Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
0
votes
2answers
2k views

OpenLDAP: rfc2307bis instead of nis schema

I'm looking for a way to create an empty LDAP dictionary with the rfc2307bis schema. On Debian when installing slapd or when reconfiguring with dpkg the nis schema is used by default. How do I remove ...
2
votes
1answer
2k views

OpenLdap - restore backup - slapcat/slapadd

Im using slapcat to make backup like this: slapcat -n 1 > ${BACKUP_PATH}/ldap.domain.com.ldif Then import using slapadd: slapadd -F /etc/ldap/slapd.d -n 1 -l ldap.domain.com.ldif I can't ...
4
votes
1answer
3k views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...
2
votes
1answer
5k views

LDAP user does not exist when running 'su'

I'm attempting to set up LDAP authentication according to the instructions in Sander Van Vugt's RHCSA/RHCE book for RHEL7. In chapter 6 he explains that when using authconfig-tui the FORCELEGACY ...
0
votes
0answers
14 views

LDAP disable local account, and pub/private key on centos

I am currently setting LDAP/krb5 on Centos7. I followed the instruction on: https://wiki.cac.washington.edu/display/LDI/Configuring+Linux+Clients+for+LDI (thanks to Eric) http://staff.washington.edu/...
0
votes
0answers
20 views

ldap home directory permission issue on debian/ubuntu

I have joined the debian9 machine to microsoft AD when i run su - test1 it create the home directory but with below permission. root@debiantest:/home# ls -ltr drwxr-xr-x 2 test1 data 4096 Sep 18 22:...
11
votes
2answers
3k views

Autofs doesn't mount shares on startup

I am using OpenSuSE 12.1 with homes shared through LDAP and NFS. ldap stores the maps. My problem is I can't have the shares mounted on boot. It's only working when restarting the autofs service ...
1
vote
1answer
2k views

Enabling SASL authentication mechanisms in openLDAP using OLC

All of the information that I have been able to find about enabling SASL mechanisms for openldap still use the slapd.conf method while all modern LDAP directories have elected to use OLC over a static ...
2
votes
1answer
16 views

sudo-ldap works with !authenticate only

I'm trying to setup sudo-ldap in a clean CentOS 7 docker environment. I've successfully setup sssd and PAM authentication, and it works. However, sudo-ldap works only if !authenticate is set: dn: cn=...
1
vote
1answer
2k views

Authenticating To Multiple LDAP Servers

Owing to a corporate strategy I am moving human user authentication from an implementation of LDAP locally to a centralized Active Directory domain. The problem is that we have a tightly constrained ...
1
vote
1answer
939 views

How to filter group membership from the ldap server?

Context : We have a Ubuntu 12.04 with authentication done on a ldap server. Unfortunately, one (ldap) user belongs to a (ldap) group named "admin". I know there is the option ...
1
vote
1answer
64 views

How do you cleanup after deleting an LDAP user on RHEL 7?

We have a small network using 389 Directory Server for LDAP. We make LDAP users, those users log on to various machines in the network, and then sometimes we delete those users. However, after ...
0
votes
2answers
7k views

OpenLDAP: Invalid syntax error when trying to add LDIF

I keep getting an invalid syntax error when trying to create a user in OpenLDAP (CentOS 7). This is a new install of OpenLDAP for testing purposes. So far I've managed to create a group called "Lab ...
0
votes
1answer
4k views

How to disable ldap and allow local authentication in debian server?

I have debian server Debian 3.2.81-2 x86_64 GNU/Linux. I want to disable openldap and enable local authentication. I see /etc/ldap/ldap.conf file which has ldap entry. I have ran service slapd stop;...
2
votes
2answers
30 views

Restricting openldap ldapsearch on attributes

I have the following query against my directory: ldapsearch -x -H ldaps://example.com -D "cn=gitlab,ou=Service Accounts,dc=example,dc=com" -w foobar -b "ou=Persons,dc=example,dc=com" With the ...
1
vote
1answer
40 views

Linux LoginServer

I want a Linux server with the user accounts. The users will see a login screen after boot. So they can directly login on the server without noticing it. The user folders are also saved there, like ...
1
vote
1answer
17 views

Make a user log in for a host valid for all the other hosts in the same domain

Assume that several machines with Unix-like OSs are connected to a server, which for example runs LDAP. Its database includes many users: one of them is testuser. This way, testuser can perform a ...
1
vote
1answer
32 views

cannot authenticate via LDAP as user has multiple UIDs

Upgrading from SLES11 to SLES 12 I had to replace a working Cyrus mail server with dovecot. Unfortunately I'm unable to authenticate via LDAP (which was not a problem with Cyrus): My LDAP user has ...
2
votes
1answer
225 views

User listed in group but not in getent passwd

On a specific machine with both local users and LDAP users, there is a user that is listed under getent group foo (let's say the user jdoe is listed), but when doing getent passwd jdoe I get no output....
1
vote
0answers
9 views

LDAP connection through proxy

I have the following infrastructure: LDAP (Externe network) - SQUID - HOST1,HOST2,HOST3... All of them are Ubuntu Server. I need to be able to make LDAPS requests from the hosts through port 636, ...
3
votes
1answer
1k views

Get sudoers through LDAP (SUSE Linux Enterprise Server 12)

I have a problem with my LDAP configuration on SUSE Linux Enterprise Server 12. As many of you know, the ldap.conf file has been replaced with sssd.conf and a couple of other conf files like nsswitch....
0
votes
0answers
22 views

authenticate against LDAP on HP UX

Trying to develop a program that can only grant access to legitimate LDAP users. PHP has been compiled without LDAP support, so this will have to be effected through the a command line tool. Is there ...
1
vote
1answer
914 views

common-account line read order

My authentication is centralized in a LDAP. I've one login system who is working without any ldap so it's present in my /etc/passwd file. This my common-account file in pam.d directory. account ...
0
votes
0answers
15 views

Redirect ldapsearch ldiff from Docker container to host while displaying password promt

Having an ApacheDS LDAP DC in a Docker container, I want to export it as ldiff to the host (not inside the container): docker exec -it apache-ds sh -c 'ldapsearch -D "uid=admin,ou=system" -W -p 10389 ...
0
votes
0answers
62 views

How to Use Single-Sign-On/Custom Auth/Django-login Authentication for Linux PAM?

I have a web application and i want to let all my application-users to access vsftpd server with the same login credentials. At any time, single source of truth for authentication should be my web ...
0
votes
2answers
1k views

Use an alternate /etc/ldap.conf with ldap search

I would like to perform ldap queries using an alternate file (which is intended to be used with pam.d and so have the same format as /etc/ldap.conf) I think of using ldapsearch. In the manual, I ...
0
votes
1answer
987 views

how to load an LDAP client cert RHEL7 authconfig-tui

I have a RHEL7 machine that needs to be configured as an LDAP client (user/auth, using authconfig-tui). When finishing authconfig-tui, it says, just copy the cert to /etc/openldap/cacerts, which I ...
1
vote
2answers
1k views

Migrate LDAP from one machine to another

My current task is to migrate the content from one machine (source) to another (target). Both machines are identical. One is heavily used and the other is clean. I already have all the files that are ...
2
votes
0answers
35 views

Overlapping local and LDAP usernames

We have several RHEL 6/7/8 machines where user authentication is done through LDAP. One of our sysadmins would like to set up local accounts for some users on some machines, with the local username ...
0
votes
1answer
32 views

Pamldap connection refused

I am trying to set up the ssh access through pamldap in Ubuntu 16.04 and after having everything configured I am not able to synchronize the /etc/passwd with the information of LDAP server. ...
0
votes
0answers
35 views

LDAP (Windows) login on Debian9

I've configured my Debian9 with Kerberus5, Samba and Winbind to login on a windows domain, all the configuration is already set and I've already tested it (it works!), but when I try to realize my ...
3
votes
2answers
2k views

Central user management with multiple servers with SSH keys, LDAP?

the number of my servers and users is growing and I would like to adopt a central database to manage users accounts. I'm thinking about OpenLDAP, but I have a question. Is it possible in LDAP to ...
0
votes
0answers
11 views

Authentication nslcd with ssh key from AD

Nslcd support ssh key authentication, i can login correct with password. But with ssh key i can't login. Can with map or filter get the ssh key from AD ? Cheers
1
vote
1answer
2k views

Samba NT_STATUS_NO_TRUST_SAM_ACCOUNT

for a project we have several samba shares configured as following: [global] workgroup = <domain name> netbios name = <machine name> passdb backend = tdbsam security = ads ...
0
votes
1answer
2k views

LDAP server setup with GUI on CentOS7

I have, in the past, set up an LDAP server using OpenSuSE (13.2), which worked well since there was a YaST module which allowed a GUI set-up. Now I have the problem that I must set up an OpenLDAP ...
0
votes
1answer
210 views

Use AD Groups Instead of Linux Groups

On our file server, we are using a bunch of Linux groups that are still in use and need to be replaced by their counterparts in AD. The groups in AD and /etc/groups have an identical name, so, (I'm ...
4
votes
3answers
1k views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
1
vote
1answer
82 views

Authentication via LDAP: where is ldap_search_ext defined?

There are two RHEL 8 servers which have been provisioned from the same template, with some manual fix and tweaking done manually on the first server only. They allow SSH user authentication via a ...
0
votes
1answer
84 views

Change authentication order GNU/Linux

I've got a CentOS7 server joined to a Windows Active Directory Server. I'm trying to connect to CentOS using my Active Directory credentials but it seems that it checks the local account as first step ...
1
vote
0answers
21 views

Setup OpenLdap on Oracle Linux 6

I am currently trying to setup an openldap server on an Oracle Linux 6 VM (VirtualBox). Packagemanager yum installed openldap version 2.4.40-16. Following this setup guide: https://docs.oracle.com/cd/...
0
votes
0answers
18 views

Can't manage user accounts after using LDAP

I've added a ubuntu machine as an LDAP client by following the below steps. But now when trying to access my user accounts from the user accounts app I can't find any user profiles or information as ...
0
votes
1answer
87 views

lightdm and ldap authentication: how to display connectivity issues

I use LightDM als my display manager, entering user credentials via its greeter login. The system's PAM authenticates against a LDAP server. Unfortunately, the network is unreliable hence the LDAP ...
1
vote
0answers
183 views

How to connect Kerberos with multiple LDAP servers?

My actual task is to make our kerberized Hadoop cluster usable by all our teams. Right now we have a very weird setup in our company: The Hadoop cluster has a dedicated KDC (openSUSE Kerberos with ...
1
vote
1answer
633 views

SLES 11SP4 LDAP - error trying to bind as user - (Invalid credentials)

I have LDAP server configured (with YaST) on SLES 11SP4 and I've created 3 users. I can su (from root) to any of the user but I cannot login as any of them or change their passwords. When I tried to ...
0
votes
0answers
169 views

slapadd error attribute type undefined

I try to add a new node called slave to my ldap server. But slapadd -l slave.ldif return error: 5cd2e848 <= str2entry: str2ad(address): attribute type undefined slapadd: could not parse entry (...
3
votes
1answer
6k views

While trying to ssh, pam_ldap always sends the password “INCORRECT” causing bind to fail

I installed ldap-auth-client nscd ldap-utils on lubuntu 14.04 running on a banana pi. I can successfully bind as the user using ldapwhoami, but I cannot log in via ssh: Auth.log: Oct 21 02:12:05 ...
1
vote
1answer
16 views

How I can create accounts with command lines for my OpenLDAP server?

I'm in a Docker, in a VM (Ubuntu Serv). I have created a OpenLDAP server. I want to know simply : how to create groups and users. My DIT tree : dc=company,dc=com ou=group1 ou=group2 ou=group3 ou=...
0
votes
1answer
63 views

Mount internal drive to all users

I have an internal 8tb harddrive which I want it to be mounted to all users on my machine some of the users are local and some are ldap users. I've created a folder called 8tb in /media/8tb Then I ...
0
votes
0answers
14 views

How can I detect directories mounted via LDAP?

Is there any simple method where I can find information about mount points mounted via LDAP on Red Hat Enterprise Linux?
0
votes
1answer
20 views

Use LDAP Server to log into itself

I have an LDAP server (running 18.04LTS) and a bunch of Linux Ubuntu clients. LDAP works fine and we're just using it to authenticate a couple users. My question is as follows. I'd like to use the ...