Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
0
votes
1answer
562 views

LDAP ACL to restrict user to only reading their own user attrs

I want to prevent users from accessing anything other than their own data. I've tried implementing the following simple acl (ldif): dn: olcDatabase={1}mdb,cn=config olcAccess: {0}to attrs=...
1
vote
0answers
28 views

Is it possible to pull additional info from LDAP during pam_ldap authentication?

I have additional ldap data that I'd like to store in the user's home when they first log into a client using pam_ldap. However, I can't seem to think of a way to make this work without prompting the ...
1
vote
1answer
441 views

Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password

Dears, I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
2
votes
2answers
1k views

OpenLDAP: Deleted user is still listed in the group

I'm currently doing openldap via command line. I added user John and added group devgroup, and I assigned John into devgroup group. When I deleted a user(John) via command line ldapdelete -Y EXTERNAL ...
1
vote
1answer
939 views

How can I run Apache Directory Studio with OpenJDK 10?

I have installed the OpenJDK 10 JRE on my PureOS system with: $ sudo apt install default-jre $ java --version openjdk 10.0.2 2018-07-17 OpenJDK Runtime Environment (build 10.0.2+13-Debian-1) OpenJDK ...
0
votes
3answers
53 views

search for a pattern and always print the first line which contains the cn

I've a file which has the following output: The dn: can can have more rdcPositions. I only need the dn: which has an rdcPositions contains acme#6# The result should print the cn and also the ...
1
vote
0answers
365 views

Permission denied on NFSv4 shared directory with authentication with SSO (OpenLDAP + Kerberos)

I'm trying to set up Single Sign On (SSO) with Kerberos and LDAP but I have an issue with NFSv4 with Kerberos for authentication and encryption (krb5p) service. My environment: 1 server (named ...
2
votes
3answers
2k views

Convert data from LDIF file to CSV

Need to convert selected Attributes from the block of text between blank lines in the LDIF(text) file and convert it to CSV file with comma separated delimiter, similar to below example: Example: ...
1
vote
0answers
80 views

Add new attribute to IPA user info (Linux)

I am not sure its so straightforward on the Linux side. I want to add a new attribute to identify users as Contractor or Government. Is this recommended or possible within LDAP?
2
votes
1answer
1k views

How to create a list of email addresses from ldapsearch result for further processing?

For an automated mailing and to notify user, respective members of a specific group, I am looking for commands or a single command line which provides a list of email addresses and which can be used ...
1
vote
1answer
918 views

How to create a single Authentication point with multiple LDAP servers?

I'm currently into a process of creating a central service system from where users can connect to VMs. My goal with this is to have a single point of authentication for all possible users. The issue ...
-1
votes
1answer
834 views

LDAP distinguished name

What command should I use to get value of the distinguished name? I tried to use ldaupwhoami, but it returns me 4 additional lines, that begin with SASL. SASL/GSSAPI authentication started SASL ...
1
vote
1answer
310 views

Get real IP address Virtualbox for LDAP configuration

I'm planning to setup a LDAP configuration between two ubuntu virtual machines on my windows machine. So I installed two ubuntu 16.04 virtual machines on my windows machine using VirtualBox. Now I ...
3
votes
1answer
295 views

sssd or ldap.conf doesn't work without a bindDN and password in RHEL 5, but works in RHEL 6 and 7. Why?

I am trying to use LDAP for authentication. I see it doesn't work with RHEL 5, if we don't provide a bind DN and password, but works in RHEL 6 and 7. From sssd logs, I can understand that it is ...
2
votes
1answer
483 views

OpenLDAP vs Active Directory authentication mechanisms

I am able to log in to an Active Directory using the userPrincipalName attribute of a user objectClass; (e.g. foo@mydomain.com) I have also set up an OpenLDAP server instance to which I can only ...
0
votes
1answer
119 views

Regarding PAM via ldap

I have a question for the authentication between Linux and Windows. When I get an authentication from the OS system such as Linux, then I can use PAM by configuration of "/pam.d". However, it's the ...
0
votes
1answer
35 views

How can I use LDAP as a login server for Linux? [closed]

I'm using Ubuntu 16.04 and OpenLDAP I want to use LDAP to manage my Linux users and groups but I don't know how. I searched Google and I found this: https://www.itzgeek.com/how-tos/linux/ubuntu-how-...
0
votes
1answer
2k views

LDAP server setup with GUI on CentOS7

I have, in the past, set up an LDAP server using OpenSuSE (13.2), which worked well since there was a YaST module which allowed a GUI set-up. Now I have the problem that I must set up an OpenLDAP ...
4
votes
1answer
5k views

How do I clear a user's cached Active Directory password on CentOS 7?

I built a CentOS 7 install on my company laptop and configured it to authenticate to the company AD servers like so: Install packages: yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-...
0
votes
1answer
1k views

How to restrict user based on ip address in openldap

In organization we have setup ldap using openldap, i access it with GUI phpldapadmin. we have one requirement to allow access some user from specific IPAddress. I searched but still not able to get ...
0
votes
3answers
1k views

find user name through full name / gecos field?

Given a system where the user data comes from e.g. an OpenLDAP database and is not in the /etc/passwd file. Is it possible to search through the getent passwd database and look up the user id/name by ...
0
votes
1answer
517 views

LDAP authentication and default groups

I have multiple RHEL 7.4 servers with LDAP authentication via sssd. Conveniently, my university's LDAP environment has a UIDNumber attribute that is unique for every person. My sssd.conf is at the end ...
0
votes
2answers
244 views

Matching substring within LDAP DN using Awk

I'm looking to parse the output of an LDAP query. I want to retrieve a specific OU value within the DN that I am printing dn: ObjectName=Value,ou=12,ou=Users,dc=example,dc=com I am retrieving 3 ...
1
vote
0answers
372 views

Authenticate VNC connections with Local Users

We have some CentOS 7.4 machines that have been configured to authenticate with a local OpenDirectory (macOS server) machine. We want to use user authentication to allow VNC access instead of using ...
0
votes
1answer
243 views

OpenBSD LDAP authentication - ypldap high CPU usage

I have an OpenBSD server with login_ldap, ypldap, ypbind and portmapper is configured according to these guides that I managed to find courtesy of Google. http://obfuscurity.com/2009/08/OpenBSD-as-an-...
2
votes
1answer
2k views

Authentication mechanism to connect to Windows AD in Linux?

My company has asked me to look into connecting our CentOS 7 instance's to our Active Directory to make it easier for user management. I have so far looked at: Kerberos, doing it via command line - ...
3
votes
1answer
3k views

Can't connect to LDAP accounts with lightdm

I made a fresh install of Linux Mint 18.3 and then established a connection to my LDAP server. I can see the list of LDAP users with getent passwd. The strange thing is that, when I boot, the start up ...
0
votes
1answer
173 views

fix slapcat 79 character line wrap in output

I use slapcat to do a full-text search in our very large ldap directory. As it is easier to match what I am looking for when I don't know where to look. The problem is that it wraps long lines ...
-1
votes
1answer
679 views

PAM Module mkhomedir with an already existing home

I did set up a PAM authentication towards LDAP. It's all working correctly but I have an issue when I have both a local user and an ldap user with the same name but different UID. I'm working on RH6 ...
2
votes
1answer
39 views

OpenDG a Opensource ldap database handling and issues

I recently joined an organization and got privileges to add/remove entries or say attributes to the LDAP (OpenDJ ldap and opensource LINUX base ldap). So far I have added thousand of modification ...
1
vote
4answers
1k views

How to keep users with local sudo rights from having sudo rights on NFS file server?

Imagine this scenario in a LAN: one Linux NFS fileserver (srv) and three Linux clients (A, B, C). There are files / directories on srv with root ownership and no access rights granted to non-root ...
1
vote
2answers
1k views

LDAP and PAM working for GUI login but not SSH

I have two Debian VMs. one is running an LDAP server and I'm trying to get the other to use libpam_ldap. The client machine is able to get users from LDAP for the GUI login screen, but I can't ssh ...
4
votes
2answers
2k views

Central user management with multiple servers with SSH keys, LDAP?

the number of my servers and users is growing and I would like to adopt a central database to manage users accounts. I'm thinking about OpenLDAP, but I have a question. Is it possible in LDAP to ...
2
votes
1answer
2k views

ldapdelete, want to remove all UID's of people OU, but preserve OU?

With this cli: $ ldapdelete -ZZ -W -D "cn=Manager,dc=site,dc=fake" -r ou=People,dc=site,dc=fake I remove all UID's of People, but the problem is it also removes People OU. I know it's easy to ...
0
votes
1answer
127 views

Only bind user can connect to Postfix server using LDAP

I have a functioning Active Directory server, but whenever I try to authenticate against the Postfix server that uses it (with saslauthd) I notice that only the bind user can connect. Whenever I try ...
4
votes
1answer
14k views

How can I get the list of ldap users without being sudo? [duplicate]

I have non-sudo ssh access to a server of which I want to know the list of users, I think the server is using ldap because: -bash-4.2$ cat /etc/nsswitch.conf # /etc/nsswitch.conf # # Example ...
1
vote
1answer
326 views

How to still using NSS cache daemon in place of NSS LDAP cache daemon

I've Debian 7.11 as client of my LDAP. This morning after an update I 've got the surprise my debian doesn't want to connect to my LDAP anymore. It's seems the nslcd took the hand on nscd. Anyway is ...
3
votes
1answer
196 views

Determine which name service created entry in database (eg passwd)?

On Linux and Unix-like systems the Name Service Switch is used to gather entries for the systems name databases. There are databases such as files, dns, nis and ldap. Is it possible to determine for ...
2
votes
0answers
124 views

What is needed to create a new LDAP database?

I'm trying to create a small LDAP in a directory of ldap/slapdCollection. Here is what I have so far. dn: dc=slapd-Collection,dc=info o: info description: Root Entry for test ldap objectClass: top ...
1
vote
0answers
411 views

Synchronize between CardDav and LDAP

Is there is an application/service which synchronize contacts from CardDav to LDAP? My plan is to synchronize the contacts which are used in ownCloud to my PBX so I have it on my desktop phone which ...
1
vote
0answers
237 views

Insufficient access when changing ldap user password

I'm having an issue creating an ldap (apacheDS) user and then changing that user's password using the admin account. I'm able to add an ldap user using the admin user: # ldapadd -D cn=admin,dc=...
0
votes
1answer
251 views

How to specify a different home directory for an LDAP user on a local host

So after reading all of the directory edit of an LDAP user my question still isn't answered. I need to change an LDAP users home directory on just certain servers without changing it for every server....
0
votes
1answer
459 views

Linux getent automount?

I just got a user account on a server with its nsswitch pointing at ldap. Something is wrong with my home folder (I don't have one). Generally the home folders are mounted by automount/autofs and ...
0
votes
1answer
408 views

linux (redhat) local authentication repository redirect to LDAP authentication

I have an application running on a linux server that can only authenticate using the local repository. However, I have LDAP configured on the machine and want to authenticate users using LDAP. Is ...
3
votes
1answer
563 views

Creating Unix local groups for AD users

I am implementing LDAP authentication against Samba 4 AD for admins login to our Linux servers. I successfully configured PAM with libpam-ldapd and libnss_ldapd with auto creation of the home ...
1
vote
1answer
287 views

Sudo for OpenLDAP

I needed to install sudo-ldap support for LDAP enabled server. The question: On which machine (ldap-client or ldap-server) I have to build & install the package I dowloaded from www.sudo.ws ? ...
1
vote
0answers
857 views

389 ldap client authentication issue [CENTOS 7]

I have created posix group and posix account also able to successfully authenticate client but client unable to change the password. The error is password change failed: Confidentiality required``...
4
votes
1answer
2k views

Samba - use LDAP for authentication only?

I am trying to set up a Samba server to use an LDAP server for authentication only, but pull all account information (user ID etc.) from SSSD, PAM etc. Basically, the server should act as a standalone ...
0
votes
1answer
1k views

ldapmodify script [closed]

I'm trying to modify a lot of users logins without a certain pattern in LDAP from a text file but I'm getting errors: This is my try: #!/bin/bash for i in `cat users.txt`; do ldapmodify -h 10.X.X.X -...
1
vote
0answers
183 views

How to connect Kerberos with multiple LDAP servers?

My actual task is to make our kerberized Hadoop cluster usable by all our teams. Right now we have a very weird setup in our company: The Hadoop cluster has a dedicated KDC (openSUSE Kerberos with ...