Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ldap]

LDAP is Lightweight Directory Access Protocol.

0
votes
0answers
7 views

OpenLDAP error: config error processing cn={1}core,cn=schema,cn=config

I cannot start my OpenLDAP this morning. I am receiving this error: config error processing cn={1}core,cn=schema,cn=config. I have googled around without any luck. It seems to be a checksum error. Is ...
0
votes
0answers
13 views

Apache DS LDAP Server Fails to Start After Schema Addition

In an attempt to add the memberOf and sAMAccountName attributes from MSFT, I'm importing the LDIF found in this answer. The import succeeds and the new attributes appear in the tree but when I restart ...
0
votes
1answer
16 views

How to “Require password change at next login” without resetting password

When you reset an user's password in macOS Server.app's Open Directory (I think it's using slapd), you can also check the option Require password change at next login. The question: can you also ...
0
votes
0answers
11 views

Deny every action on an organisation unit for a group in phpLDAPadmin (LDAP)

I want to deny every access for a group (group trainees like in my picture) to the organisation unit Ulist in my phpLDAPadmin. How can I do it ? I don't know how to configure a simple access control ...
0
votes
0answers
27 views

Firewall To Google Secure LDAP Service

So it seems that Google has released a secure LDAP service to allow access to G Suite information. -> Documentation I have been trying to set this up as an LDAP server on my FortiGate without much ...
0
votes
1answer
105 views

enable ldap for wekan

Trying to setup wekan simply using snap on ubuntu server. what I am doing is simply enable ldap by instruction: Ldap Enable. To enable the ldap of Wekan: $ snap set wekan LDAP_ENABLE='true' ...
0
votes
0answers
12 views

Separate autofs setup for one user

I have autofs setup that uses yp bind. Now I was tasked to set one user's home directory as read-only. Is there any option to add separate configuration for one mount? My auto.master contains one line:...
0
votes
2answers
26 views

Given self signed CRT and KEY files, can I install these into a Windows Active Directory intranet setup for all machines to pick up?

I'm looking into setting up the Zulip chat server on a local Active Directory intranet. The chat server requires an SSL certificate which I'm able to generate CRT and KEY files from OpenSSL. However ...
0
votes
2answers
69 views

LDAP the right choice?

So I'm looking for a solution for ssh key authorisation access to numerous servers, and have been pointed towards using LDAP. I wanted to present the use case and see if LDAP would be applicable and ...
1
vote
0answers
35 views

Enroll MacOS 10.13 in FreeIPA domain?

I tried following this guide to enroll a mac on OS X 10.13.6 in my FreeIPA domain that all the linux machines on my home network are. All the steps worked, but I can't log in with any freeipa users ...
0
votes
1answer
15 views

Authentication and policy management of macOS clients

Can I manage authentication and policy of macOS clients by LDAP? Is it possible or there are other solutions?
0
votes
1answer
27 views

prioritize LDAP when using passwd and group

I have several servers, one of which, say S1, is used as LDAP server. Other servers are configured to authenticate against the LDAP server. When a user is added, I always create a unix user on S1, ...
0
votes
1answer
454 views

ldapsearch - Strong(er) authentication required - Transport encryption required

I'm trying search my company's AD with ldapsearch. However I always get the error: ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required....
1
vote
0answers
12 views

LDAP create members relations for users and groups

I don't have an access to LDAP server, instead I've a DB with tables for Users and Groups. Now I want to build a table with members relationship, in other words I would like to build a table where ...
0
votes
1answer
76 views

Can I use a different machine with same MAC address and PC name to join a domain?

I have a old Windows PC named pc1 which is joined to domain1 currently. However. today I tried to join the same domain with a new different computer with same OS version, MAC address and computer name....
0
votes
0answers
25 views

LDAP Authentication with -W (fail) vs. -w (succeed)

I am using the OpenLDAP client utilities with the 389 directory server under CentOS 7.3. In the example below, why does authentication fail when I use -W to specify that I want to be prompted for the ...
2
votes
1answer
98 views

Generation of SSHFP Records in FreeIPA

MY SETUP I have a cluster of machines running Centos 7.3, and I am using Kerberos / LDAP for authentication. Kerberos / LDAP are as packaged in FreeIPA 4.4.0. All hosts have an address on 192.168.1....
0
votes
1answer
50 views

Two different servers (with one tied to SAP), with different login id's. Can they all sync?

Forgive me in advance: I USED to be a network admin many moons ago, but moved to management and my skills have weakened over time. So I might use wrong terms... background first, then question: ...
0
votes
0answers
190 views

Permission denied on NFSv4 shared directory with authentification with SSO (openLdap + Kerberos)

I'm trying to set up Single Sign On (SSO) with Kerberos and LDAP but I have an issue with NFSv4 with Kerberos for authentification and encryption (krb5p) service. My environnement: 1 server (...
0
votes
1answer
190 views

Change password on client with sssd kerberos and ldap

I have an error when I use passwd in ldap user session. I get: passwd: Authentication token manipulation error I check this link but it didn't help. In my cn=config/olcDatabase={1}mbd.ldif I ...
0
votes
1answer
322 views

pam_sss access denied with kerberos authentication ok

I'm trying to use sssd with kerberos authentication and ldap on Ubuntu 18.04 (server and client machine). On Ubuntu client side I installed sssd sssd-tools packages. But when I want to log in to alice,...
0
votes
1answer
124 views

How to use ldp in Windows with kerberos credentials to bind to OpenLDAP

I want to do an LDAP search from my Windows 7 workstation against our organization's OpenLDAP instance. This OpenLDAP instance requires GSSAPI (i.e., Kerberos) credentials to work. On Linux I do this:...
0
votes
2answers
173 views

Determining Mechanism of SSH Password-Less Authentication

I am trying to understand the mechanism by which I am successfully performing password-less SSH authentication. Though public key authentication is enabled, this is not how it is happening. I have my ...
0
votes
0answers
18 views

Configure LDAP server to display a specific error to the client's console?

I run an LDAP server that some machines are incorrectly configured to query. I believe these are Windows machines that think I'm their ActiveDirectory server. Is there a way to publish some ...
3
votes
2answers
603 views

smbpasswd command not found on MacOS High Sierra

I need to change my Active Directory password at my office, we have documentation on linux to use smbpasswd command line. On Debian, this command can be found in samba-common-bin. I wish I could ...
0
votes
0answers
37 views

Change LDAP server identifier on clients

Some time ago I set up a centralized LDAP authentification for all our servers. Today we changed our network configuration from static IP addresses to DHCP provided ones and of course now no machine ...
0
votes
0answers
67 views

Merge two Active Directory users' attributes

Does anyone know the best way to duplicate two attributes of an Active Directory User? More specifically, I am looking to copy the pager attribute to the EmployeeID attribute, so that they are the ...
0
votes
0answers
42 views

Restricting LDAP group access to an application via PAM

Would like to restrict a certain LDAP group from logging into a host but allow it to login to a specific application. If I have these groups defined in LDAP: Server: myhost01 1) ldap-grp1 2) ldap-...
0
votes
2answers
391 views

Self hosted Firefox sync server with LDAP backend

For security and privacy reasons, I want to setup my own server for syncing bookmarks and history in Firefox browser. We have Sync 1.1 which supports MySQL or LDAP backend for user authentication - at ...
1
vote
0answers
56 views

AD integration in RHEL 7 without Kerberos

How to integrate with AD in RHEL 7 without kerberos? I have below in /var/log/secure. Mar 12 09:57:31 xxxxxxxx su: pam_sss(su-l:auth): authentication failure; logname=admin uid=86500 euid=0 tty=pts/0 ...
-1
votes
1answer
223 views

sudo via LDAP - Why not create a group 'sudo' [closed]

I want to manage sudo rights via LDAP. LDAP Authentication is already running. Can I create a Posix Group 'sudo' in LDAP to make this happen? The guide from sudo seems to be complex as a new schema ...
0
votes
1answer
334 views

“Error(s) encountered” While Using ldapscripts

Below, I show my OpenLDAP configuration. This is a fresh OpenLDAP installation on a fresh Debian Stretch installation. I am unable to use ldapscripts. Regardless what I do, I get the errors shown at ...
0
votes
1answer
2k views

ldap_modify: No such object (32)

I installed OpenLDAP on Centos 7 and tried to create the admin user. But I got some error on ldap_modify. Below are my steps: Install OpenLDAP and start it: sudo yum install openldap openldap-...
0
votes
0answers
1k views

OpenVAS 9 LDAP Authentication

I've setup OpenVAS 9 on Kali Linux and set it up to be available from other computers. I'm trying to setup the LDAP authentication so users don't need new passwords to access OpenVAS. On the ...
6
votes
0answers
2k views

Access Office 365-directory using LDAP

My company runs internal e-mail-traffic using Outlook 365. I prefer using a proper e-mail client (in my case: thunderbird) via IMAP and SMTP, which is no problem since the server adresses are provided ...
0
votes
1answer
81 views

How can I host a file on a LDAP server, specifically Apache Directory Studio?

I am running Apache Directory Studio on mac os. I am a LDAP rookie. I can't figure out how to host a file on the LDAP server so that when our java service connects to: ldap://localhost:12321/cn=crl1,...
0
votes
2answers
1k views

ldapsearch - how to display “lastLogonTimestamp” & convert windows lastlogontimestamp to date in bash

I want to search Active Directory for inactive users that have no login for x days/months. I've got such a ldapsearch query: ldapsearch -h domain.test -p 389 -D "cn=login,ou=test,dc=domain,dc=test" -...
0
votes
1answer
112 views

What is the authorization protocol used by Active Directory?

I know that by default Active Directory used the Kerberos protocol for authentication. I've heard that by default LDAP is used by Active Directory for authorization. However, I am unable to find any ...
0
votes
1answer
51 views

Windows Domain Authentication while Disconnected

Is there a way to use domain authentication on a local machine when the machine is disconnected or the network is down? Local cache is not an option. It will be a user that has never logged into this ...
1
vote
1answer
613 views

Searching ADSI using PowerShell

Good morning. I’ve been trying to put together something on and off for days (that should be) simple using PS but I haven’t been able to figure it all out yet. I am trying to search and retrieve ...
0
votes
1answer
294 views

LDAP user invalid for chown

My setup is as follows: I have a web application that creates user entries in an LDAP directory. Then, it calls a script which makes the created user the owner of a file. I have set up an LDAP, and ...
1
vote
1answer
960 views

how do I do ldap authentication with wget?

I'm trying to crawl an old Reviewboard server I own so I can create a static copy and archive it, and I'm doing this using wget per recommendations from a few people, using the recommended way of ...
1
vote
0answers
213 views

User causes automount to occur but gets 'permssion denied' for the directory/files

I've been fighting this for days and I'm lucky the windows don't open too wide ;-). I'm putting together a new infra and am trying to get NFS automounts running on Ubuntu working with with FreeIPA, ...
0
votes
1answer
57 views

How to make LDAP requests (Port 389) over AnyConnect 3.1 on OSX 10.11.6?

It's my understanding that OSX doesn't like to allow VPN port traffic on ports under 1000. How can we get LDAP requests to work for us? Error: ldap client error { [Error: getaddrinfo ENOTFOUND ...
0
votes
1answer
22 views

Securing access to internal services

I have two Linux servers, one is at my home and one is a VPS. The VPS need to access a LDAP directory on my home server. I would prefer not to open internal services to the world and for that purpose ...
1
vote
1answer
52 views

Best way to test my LDAP password on servers that otherwise use SSH keys

I work in an environment where I cannot reset my own LDAP password. I have to open a ticket with the NOC and they reset it for me. That's fine, except that sometimes they don't actually reset my LDAP ...
0
votes
1answer
98 views

openldap — exclude specific attributes from replication

I have two openldap servers replicating cn=config with syncrepl in a provider-consumer relationship. There are a few attributes that I would like to exclude from replication. I see that syncrepl has ...
1
vote
1answer
4k views

Difference between sudo su - root vs sudo su -

I know how is working 'sudo su - ' or sudo. But not sure why after sudo wave I just can't login on root with 'sudo su -' but with 'sudo su - root' im able to. Where is the difference? btw. Ldap is ...
0
votes
0answers
183 views

How to identify a LDAP packet/frame

I'm developing an application in Java which needs to know if a frame contains a LDAP packet or not. So far, I've figured out how to find out if the frame contains IPv4 and TCP headers but how do I ...
0
votes
1answer
481 views

LDAP Query Active Directory

I need to create an ldap searchbase to get all members of a group. So far i have this query but this give me all the information about the members in the group. I only want the sAMaccountName of users....