Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

0
votes
0answers
11 views

How can I detect directories mounted via LDAP?

Is there any simple method where I can find information about mount points mounted via LDAP on Red Hat Enterprise Linux?
0
votes
1answer
18 views

Use LDAP Server to log into itself

I have an LDAP server (running 18.04LTS) and a bunch of Linux Ubuntu clients. LDAP works fine and we're just using it to authenticate a couple users. My question is as follows. I'd like to use the ...
0
votes
0answers
23 views

I want to install all glpi extensions via putty

I configured my glpi package on wamp server on local, and when I transfer it to my OVH server using Winscp, the GLPI package seems to be missing some extensions like ldap, imap, APCu, xmlrpc, CAS and ...
1
vote
1answer
79 views

How to configure Linux to authenticate users based on Keycloak user database?

I have an existing user database in Keycloak. I want to build a Linux machine which logs in users according to the user database in Keycloak (username, password). How can I accomplish this?
0
votes
0answers
30 views

AD User Permission Denied

Currently having an issue with one Server which will not allow any logins for users within Our Active Directory. I am running Ubuntu 16.04 all servers were configured the same way but only one is ...
0
votes
0answers
56 views

Permission denied issue while doing CD even after having group permission

I'm getting Permission denied while doing a cd into directory /tct/foxprod_t2b_002/cilin/cust_test/testcases/level1 and user is a member of this group; other users on the group can easily accessing ...
0
votes
0answers
89 views

How to use chsh with ldap authentication

How to use zsh as default when starting an ssh session to a remote chef server using LDAP for authentication? tom@chef:~$ chsh -s /usr/bin/zsh Password: chsh: user 'tom' does not exist in /etc/passwd ...
0
votes
0answers
47 views

login not working from new tty but with su <username> works

I'm installing LDAP auth on CentOs7 (command-line way). I'm facing a strange behaviour: [root@client]# su ldapuser01 (run as root) works and let me connect as ldap user (without prompting for a ...
0
votes
0answers
26 views

FreeIPA User management: create user and activate user split in two roles

Objective: FreeIPA Helpdesk user A is permitted to create new stage users; new accounts are by default disabled. Activation requires any other member of Helpdesk than user A to go in and enable the ...
2
votes
1answer
54 views

Sorting structured file with bash commands

I need to sort a LDIF file, where several lines belonging to a parent one. Example dn: 2 attr1: b attr2: a attr1: a attr1: c dn: 3 attr2: a attr1: c attr1: b attr1: a dn: 1 attr1: a ...
0
votes
0answers
432 views

sssd: AD user cannot login in RHEL 7

I can switch to the mentioned domain user with su command from the server, but ssh login is failing. The user domain group is already added in sssd.conf file under "simple_allow_groups" The errors in ...
1
vote
1answer
58 views

ldap on debian, and ubuntu

I am currently changing my Linux client from Ubuntu 16.04 to Debian 9.6, and I am trying to setup LDAP client authentication to debian machine. While setup, I noticed that the following command does ...
0
votes
0answers
10 views

After SLES Migration LDAP does not start with TLS error

We had to migrate an existing physical Server running SLES to a virtual machine running on ESXi 6.5. The migration was done with VMware vCenter Converter. All the data was copied without problems - ...
1
vote
3answers
232 views

Allow AD group to access samba share

On my Linux I created a samba share like this, it was working fine. [global] security = user passdb backend = tdbsam map to guest = Bad User guest account = mcms [mml-t1] path = /...
1
vote
0answers
15 views

in ldap make the default bind the current logged in user

I do not want to specify a default bind_dn in the sssd.conf file for ldap (either openldap or active directory). Is it possible to configure the system in a way, that the first logged in user becomes ...
2
votes
1answer
899 views

ldap users unable to ssh to the server

I have configured ldap local server running centos 7, using this article: https://www.itzgeek.com/how-tos/linux/centos-how-tos/step-step-openldap-server-configuration-centos-7-rhel-7.html. Now my ...
2
votes
0answers
1k views

Add LDAP server certificate to trusted list and enable certificate verification

I am trying to use a secure LDAP connection via TLS ldaps://<server_name>:<port> for various applications (e.g. Gitlab). However, the connection raises certificate errors which is due to ...
0
votes
2answers
32 views

Inputting data from a file into a label

I have file contains gigantic data about users. For example: Username:Firstname:Lastname:Telephone number Username:John:anderson:857-201-2213 Username:Sam:Asper:876-590-8223 Username:Adam:marlen:871-...
0
votes
1answer
75 views

Is there a display manager that allows setup of wifi connection before logging in?

I'm working on a pam_ldap solution for laptop users, but of course it won't work unless wifi is connected. I won't know ahead of time what wifi network users will be on. I want to emulate how ...
1
vote
1answer
140 views

ssh using OpenLDAP (LDAP) credencials

I have a corporate network with an OpenLDAP installed and functional. I can log in a Linux server in this network using ssh with my profile (user) that is in OpenLDAP. I created a new user with ...
0
votes
1answer
315 views

LDAP ACL to restrict user to only reading their own user attrs

I want to prevent users from accessing anything other than their own data. I've tried implementing the following simple acl (ldif): dn: olcDatabase={1}mdb,cn=config olcAccess: {0}to attrs=...
1
vote
0answers
20 views

Is it possible to pull additional info from LDAP during pam_ldap authentication?

I have additional ldap data that I'd like to store in the user's home when they first log into a client using pam_ldap. However, I can't seem to think of a way to make this work without prompting the ...
1
vote
1answer
278 views

Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password

Dears, I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
0
votes
0answers
103 views

How to find with ldapsearch the DN of a particular Active Directory group?

How can we use ldapsearch to find the full DN of a particular Active Directory group? I've tried to pass it the options -s sub -b "DC=mydomain,DC=com" "(dn=My Group Name)" but it doesn't find it. ...
2
votes
2answers
600 views

OpenLDAP: Deleted user is still listed in the group

I'm currently doing openldap via command line. I added user John and added group devgroup, and I assigned John into devgroup group. When I deleted a user(John) via command line ldapdelete -Y EXTERNAL ...
1
vote
1answer
402 views

How can I run Apache Directory Studio with OpenJDK 10?

I have installed the OpenJDK 10 JRE on my PureOS system with: $ sudo apt install default-jre $ java --version openjdk 10.0.2 2018-07-17 OpenJDK Runtime Environment (build 10.0.2+13-Debian-1) OpenJDK ...
0
votes
3answers
51 views

search for a pattern and always print the first line which contains the cn

I've a file which has the following output: The dn: can can have more rdcPositions. I only need the dn: which has an rdcPositions contains acme#6# The result should print the cn and also the ...
1
vote
0answers
253 views

Permission denied on NFSv4 shared directory with authentication with SSO (OpenLDAP + Kerberos)

I'm trying to set up Single Sign On (SSO) with Kerberos and LDAP but I have an issue with NFSv4 with Kerberos for authentication and encryption (krb5p) service. My environment: 1 server (named ...
1
vote
0answers
318 views

pam_sss access denied with kerberos authentication ok [closed]

I'm trying to use sssd with kerberos authentication and ldap on Ubuntu 18.04 (server and client machine). On Ubuntu client side I installed sssd sssd-tools packages. But when I want to log in to alice,...
0
votes
0answers
409 views

Automount LDAP home folders in client machines

I have created couple of users on my ldap, and setup a couple of ubuntu ldap client machines, where users can login with their accounts. I now want to share their home folders and make it centralised ...
1
vote
3answers
1k views

Convert data from LDIF file to CSV

Need to convert selected Attributes from the block of text between blank lines in the LDIF(text) file and convert it to CSV file with comma separated delimiter, similar to below example: Example: ...
1
vote
0answers
48 views

Add new attribute to IPA user info (Linux)

I am not sure its so straightforward on the Linux side. I want to add a new attribute to identify users as Contractor or Government. Is this recommended or possible within LDAP?
1
vote
1answer
342 views

How to create a list of email addresses from ldapsearch result for further processing?

For an automated mailing and to notify user, respective members of a specific group, I am looking for commands or a single command line which provides a list of email addresses and which can be used ...
0
votes
1answer
398 views

How to create a single Authentication point with multiple LDAP servers?

I'm currently into a process of creating a central service system from where users can connect to VMs. My goal with this is to have a single point of authentication for all possible users. The issue ...
-1
votes
1answer
573 views

LDAP distinguished name

What command should I use to get value of the distinguished name? I tried to use ldaupwhoami, but it returns me 4 additional lines, that begin with SASL. SASL/GSSAPI authentication started SASL ...
1
vote
1answer
211 views

Get real IP address Virtualbox for LDAP configuration

I'm planning to setup a LDAP configuration between two ubuntu virtual machines on my windows machine. So I installed two ubuntu 16.04 virtual machines on my windows machine using VirtualBox. Now I ...
0
votes
0answers
54 views

How it possible to use Samba as a Fileserver with AD, but using another LDAP server for SSH-Login?

We have a mixed Linux and Windows environment. There is an active directory server for the Windows side. For the Linux side, we will install an LDAP server. Now we would like to set up a Samba file ...
3
votes
1answer
209 views

sssd or ldap.conf doesn't work without a bindDN and password in RHEL 5, but works in RHEL 6 and 7. Why?

I am trying to use LDAP for authentication. I see it doesn't work with RHEL 5, if we don't provide a bind DN and password, but works in RHEL 6 and 7. From sssd logs, I can understand that it is ...
2
votes
1answer
267 views

OpenLDAP vs Active Directory authentication mechanisms

I am able to log in to an Active Directory using the userPrincipalName attribute of a user objectClass; (e.g. foo@mydomain.com) I have also set up an OpenLDAP server instance to which I can only ...
0
votes
1answer
105 views

Regarding PAM via ldap

I have a question for the authentication between Linux and Windows. When I get an authentication from the OS system such as Linux, then I can use PAM by configuration of "/pam.d". However, it's the ...
0
votes
1answer
31 views

How can I use LDAP as a login server for Linux? [closed]

I'm using Ubuntu 16.04 and OpenLDAP I want to use LDAP to manage my Linux users and groups but I don't know how. I searched Google and I found this: https://www.itzgeek.com/how-tos/linux/ubuntu-how-...
0
votes
1answer
1k views

LDAP server setup with GUI on CentOS7

I have, in the past, set up an LDAP server using OpenSuSE (13.2), which worked well since there was a YaST module which allowed a GUI set-up. Now I have the problem that I must set up an OpenLDAP ...
3
votes
1answer
2k views

How do I clear a user's cached Active Directory password on CentOS 7?

I built a CentOS 7 install on my company laptop and configured it to authenticate to the company AD servers like so: Install packages: yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-...
0
votes
0answers
202 views

ldap search is looking at wrong kerberos ticket

How can I specify the Kerberos ticket to use when running ldapsearch? If it makes a difference, it shouldn't, I am running a Cygwin wrapped Windows machine. Using the following: $ kinit Password ...
0
votes
0answers
62 views

File read permission to LDAP user

I have install openldap server with LAM6.0. Created two users and two groups. And configured ldapclient in another system. I'm able to take ssh client system with LDAP authentication. I want to give ...
0
votes
1answer
511 views

How to restrict user based on ip address in openldap

In organization we have setup ldap using openldap, i access it with GUI phpldapadmin. we have one requirement to allow access some user from specific IPAddress. I searched but still not able to get ...
0
votes
0answers
48 views

LinOTP use userPrincipalName instead of samAccountname

I have LinOTP 2.10.0.4 with freeradius installed. I would like to have, that my users can use the UPN for Login. With samAccountname authentication works fine but UPN din't work out of the box. I ...
0
votes
0answers
28 views

nsscache data correct, linux does not know users and groups

We have an NFS3 server with a new installation of Debian, Kernel 4.9.0-3-amd64 It has been configured with the same set of scripts as other machines that work fully correctly, with the same kernel ...
0
votes
3answers
835 views

find user name through full name / gecos field?

Given a system where the user data comes from e.g. an OpenLDAP database and is not in the /etc/passwd file. Is it possible to search through the getent passwd database and look up the user id/name by ...
0
votes
1answer
314 views

LDAP authentication and default groups

I have multiple RHEL 7.4 servers with LDAP authentication via sssd. Conveniently, my university's LDAP environment has a UIDNumber attribute that is unique for every person. My sssd.conf is at the end ...