticing it. The user folders are also saved there, like ...
2
votes
2answers
262 views

Restricting openldap ldapsearch on attributes

I have the following query against my directory: ldapsearch -x -H ldaps://example.com -D "cn=gitlab,ou=Service Accounts,dc=example,dc=com" -w foobar -b "ou=Persons,dc=example,dc=com" With the ...
1
vote
1answer
85 views

LDAP connection through proxy

I have the following infrastructure: LDAP (Externe network) - SQUID - HOST1,HOST2,HOST3... All of them are Ubuntu Server. I need to be able to make LDAPS requests from the hosts through port 636, ...
0
votes
0answers
28 views

authenticate against LDAP on HP UX

Trying to develop a program that can only grant access to legitimate LDAP users. PHP has been compiled without LDAP support, so this will have to be effected through the a command line tool. Is there ...
1
vote
1answer
22 views

Make a user log in for a host valid for all the other hosts in the same domain

Assume that several machines with Unix-like OSs are connected to a server, which for example runs LDAP. Its database includes many users: one of them is testuser. This way, testuser can perform a ...
2
votes
0answers
231 views

Overlapping local and LDAP usernames

We have several RHEL 6/7/8 machines where user authentication is done through LDAP. One of our sysadmins would like to set up local accounts for some users on some machines, with the local username ...
1
vote
1answer
317 views

cannot authenticate via LDAP as user has multiple UIDs

Upgrading from SLES11 to SLES 12 I had to replace a working Cyrus mail server with dovecot. Unfortunately I'm unable to authenticate via LDAP (which was not a problem with Cyrus): My LDAP user has ...
2
votes
1answer
758 views

User listed in group but not in getent passwd

On a specific machine with both local users and LDAP users, there is a user that is listed under getent group foo (let's say the user jdoe is listed), but when doing getent passwd jdoe I get no output....
0
votes
0answers
47 views

LDAP (Windows) login on Debian9

I've configured my Debian9 with Kerberus5, Samba and Winbind to login on a windows domain, all the configuration is already set and I've already tested it (it works!), but when I try to realize my ...
0
votes
1answer
182 views

Pamldap connection refused

I am trying to set up the ssh access through pamldap in Ubuntu 16.04 and after having everything configured I am not able to synchronize the /etc/passwd with the information of LDAP server. ...
1
vote
1answer
447 views

How do you cleanup after deleting an LDAP user on RHEL 7?

We have a small network using 389 Directory Server for LDAP. We make LDAP users, those users log on to various machines in the network, and then sometimes we delete those users. However, after ...
0
votes
1answer
2k views

Use AD Groups Instead of Linux Groups

On our file server, we are using a bunch of Linux groups that are still in use and need to be replaced by their counterparts in AD. The groups in AD and /etc/groups have an identical name, so, (I'm ...
1
vote
1answer
217 views

Authentication via LDAP: where is ldap_search_ext defined?

There are two RHEL 8 servers which have been provisioned from the same template, with some manual fix and tweaking done manually on the first server only. They allow SSH user authentication via a ...
0
votes
1answer
264 views

Change authentication order GNU/Linux

I've got a CentOS7 server joined to a Windows Active Directory Server. I'm trying to connect to CentOS using my Active Directory credentials but it seems that it checks the local account as first step ...
1
vote
0answers
41 views

Setup OpenLdap on Oracle Linux 6

I am currently trying to setup an openldap server on an Oracle Linux 6 VM (VirtualBox). Packagemanager yum installed openldap version 2.4.40-16. Following this setup guide: https://docs.oracle.com/cd/...
0
votes
1answer
279 views

lightdm and ldap authentication: how to display connectivity issues

I use LightDM als my display manager, entering user credentials via its greeter login. The system's PAM authenticates against a LDAP server. Unfortunately, the network is unreliable hence the LDAP ...
1
vote
1answer
18 views

How I can create accounts with command lines for my OpenLDAP server?

I'm in a Docker, in a VM (Ubuntu Serv). I have created a OpenLDAP server. I want to know simply : how to create groups and users. My DIT tree : dc=company,dc=com ou=group1 ou=group2 ou=group3 ou=...
0
votes
1answer
1k views

Mount internal drive to all users

I have an internal 8tb harddrive which I want it to be mounted to all users on my machine some of the users are local and some are ldap users. I've created a folder called 8tb in /media/8tb Then I ...

1
2 3 4 5
7