Questions tagged [ldap]
the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services
390
questions
0
votes
2
answers
45
views
SSH by LDAP groups - not work
There are "31" servers configured from the same RedOS image (CentOS 7-based). They are entered into the LDAP samba domain, and are configured for authorization via ssh based on ldap user ...
- 3
0
votes
0
answers
38
views
FREEIPA Identity Provider server: Azure Active Directory
I am trying to add AAD as the identity server provider in Freeipa and configured it as shown in the below screenshot.
There isn't much available in the documentation. Can anyone help with what else ...
0
votes
1
answer
64
views
How does kpasswd change password?
When you change password via kpasswd, does it change your password that is stored on the Kerberos server, or does it change your password that is stored in the OpenLDAP server?
- 137
0
votes
0
answers
48
views
How to enable LDAP login in docker rundeck?
I use the following script to start the container, but it keeps using the realm.properties instead of the LDAP setup.
The file jaas-ldap.conf works as is in rundeck2 which was set up with a different ...
- 1
0
votes
0
answers
110
views
Problem with authentication in Nginx through FreeIPA
I have set up a Docker on a virtual machine and launched two containers for FreeIPA server and nginx-ldap-auth-daemon. I followed the instructions provided at https://github.com/nginxinc/nginx-ldap-...
- 1
0
votes
1
answer
340
views
Completely locked out of the admin account with FreeIPA
I have a FreeIPA server set up with a single replica. The admin account has been locked. Here's the log from a kinit admin:
[root@idm-00 ~]# kinit admin
kinit: Client's credentials have been revoked ...
- 328
0
votes
0
answers
512
views
How to configure OpenLDAP with SSL as proxy for Active Directory with LDIF method
EDITED: As it seems nobody seems to really know how OpenLDAP works (beside their developers), I finally dropped it in favor of GLAuth, which is quite easier to set up, with a simple configuration file....
0
votes
0
answers
44
views
How to allow specific LDAP users to authenticate oracle linux servers?
$ sudo grep -v -E '^\s*(#|$)' /etc/openldap/ldap.conf
SASL_NOCANON on
uri ldap://ldap.local.{company}.com
base dc={company},dc=com
$ sudo grep -v -E '^\s*(#|$)' /etc/pam.d/sshd
auth ...
0
votes
1
answer
977
views
How to fix "PAM unable to dlopen(/lib64/security/pam_ldap.so)" in SLES 15 SP4?
Somehow I ended up in SLES 15 with error messages like this:
(systemd)[6729]: PAM unable to dlopen(/lib64/security/pam_ldap.so): /lib64/security/pam_ldap.so: cannot open shared object file: No such ...
- 1,279
0
votes
1
answer
299
views
Cant login on PhpLdapAdmin using admin user
im trying to configure an LDAP using slapd and PhpLdapAdmin using the non-official version from github on my Ubuntu server. the slapd and phpldapadmin works perfectly but i have a problem while login ...
- 3
1
vote
0
answers
65
views
Splitting long lines in sssd.conf
I have an MS-AD domain joined SLES server, using sssd to control access.
Is there a way to break long lines in /etc/sssd/sssd.conf file for readability purposes?
From this:
ldap_group_search_base = ou=...
- 11
0
votes
1
answer
696
views
RHEL 9 - Upgrading authselect causes overwrite
I've been configuring my system to use the desired /etc/nsswitch, /etc/authselect/system-auth and /etc/authselect/password-auth configuration including SSSD to access my LDAP server.
After running a ...
- 147
0
votes
0
answers
50
views
Changing GID on login
I have a system for which SSS is configured to use LDAP. A user will appear on my system as, say
# id abc
uid=1234(abc) gid=1010(default) groups=20001(red),20002(blue)
If I can determine through ...
- 195
0
votes
1
answer
128
views
Linux Apache hybrid basic auth - ldap and .htpasswd file credentials at the same time
I have some api covered by reverse proxy. I have configured basic auth with ldap AD credentials and it works like a charm. But there are some users from external organization that don't have AD ...
- 1
-1
votes
2
answers
41
views
Modify LDAP data given list of identifiers
I have a file with below content, where few lines are of length 15 while rest are less than 15.
AAAAAAAAAAAAA
BBBBBBBB
cccc
I need an output in below way.
Delete Subscriber:
AAAAAAAAAAAAA
in
IMSI=...
- 55
0
votes
1
answer
143
views
Samba AD DC - Directory entry for a shared folder
Suppose that you have:
a Linux machine (A) running a Samba AD DC,
a Windows machine (B), with a shared folder \\B\shared_folder.
I would like to know if there is an entry in the directory for this ...
- 101
0
votes
0
answers
320
views
PAM LDAP: why does passwd command ask for "(current) LDAP Password: "?
I have an openLDAP service on a Debian 11 server, and I have set up PAM on a Ubuntu 22.04 PC; I am beginning to be very confused. I can log in withouot a problem, but when I want to change password, I ...
- 591
0
votes
1
answer
426
views
WEBMIN LDAP authentication: passwd returns "Authentication token manipulation error"
Update:jan 25 2023
I believe I have sssd and nslcd working properly I also adjusted the pam modules in webmin. I also added db to nsswitch.conf so I checks there first. As of right now I can use ...
1
vote
0
answers
194
views
Setup mail server in Docker with FreeIPA and Roundcube
I try to setup my own mail server with authentication against a Ldap(FreeIPA). All of them must running within a docker container. I don't know what I'm doing wrong. Maybe it's my ldap configuration.
...
- 111
0
votes
1
answer
325
views
Help removing a failed replica from a FreeIPA setup
I have two FreeIPA servers in my system; ns-1 and ns-2. To my limited knowledge, ns-1 is our main ipa server and ns-2 was setup as a replica. But I may be incorrect in that regard.
In my attempts to ...
- 161
1
vote
0
answers
486
views
Linux server - AD Login enabled - how to add AD group to local group
My RHEL servers are enabled with Active Directory authentication configured in sssd.conf
I have allowed few AD groups in sssd.conf to login to the Linux server.
the issue is I need to know how do I ...
- 71
1
vote
1
answer
146
views
How to add utility ldapsearch to yocto image?
I have successfully added the recipe openldap to my yocto-base Linux distribution, by the instruction:
IMAGE_INSTALL += "openldap"
After that I've created a path/to/my-layer/recipes-support/...
- 247
1
vote
1
answer
159
views
What LDAP server can I install only for test LDAP authentication?
I need to do practice with LDAP so I think that is a good idea to install a LDAP server only for do some test.
For client side I'm using a LInux Mint distribution and I have installed all the software ...
- 247
3
votes
1
answer
164
views
How does a Linux Workstation interact with Windows Active Directory?
I'm studying LDAP and in my company there is an Active Directory Server. In my workstation is installed Linux Mint.
I try to show the context that arise my question:
open a new window for browsing ...
- 247
0
votes
0
answers
539
views
LDAP Entry-Adding/Installation Error "ldap_bind: Invalid credentials (49)"
I am new to LDAP and am trying to install it for a computer cluster. I have been going through this technical guide https://www.openldap.org/doc/admin26/quickstart.html.
I have reached step 11 and am ...
1
vote
1
answer
4k
views
LDAP Installation Error "slapadd: could not add entry dn="cn=config" (line=1):"
I am new to LDAP and am trying to install it for a computer cluster. I have been going through this technical quick-start guide https://www.openldap.org/doc/admin26/quickstart.html.
I have completed ...
0
votes
0
answers
499
views
Sudo not working as expected via LDAP
I have provisioned an IP server with sudo rules associated with a group. But on a relying host, sudo -l returns Sorry, user symcbean may not run sudo on host.example.com. I have logged in as user from ...
- 5,203
0
votes
1
answer
332
views
Supplying multiple names in a single olcRefintAttribute value is unsupported and will be disallowed in a future version
Since a few time with OpenLDAP 2.6.2 on AlpineLinux 3.15, running the slapcat command generates this warning:
Supplying multiple names in a single olcRefintAttribute value is unsupported and will be ...
- 139
1
vote
1
answer
3k
views
'getent passwd' not showing LDAP users, athough users can log in
I have an administration node running LDAP and a login node which uses LDAP on the other node to authorize users. Users are able to log into the login node successfully.
When I run getent passwd, on ...
- 195
1
vote
1
answer
1k
views
How to get list of users with a given group as primary group
With
getent group xyz
I get a list of users who are members of xyz with xyz either as a primary group or as secondary group.
How do I get a list of just those users who have xyz as their primary ...
- 195
2
votes
0
answers
264
views
sudo takes a long time when connected to a VPN on Ubuntu 22.04
I am using Ubuntu 22.04. My machine is joined to my company's domain using Realm. I am not using Adsys. PAM is configured for Unix and SSS authentication.
While logged in as my domain user sudo is ...
- 143
8
votes
2
answers
2k
views
Why does LibreOffice (at least as packaged for Debian) depend on libldap?
The Debian package libreoffice-core (which is described in the Debian repositories as containing " the architecture-dependent core files of LibreOffice," and which is itself a dependency for ...
- 197
0
votes
1
answer
969
views
create zsh function with argument for ldapsearch
I have a couple commands I can run directly on the command line without issue, when I run them and replace $1 with the actual group name I want to check in LDAP. Now I want to turn it into a ...
- 103
0
votes
2
answers
1k
views
Joining hosts to freeIPA without changing hostname
I've been asked to join linux hosts in my company to freeIPA. But the problem is that I'm not allowed to change hostnames. So I should leave hosts NetBios names intact.
I am wondering if there is any ...
- 1
1
vote
0
answers
643
views
Add user from LDAP db to local linux group
My user to login to RHEL server is: e5614
I do not see that user in /etc/passwd.
But I do see it with getent command
getent passwd | grep e5614
e5614:x:613869764:10104:JohnJohn:/home/e5614:/bin/bash
...
- 228
2
votes
0
answers
166
views
What dictates the order of group listing with id and groups command
I am trying to work out what order the groups are listed by id and groups command (coreutils v8.22)
I am using LDAP and have configured SSSD to read user and group information.
My ldap server always ...
- 39
4
votes
1
answer
9k
views
How to troubleshoot a LDAP error 53 (WILL_NOT_PERFORM)?
I am trying to make a CentOS 7 server join an AD, but it results in an error:
AD LDAP ERROR: 53 (Server is unwilling to perform): 0000216D: SvcErr: DSID-031A1241, problem 5003 (WILL_NOT_PERFORM), ...
- 29.2k
1
vote
0
answers
382
views
Recent LDAP user list missing in greeter using lightdm
I am switching our desktop manager from xfce to mate on centos 7.4.
This means that we are switching from gdm to lightdm.
For some reasons, it is impossible for our recent user authenticated via a ...
- 11
2
votes
1
answer
235
views
sssd doesn't query LDAP for loginshell
I have configured an LDAP server and created a user. ldapsearch delivers the following results:
# user, People, brave-vesperia.com
dn: uid=masc,ou=People,dc=brave-vesperia,dc=com
objectClass: top
...
- 236
1
vote
0
answers
75
views
Freebsd Common User Access Management (tried with OpenLDAP, not working) (Open to other suggestions)
What I have are a large number of servers (all freebsd). I need to build a common user access management for it (as new developers are joining, want to add their access details on 1 server, and no ...
0
votes
1
answer
256
views
How can I best troubleshoot LDAP?
I'm trying to configure Red Hat Ansible Tower to authenticate via LDAPS. It has a web GUI to configure LDAPS settings but the only way to test it is via the ldapsearch CLI utility. I've never used ...
0
votes
0
answers
603
views
SSSD is running, but not working
I cross-compiled and installed SSSD on my Linux-based board (ARM architecture).
This is my /etc/sssd/sssd.conf configuration file:
[sssd]
domains = LDAP_DOMAIN
config_file_version = 2
services = nss, ...
- 43
0
votes
1
answer
52
views
smbldap-useradd: what are the different addresses for?
smbldap-useradd has some parameters to specify addresses for the user:
# smbldap-useradd --help | grep -i addr
-M e-mail address (comma separated)
-O localMailAddress (comma separated)
-T ...
- 568
0
votes
0
answers
1k
views
LDAP bind with TLS: Start TLS request accepted but not working
I am trying in vain to do a LDAP bind from a linux based device to a ldap server with TLS.
The server supports both simple authentication and TLS authentication.
First, I successfully bind without TLS ...
- 43
1
vote
1
answer
359
views
Unexpected critical dependency on LDAP
I'm using LDAP for user authentication only (nsswitch.conf below) on Ubuntu 18.04. However if the host cannot connect to the LDAP server at boot time, startup is blocked by NTP and DNS.
The LDAP ...
- 5,203
2
votes
0
answers
1k
views
Unsupported option UsePAM even though OpenSSH is PAM-aware
For my ARM-based Linux system, I crosscompiled OpenSSH, as I need to have a ssh server.
In my sshd_config file I set the UsePAM option to yes, because I want to use PAM for the authentication (I need ...
- 43
0
votes
1
answer
630
views
Using a shell script to parse through a CSV file and add users using the ldapadd command
Good evening all,
As the title says, I am attempting to parse through a csv file of about 400 lines and add each one using the below script. This is part of a homework assignment and I am not sure ...
- 3
2
votes
0
answers
906
views
SSSD with LDAP authentication, old password works
My client is Centos 7 and the LDAP server is Active Directory (Windows 2008 R2).
I'm using sssd in order to authenticate to my machine with LDAP users (ad).
My problem is that I manage to connect with ...
- 21
0
votes
1
answer
860
views
GlobalProtect (alternative) on Linux
My new company gave me a Mac and I'm having a nasty time getting used to it. This post will likely irritate some of you, but please bare in mind I've been using Linux and Windows computers for years, ...
- 139
0
votes
1
answer
192
views
baseDN on ldapsearch vs ldapadd
I am learning to use OpenLDAP and I can not understand why you need to specify a base dn to search in the ldap tree but you do not need it in order to add stuff
ldapsearch -x -b "dc=foo,dc=local&...
- 21