We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
1
vote
1answer
914 views

How to create a single Authentication point with multiple LDAP servers?

I'm currently into a process of creating a central service system from where users can connect to VMs. My goal with this is to have a single point of authentication for all possible users. The issue ...
0
votes
0answers
15 views

How to do ldapsearch using TLS1.2 from linux

I am trying to establish a connection to an AD/ENT group using ldapsearch. i am unable to connect and getting below error. Error: ldap_bind: Can't contact LDAP server Syntax Used: /opt/oracle/...
12
votes
3answers
29k views

How to make ldapsearch working on SLES over tls using certificate?

We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here https://stackoverflow.com/questions/15260252/how-to-use-multiple-tls-...
0
votes
0answers
16 views

ds-389 won't import 10rfc2307bis.ldif

I've installed the ds-389 LDAP server on CentOS7 (package 389-ds-base). I tried extending the schema by adding the file 10rfc2307bis.ldif to the /etc/dirsrv/slapd-auth/schema folder. After the file ...
6
votes
5answers
23k views

Howto set access control lists ACLs in OpenLDAP

I'm using the Debian Squeeze OpenLDAP. Where can I set ACLs? Isn't it possible to execute the access to directives with ldapmodify? There's no slapd.conf file in Debian, they use a slapd.d folder
1
vote
1answer
56 views

cannot authenticate via LDAP as user has multiple UIDs

Upgrading from SLES11 to SLES 12 I had to replace a working Cyrus mail server with dovecot. Unfortunately I'm unable to authenticate via LDAP (which was not a problem with Cyrus): My LDAP user has ...
4
votes
2answers
2k views

Central user management with multiple servers with SSH keys, LDAP?

the number of my servers and users is growing and I would like to adopt a central database to manage users accounts. I'm thinking about OpenLDAP, but I have a question. Is it possible in LDAP to ...
5
votes
3answers
1k views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
1
vote
1answer
2k views

Samba NT_STATUS_NO_TRUST_SAM_ACCOUNT

for a project we have several samba shares configured as following: [global] workgroup = <domain name> netbios name = <machine name> passdb backend = tdbsam security = ads ...
2
votes
1answer
58 views

Cisco Jabber for Linux?

Some people at our company are using a so called Cisco Jabber in Windows OS to improve handling of phone calls directly at the PC instead of using the telephone anymore. After installation, one has ...
1
vote
1answer
17 views

How to figure out if a host authenticates via LDAP

I would like to automate a check (in shells script) that verifies whether the account that is currently logged in is a local account or whether it authenticates via LDAP. Since there are various ...
1
vote
1answer
13 views

LDAP connection through proxy

I have the following infrastructure: LDAP (Externe network) - SQUID - HOST1,HOST2,HOST3... All of them are Ubuntu Server. I need to be able to make LDAPS requests from the hosts through port 636, ...
0
votes
1answer
2k views

LDAP server setup with GUI on CentOS7

I have, in the past, set up an LDAP server using OpenSuSE (13.2), which worked well since there was a YaST module which allowed a GUI set-up. Now I have the problem that I must set up an OpenLDAP ...
0
votes
2answers
2k views

OpenLDAP: rfc2307bis instead of nis schema

I'm looking for a way to create an empty LDAP dictionary with the rfc2307bis schema. On Debian when installing slapd or when reconfiguring with dpkg the nis schema is used by default. How do I remove ...
2
votes
1answer
2k views

OpenLdap - restore backup - slapcat/slapadd

Im using slapcat to make backup like this: slapcat -n 1 > ${BACKUP_PATH}/ldap.domain.com.ldif Then import using slapadd: slapadd -F /etc/ldap/slapd.d -n 1 -l ldap.domain.com.ldif I can't ...
4
votes
1answer
3k views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...
2
votes
1answer
5k views

LDAP user does not exist when running 'su'

I'm attempting to set up LDAP authentication according to the instructions in Sander Van Vugt's RHCSA/RHCE book for RHEL7. In chapter 6 he explains that when using authconfig-tui the FORCELEGACY ...
0
votes
0answers
18 views

LDAP disable local account, and pub/private key on centos

I am currently setting LDAP/krb5 on Centos7. I followed the instruction on: https://wiki.cac.washington.edu/display/LDI/Configuring+Linux+Clients+for+LDI (thanks to Eric) http://staff.washington.edu/...
0
votes
0answers
33 views

ldap home directory permission issue on debian/ubuntu

I have joined the debian9 machine to microsoft AD when i run su - test1 it create the home directory but with below permission. root@debiantest:/home# ls -ltr drwxr-xr-x 2 test1 data 4096 Sep 18 22:...
11
votes
2answers
3k views

Autofs doesn't mount shares on startup

I am using OpenSuSE 12.1 with homes shared through LDAP and NFS. ldap stores the maps. My problem is I can't have the shares mounted on boot. It's only working when restarting the autofs service ...
1
vote
1answer
2k views

Enabling SASL authentication mechanisms in openLDAP using OLC

All of the information that I have been able to find about enabling SASL mechanisms for openldap still use the slapd.conf method while all modern LDAP directories have elected to use OLC over a static ...
2
votes
1answer
18 views

sudo-ldap works with !authenticate only

I'm trying to setup sudo-ldap in a clean CentOS 7 docker environment. I've successfully setup sssd and PAM authentication, and it works. However, sudo-ldap works only if !authenticate is set: dn: cn=...
1
vote
1answer
2k views

Authenticating To Multiple LDAP Servers

Owing to a corporate strategy I am moving human user authentication from an implementation of LDAP locally to a centralized Active Directory domain. The problem is that we have a tightly constrained ...
1
vote
1answer
947 views

How to filter group membership from the ldap server?

Context : We have a Ubuntu 12.04 with authentication done on a ldap server. Unfortunately, one (ldap) user belongs to a (ldap) group named "admin". I know there is the option ...
1
vote
1answer
89 views

How do you cleanup after deleting an LDAP user on RHEL 7?

We have a small network using 389 Directory Server for LDAP. We make LDAP users, those users log on to various machines in the network, and then sometimes we delete those users. However, after ...
0
votes
2answers
7k views

OpenLDAP: Invalid syntax error when trying to add LDIF

I keep getting an invalid syntax error when trying to create a user in OpenLDAP (CentOS 7). This is a new install of OpenLDAP for testing purposes. So far I've managed to create a group called "Lab ...
0
votes
1answer
4k views

How to disable ldap and allow local authentication in debian server?

I have debian server Debian 3.2.81-2 x86_64 GNU/Linux. I want to disable openldap and enable local authentication. I see /etc/ldap/ldap.conf file which has ldap entry. I have ran service slapd stop;...
2
votes
2answers
54 views

Restricting openldap ldapsearch on attributes

I have the following query against my directory: ldapsearch -x -H ldaps://example.com -D "cn=gitlab,ou=Service Accounts,dc=example,dc=com" -w foobar -b "ou=Persons,dc=example,dc=com" With the ...
1
vote
1answer
43 views

Linux LoginServer

I want a Linux server with the user accounts. The users will see a login screen after boot. So they can directly login on the server without noticing it. The user folders are also saved there, like ...
1
vote
1answer
17 views

Make a user log in for a host valid for all the other hosts in the same domain

Assume that several machines with Unix-like OSs are connected to a server, which for example runs LDAP. Its database includes many users: one of them is testuser. This way, testuser can perform a ...
2
votes
1answer
318 views

User listed in group but not in getent passwd

On a specific machine with both local users and LDAP users, there is a user that is listed under getent group foo (let's say the user jdoe is listed), but when doing getent passwd jdoe I get no output....
3
votes
1answer
1k views

Get sudoers through LDAP (SUSE Linux Enterprise Server 12)

I have a problem with my LDAP configuration on SUSE Linux Enterprise Server 12. As many of you know, the ldap.conf file has been replaced with sssd.conf and a couple of other conf files like nsswitch....
0
votes
0answers
22 views

authenticate against LDAP on HP UX

Trying to develop a program that can only grant access to legitimate LDAP users. PHP has been compiled without LDAP support, so this will have to be effected through the a command line tool. Is there ...
1
vote
1answer
934 views

common-account line read order

My authentication is centralized in a LDAP. I've one login system who is working without any ldap so it's present in my /etc/passwd file. This my common-account file in pam.d directory. account ...
0
votes
0answers
21 views

Redirect ldapsearch ldiff from Docker container to host while displaying password promt

Having an ApacheDS LDAP DC in a Docker container, I want to export it as ldiff to the host (not inside the container): docker exec -it apache-ds sh -c 'ldapsearch -D "uid=admin,ou=system" -W -p 10389 ...
0
votes
0answers
87 views

How to Use Single-Sign-On/Custom Auth/Django-login Authentication for Linux PAM?

I have a web application and i want to let all my application-users to access vsftpd server with the same login credentials. At any time, single source of truth for authentication should be my web ...
0
votes
2answers
1k views

Use an alternate /etc/ldap.conf with ldap search

I would like to perform ldap queries using an alternate file (which is intended to be used with pam.d and so have the same format as /etc/ldap.conf) I think of using ldapsearch. In the manual, I ...
0
votes
1answer
999 views

how to load an LDAP client cert RHEL7 authconfig-tui

I have a RHEL7 machine that needs to be configured as an LDAP client (user/auth, using authconfig-tui). When finishing authconfig-tui, it says, just copy the cert to /etc/openldap/cacerts, which I ...
1
vote
2answers
2k views

Migrate LDAP from one machine to another

My current task is to migrate the content from one machine (source) to another (target). Both machines are identical. One is heavily used and the other is clean. I already have all the files that are ...
2
votes
0answers
37 views

Overlapping local and LDAP usernames

We have several RHEL 6/7/8 machines where user authentication is done through LDAP. One of our sysadmins would like to set up local accounts for some users on some machines, with the local username ...
0
votes
1answer
42 views

Pamldap connection refused

I am trying to set up the ssh access through pamldap in Ubuntu 16.04 and after having everything configured I am not able to synchronize the /etc/passwd with the information of LDAP server. ...
0
votes
0answers
39 views

LDAP (Windows) login on Debian9

I've configured my Debian9 with Kerberus5, Samba and Winbind to login on a windows domain, all the configuration is already set and I've already tested it (it works!), but when I try to realize my ...
0
votes
0answers
15 views

Authentication nslcd with ssh key from AD

Nslcd support ssh key authentication, i can login correct with password. But with ssh key i can't login. Can with map or filter get the ssh key from AD ? Cheers
0
votes
1answer
331 views

Use AD Groups Instead of Linux Groups

On our file server, we are using a bunch of Linux groups that are still in use and need to be replaced by their counterparts in AD. The groups in AD and /etc/groups have an identical name, so, (I'm ...
1
vote
1answer
92 views

Authentication via LDAP: where is ldap_search_ext defined?

There are two RHEL 8 servers which have been provisioned from the same template, with some manual fix and tweaking done manually on the first server only. They allow SSH user authentication via a ...
0
votes
1answer
106 views

Change authentication order GNU/Linux

I've got a CentOS7 server joined to a Windows Active Directory Server. I'm trying to connect to CentOS using my Active Directory credentials but it seems that it checks the local account as first step ...
1
vote
0answers
21 views

Setup OpenLdap on Oracle Linux 6

I am currently trying to setup an openldap server on an Oracle Linux 6 VM (VirtualBox). Packagemanager yum installed openldap version 2.4.40-16. Following this setup guide: https://docs.oracle.com/cd/...
0
votes
0answers
21 views

Can't manage user accounts after using LDAP

I've added a ubuntu machine as an LDAP client by following the below steps. But now when trying to access my user accounts from the user accounts app I can't find any user profiles or information as ...
0
votes
1answer
100 views

lightdm and ldap authentication: how to display connectivity issues

I use LightDM als my display manager, entering user credentials via its greeter login. The system's PAM authenticates against a LDAP server. Unfortunately, the network is unreliable hence the LDAP ...
1
vote
0answers
183 views

How to connect Kerberos with multiple LDAP servers?

My actual task is to make our kerberized Hadoop cluster usable by all our teams. Right now we have a very weird setup in our company: The Hadoop cluster has a dedicated KDC (openSUSE Kerberos with ...