We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

129 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
7k views

How to change password of LDAP user?

Is it possible to change password for logged in LDAP user using passwd command? I have logged in to server1 using testuser. Trying to change password for itself (testuser) and got the below error. ...
5
votes
3answers
1k views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
4
votes
2answers
2k views

Central user management with multiple servers with SSH keys, LDAP?

the number of my servers and users is growing and I would like to adopt a central database to manage users accounts. I'm thinking about OpenLDAP, but I have a question. Is it possible in LDAP to ...
4
votes
0answers
3k views

getent shadow shows password hashes for some users

If I execute sudo getent shadow I see password hashes for all the local users who have them. For most of the LDAP accounts I only see * in the password field. However, for a few LDAP users, I see ...
4
votes
0answers
1k views

Limit Openldap Transaction Log Disk Usage

Openldap (specifically version 2.4) stores transaction history in log files by default in the ldap data directory (so /var/lib/ldap/log.###########). Currently these log files take up a lot of space, ...
4
votes
0answers
4k views

How to configure postfix to send mail to external SMTP server?

I have a machine with http://phabricator.org/ set up on it and I would like to set up postfix to enable e-mail sending to my company's mailboxes (as for notification emails coming from e.g. ...
4
votes
0answers
602 views

LDAP: view DIT structure from terminal

Can I get list of existing entries using any console utilities? For example - I can get a tree of my filesystem with tree: $ tree . ├── Catalina │   └── localhost │   ├── host-manager.xml │   ...
3
votes
1answer
295 views

sssd or ldap.conf doesn't work without a bindDN and password in RHEL 5, but works in RHEL 6 and 7. Why?

I am trying to use LDAP for authentication. I see it doesn't work with RHEL 5, if we don't provide a bind DN and password, but works in RHEL 6 and 7. From sssd logs, I can understand that it is ...
3
votes
1answer
196 views

Determine which name service created entry in database (eg passwd)?

On Linux and Unix-like systems the Name Service Switch is used to gather entries for the systems name databases. There are databases such as files, dns, nis and ldap. Is it possible to determine for ...
3
votes
1answer
1k views

Get sudoers through LDAP (SUSE Linux Enterprise Server 12)

I have a problem with my LDAP configuration on SUSE Linux Enterprise Server 12. As many of you know, the ldap.conf file has been replaced with sssd.conf and a couple of other conf files like nsswitch....
3
votes
0answers
73 views

Is it possible to login to a Linux machine with AD credentials without the machine being member of the AD?

I'm asking because as far as I know this is not possible with Windows machines since it's mandatory that a Windows machine is known to the AD in order to login with AD credentials. Is it possible to ...
3
votes
0answers
3k views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
2
votes
0answers
37 views

Overlapping local and LDAP usernames

We have several RHEL 6/7/8 machines where user authentication is done through LDAP. One of our sysadmins would like to set up local accounts for some users on some machines, with the local username ...
2
votes
0answers
4k views

Add LDAP server certificate to trusted list and enable certificate verification

I am trying to use a secure LDAP connection via TLS ldaps://<server_name>:<port> for various applications (e.g. Gitlab). However, the connection raises certificate errors which is due to ...
2
votes
0answers
124 views

What is needed to create a new LDAP database?

I'm trying to create a small LDAP in a directory of ldap/slapdCollection. Here is what I have so far. dn: dc=slapd-Collection,dc=info o: info description: Root Entry for test ldap objectClass: top ...
2
votes
1answer
5k views

LDAP user does not exist when running 'su'

I'm attempting to set up LDAP authentication according to the instructions in Sander Van Vugt's RHCSA/RHCE book for RHEL7. In chapter 6 he explains that when using authconfig-tui the FORCELEGACY ...
2
votes
0answers
869 views

How to add all netgroup members to a group

I have multiple virtualized servers, all configured to use LDAP for their passwd/shadow (in nsswitch.conf) and authentication (PAM). I would like to have an easily configurable set of users who will ...
2
votes
0answers
678 views

/etc/pam.d configuration

This is an example of the /etc/pam.d/sshd configuration file on a FreeBSD 11.0 freshly-installed system: # # $FreeBSD: releng/11.0/etc/pam.d/sshd 197769 2009-10-05 09:28:54Z des $ # # PAM ...
2
votes
0answers
125 views

Error message on nonexistent home dir (pam.d/* settings)

I have a host running Debian 8. I set LDAP authentication, but the home directory is not created. I added in common-session: session optional pam_systemd.so skel=/etc/skel/ umask=0077 It ...
2
votes
0answers
587 views

Lock screen not locking with LDAP on CentOS 7

On my system some users authenticate with LDAP, others have their password stored locally (standard). The problem is that LDAP-users cannot lock the screen. When pressing Windows-Key + L the screen ...
2
votes
0answers
235 views

sudo su error messege through LDAP

I managed to get an authentication through ldap on my SLES 12 machine, but I can't set a certain group as sudoers. My suders entry looks as follows: %LNX-ADMIN-vibe3 ALL=(ALL) NOPASSWD:ALL But all I ...
2
votes
0answers
1k views

samba4's ldbsearch complains about authentication for basic searches

So I understand the concept of binding to a LDAP server of any kind and performing either authenticated or anonymous queries. And my goal is to get the full dn=...dc=example,dc=com for a specific ...
2
votes
0answers
337 views

Override local sudo defaults using sss or ldap

I'm trying to to configure an IPA domain to use the following sudo options for a specific command group: !authenticate !requiretty visiblepw Locally, the following defaults are set in /etc/sudoers: ...
2
votes
0answers
440 views

ldap 389 server with sssd client, cannot modify password

I setup the 389 ldap server on a fedora system. I can authenticate against the system, but I cannot update/modify a password neither as root nor as user. user root gets a "Password reset by root is ...
2
votes
0answers
434 views

Changing LDAP server preference on Solaris 10

I've recently inherited a new environment running Solaris 10 and I was looking for information on how to change the LDAP server preference on an LDAP client, namely through modifying the ...
2
votes
0answers
5k views

How do I view multiple users groups using sssd?

SETUP OS = RHEL 6.4 Workstation System is part of an LDAP domain and was originally configured to authenticate using nscd. All recommended SSSD packages have been installed. [root@sssd_system]#...
2
votes
0answers
1k views

How does ldap work on a client?

This is on CentOS I read the various openldap howto's, they mention /etc/openldap/ldap.conf and editing /etc/nsswitch.conf for example: https://access.redhat.com/documentation/en-US/...
2
votes
0answers
647 views

Confirm DavMail connection

I am using DavMail to connect to my employers Outlook servers. Before I attempt to configure the email client to work with DavMail, I want to confirm that DavMail has been configured properly and is ...
2
votes
1answer
2k views

OpenLdap - restore backup - slapcat/slapadd

Im using slapcat to make backup like this: slapcat -n 1 > ${BACKUP_PATH}/ldap.domain.com.ldif Then import using slapadd: slapadd -F /etc/ldap/slapd.d -n 1 -l ldap.domain.com.ldif I can't ...
2
votes
0answers
522 views

ACL for a binddn user for PAM?

I've installed 389-ds and created a user and a couple groups. I then configured authconfig on a client to use the LDAP instance to authenticate the user. I've logged in successfully as that user. All ...
2
votes
0answers
3k views

Mounting NFS share from Linux client on Windows domain

I've got a client (Ubuntu 13.10) joined to a Windows domain through PBIS/Likewise, serving Samba shares and allowing domain users to login with domain credentials. Outside of the Windows domain, ...
2
votes
0answers
237 views

OpenLDAP error while adding an ACL

I'm trying to add an ACL to my DIT and I get the following: Enter LDAP Password: modifying entry "olcDatabase={0}bdb,cn=config" ldap_modify: No such object (32) matched DN: cn=config This ...
1
vote
1answer
43 views

Linux LoginServer

I want a Linux server with the user accounts. The users will see a login screen after boot. So they can directly login on the server without noticing it. The user folders are also saved there, like ...
1
vote
1answer
17 views

Make a user log in for a host valid for all the other hosts in the same domain

Assume that several machines with Unix-like OSs are connected to a server, which for example runs LDAP. Its database includes many users: one of them is testuser. This way, testuser can perform a ...
1
vote
1answer
56 views

cannot authenticate via LDAP as user has multiple UIDs

Upgrading from SLES11 to SLES 12 I had to replace a working Cyrus mail server with dovecot. Unfortunately I'm unable to authenticate via LDAP (which was not a problem with Cyrus): My LDAP user has ...
1
vote
0answers
21 views

Setup OpenLdap on Oracle Linux 6

I am currently trying to setup an openldap server on an Oracle Linux 6 VM (VirtualBox). Packagemanager yum installed openldap version 2.4.40-16. Following this setup guide: https://docs.oracle.com/cd/...
1
vote
0answers
34 views

in ldap make the default bind the current logged in user

I do not want to specify a default bind_dn in the sssd.conf file for ldap (either openldap or active directory). Is it possible to configure the system in a way, that the first logged in user becomes ...
1
vote
1answer
438 views

ssh using OpenLDAP (LDAP) credencials

I have a corporate network with an OpenLDAP installed and functional. I can log in a Linux server in this network using ssh with my profile (user) that is in OpenLDAP. I created a new user with ...
1
vote
0answers
28 views

Is it possible to pull additional info from LDAP during pam_ldap authentication?

I have additional ldap data that I'd like to store in the user's home when they first log into a client using pam_ldap. However, I can't seem to think of a way to make this work without prompting the ...
1
vote
1answer
436 views

Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password

Dears, I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
1
vote
0answers
365 views

Permission denied on NFSv4 shared directory with authentication with SSO (OpenLDAP + Kerberos)

I'm trying to set up Single Sign On (SSO) with Kerberos and LDAP but I have an issue with NFSv4 with Kerberos for authentication and encryption (krb5p) service. My environment: 1 server (named ...
1
vote
0answers
80 views

Add new attribute to IPA user info (Linux)

I am not sure its so straightforward on the Linux side. I want to add a new attribute to identify users as Contractor or Government. Is this recommended or possible within LDAP?
1
vote
0answers
371 views

Authenticate VNC connections with Local Users

We have some CentOS 7.4 machines that have been configured to authenticate with a local OpenDirectory (macOS server) machine. We want to use user authentication to allow VNC access instead of using ...
1
vote
0answers
411 views

Synchronize between CardDav and LDAP

Is there is an application/service which synchronize contacts from CardDav to LDAP? My plan is to synchronize the contacts which are used in ownCloud to my PBX so I have it on my desktop phone which ...
1
vote
0answers
237 views

Insufficient access when changing ldap user password

I'm having an issue creating an ldap (apacheDS) user and then changing that user's password using the admin account. I'm able to add an ldap user using the admin user: # ldapadd -D cn=admin,dc=...
1
vote
1answer
287 views

Sudo for OpenLDAP

I needed to install sudo-ldap support for LDAP enabled server. The question: On which machine (ldap-client or ldap-server) I have to build & install the package I dowloaded from www.sudo.ws ? ...
1
vote
0answers
857 views

389 ldap client authentication issue [CENTOS 7]

I have created posix group and posix account also able to successfully authenticate client but client unable to change the password. The error is password change failed: Confidentiality required``...
1
vote
0answers
183 views

How to connect Kerberos with multiple LDAP servers?

My actual task is to make our kerberized Hadoop cluster usable by all our teams. Right now we have a very weird setup in our company: The Hadoop cluster has a dedicated KDC (openSUSE Kerberos with ...
1
vote
1answer
446 views

Small office server and UID translation

I want to set up a small server for the office such that users can store their own files which also has separate directories set up for groups to share files. I also have users and clients who would ...
1
vote
0answers
477 views

SSSD list allowed users only

We are using SSSD for authentication using LDAP. And I filter the user access using simple_allow_groups as follows: access_provider = simple simple_allow_groups = Computer Admins (Note: Computer ...