Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
0 votes
0 answers
8 views

Add user from LDAP db to local linux group

My user to login to RHEL server is: e5614 I do not see that user in /etc/passwd. But I do see it with getent command getent passwd | grep e5614 e5614:x:613869764:10104:JohnJohn:/home/e5614:/bin/bash ...
user avatar
  • 178
1 vote
0 answers
20 views

What dictates the order of group listing with id and groups command

I am trying to work out what order the groups are listed by id and groups command (coreutils v8.22) I am using LDAP and have configured SSSD to read user and group information. My ldap server always ...
user avatar
  • 29
3 votes
1 answer
75 views

How to troubleshoot a LDAP error 53 (WILL_NOT_PERFORM)?

I am trying to make a CentOS 7 server join an AD, but it results in an error: AD LDAP ERROR: 53 (Server is unwilling to perform): 0000216D: SvcErr: DSID-031A1241, problem 5003 (WILL_NOT_PERFORM), ...
user avatar
  • 25.3k
1 vote
0 answers
36 views

Recent LDAP user list missing in greeter using lightdm

I am switching our desktop manager from xfce to mate on centos 7.4. This means that we are switching from gdm to lightdm. For some reasons, it is impossible for our recent user authenticated via a ...
user avatar
2 votes
1 answer
24 views

sssd doesn't query LDAP for loginshell

I have configured an LDAP server and created a user. ldapsearch delivers the following results: # user, People, brave-vesperia.com dn: uid=masc,ou=People,dc=brave-vesperia,dc=com objectClass: top ...
user avatar
  • 217
0 votes
0 answers
11 views

Ldap Authentication, searches, necessity

I currently have a client where I use several sites with ldap authentication using mod_authnz_ldap in apache2 For my understanding it is not relevant to search the authenticated user within the ldap ...
user avatar
  • 11
1 vote
0 answers
20 views

Freebsd Common User Access Management (tried with OpenLDAP, not working) (Open to other suggestions)

What I have are a large number of servers (all freebsd). I need to build a common user access management for it (as new developers are joining, want to add their access details on 1 server, and no ...
user avatar
0 votes
1 answer
47 views

How can I best troubleshoot LDAP?

I'm trying to configure Red Hat Ansible Tower to authenticate via LDAPS. It has a web GUI to configure LDAPS settings but the only way to test it is via the ldapsearch CLI utility. I've never used ...
user avatar
0 votes
0 answers
7 views

Postfix: Getting a macro from ldap map and using it with an LDA

I want to use a mailbox defined in an ldap attribute. It's easy to resolve the mailbox from the email address with a simple query in an ldap map, but I can't figure out how to use that resulting ...
user avatar
  • 1
0 votes
0 answers
32 views

SSSD is running, but not working

I cross-compiled and installed SSSD on my Linux-based board (ARM architecture). This is my /etc/sssd/sssd.conf configuration file: [sssd] domains = LDAP_DOMAIN config_file_version = 2 services = nss, ...
user avatar
0 votes
1 answer
15 views

smbldap-useradd: what are the different addresses for?

smbldap-useradd has some parameters to specify addresses for the user: # smbldap-useradd --help | grep -i addr -M e-mail address (comma separated) -O localMailAddress (comma separated) -T ...
user avatar
  • 538
0 votes
0 answers
43 views

LDAP bind with TLS: Start TLS request accepted but not working

I am trying in vain to do a LDAP bind from a linux based device to a ldap server with TLS. The server supports both simple authentication and TLS authentication. First, I successfully bind without TLS ...
user avatar
1 vote
1 answer
77 views

Unexpected critical dependency on LDAP

I'm using LDAP for user authentication only (nsswitch.conf below) on Ubuntu 18.04. However if the host cannot connect to the LDAP server at boot time, startup is blocked by NTP and DNS. The LDAP ...
user avatar
  • 4,225
2 votes
0 answers
296 views

Unsupported option UsePAM even though OpenSSH is PAM-aware

For my ARM-based Linux system, I crosscompiled OpenSSH, as I need to have a ssh server. In my sshd_config file I set the UsePAM option to yes, because I want to use PAM for the authentication (I need ...
user avatar
0 votes
1 answer
154 views

Using a shell script to parse through a CSV file and add users using the ldapadd command

Good evening all, As the title says, I am attempting to parse through a csv file of about 400 lines and add each one using the below script. This is part of a homework assignment and I am not sure ...
user avatar
  • 3
1 vote
0 answers
92 views

SSSD with LDAP authentication, old password works

My client is Centos 7 and the LDAP server is Active Directory (Windows 2008 R2). I'm using sssd in order to authenticate to my machine with LDAP users (ad). My problem is that I manage to connect with ...
user avatar
  • 11
0 votes
0 answers
32 views

Apache PAM Credential Caching

I use FreeIPA Authentication on Apache via PAM. I am trying to enable credential caching for PAM, however socache does not cache PAM Credentials. I have tested socache using local accounts in htpasswd ...
user avatar
0 votes
1 answer
102 views

GlobalProtect (alternative) on Linux

My new company gave me a Mac and I'm having a nasty time getting used to it. This post will likely irritate some of you, but please bare in mind I've been using Linux and Windows computers for years, ...
user avatar
  • 131
0 votes
1 answer
30 views

baseDN on ldapsearch vs ldapadd

I am learning to use OpenLDAP and I can not understand why you need to specify a base dn to search in the ldap tree but you do not need it in order to add stuff ldapsearch -x -b "dc=foo,dc=local&...
user avatar
  • 21
3 votes
0 answers
23 views

Infer LDAP domain for SSH login

We have some SSH servers that our users connect to using a Windows hosted LDAP domain. Currently, we instruct users to log in with usernames in the format of user@domain@sshHost, which works fine, but ...
user avatar
0 votes
1 answer
107 views

How it comes that ldapsearch output can't be piped

ldapsearch always outputs an authentication message with every query at the beginning: SASL/GSS-SPNEGO authentication started SASL username: user.principal@DOMAIN.NAME SASL SSF: 56 SASL data security ...
user avatar
  • 1
1 vote
0 answers
106 views

Fully replace sssd->ldap with web APIs in Linux

My organization has to get rid of their ldap servers, so I am facing the task of replacing it's functionality. To make this as customizable and future-proof as I can, I am looking for something that ...
user avatar
  • 11
2 votes
0 answers
85 views

Sync LDAP groups and UIDs with Active Directory

Currently, our organization has a working OpenLDAP server that we use to login to our Linux environments. However, due to the increase in Windows devices, the higher-ups have decided to migrate to an ...
user avatar
  • 121
0 votes
0 answers
124 views

AD authentication failure Ubutnu || Access denied for user 4 (System error)

Facing this issue tried all the steps available online, but still having issue. need some expert solutions. ssh -vvv view OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017 debug1: Reading configuration ...
user avatar
  • 2,941
0 votes
0 answers
29 views

How to create a system user on WSO2 with readonly access to the LDAP server?

I have two systems that include the identity server and application server. My application server needs to read the LDAP information from the identity server. I can create a new super admin on the ...
user avatar
  • 1
0 votes
1 answer
350 views

How can I get the current time as an LDAP timestamp in Unix?

I want to be able to generate an ActiveDirectory LDAP timestamp in Unix for some tests I need to run. Active Directory stores date/time values as the number of 100-nanosecond intervals that have ...
user avatar
0 votes
0 answers
53 views

SSSD+LDAP+lightdm issue

I have one LDAP server and a linuxMint client with SSSD. When I login with a user with an expired password lightdm give an advice about it and stop the login, but it never prompts a textbox to change ...
user avatar
  • 1
0 votes
0 answers
23 views

How to add OU in LDAP?

I have done LDAP setup on ubuntu, using apt install slapd ldap-utils after doing all setup/configuration, added one test user also and here I get: $ ldapsearch -x -b "dc=param,dc=co,dc=in" # ...
user avatar
1 vote
1 answer
262 views

How to reconfigure ldap server connection on Debian 10 client?

I have a Debian 10 system which was configured to talk to an OpenLDAP server (10.5.5.35) for password, group and shadow. I need to switch the host over to a Duo Auth Proxy (10.5.5.50). I thought I ...
user avatar
0 votes
0 answers
49 views

Problem with add SSL and Startls in existing LDAP configuration

Add SSL and STARTTLS in existing LDAP configuration. But unfortunately total LDAP got stopped. Any solution for this? # service slapd status ● slapd.service - LSB: OpenLDAP standalone server (...
user avatar
0 votes
0 answers
321 views

Unable to volume mount smb with LDAP authentication in FreeBSD (FreeNAS). I keep getting NT_STATUS_INTERNAL_DB_CORRUPTION and NT_STATUS_WRONG_PASSWORD

I have been trying to configure samba to use LDAP for authentication. After configuring LDAP, I am able to ssh into the machine using LDAP. When I configured SMB to use LDAP for authentication, I am ...
user avatar
0 votes
0 answers
25 views

p99 spikes in springboot api which communicates with MS AD

dont know if this question belongs to unix.stackechange/stackoverflow/devops.stackexchange. I open it here because i think it could be somehow unix/linux related. We have a custom java/springboot api, ...
user avatar
1 vote
2 answers
393 views

Why is PAM broken after installing nis?

I'm a Software Engineer with some system admin experience currently trying to setup some Linux infrastructure at a new workplace which previously only had Windows infrastucture. For Political reasons ...
user avatar
  • 45
-1 votes
1 answer
165 views

How to give full access for LDAP users on a NFS volume?

I have a NFS volume which is mounted on a RHEL VM. I'm accessing the files via a LDAP server. When a LDAP usera accesses somefile, the same file can not be modified (for example, touched) by another ...
user avatar
  • 1
1 vote
0 answers
353 views

Standalone Linux Samba Server Authenticated by AD LDAP Backend?

I'm trying to get a Standalone Samba server (non-domain joined) to authenticate via a Windows AD DS LDAP. I think the documentation is not quite right here, as I cannot get it to work that way. I have ...
user avatar
0 votes
1 answer
57 views

SSH login fails in one of the cluster node when login with user authenticated by a LDAP server

I am not able to login from one server to another node but not vice-versa (let's say from B --> A SSH login works but A --> B login fails). The user is authenticated via remote LDAP server and ...
user avatar
0 votes
1 answer
208 views

How to convert local user to authenticate against LDAP directory?

I created a normal linux user (on Raspbian Buster). Now I have set up an LDAP directory and would like this user to instead authenticate using LDAP. I added a user to the directory with the same user ...
user avatar
  • 161
0 votes
1 answer
229 views

symbol lookup error: ldapdelete: undefined symbol: ldap_pvt_conf_option

I'am trying to delete an entry from my LDAP database and it works fine, but for some reason after Linux update I am getting the below error; symbol lookup error: ldapdelete: undefined symbol: ...
user avatar
  • 1
0 votes
1 answer
57 views

Where to find reference of all/common ObjectClasses of ldap using their English names not OID numbers?

I know the following questions could be naive, but I an ldap beginner and tried searching but i didn't find what am looking for exactly I am trying to get a reference about ldap object classes and ...
user avatar
0 votes
1 answer
55 views

I have Some Problem retrieving information from ldap

I have installed openldap from symas on centos 8, I modified /etc/openldap/slapd.d/cn=config/olcDatabase={2}mdb.ldif by adding the following olcRootPW: {SSHA}......etc line to make a password ...
user avatar
0 votes
1 answer
82 views

How can I see if a Linux Embedded system authenticates with PAM or passwd only?

I cross compiled Linux-PAM and OpenLDAP for my linux embedded system (with ARM architecture) and copied the compiled files and folders into it. I create a /etc/pam.d/ folder and i put inside of it the ...
user avatar
1 vote
1 answer
1k views

How to automatically create local home directories for LDAP authenticated users if the home directory does not already exist?

I have configured a raspberry pi 4 running raspian to authenticate users using LDAP. The LDAP server is hosted elsewhere. I am able to log in to the system as an LDAP user, but the user has no home ...
user avatar
  • 161
0 votes
2 answers
56 views

Authentication precedence

In nsswitch.conf file I have an entry "passwd files sss". Also I have the evidence that the server is having LDAP authentication. Since the "files" for passwd is enabled and it ...
user avatar
  • 1
1 vote
1 answer
71 views

Solaris client ldap and Samba4 AD ldap server: some strange things

I have configured Solaris to use ldap users. The ldap server is Samba4 DC, the client is Solaris 11.4. I have "join" the server with this command ldapclient manual \ -a credentialLevel=...
user avatar
  • 10.9k
0 votes
0 answers
49 views

how move an user from 1 OU to another OU in IBM LDAP

Does anyone have an idea how to move a user from 1 OU to another OU in IBM SDS LDAP? Using command or via LDIF file? From Ou= Staff To OU=System ID: testuser1
user avatar
0 votes
1 answer
99 views

How to allow anonymous access to create objects in LDAP subtree?

I'm having a hard time trying to populate an LDAP with PGP keys. I have set up my LDAP (OpenLDAP if that matters) for a PGP key server structure as explained here which worked well so far. Now I want ...
user avatar
  • 142
0 votes
1 answer
70 views

How to search for an object by class in the LDAP base?

I'm trying to search an LDAP for an object of a specific class, but it always returns result: 32 No such object Background: I'm trying to access a PGP Universal server at keyserver.pgp.com which is a ...
user avatar
  • 142
3 votes
1 answer
434 views

openldap: is possible to force the starttls from a client?

I don't explain how to configure tls-ldap on server, on google there is a lot of stuff to configure it(create tls certs, create ldif, import ldif, try ldapsearch -ZZ, etc..). Is also easy to force the ...
user avatar
  • 10.9k
1 vote
1 answer
114 views

Unable to authenticate to ldaps with sssd

I have a docker container running debian stretch and sssd 1.15.0. The plan is to use it for SFTP purposes, and to authenticate users through LDAPS. The LDAP provider in this case is Azure Active ...
user avatar
  • 11
0 votes
0 answers
847 views

Unable to open tdb '/var/lib/sss/db/config.ldb'

I have an Oracle Linux Server release 8.2 system that I recently updated via yum. Before the update ssh could authenticate against a LDAP server, sles linux. In the logs I now see (details below): [...
user avatar
  • 1

1
2 3 4 5
8