Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
20
votes
5answers
1k views

Linux solution for schools?

The school I'm working for as an administrator requested a system upgrade. Currently we are using a government-suggested Linux distribution called SuliXerver - it would be great, but most of the admin ...
14
votes
4answers
1k views

Groups differ from the local ones when logging in remotely

We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
12
votes
2answers
16k views

Why am I getting apparmor error messages in the syslog about NTP and LDAP?

On my newly installed Ubuntu 12.04 machine, with ntp and slapd installed, the following messages appear in /var/log/syslog at regular intervals: Feb 23 18:54:07 my-host kernel: [ 24.610703] type=...
11
votes
2answers
26k views

How to make ldapsearch working on SLES over tls using certificate?

We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here https://stackoverflow.com/questions/15260252/how-to-use-multiple-tls-...
10
votes
1answer
8k views

PAM vs LDAP vs SSSD vs Kerberos

I am basically aware of what these services do separate from each other. What I want to know: what exactly happens on a successful login in a linux based network that uses all of these services? In ...
10
votes
3answers
22k views

Home Directories and pam.d using LDAP

Background: I'm not too familiar with the ins and outs of pam and LDAP authentication on a configuration side. I've used systems that use pam but I've only worked on applications, not systems ...
10
votes
3answers
218 views

Setting up a unix powered network

I want to set up several computers on a LAN, all connecting to one unix server. The primary goal being that the user accounts should only exist on the server. So that any user could access his normal ...
10
votes
2answers
3k views

Autofs doesn't mount shares on startup

I am using OpenSuSE 12.1 with homes shared through LDAP and NFS. ldap stores the maps. My problem is I can't have the shares mounted on boot. It's only working when restarting the autofs service ...
9
votes
2answers
7k views

How would you migrate from a Windows AD to a Linux LDAP server?

I currently run a Windows server with Active Directory. But since we're no longer using Exchange 2007, it became a fancy file server with authentication. I would like to move the AD to a Linux server....
7
votes
2answers
24k views

Sudo permissions by ldap groups via nslcd

I have a problem with my sudo permissions in an MS ActiveDirectory to Debian LDAP authentication/authorization setup. What I have so far I've configured nslcd with libpam-ldap via ldaps and ssh login ...
7
votes
2answers
4k views

OpenLDAP Password Policy overlay error while loading

I'm trying to load the password policy overlay but I'm having the following error: ldapadd -Wx -D "cn=Manager,cn=config" -f overlay.ldif Enter LDAP Password: adding new entry "olcOverlay=ppolicy,...
6
votes
5answers
22k views

Howto set access control lists ACLs in OpenLDAP

I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with ldapmodify? There's no slapd.conf file in Debian, they use a slapd.d folder
6
votes
1answer
8k views

basic explanation on NSS , LDAP and PAM

can anyone give me a basic explanation on what are NSS , LDAP and PAM and what they used for and what is their relationship/differences ?
6
votes
2answers
7k views

Missing config file for SSSD?

I want to make an CentOS 7 installation with LDAP authentication, so I installed authconfig-gtk, sssd and krb5-workstation. When I tried to start the service, I've got a message telling me that there ...
6
votes
1answer
3k views

Adding a system user to an LDAP group with SSSD

Our LDAP server is running RFC 2307 groups (memberuid contains a username, not a DN). With our old nscd/nss_ldap/pam_ldap setup, you could list a non-LDAP user (a system user from /etc/passwd) in an ...
6
votes
1answer
7k views

mod_authnz_ldap bind as authenticating user instead of anonymously

I'm attempting to move as close to single credential as possible. We have a web application that has a fairly limited set of available authentication mechanisms but will (luckily) allow admins to tell ...
6
votes
1answer
12k views

Openldap backup restore

I am trying to setup backup and restore and make sure it works. Please note that database size on ldap.old is lot more then the ldap. The /var/lib/ldap.old is my existing database. I have renamed /...
6
votes
1answer
5k views

Using LDAP for authentication, how can I safely disable/deactivate an account without deleting it?

We use LDAP for authentication for thousands of users. The primary tactic we have been employing to make a user unable to login, without removing their account, is to change the LDAP attribute "...
6
votes
1answer
8k views

How to Create local user in LDAP enabled linux systems

During my application install, I used to create a new group and a new user using the 'groupadd' and 'useradd' commands groupadd my_group useradd -r -s /sbin/nologin -g my_group my_user But in one of ...
5
votes
6answers
1k views

Identity Management with ActiveDirectory

What is the best, or most reliable, way to manage my Unix/Linux user accounts with ActiveDirectory? Or, is this even feasible?
5
votes
2answers
9k views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
5
votes
1answer
6k views

Changing password in multiple boxes using script

I'm working in a environment which has around 400 AIX boxes. I don't have root access and I'm a normal user. The environment has no LDAP kind of centralized mechanism for authentication so the ...
5
votes
3answers
4k views

Restrict ssh login from LDAP to users who have a /home directory

I have an Apache server (RHEL 6) hosting multiple user web pages which currently is connected to my Active Directory environment to authenticate users. The server is used to automatically host content ...
5
votes
0answers
6k views

How to change password of LDAP user?

Is it possible to change password for logged in LDAP user using passwd command? I have logged in to server1 using testuser. Trying to change password for itself (testuser) and got the below error. ...
4
votes
1answer
10k views

apt-get doesn't find phpldapadmin in Debian 9 (Stretch)

I am trying to install the phpldapadmin package in order to test the LDAP server that I have installed, but when I try to run apt-get install phpldapadmin it says that the phpldapadmin package is not ...
4
votes
2answers
16k views

Authenticate users via LDAP using nginx

I know how to auth the users via LDAP in apache2: # put the following in the VirtualHost <VirtualHost *:443> ServerAdmin user1@bar.foo.com DocumentRoot /var/www <Directory /&...
4
votes
2answers
3k views

How do I create a hierarchy of UNIX groups as below?

I need to create a hierarchy of UNIX groups. Something like below: A |\ | \ B c |\ D e |\ f g ...where A, B and D are UNIX groups and c,e,f and g are UNIX accounts that are members of those ...
4
votes
1answer
9k views

LDAP Search Filters using BASH

I'm attempting to run the following query in a bash script, allowing me to check two different object classes for a defined attribute passed from a while loop: #!/bin/bash inputfile="$1" binddn="cn=...
4
votes
1answer
5k views

Change default login shell to /bin/bash for ALL ldap users from LDAP server - not client

Perhaps my google kungfu is not doing great today, but I found ways to apparently do this for each user (one by one) on the client side, or even a way to do it from the ldap side with ldapmodify again ...
4
votes
1answer
9k views

OpenLDAP: how can I list active schemes, classes etc?

I'm using openldap-server-2.4.38_1 on FreeBSD 9.1-RELEASE-p5. 1) can I get list of active (connected) schemes without viewing slapd.conf file? 2) how can I get description of obectClasses and/or it'...
4
votes
1answer
11k views

How can I get the list of ldap users without being sudo? [duplicate]

I have non-sudo ssh access to a server of which I want to know the list of users, I think the server is using ldap because: -bash-4.2$ cat /etc/nsswitch.conf # /etc/nsswitch.conf # # Example ...
4
votes
1answer
4k views

Linux and Azure AD sync possible?

I am currently considering to shuffle some infrastructure around, but my question boils down to: Can I sync a list of users and passwords to Azure AD (only for Office 365) from a linux samba server?...
4
votes
2answers
13k views

ldap_bind: Invalid credentials (49)

I'm trying to set up an openLdap server and after following the instructions I'm stuck at the point where I can't add any data. The error I'm getting is ldap_bind: Invalid credentials (49) Please ...
4
votes
1answer
3k views

How do I clear a user's cached Active Directory password on CentOS 7?

I built a CentOS 7 install on my company laptop and configured it to authenticate to the company AD servers like so: Install packages: yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-...
4
votes
1answer
3k views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...
4
votes
0answers
2k views

getent shadow shows password hashes for some users

If I execute sudo getent shadow I see password hashes for all the local users who have them. For most of the LDAP accounts I only see * in the password field. However, for a few LDAP users, I see ...
4
votes
0answers
1k views

Limit Openldap Transaction Log Disk Usage

Openldap (specifically version 2.4) stores transaction history in log files by default in the ldap data directory (so /var/lib/ldap/log.###########). Currently these log files take up a lot of space, ...
4
votes
3answers
975 views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
4
votes
0answers
4k views

How to configure postfix to send mail to external SMTP server?

I have a machine with http://phabricator.org/ set up on it and I would like to set up postfix to enable e-mail sending to my company's mailboxes (as for notification emails coming from e.g. ...
4
votes
0answers
573 views

LDAP: view DIT structure from terminal

Can I get list of existing entries using any console utilities? For example - I can get a tree of my filesystem with tree: $ tree . ├── Catalina │   └── localhost │   ├── host-manager.xml │   ...
3
votes
2answers
1k views

Is Open LDAP meant to work with the passwd command for Linux?

I've implemented an Open LDAP server in OpenSuSE 11.2 via the YaST GUI. I'm having success logging in from the local machine and other machines via LDAP. I am able to change LDAP user passwords via ...
3
votes
1answer
1k views

getent group working, but sshd_config allowgroups does not retrieve appropriate group

I am trying to setup Kerberos MIT authentication with OpenLdap autorisation on Debian Jessie. Authentication part is working great, as I can login to SSH using my kerberos account. I even can create ...
3
votes
1answer
6k views

text based tool for ldap queries

I need a way to do LDAP queries through a text based interface. I use jXplorer on my own machine but that is a graphical client. Btw, I'm running Ubuntu server 14.04. The background: A server in my ...
3
votes
2answers
3k views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
3
votes
1answer
268 views

Files that need to be updated in /etc/pam.d/ for nss-pam-ldapd support for SSH

/etc/pam.d/ has several files and running auth-config updates many of those. I need to know exactly which file needs to be updated to support LDAP based login using SSH / Console.
3
votes
1answer
6k views

While trying to ssh, pam_ldap always sends the password “INCORRECT” causing bind to fail

I installed ldap-auth-client nscd ldap-utils on lubuntu 14.04 running on a banana pi. I can successfully bind as the user using ldapwhoami, but I cannot log in via ssh: Auth.log: Oct 21 02:12:05 ...
3
votes
1answer
4k views

Configuring proftpd and mod_ldap.c query not working - any ideas?

I'm trying to get a ProFTPD to LDAP auth on a Active Directory base. I still couldn't figure out what could be wrong with my configuration since, executing a LDAP query with ldapsearch seems fine ...
3
votes
1answer
2k views

Can't connect to LDAP accounts with lightdm

I made a fresh install of Linux Mint 18.3 and then established a connection to my LDAP server. I can see the list of LDAP users with getent passwd. The strange thing is that, when I boot, the start up ...
3
votes
1answer
4k views

LDAP authentication broken with upgrade to CentOS 6.4 (sssd)

I have OpenLDAP server: @(#) $OpenLDAP: slapd 2.4.23 (Aug 8 2012 16:29:21) In my configuration have group: ldapsearch -x -b 'cn=groupname,ou=UnixShell,ou=Services,o=example,c=ru' # extended LDIF # ...
3
votes
1answer
8k views

Failed to start slapd in CentOS

I was trying to setup an LDAP server for my development. For this purpose, I have chose CentOS 6.3 install it in VirtualBox host in Fedora 17. I'm following this tutorial to guide me on this setup, ...