Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

0
votes
0answers
14 views

pam_ldap detecting expiring password on Active Directory

I am maintaining some code that uses: pam_ldap version 186 which compiles against openldap 2.4.40 We are using Active Directory on Windows 2012 for the LDAP backend. pam_ldap successfully ...
1
vote
0answers
11 views

in ldap make the default bind the current logged in user

I do not want to specify a default bind_dn in the sssd.conf file for ldap (either openldap or active directory). Is it possible to configure the system in a way, that the first logged in user becomes ...
0
votes
1answer
53 views

ldap users unable to ssh to the server

I have configured ldap local server running centos 7, using this article: https://www.itzgeek.com/how-tos/linux/centos-how-tos/step-step-openldap-server-configuration-centos-7-rhel-7.html. Now my ...
2
votes
0answers
96 views

Add LDAP server certificate to trusted list and enable certificate verification

I am trying to use a secure LDAP connection via TLS ldaps://<server_name>:<port> for various applications (e.g. Gitlab). However, the connection raises certificate errors which is due to ...
0
votes
0answers
19 views

Getting Error while using slaptest to copy slapd.conf file to slapd.d

I have created my own slapd.conf files after using slaptest to copy the slapd.conf to /etc/openldap/slap.d/ i am getting the following error. bdb_db_open: database "dc=test,dc=lan": unclean shutdown ...
0
votes
2answers
30 views

Inputting data from a file into a label

I have file contains gigantic data about users. For example: Username:Firstname:Lastname:Telephone number Username:John:anderson:857-201-2213 Username:Sam:Asper:876-590-8223 Username:Adam:marlen:871-...
0
votes
0answers
21 views

configured ldap server rhel 6

I successfully configured ldap server on rhel 6 first time using the steps available on net.But I am not much aware about ldap server. I created two users user1 and user2 on ldap server.and ...
0
votes
1answer
49 views

Is there a display manager that allows setup of wifi connection before logging in?

I'm working on a pam_ldap solution for laptop users, but of course it won't work unless wifi is connected. I won't know ahead of time what wifi network users will be on. I want to emulate how ...
1
vote
1answer
30 views

ssh using OpenLDAP (LDAP) credencials

I have a corporate network with an OpenLDAP installed and functional. I can log in a Linux server in this network using ssh with my profile (user) that is in OpenLDAP. I created a new user with ...
0
votes
1answer
140 views

LDAP ACL to restrict user to only reading their own user attrs

I want to prevent users from accessing anything other than their own data. I've tried implementing the following simple acl (ldif): dn: olcDatabase={1}mdb,cn=config olcAccess: {0}to attrs=...
1
vote
0answers
15 views

Is it possible to pull additional info from LDAP during pam_ldap authentication?

I have additional ldap data that I'd like to store in the user's home when they first log into a client using pam_ldap. However, I can't seem to think of a way to make this work without prompting the ...
1
vote
1answer
92 views

Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password

Dears, I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
0
votes
0answers
71 views

How to find with ldapsearch the DN of a particular Active Directory group?

How can we use ldapsearch to find the full DN of a particular Active Directory group? I've tried to pass it the options -s sub -b "DC=mydomain,DC=com" "(dn=My Group Name)" but it doesn't find it. ...
1
vote
2answers
169 views

OpenLDAP: Deleted user is still listed in the group

I'm currently doing openldap via command line. I added user John and added group devgroup, and I assigned John into devgroup group. When I deleted a user(John) via command line ldapdelete -Y EXTERNAL ...
1
vote
1answer
152 views

How can I run Apache Directory Studio with OpenJDK 10?

I have installed the OpenJDK 10 JRE on my PureOS system with: $ sudo apt install default-jre $ java --version openjdk 10.0.2 2018-07-17 OpenJDK Runtime Environment (build 10.0.2+13-Debian-1) OpenJDK ...
0
votes
3answers
50 views

search for a pattern and always print the first line which contains the cn

I've a file which has the following output: The dn: can can have more rdcPositions. I only need the dn: which has an rdcPositions contains acme#6# The result should print the cn and also the ...
1
vote
0answers
143 views

Permission denied on NFSv4 shared directory with authentication with SSO (OpenLDAP + Kerberos)

I'm trying to set up Single Sign On (SSO) with Kerberos and LDAP but I have an issue with NFSv4 with Kerberos for authentication and encryption (krb5p) service. My environment: 1 server (named ...
1
vote
0answers
177 views

pam_sss access denied with kerberos authentication ok

I'm trying to use sssd with kerberos authentication and ldap on Ubuntu 18.04 (server and client machine). On Ubuntu client side I installed sssd sssd-tools packages. But when I want to log in to alice,...
0
votes
0answers
196 views

Automount LDAP home folders in client machines

I have created couple of users on my ldap, and setup a couple of ubuntu ldap client machines, where users can login with their accounts. I now want to share their home folders and make it centralised ...
0
votes
2answers
674 views

Convert data from LDIF file to CSV

Need to convert selected Attributes from the block of text between blank lines in the LDIF(text) file and convert it to CSV file with comma separated delimiter, similar to below example: Example: ...
1
vote
0answers
26 views

Add new attribute to IPA user info (Linux)

I am not sure its so straightforward on the Linux side. I want to add a new attribute to identify users as Contractor or Government. Is this recommended or possible within LDAP?
1
vote
1answer
68 views

How to create a list of email addresses from ldapsearch result for further processing?

For an automated mailing and to notify user, respective members of a specific group, I am looking for commands or a single command line which provides a list of email addresses and which can be used ...
0
votes
1answer
151 views

How to create a single Authentication point with multiple LDAP servers?

I'm currently into a process of creating a central service system from where users can connect to VMs. My goal with this is to have a single point of authentication for all possible users. The issue ...
-1
votes
1answer
338 views

LDAP distinguished name

What command should I use to get value of the distinguished name? I tried to use ldaupwhoami, but it returns me 4 additional lines, that begin with SASL. SASL/GSSAPI authentication started SASL ...
1
vote
1answer
143 views

Get real IP address Virtualbox for LDAP configuration

I'm planning to setup a LDAP configuration between two ubuntu virtual machines on my windows machine. So I installed two ubuntu 16.04 virtual machines on my windows machine using VirtualBox. Now I ...
0
votes
0answers
49 views

How it possible to use Samba as a Fileserver with AD, but using another LDAP server for SSH-Login?

We have a mixed Linux and Windows environment. There is an active directory server for the Windows side. For the Linux side, we will install an LDAP server. Now we would like to set up a Samba file ...
3
votes
1answer
166 views

sssd or ldap.conf doesn't work without a bindDN and password in RHEL 5, but works in RHEL 6 and 7. Why?

I am trying to use LDAP for authentication. I see it doesn't work with RHEL 5, if we don't provide a bind DN and password, but works in RHEL 6 and 7. From sssd logs, I can understand that it is ...
2
votes
1answer
87 views

OpenLDAP vs Active Directory authentication mechanisms

I am able to log in to an Active Directory using the userPrincipalName attribute of a user objectClass; (e.g. foo@mydomain.com) I have also set up an OpenLDAP server instance to which I can only ...
0
votes
1answer
82 views

Regarding PAM via ldap

I have a question for the authentication between Linux and Windows. When I get an authentication from the OS system such as Linux, then I can use PAM by configuration of "/pam.d". However, it's the ...
0
votes
1answer
25 views

How can I use LDAP as a login server for Linux? [closed]

I'm using Ubuntu 16.04 and OpenLDAP I want to use LDAP to manage my Linux users and groups but I don't know how. I searched Google and I found this: https://www.itzgeek.com/how-tos/linux/ubuntu-how-...
0
votes
1answer
847 views

LDAP server setup with GUI on CentOS7

I have, in the past, set up an LDAP server using OpenSuSE (13.2), which worked well since there was a YaST module which allowed a GUI set-up. Now I have the problem that I must set up an OpenLDAP ...
2
votes
1answer
1k views

How do I clear a user's cached Active Directory password on CentOS 7?

I built a CentOS 7 install on my company laptop and configured it to authenticate to the company AD servers like so: Install packages: yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-...
0
votes
0answers
117 views

ldap search is looking at wrong kerberos ticket

How can I specify the Kerberos ticket to use when running ldapsearch? If it makes a difference, it shouldn't, I am running a Cygwin wrapped Windows machine. Using the following: $ kinit Password ...
0
votes
0answers
52 views

File read permission to LDAP user

I have install openldap server with LAM6.0. Created two users and two groups. And configured ldapclient in another system. I'm able to take ssh client system with LDAP authentication. I want to give ...
0
votes
1answer
277 views

How to restrict user based on ip address in openldap

In organization we have setup ldap using openldap, i access it with GUI phpldapadmin. we have one requirement to allow access some user from specific IPAddress. I searched but still not able to get ...
0
votes
0answers
37 views

LinOTP use userPrincipalName instead of samAccountname

I have LinOTP 2.10.0.4 with freeradius installed. I would like to have, that my users can use the UPN for Login. With samAccountname authentication works fine but UPN din't work out of the box. I ...
0
votes
0answers
24 views

nsscache data correct, linux does not know users and groups

We have an NFS3 server with a new installation of Debian, Kernel 4.9.0-3-amd64 It has been configured with the same set of scripts as other machines that work fully correctly, with the same kernel ...
0
votes
3answers
486 views

find user name through full name / gecos field?

Given a system where the user data comes from e.g. an OpenLDAP database and is not in the /etc/passwd file. Is it possible to search through the getent passwd database and look up the user id/name by ...
0
votes
1answer
165 views

LDAP authentication and default groups

I have multiple RHEL 7.4 servers with LDAP authentication via sssd. Conveniently, my university's LDAP environment has a UIDNumber attribute that is unique for every person. My sssd.conf is at the end ...
0
votes
2answers
91 views

Matching substring within LDAP DN using Awk

I'm looking to parse the output of an LDAP query. I want to retrieve a specific OU value within the DN that I am printing dn: ObjectName=Value,ou=12,ou=Users,dc=example,dc=com I am retrieving 3 ...
0
votes
0answers
251 views

getent passwd suddenly doesn't return UID from /etc/passwd?

My Linux CentOS server is connected to an active directory. In recent days, a user's UID has changed when he logs in with telnet. the getent passwd command returns an UID that is not that in the /etc/...
1
vote
0answers
209 views

Authenticate VNC connections with Local Users

We have some CentOS 7.4 machines that have been configured to authenticate with a local OpenDirectory (macOS server) machine. We want to use user authentication to allow VNC access instead of using ...
0
votes
1answer
148 views

OpenBSD LDAP authentication - ypldap high CPU usage

I have an OpenBSD server with login_ldap, ypldap, ypbind and portmapper is configured according to these guides that I managed to find courtesy of Google. http://obfuscurity.com/2009/08/OpenBSD-as-an-...
0
votes
0answers
134 views

OpenBSD - login_ldap - ypldap - sudo.ldap and handling of remote and local users

I have an OpenBSD server with login_ldap, ypldap, ypbind and portmapper is configured according to these guides that I managed to find courtesy of Google. http://obfuscurity.com/2009/08/OpenBSD-as-an-...
2
votes
1answer
500 views

Authentication mechanism to connect to Windows AD in Linux?

My company has asked me to look into connecting our CentOS 7 instance's to our Active Directory to make it easier for user management. I have so far looked at: Kerberos, doing it via command line - ...
3
votes
1answer
1k views

Can't connect to LDAP accounts with lightdm

I made a fresh install of Linux Mint 18.3 and then established a connection to my LDAP server. I can see the list of LDAP users with getent passwd. The strange thing is that, when I boot, the start up ...
0
votes
1answer
72 views

fix slapcat 79 character line wrap in output

I use slapcat to do a full-text search in our very large ldap directory. As it is easier to match what I am looking for when I don't know where to look. The problem is that it wraps long lines ...
-1
votes
1answer
283 views

PAM Module mkhomedir with an already existing home

I did set up a PAM authentication towards LDAP. It's all working correctly but I have an issue when I have both a local user and an ldap user with the same name but different UID. I'm working on RH6 ...
1
vote
1answer
36 views

OpenDG a Opensource ldap database handling and issues

I recently joined an organization and got privileges to add/remove entries or say attributes to the LDAP (OpenDJ ldap and opensource LINUX base ldap). So far I have added thousand of modification ...
1
vote
4answers
283 views

How to keep users with local sudo rights from having sudo rights on NFS file server?

Imagine this scenario in a LAN: one Linux NFS fileserver (srv) and three Linux clients (A, B, C). There are files / directories on srv with root ownership and no access rights granted to non-root ...