The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
1
vote
1answer
17 views

How to figure out if a host authenticates via LDAP

I would like to automate a check (in shells script) that verifies whether the account that is currently logged in is a local account or whether it authenticates via LDAP. Since there are various ...
0
votes
0answers
16 views

LDAP disable local account, and pub/private key on centos

I am currently setting LDAP/krb5 on Centos7. I followed the instruction on: https://wiki.cac.washington.edu/display/LDI/Configuring+Linux+Clients+for+LDI (thanks to Eric) http://staff.washington.edu/...
0
votes
0answers
21 views

ldap home directory permission issue on debian/ubuntu

I have joined the debian9 machine to microsoft AD when i run su - test1 it create the home directory but with below permission. root@debiantest:/home# ls -ltr drwxr-xr-x 2 test1 data 4096 Sep 18 22:...
2
votes
1answer
16 views

sudo-ldap works with !authenticate only

I'm trying to setup sudo-ldap in a clean CentOS 7 docker environment. I've successfully setup sssd and PAM authentication, and it works. However, sudo-ldap works only if !authenticate is set: dn: cn=...
1
vote
1answer
40 views

Linux LoginServer

I want a Linux server with the user accounts. The users will see a login screen after boot. So they can directly login on the server without noticing it. The user folders are also saved there, like ...
2
votes
2answers
35 views

Restricting openldap ldapsearch on attributes

I have the following query against my directory: ldapsearch -x -H ldaps://example.com -D "cn=gitlab,ou=Service Accounts,dc=example,dc=com" -w foobar -b "ou=Persons,dc=example,dc=com" With the ...
1
vote
1answer
12 views

LDAP connection through proxy

I have the following infrastructure: LDAP (Externe network) - SQUID - HOST1,HOST2,HOST3... All of them are Ubuntu Server. I need to be able to make LDAPS requests from the hosts through port 636, ...
0
votes
0answers
22 views

authenticate against LDAP on HP UX

Trying to develop a program that can only grant access to legitimate LDAP users. PHP has been compiled without LDAP support, so this will have to be effected through the a command line tool. Is there ...
0
votes
0answers
17 views

Redirect ldapsearch ldiff from Docker container to host while displaying password promt

Having an ApacheDS LDAP DC in a Docker container, I want to export it as ldiff to the host (not inside the container): docker exec -it apache-ds sh -c 'ldapsearch -D "uid=admin,ou=system" -W -p 10389 ...
0
votes
0answers
64 views

How to Use Single-Sign-On/Custom Auth/Django-login Authentication for Linux PAM?

I have a web application and i want to let all my application-users to access vsftpd server with the same login credentials. At any time, single source of truth for authentication should be my web ...
1
vote
1answer
17 views

Make a user log in for a host valid for all the other hosts in the same domain

Assume that several machines with Unix-like OSs are connected to a server, which for example runs LDAP. Its database includes many users: one of them is testuser. This way, testuser can perform a ...
2
votes
0answers
35 views

Overlapping local and LDAP usernames

We have several RHEL 6/7/8 machines where user authentication is done through LDAP. One of our sysadmins would like to set up local accounts for some users on some machines, with the local username ...
1
vote
1answer
36 views

cannot authenticate via LDAP as user has multiple UIDs

Upgrading from SLES11 to SLES 12 I had to replace a working Cyrus mail server with dovecot. Unfortunately I'm unable to authenticate via LDAP (which was not a problem with Cyrus): My LDAP user has ...
2
votes
1answer
241 views

User listed in group but not in getent passwd

On a specific machine with both local users and LDAP users, there is a user that is listed under getent group foo (let's say the user jdoe is listed), but when doing getent passwd jdoe I get no output....
0
votes
0answers
38 views

LDAP (Windows) login on Debian9

I've configured my Debian9 with Kerberus5, Samba and Winbind to login on a windows domain, all the configuration is already set and I've already tested it (it works!), but when I try to realize my ...
0
votes
0answers
12 views

Authentication nslcd with ssh key from AD

Nslcd support ssh key authentication, i can login correct with password. But with ssh key i can't login. Can with map or filter get the ssh key from AD ? Cheers
0
votes
1answer
32 views

Pamldap connection refused

I am trying to set up the ssh access through pamldap in Ubuntu 16.04 and after having everything configured I am not able to synchronize the /etc/passwd with the information of LDAP server. ...
1
vote
1answer
70 views

How do you cleanup after deleting an LDAP user on RHEL 7?

We have a small network using 389 Directory Server for LDAP. We make LDAP users, those users log on to various machines in the network, and then sometimes we delete those users. However, after ...
0
votes
1answer
231 views

Use AD Groups Instead of Linux Groups

On our file server, we are using a bunch of Linux groups that are still in use and need to be replaced by their counterparts in AD. The groups in AD and /etc/groups have an identical name, so, (I'm ...
1
vote
1answer
86 views

Authentication via LDAP: where is ldap_search_ext defined?

There are two RHEL 8 servers which have been provisioned from the same template, with some manual fix and tweaking done manually on the first server only. They allow SSH user authentication via a ...
0
votes
1answer
88 views

Change authentication order GNU/Linux

I've got a CentOS7 server joined to a Windows Active Directory Server. I'm trying to connect to CentOS using my Active Directory credentials but it seems that it checks the local account as first step ...
1
vote
0answers
21 views

Setup OpenLdap on Oracle Linux 6

I am currently trying to setup an openldap server on an Oracle Linux 6 VM (VirtualBox). Packagemanager yum installed openldap version 2.4.40-16. Following this setup guide: https://docs.oracle.com/cd/...
0
votes
0answers
18 views

Can't manage user accounts after using LDAP

I've added a ubuntu machine as an LDAP client by following the below steps. But now when trying to access my user accounts from the user accounts app I can't find any user profiles or information as ...
0
votes
0answers
170 views

slapadd error attribute type undefined

I try to add a new node called slave to my ldap server. But slapadd -l slave.ldif return error: 5cd2e848 <= str2entry: str2ad(address): attribute type undefined slapadd: could not parse entry (...
0
votes
1answer
91 views

lightdm and ldap authentication: how to display connectivity issues

I use LightDM als my display manager, entering user credentials via its greeter login. The system's PAM authenticates against a LDAP server. Unfortunately, the network is unreliable hence the LDAP ...
1
vote
1answer
16 views

How I can create accounts with command lines for my OpenLDAP server?

I'm in a Docker, in a VM (Ubuntu Serv). I have created a OpenLDAP server. I want to know simply : how to create groups and users. My DIT tree : dc=company,dc=com ou=group1 ou=group2 ou=group3 ou=...
0
votes
1answer
79 views

Mount internal drive to all users

I have an internal 8tb harddrive which I want it to be mounted to all users on my machine some of the users are local and some are ldap users. I've created a folder called 8tb in /media/8tb Then I ...
0
votes
0answers
14 views

How can I detect directories mounted via LDAP?

Is there any simple method where I can find information about mount points mounted via LDAP on Red Hat Enterprise Linux?
0
votes
1answer
20 views

Use LDAP Server to log into itself

I have an LDAP server (running 18.04LTS) and a bunch of Linux Ubuntu clients. LDAP works fine and we're just using it to authenticate a couple users. My question is as follows. I'd like to use the ...
0
votes
0answers
51 views

I want to install all glpi extensions via putty

I configured my glpi package on wamp server on local, and when I transfer it to my OVH server using Winscp, the GLPI package seems to be missing some extensions like ldap, imap, APCu, xmlrpc, CAS and ...
2
votes
1answer
959 views

How to configure Linux to authenticate users based on Keycloak user database?

I have an existing user database in Keycloak. I want to build a Linux machine which logs in users according to the user database in Keycloak (username, password). How can I accomplish this?
0
votes
0answers
192 views

AD User Permission Denied

Currently having an issue with one Server which will not allow any logins for users within Our Active Directory. I am running Ubuntu 16.04 all servers were configured the same way but only one is ...
0
votes
0answers
176 views

Permission denied issue while doing CD even after having group permission

I'm getting Permission denied while doing a cd into directory /tct/foxprod_t2b_002/cilin/cust_test/testcases/level1 and user is a member of this group; other users on the group can easily accessing ...
0
votes
0answers
549 views

How to use chsh with ldap authentication

How to use zsh as default when starting an ssh session to a remote chef server using LDAP for authentication? tom@chef:~$ chsh -s /usr/bin/zsh Password: chsh: user 'tom' does not exist in /etc/passwd ...
0
votes
0answers
48 views

login not working from new tty but with su <username> works

I'm installing LDAP auth on CentOs7 (command-line way). I'm facing a strange behaviour: [root@client]# su ldapuser01 (run as root) works and let me connect as ldap user (without prompting for a ...
0
votes
0answers
104 views

FreeIPA User management: create user and activate user split in two roles

Objective: FreeIPA Helpdesk user A is permitted to create new stage users; new accounts are by default disabled. Activation requires any other member of Helpdesk than user A to go in and enable the ...
2
votes
1answer
77 views

Sorting structured file with bash commands

I need to sort a LDIF file, where several lines belonging to a parent one. Example dn: 2 attr1: b attr2: a attr1: a attr1: c dn: 3 attr2: a attr1: c attr1: b attr1: a dn: 1 attr1: a ...
0
votes
0answers
2k views

sssd: AD user cannot login in RHEL 7

I can switch to the mentioned domain user with su command from the server, but ssh login is failing. The user domain group is already added in sssd.conf file under "simple_allow_groups" The errors in ...
1
vote
1answer
89 views

ldap on debian, and ubuntu

I am currently changing my Linux client from Ubuntu 16.04 to Debian 9.6, and I am trying to setup LDAP client authentication to debian machine. While setup, I noticed that the following command does ...
0
votes
0answers
11 views

After SLES Migration LDAP does not start with TLS error

We had to migrate an existing physical Server running SLES to a virtual machine running on ESXi 6.5. The migration was done with VMware vCenter Converter. All the data was copied without problems - ...
1
vote
3answers
1k views

Allow AD group to access samba share

On my Linux I created a samba share like this, it was working fine. [global] security = user passdb backend = tdbsam map to guest = Bad User guest account = mcms [mml-t1] path = /...
1
vote
0answers
32 views

in ldap make the default bind the current logged in user

I do not want to specify a default bind_dn in the sssd.conf file for ldap (either openldap or active directory). Is it possible to configure the system in a way, that the first logged in user becomes ...
2
votes
1answer
3k views

ldap users unable to ssh to the server

I have configured ldap local server running centos 7, using this article: https://www.itzgeek.com/how-tos/linux/centos-how-tos/step-step-openldap-server-configuration-centos-7-rhel-7.html. Now my ...
2
votes
0answers
3k views

Add LDAP server certificate to trusted list and enable certificate verification

I am trying to use a secure LDAP connection via TLS ldaps://<server_name>:<port> for various applications (e.g. Gitlab). However, the connection raises certificate errors which is due to ...
0
votes
2answers
32 views

Inputting data from a file into a label

I have file contains gigantic data about users. For example: Username:Firstname:Lastname:Telephone number Username:John:anderson:857-201-2213 Username:Sam:Asper:876-590-8223 Username:Adam:marlen:871-...
0
votes
1answer
99 views

Is there a display manager that allows setup of wifi connection before logging in?

I'm working on a pam_ldap solution for laptop users, but of course it won't work unless wifi is connected. I won't know ahead of time what wifi network users will be on. I want to emulate how ...
1
vote
1answer
399 views

ssh using OpenLDAP (LDAP) credencials

I have a corporate network with an OpenLDAP installed and functional. I can log in a Linux server in this network using ssh with my profile (user) that is in OpenLDAP. I created a new user with ...
0
votes
1answer
526 views

LDAP ACL to restrict user to only reading their own user attrs

I want to prevent users from accessing anything other than their own data. I've tried implementing the following simple acl (ldif): dn: olcDatabase={1}mdb,cn=config olcAccess: {0}to attrs=...
1
vote
0answers
28 views

Is it possible to pull additional info from LDAP during pam_ldap authentication?

I have additional ldap data that I'd like to store in the user's home when they first log into a client using pam_ldap. However, I can't seem to think of a way to make this work without prompting the ...
1
vote
1answer
411 views

Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password

Dears, I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...