Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
1
vote
0answers
61 views

Creating usernames with duplication check and adding them to LDAP

I have script to export entries from database to LDAP, I'm exporting their first name and last name and other attributes. I want to add to this script generator usernames of let's say first ...
0
votes
1answer
766 views

SonarQube 5.6 LDAP (FreeIPA) authenticated users have no groups

I saw some posts on stackoverflow, like this one and this, but problem still exists. I updated sonarqube from 5.3 to 5.6. Here's example of my config: sonar.security.realm=LDAP sonar.security....
5
votes
1answer
10k views

LDAP Search Filters using BASH

I'm attempting to run the following query in a bash script, allowing me to check two different object classes for a defined attribute passed from a while loop: #!/bin/bash inputfile="$1" binddn="cn=...
1
vote
1answer
3k views

Automating Slapd Install

I'm writing a script that automates the installation of slapd and phpldapadmin. The script: #!/bin/bash # make sure to run script as sudo # LDAP # update first apt-get -q -y update # ...
2
votes
1answer
4k views

LDAP user does not exist when running 'su'

I'm attempting to set up LDAP authentication according to the instructions in Sander Van Vugt's RHCSA/RHCE book for RHEL7. In chapter 6 he explains that when using authconfig-tui the FORCELEGACY ...
0
votes
1answer
30 views

Centos Live Replication Setup

I am trying to find the best way to perform live replication. I am not certain if it can replicate a whole server in real time. Lsyncd can replicate a directory. This file server is running Samba and ...
2
votes
1answer
430 views

SSSD: Why does setting ldap_group_nesting_level to “0” improve the performance greatly?

What is the default value for this parameter if I don't mention it in the configuration file? In a hundred of people enterprise environment, multiple tools - CDH Hadoop, analytics tool, Tableau, ...
2
votes
0answers
809 views

How to add all netgroup members to a group

I have multiple virtualized servers, all configured to use LDAP for their passwd/shadow (in nsswitch.conf) and authentication (PAM). I would like to have an easily configurable set of users who will ...
4
votes
1answer
4k views

Linux and Azure AD sync possible?

I am currently considering to shuffle some infrastructure around, but my question boils down to: Can I sync a list of users and passwords to Azure AD (only for Office 365) from a linux samba server?...
0
votes
1answer
578 views

ACL and LDAP configuration warning?

I have the following error happen when I try to use ldapsearch ldap_bind: Invalid credentials (49) I then see the following output when I debug using the slapd command for LDAP 58c1b1fa /etc/...
2
votes
1answer
356 views

LDAP user not available on LDAP Server

I setup 389 Directory Server on RHEL 6.5 OS and Setup worked beautifully , Then i created a user on 389-ds and connected a client to DS and using the user which i created on 389 Directory Server i'm ...
0
votes
1answer
404 views

how to configure Apache Directory Server without GUI

I am new to Apache Directory Server (apacheds-2.0.0-M23) , and the official documentation about it is quite incomplete. I know that is possible to configure the server easily using Apache Directory ...
2
votes
1answer
9k views

Samba not starting on Ubuntu Server 16.10

Samba was running well on ubuntu server 14.04. After upgrading to 16.10 it doesn't start anymore. I've tried also to install samba on a fresh 16.10 vm and it doesn't work. Here the service error ...
1
vote
1answer
64 views

How to tell which group is responsible for your sudo permissions?

Say I am part of various groups $ groups users git engineering .... And I can execute sudo in that machine, How can I tell which group is responsible for my sudo execution ability ?
2
votes
2answers
9k views

How to assign LDAP user to local group “users”?

We have machines with both local and LDAP accounts. Every computer has a HDD mounted where the local group "users" has reading and writing permissions. How can I add all the LDAP users to that group "...
0
votes
1answer
2k views

Best way to add user to `plugdev` group in an LDAP environment

I have an LDAP environment for the authentication of users in my Ubuntu 14.04 LTS-based network (all clients and servers are Ubuntu 14.04 based systems). My problem is that a specific user actually ...
6
votes
2answers
8k views

Missing config file for SSSD?

I want to make an CentOS 7 installation with LDAP authentication, so I installed authconfig-gtk, sssd and krb5-workstation. When I tried to start the service, I've got a message telling me that there ...
1
vote
1answer
557 views

How to manage groups, home directories and shell for Linux users authenticating via AD using SSSD?

I need to set up few Linux machines to have users authenticate to them via AD using SSSD, how do you manage the users groups, home directories and shell for the user accounts on AD, is there a way ...
0
votes
1answer
1k views

Showmount -e localhost is empty?

I want to make a configuration of LDAP using NFS and I made a file /etc/exports: /data -rw *(rw,no_root_squash) when I execute this command: showmount -e localhost I got nothing. Why ...
10
votes
1answer
8k views

PAM vs LDAP vs SSSD vs Kerberos

I am basically aware of what these services do separate from each other. What I want to know: what exactly happens on a successful login in a linux based network that uses all of these services? In ...
0
votes
1answer
461 views

Restsrict LDAP Group CentOS 7

Setting up LDAP Login was easy enough for me using the following... yum -y install openldap-clients nss-pam-ldapd git Basic Configuration authconfig --enableldap \ --enableldapauth \ --ldapserver={...
4
votes
0answers
3k views

getent shadow shows password hashes for some users

If I execute sudo getent shadow I see password hashes for all the local users who have them. For most of the LDAP accounts I only see * in the password field. However, for a few LDAP users, I see ...
6
votes
1answer
9k views

How to Create local user in LDAP enabled linux systems

During my application install, I used to create a new group and a new user using the 'groupadd' and 'useradd' commands groupadd my_group useradd -r -s /sbin/nologin -g my_group my_user But in one of ...
1
vote
1answer
2k views

php: compiling with openssl, ftp, ldap, curl support in debian gnu/linux

I'm trying to compile php 5.2.x in debian gnu/linux: ./configure --with-ldap --enable-ftp --with-apxs2 --with-mcrypt --enable-bcmath --with-bz2 --enable-calendar --enable-dba=shared --enable-exif ...
1
vote
0answers
266 views

What defines pam password hashing?

I have been running into an issue with pam password hashing. It seems no matter what I do on my RHEL based systems they always hash passwords based on MD5. My goal here is to have ldap users who use ...
4
votes
1answer
11k views

apt-get doesn't find phpldapadmin in Debian 9 (Stretch)

I am trying to install the phpldapadmin package in order to test the LDAP server that I have installed, but when I try to run apt-get install phpldapadmin it says that the phpldapadmin package is not ...
2
votes
1answer
811 views

Installing Freeradius-LDAP 3.x from PPA - Repository

Initially I've installed Freeradius from stable branch as follows: apt-get install python-software-properties apt-add-repository ppa:freeradius/stable-3.0 apt-get update apt-get install freeradius ...
2
votes
0answers
625 views

/etc/pam.d configuration

This is an example of the /etc/pam.d/sshd configuration file on a FreeBSD 11.0 freshly-installed system: # # $FreeBSD: releng/11.0/etc/pam.d/sshd 197769 2009-10-05 09:28:54Z des $ # # PAM ...
0
votes
0answers
888 views

Restore an LDIF backup of an LDAP server to a new install of OpenLDAP

I've tried to restore an ldif backup of an LDAP server to a fresh Centos 7 machine on which I've installed OpenLDAP to. I've been using these instructions https://www.server-world.info/en/note?os=...
1
vote
2answers
1k views

Ldap SSH Login not working - Same configs worked on 20+ other servers - Ubuntu

So I have setup LDAP Login on every server at my work successfully except one. Of course there has to be that one! And I want to close my jira ticket, but I can't figure out what the issue is. The ...
2
votes
0answers
103 views

Error message on nonexistent home dir (pam.d/* settings)

I have a host running Debian 8. I set LDAP authentication, but the home directory is not created. I added in common-session: session optional pam_systemd.so skel=/etc/skel/ umask=0077 It ...
1
vote
1answer
588 views

What does host netgroup mean in the context of sudoHost in Sudoers LDAP Schema

ref: https://www.sudo.ws/man/1.7.4p6/sudoers.ldap.man.html What does host netgroup mean in the context of sudoHost in Sudoers LDAP Schema. Can you please give an example of how to set this up?
1
vote
0answers
438 views

Change base DN of LDAP Directory to Organization

I am trying to setup an ldap server for a small lab. The server is currently running Ubuntu 16.04. The idea is to use the lab's name as the base DN of the directory.( Currently, its being set to ...
2
votes
0answers
553 views

Lock screen not locking with LDAP on CentOS 7

On my system some users authenticate with LDAP, others have their password stored locally (standard). The problem is that LDAP-users cannot lock the screen. When pressing Windows-Key + L the screen ...
4
votes
0answers
1k views

Limit Openldap Transaction Log Disk Usage

Openldap (specifically version 2.4) stores transaction history in log files by default in the ldap data directory (so /var/lib/ldap/log.###########). Currently these log files take up a lot of space, ...
0
votes
1answer
633 views

perform ldapmodify from remote server

I am trying to perform an ldapmodify from a remote host to modify entries on my ldapmaster. I already installed slapd on my host because I need mkntpwd binary, the server is not configured, and I also ...
1
vote
1answer
2k views

Enabling SASL authentication mechanisms in openLDAP using OLC

All of the information that I have been able to find about enabling SASL mechanisms for openldap still use the slapd.conf method while all modern LDAP directories have elected to use OLC over a static ...
2
votes
0answers
207 views

sudo su error messege through LDAP

I managed to get an authentication through ldap on my SLES 12 machine, but I can't set a certain group as sudoers. My suders entry looks as follows: %LNX-ADMIN-vibe3 ALL=(ALL) NOPASSWD:ALL But all I ...
4
votes
1answer
6k views

Change default login shell to /bin/bash for ALL ldap users from LDAP server - not client

Perhaps my google kungfu is not doing great today, but I found ways to apparently do this for each user (one by one) on the client side, or even a way to do it from the ldap side with ldapmodify again ...
3
votes
1answer
1k views

Get sudoers through LDAP (SUSE Linux Enterprise Server 12)

I have a problem with my LDAP configuration on SUSE Linux Enterprise Server 12. As many of you know, the ldap.conf file has been replaced with sssd.conf and a couple of other conf files like nsswitch....
0
votes
1answer
419 views

Sudo issue on AIX LDAP server

When a user tries to sudo to root he recieves the error : ldap_start_tls_s(): Can't contact LDAP server. What causes this problem?
1
vote
1answer
379 views

“map passwd uid” equivalent in sssd

nslcd.conf has "map passwd uid" to map attributes that will be used as the Login username. What is the sssd.conf equivalent of that?
1
vote
1answer
2k views

error reading from nslcd: Connection reset by peer

I have a CentOS 7 machine that output the following to the /var/log/secure after every machine restart. I have to manually stop and restart the nslcd service to make these errors go away. error ...
1
vote
0answers
522 views

Why is LDAP trying to connect by hostname instead of localhost?

I have set up an LDAP server on localhost and generated certificate with CN=localhost. But when I run the command ldapsearch -H ldap://localhost -D "..." -w password -ZZ -d1 I get the error ... ...
3
votes
1answer
276 views

Files that need to be updated in /etc/pam.d/ for nss-pam-ldapd support for SSH

/etc/pam.d/ has several files and running auth-config updates many of those. I need to know exactly which file needs to be updated to support LDAP based login using SSH / Console.
1
vote
0answers
702 views

users can not do su to other LDAP user

I 'm thinking my authentication is working well and PAM is configured on my Debian server because : If I do a ssh connection with a LDAP user it's working with password If I do a ssh connection with ...
5
votes
0answers
6k views

How to change password of LDAP user?

Is it possible to change password for logged in LDAP user using passwd command? I have logged in to server1 using testuser. Trying to change password for itself (testuser) and got the below error. ...
1
vote
0answers
38 views

In nss ldap is it possible to change the default passwd access filter?

I'm trying to bend a QNAP device to my will and not quite getting there. This seems like it should be simple but can't get it to work. The device is linked to an Open Directory (OSX ldap v3) and ...
0
votes
1answer
219 views

rbash for ssh ldap users

I have some ssh ldap users who connect to my server (centos7) for reset their password. I would like they use rbash for execute passwd command but I don't know how to do. I can't add rbash to /etc/...
0
votes
1answer
41 views

Does LDAP take care of all users and groups on a system?

I have been following the tutorial here to try out LDAP. I know that a Linux system has groups like mysql, sudo, video, dial-out etc. Do I need to add these to my directory? Are these served via LDAP ...