Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
-2
votes
0answers
15 views

Can ldap search retrives user without successful bind

would it be possible to know the LDAP records without binding to LDAP server ? or would it be possible to query our single sign on using our own password credentials.
2
votes
0answers
27 views

Overlapping local and LDAP usernames

We have several RHEL 6/7/8 machines where user authentication is done through LDAP. One of our sysadmins would like to set up local accounts for some users on some machines, with the local username ...
1
vote
1answer
22 views

cannot authenticate via LDAP as user has multiple UIDs

Upgrading from SLES11 to SLES 12 I had to replace a working Cyrus mail server with dovecot. Unfortunately I'm unable to authenticate via LDAP (which was not a problem with Cyrus): My LDAP user has ...
2
votes
0answers
35 views

User listed in group but not in getent passwd

On a specific machine with both local users and LDAP users, there is a user that is listed under getent group foo (let's say the user jdoe is listed), but when doing getent passwd jdoe I get no output....
0
votes
0answers
33 views

LDAP (Windows) login on Debian9

I've configured my Debian9 with Kerberus5, Samba and Winbind to login on a windows domain, all the configuration is already set and I've already tested it (it works!), but when I try to realize my ...
0
votes
0answers
9 views

Authentication nslcd with ssh key from AD

Nslcd support ssh key authentication, i can login correct with password. But with ssh key i can't login. Can with map or filter get the ssh key from AD ? Cheers
0
votes
1answer
15 views

Pamldap connection refused

I am trying to set up the ssh access through pamldap in Ubuntu 16.04 and after having everything configured I am not able to synchronize the /etc/passwd with the information of LDAP server. ...
1
vote
0answers
31 views

How do you cleanup after deleting an LDAP user on RHEL 7?

We have a small network using 389 Directory Server for LDAP. We make LDAP users, those users log on to various machines in the network, and then sometimes we delete those users. However, after ...
0
votes
1answer
59 views

Use AD Groups Instead of Linux Groups

On our file server, we are using a bunch of Linux groups that are still in use and need to be replaced by their counterparts in AD. The groups in AD and /etc/groups have an identical name, so, (I'm ...
1
vote
1answer
39 views

Authentication via LDAP: where is ldap_search_ext defined?

There are two RHEL 8 servers which have been provisioned from the same template, with some manual fix and tweaking done manually on the first server only. They allow SSH user authentication via a ...
0
votes
1answer
40 views

Change authentication order GNU/Linux

I've got a CentOS7 server joined to a Windows Active Directory Server. I'm trying to connect to CentOS using my Active Directory credentials but it seems that it checks the local account as first step ...
0
votes
0answers
15 views

Setup OpenLdap on Oracle Linux 6

I am currently trying to setup an openldap server on an Oracle Linux 6 VM (VirtualBox). Packagemanager yum installed openldap version 2.4.40-16. Following this setup guide: https://docs.oracle.com/cd/...
0
votes
0answers
16 views

Can't manage user accounts after using LDAP

I've added a ubuntu machine as an LDAP client by following the below steps. But now when trying to access my user accounts from the user accounts app I can't find any user profiles or information as ...
0
votes
0answers
111 views

slapadd error attribute type undefined

I try to add a new node called slave to my ldap server. But slapadd -l slave.ldif return error: 5cd2e848 <= str2entry: str2ad(address): attribute type undefined slapadd: could not parse entry (...
0
votes
1answer
51 views

lightdm and ldap authentication: how to display connectivity issues

I use LightDM als my display manager, entering user credentials via its greeter login. The system's PAM authenticates against a LDAP server. Unfortunately, the network is unreliable hence the LDAP ...
1
vote
1answer
16 views

How I can create accounts with command lines for my OpenLDAP server?

I'm in a Docker, in a VM (Ubuntu Serv). I have created a OpenLDAP server. I want to know simply : how to create groups and users. My DIT tree : dc=company,dc=com ou=group1 ou=group2 ou=group3 ou=...
0
votes
1answer
35 views

Mount internal drive to all users

I have an internal 8tb harddrive which I want it to be mounted to all users on my machine some of the users are local and some are ldap users. I've created a folder called 8tb in /media/8tb Then I ...
0
votes
0answers
14 views

How can I detect directories mounted via LDAP?

Is there any simple method where I can find information about mount points mounted via LDAP on Red Hat Enterprise Linux?
0
votes
1answer
20 views

Use LDAP Server to log into itself

I have an LDAP server (running 18.04LTS) and a bunch of Linux Ubuntu clients. LDAP works fine and we're just using it to authenticate a couple users. My question is as follows. I'd like to use the ...
0
votes
0answers
36 views

I want to install all glpi extensions via putty

I configured my glpi package on wamp server on local, and when I transfer it to my OVH server using Winscp, the GLPI package seems to be missing some extensions like ldap, imap, APCu, xmlrpc, CAS and ...
2
votes
1answer
403 views

How to configure Linux to authenticate users based on Keycloak user database?

I have an existing user database in Keycloak. I want to build a Linux machine which logs in users according to the user database in Keycloak (username, password). How can I accomplish this?
0
votes
0answers
104 views

AD User Permission Denied

Currently having an issue with one Server which will not allow any logins for users within Our Active Directory. I am running Ubuntu 16.04 all servers were configured the same way but only one is ...
0
votes
0answers
117 views

Permission denied issue while doing CD even after having group permission

I'm getting Permission denied while doing a cd into directory /tct/foxprod_t2b_002/cilin/cust_test/testcases/level1 and user is a member of this group; other users on the group can easily accessing ...
0
votes
0answers
293 views

How to use chsh with ldap authentication

How to use zsh as default when starting an ssh session to a remote chef server using LDAP for authentication? tom@chef:~$ chsh -s /usr/bin/zsh Password: chsh: user 'tom' does not exist in /etc/passwd ...
0
votes
0answers
48 views

login not working from new tty but with su <username> works

I'm installing LDAP auth on CentOs7 (command-line way). I'm facing a strange behaviour: [root@client]# su ldapuser01 (run as root) works and let me connect as ldap user (without prompting for a ...
0
votes
0answers
67 views

FreeIPA User management: create user and activate user split in two roles

Objective: FreeIPA Helpdesk user A is permitted to create new stage users; new accounts are by default disabled. Activation requires any other member of Helpdesk than user A to go in and enable the ...
2
votes
1answer
59 views

Sorting structured file with bash commands

I need to sort a LDIF file, where several lines belonging to a parent one. Example dn: 2 attr1: b attr2: a attr1: a attr1: c dn: 3 attr2: a attr1: c attr1: b attr1: a dn: 1 attr1: a ...
0
votes
0answers
989 views

sssd: AD user cannot login in RHEL 7

I can switch to the mentioned domain user with su command from the server, but ssh login is failing. The user domain group is already added in sssd.conf file under "simple_allow_groups" The errors in ...
1
vote
1answer
73 views

ldap on debian, and ubuntu

I am currently changing my Linux client from Ubuntu 16.04 to Debian 9.6, and I am trying to setup LDAP client authentication to debian machine. While setup, I noticed that the following command does ...
0
votes
0answers
11 views

After SLES Migration LDAP does not start with TLS error

We had to migrate an existing physical Server running SLES to a virtual machine running on ESXi 6.5. The migration was done with VMware vCenter Converter. All the data was copied without problems - ...
1
vote
3answers
712 views

Allow AD group to access samba share

On my Linux I created a samba share like this, it was working fine. [global] security = user passdb backend = tdbsam map to guest = Bad User guest account = mcms [mml-t1] path = /...
1
vote
0answers
20 views

in ldap make the default bind the current logged in user

I do not want to specify a default bind_dn in the sssd.conf file for ldap (either openldap or active directory). Is it possible to configure the system in a way, that the first logged in user becomes ...
2
votes
1answer
2k views

ldap users unable to ssh to the server

I have configured ldap local server running centos 7, using this article: https://www.itzgeek.com/how-tos/linux/centos-how-tos/step-step-openldap-server-configuration-centos-7-rhel-7.html. Now my ...
2
votes
0answers
2k views

Add LDAP server certificate to trusted list and enable certificate verification

I am trying to use a secure LDAP connection via TLS ldaps://<server_name>:<port> for various applications (e.g. Gitlab). However, the connection raises certificate errors which is due to ...
0
votes
2answers
32 views

Inputting data from a file into a label

I have file contains gigantic data about users. For example: Username:Firstname:Lastname:Telephone number Username:John:anderson:857-201-2213 Username:Sam:Asper:876-590-8223 Username:Adam:marlen:871-...
0
votes
1answer
86 views

Is there a display manager that allows setup of wifi connection before logging in?

I'm working on a pam_ldap solution for laptop users, but of course it won't work unless wifi is connected. I won't know ahead of time what wifi network users will be on. I want to emulate how ...
1
vote
1answer
283 views

ssh using OpenLDAP (LDAP) credencials

I have a corporate network with an OpenLDAP installed and functional. I can log in a Linux server in this network using ssh with my profile (user) that is in OpenLDAP. I created a new user with ...
0
votes
1answer
424 views

LDAP ACL to restrict user to only reading their own user attrs

I want to prevent users from accessing anything other than their own data. I've tried implementing the following simple acl (ldif): dn: olcDatabase={1}mdb,cn=config olcAccess: {0}to attrs=...
1
vote
0answers
26 views

Is it possible to pull additional info from LDAP during pam_ldap authentication?

I have additional ldap data that I'd like to store in the user's home when they first log into a client using pam_ldap. However, I can't seem to think of a way to make this work without prompting the ...
1
vote
1answer
348 views

Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password

Dears, I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
0
votes
0answers
120 views

How to find with ldapsearch the DN of a particular Active Directory group?

How can we use ldapsearch to find the full DN of a particular Active Directory group? I've tried to pass it the options -s sub -b "DC=mydomain,DC=com" "(dn=My Group Name)" but it doesn't find it. ...
2
votes
2answers
963 views

OpenLDAP: Deleted user is still listed in the group

I'm currently doing openldap via command line. I added user John and added group devgroup, and I assigned John into devgroup group. When I deleted a user(John) via command line ldapdelete -Y EXTERNAL ...
1
vote
1answer
624 views

How can I run Apache Directory Studio with OpenJDK 10?

I have installed the OpenJDK 10 JRE on my PureOS system with: $ sudo apt install default-jre $ java --version openjdk 10.0.2 2018-07-17 OpenJDK Runtime Environment (build 10.0.2+13-Debian-1) OpenJDK ...
0
votes
3answers
51 views

search for a pattern and always print the first line which contains the cn

I've a file which has the following output: The dn: can can have more rdcPositions. I only need the dn: which has an rdcPositions contains acme#6# The result should print the cn and also the ...
1
vote
0answers
290 views

Permission denied on NFSv4 shared directory with authentication with SSO (OpenLDAP + Kerberos)

I'm trying to set up Single Sign On (SSO) with Kerberos and LDAP but I have an issue with NFSv4 with Kerberos for authentication and encryption (krb5p) service. My environment: 1 server (named ...
1
vote
0answers
380 views

pam_sss access denied with kerberos authentication ok [closed]

I'm trying to use sssd with kerberos authentication and ldap on Ubuntu 18.04 (server and client machine). On Ubuntu client side I installed sssd sssd-tools packages. But when I want to log in to alice,...
0
votes
0answers
491 views

Automount LDAP home folders in client machines

I have created couple of users on my ldap, and setup a couple of ubuntu ldap client machines, where users can login with their accounts. I now want to share their home folders and make it centralised ...
2
votes
3answers
2k views

Convert data from LDIF file to CSV

Need to convert selected Attributes from the block of text between blank lines in the LDIF(text) file and convert it to CSV file with comma separated delimiter, similar to below example: Example: ...
1
vote
0answers
59 views

Add new attribute to IPA user info (Linux)

I am not sure its so straightforward on the Linux side. I want to add a new attribute to identify users as Contractor or Government. Is this recommended or possible within LDAP?
1
vote
1answer
732 views

How to create a list of email addresses from ldapsearch result for further processing?

For an automated mailing and to notify user, respective members of a specific group, I am looking for commands or a single command line which provides a list of email addresses and which can be used ...