Questions tagged [ldap]

the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services

Filter by
Sorted by
Tagged with
0
votes
1answer
467 views

Sudo issue on AIX LDAP server

When a user tries to sudo to root he recieves the error : ldap_start_tls_s(): Can't contact LDAP server. What causes this problem?
1
vote
1answer
399 views

“map passwd uid” equivalent in sssd

nslcd.conf has "map passwd uid" to map attributes that will be used as the Login username. What is the sssd.conf equivalent of that?
1
vote
1answer
2k views

error reading from nslcd: Connection reset by peer

I have a CentOS 7 machine that output the following to the /var/log/secure after every machine restart. I have to manually stop and restart the nslcd service to make these errors go away. error ...
1
vote
0answers
590 views

Why is LDAP trying to connect by hostname instead of localhost?

I have set up an LDAP server on localhost and generated certificate with CN=localhost. But when I run the command ldapsearch -H ldap://localhost -D "..." -w password -ZZ -d1 I get the error ... ...
3
votes
1answer
306 views

Files that need to be updated in /etc/pam.d/ for nss-pam-ldapd support for SSH

/etc/pam.d/ has several files and running auth-config updates many of those. I need to know exactly which file needs to be updated to support LDAP based login using SSH / Console.
1
vote
0answers
842 views

users can not do su to other LDAP user

I 'm thinking my authentication is working well and PAM is configured on my Debian server because : If I do a ssh connection with a LDAP user it's working with password If I do a ssh connection with ...
5
votes
0answers
7k views

How to change password of LDAP user?

Is it possible to change password for logged in LDAP user using passwd command? I have logged in to server1 using testuser. Trying to change password for itself (testuser) and got the below error. ...
1
vote
0answers
43 views

In nss ldap is it possible to change the default passwd access filter?

I'm trying to bend a QNAP device to my will and not quite getting there. This seems like it should be simple but can't get it to work. The device is linked to an Open Directory (OSX ldap v3) and ...
0
votes
1answer
235 views

rbash for ssh ldap users

I have some ssh ldap users who connect to my server (centos7) for reset their password. I would like they use rbash for execute passwd command but I don't know how to do. I can't add rbash to /etc/...
0
votes
1answer
45 views

Does LDAP take care of all users and groups on a system?

I have been following the tutorial here to try out LDAP. I know that a Linux system has groups like mysql, sudo, video, dial-out etc. Do I need to add these to my directory? Are these served via LDAP ...
2
votes
2answers
2k views

howto login into system with LDAP creds when server with LDAP is offline

I have Ubuntu 14.04 and LDAP as center of authentication. It works fine until LDAP server is online. Sometimes network is going to down between LDAP and other servers and LDAP is unavailable, so ...
1
vote
1answer
511 views

Ldap error doesn't redirect to file

I'm running a loop querying ldap server for a single dn every time, just to see if it's running okay. I want to output both the successful and unsuccessful responses to a file and while the former ...
0
votes
1answer
1k views

how to load an LDAP client cert RHEL7 authconfig-tui

I have a RHEL7 machine that needs to be configured as an LDAP client (user/auth, using authconfig-tui). When finishing authconfig-tui, it says, just copy the cert to /etc/openldap/cacerts, which I ...
2
votes
0answers
1k views

samba4's ldbsearch complains about authentication for basic searches

So I understand the concept of binding to a LDAP server of any kind and performing either authenticated or anonymous queries. And my goal is to get the full dn=...dc=example,dc=com for a specific ...
1
vote
1answer
1k views

How to start a service on boot after ldap account is available

I have a machine hosting an LDAP database and services on other machines run as users from that database. Because the user accounts does not exist locally, the services fail to start when those ...
0
votes
2answers
1k views

Use an alternate /etc/ldap.conf with ldap search

I would like to perform ldap queries using an alternate file (which is intended to be used with pam.d and so have the same format as /etc/ldap.conf) I think of using ldapsearch. In the manual, I ...
2
votes
0answers
343 views

Override local sudo defaults using sss or ldap

I'm trying to to configure an IPA domain to use the following sudo options for a specific command group: !authenticate !requiretty visiblepw Locally, the following defaults are set in /etc/sudoers: ...
1
vote
1answer
2k views

Samba NT_STATUS_NO_TRUST_SAM_ACCOUNT

for a project we have several samba shares configured as following: [global] workgroup = <domain name> netbios name = <machine name> passdb backend = tdbsam security = ads ...
3
votes
1answer
1k views

getent group working, but sshd_config allowgroups does not retrieve appropriate group

I am trying to setup Kerberos MIT authentication with OpenLdap autorisation on Debian Jessie. Authentication part is working great, as I can login to SSH using my kerberos account. I even can create ...
0
votes
1answer
219 views

How can I disable phpLDAPadmin without uninstalling it?

I installed phpLDAPadmin and it works via http://.../phpldapadmin Is there any good way to disable phpLDAPadmin without uninstalling it and later I can turn it on only when I need to do?
5
votes
3answers
1k views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
0
votes
1answer
876 views

authenticating ldap users with searchguard for elasticsearch

I have an elastic-search setup with search-guard plug-in. My elastic-search web access is behind single sign on proxy , and i want to authenticated users coming through SSO according to their roles in ...
1
vote
1answer
669 views

SLES 11SP4 LDAP - error trying to bind as user - (Invalid credentials)

I have LDAP server configured (with YaST) on SLES 11SP4 and I've created 3 users. I can su (from root) to any of the user but I cannot login as any of them or change their passwords. When I tried to ...
2
votes
0answers
446 views

ldap 389 server with sssd client, cannot modify password

I setup the 389 ldap server on a fedora system. I can authenticate against the system, but I cannot update/modify a password neither as root nor as user. user root gets a "Password reset by root is ...
2
votes
0answers
449 views

Changing LDAP server preference on Solaris 10

I've recently inherited a new environment running Solaris 10 and I was looking for information on how to change the LDAP server preference on an LDAP client, namely through modifying the ...
0
votes
1answer
34 views

Can Linux ldap users still available if ldap server is unlinked?

I have a Linux with some users have their password in /etc/shadow and other authenticate through LDAP. Is there a way to make user that have their password stored on ldap continuing to be available (...
-1
votes
1answer
227 views

Linux + LDAP/ActiveDirectory: Can't create a private group for the user like “username:username”

My apologies first for not phrasing this question very well, because it's difficult to Google. (Try finding a Google answer with the terms "self user group" in it.) Normally, with PAM in Linux, when ...
1
vote
2answers
2k views

Migrate LDAP from one machine to another

My current task is to migrate the content from one machine (source) to another (target). Both machines are identical. One is heavily used and the other is clean. I already have all the files that are ...
3
votes
1answer
66 views

Postfix database unreachable behaviour

I have a server running postfix and dovecot with a local mysql database to store virtual domains and users. I'm considering to move the database to another server and perhaps switch to using ldap ...
2
votes
2answers
4k views

How can I set up centralized home directories and user authentication using LDAP and NFS?

I am trying to configure my server to authenticate users using LDAP and save their home directories on a NFS-Directory, also located on the server. i.e.: I share a directory on my server: /nfsexport ...
0
votes
2answers
230 views

Configuring MSAD in RHEL [closed]

We are trying to configure MSAD in our LINUX VM(RHEL).So that users can login with there accounts directly to the LINUX VM(RHEL) instead of using service accounts.Can someone help me out here ? ...
1
vote
1answer
75 views

Thunderbird no longer starts after upgrade to 38.3.0

After I upgraded Thunderbird last Monday to version 38.3.0 on my Mint 17.2 XFce I was no longer able to start Thunderbird. First I made sure that the files in my profile were all owned by me. When ...
0
votes
3answers
752 views

acroread only runs as root

Note I already asked the exact same question here, with no success. I hope it's not a problem. I am working on a computer connected to a LDAP server. The computer is running under Linux Mint 17. I ...
0
votes
0answers
462 views

Doesn't these program respect nsswitch?

I've set up LDAP and nsswitch on ubuntu and to some extent it seem to work. For example getent passwd lists accounts from both /etc/passwd and LDAP server. However for example id <user>, sudo -...
0
votes
1answer
776 views

ldappassword for user without ldap password prompt

I installed pam,nss and ldap authentication. I have two rule host : 183 -- installed openldap server, 123-- installed openldap client. my ldap system works fine. But What i want to do is: when I ...
1
vote
0answers
64 views

read-only ldap client setup

I have a Debian Linux box hosted on the cloud that I want to provide mail services with (Postfix/Dovecot). I want it to access my openLDAP server at home for authentication and to provide users email ...
0
votes
1answer
68 views

OS X Directory Services

I have been reading from Advanced Programming in the UNIX environment (Stevenson and Rago), and I am currently reading about how user data is stored on various systems, including Linux, FreeBSD, and ...
2
votes
2answers
5k views

Restarting LDAP client service

I have modified ldap.conf and slapd.conf. I'm wondering how I can restart the ldap/client service, filesystem/autofs and name-service/cache. OS: Solaris 11 but advice on linux should help too
0
votes
1answer
220 views

Relationship between limits.conf and LDAP?

This seems like a straight forward question: Is there a relationship between the groups defined in ldap ldif files and /etc/security/limits.conf ? I.e., does defining an LDAP user with ou=student ...
1
vote
1answer
485 views

How can I run unattended processes as authenticated AD/LDAP users?

I'm switching some servers over to Debian 8 and using realmd for Active Directory (LDAP/Kerberos) authentication. This has been working great and allows Domain Users to login to my server, etc. ...
2
votes
1answer
4k views

Allow username input sddm (LDAP/Kerberos)

The overarching question: How can I enable SDDM to accept username input in Debian? Underlying/implicit questions: How does SDDM recognize users? What is the Debian alternative to /etc/sddm.conf ? ...
2
votes
3answers
2k views

IPA server configuration: Cannot use IP network address

I am stuck with an error while configuring IdM server for my environment. I got this weird error invalid ip address 192.168.1.77 for server.example.com: cannot use ip network address The error came ...
0
votes
2answers
8k views

OpenLDAP: Invalid syntax error when trying to add LDIF

I keep getting an invalid syntax error when trying to create a user in OpenLDAP (CentOS 7). This is a new install of OpenLDAP for testing purposes. So far I've managed to create a group called "Lab ...
2
votes
3answers
20k views

How to uninstall OpenLDAP in RedHat?

I have installed OpenLDAP with yum, but I have accidentally deleted some of the config files. I am not able to recover them. I want to uninstall it. I tried the following command but it ends with an ...
1
vote
1answer
2k views

OpenLDAP's cn=config is not getting fully replicated

I've got OpenLDAP 2.4.39 master and a read-only replica, using the cn=config aka "OLC" configuration (as oppose to the older slapd.conf method). Replication works for data (user accounts, etc) but ...
1
vote
2answers
829 views

Trying to install a cluster, DHCP failing to start

Trying to install a linux cluster using this tutorial. I am running CentOS 6.3. When I try to start DHCP with service dhcpd start, it fails. I've used tail -f /var/log/messages and dhcpd -t, but I ...
0
votes
1answer
30k views

how to verified LDAP on Linux machine

I want to test the LDAP connectivity between my linux machine to the windows domain controler , so I installed successfully the tool- ldapsearch The Linux machine do authentication of users agaisnt ...
0
votes
1answer
5k views

What are the other alternative to test a LDAP connection on linux machine

I have Linux machine, Redhat 5.8, that gets data via LDAP. For an unclear reason, I can’t get the data via LDAP. I see that from /var/log/messages and /var/log/secure the problem is that the ...
0
votes
2answers
3k views

what is the right ldapsearch version for my linux red-hat machine

I am little a confused about the following: I want to install the binary ldapsearch tool on my Linux machine, in order to use this tool to test LDAP connections with my Linux (Linux version 5.8 , ...
3
votes
3answers
10k views

OpenLDAP: How to add home directory for users?

I am experimenting with an OpenLDAP-Server and I'm not sure how to add /home directories for users. Also where are the files stored? If a user creates a file on a Windows machine in the domain, where ...