Questions tagged [ldap]
LDAP is Lightweight Directory Access Protocol.
298
questions
0
votes
1
answer
6
views
Which LDAP server is used by default?
When doing LDAP requests in C# for example, I do not need to explicitly use an LDAP server address for PrincipalContext and DirectoryEntry. I can use one, but it will find users even without.
How does ...
- 97
1
vote
0
answers
39
views
Ansible - How to create dynamic inventory that fetches hosts from microsoft AD
I am using Ubuntu as a control-node, and would like to get the hosts from my domain controller (windows server 2022), the LDAP-Inventory Guide & microsoft.ad.ldap inventory – Inventory plugin for ...
- 13
1
vote
0
answers
25
views
How to add a password policy on OpenLDAP 2.4.11?
I have a server with OpenLDAP 2.4.11 installed.
I'm trying to add a password policy for all my users.
So, I enable ppolicy module :
bash# grep ppolicy /etc/ldap/slapd.conf
include /etc/ldap/...
- 111
0
votes
0
answers
12
views
Use ldapclient in Local as test
I am studying about LDAP
Currently, I setup ldap server and check.
My setting is like this below
$ldapsearch -x -LLL -b "dc=myexample,dc=com"
dn: dc=myexample,dc=com
objectClass: top
...
- 615
0
votes
0
answers
128
views
Inside docker: openssl can connect, ldapsearch and ldap in PHP cannot
I'm trying to migrate a self written php application that needs to connect to our samba4-AD via ldap to docker. While it worked outside, inside of the container the app cannot connect to the ldap ...
- 111
0
votes
1
answer
65
views
How to find all computers running Windows 10 with Active Directory DirectorySearcher?
I'm trying to set a filter for a System.DirectoryServices.DirectorySearcher that locates all computers running Windows 10 within a domain. What is the syntax for a filter that combines two criteria? I ...
- 195
0
votes
0
answers
184
views
ldap_bind: Invalid Credentials (49) How can I solve it?
When I try to use the command ldapadd -x -D cn=admin,dc=jonaserver,dc=com -W -f ou.ldif it asks me for a password which I'm supposed to put right. But it always says invalid credentials ( 49)
What can ...
Jonathan_Diez_
0
votes
0
answers
30
views
OpenLDAP + IIS + SSL + PHP = Error 500
I try to contact the OpenLDAP server on port 636 via my PHP application but I get:
500 - Internal server error. There is a problem with the resource you are looking for, and it cannot be displayed.
...
- 113
0
votes
1
answer
280
views
Can I look up DNS A records through ldap?
I am trying to gather our domain controllers host A records remotely.
I am able to use ldapsearch to gather lots of info about the schema, computers, and users. But I cant seem to find where the A ...
- 103
3
votes
0
answers
57
views
How to avoid hardcoded passwords on Apache httpd config file
I'm using an Apache Proxy with LDAP modules for authentication management. But I don't want to hardcode the password of the LDAP service user to query the domain.
I have already used other ...
- 131
0
votes
1
answer
579
views
ERROR: Could not find a version that satisfies the requirement taiga-contrib-ldap-auth-ext-2 (from versions: none)
i am trying to run docker Version of Taiga Version 6 with ldap support (kaleidos-ventures/taiga-docker) and TuringTux/taiga-contrib-ldap-auth-ext-2
When it comes to the custom-back/Dockerfile i have ...
- 71
0
votes
1
answer
131
views
Dynamically setting remote desktop users group membership via Active Directory Attribute
I've gotten a bit of a strange requirement that I have to fill, and I'm hoping to get working without user intervention down the line.
In our Windows environment we have multiple departments, each ...
- 1
0
votes
0
answers
36
views
Mac login via server
For my small business I have bought a Mac mini. Soon an extra employee will start to work here and he will use that Mac mini.
I can create 2 accounts on the Mac Mini, my own admin account and another ...
- 1
0
votes
1
answer
87
views
Cannot connect using wldap32 and apacheds over TLS (LDAPS)
I am using a dynamic language that via FFI it wraps the wldap32 dll. I am using ApacheDS and I can perfectly connect to it from my client using normal LDAP. However, I cannot connect to it when using ...
0
votes
2
answers
877
views
Apache DS LDAP Server Fails to Start
I have a fresh ApacheDS (Version: 2.0.0.v20210717-M17) install on a Windows 11 on ARM. I have Java SDK 17 (LTS). I created a first server with all the defaults and it seems that the first time it ...
0
votes
0
answers
79
views
Linux "passwd" command can not force expire the password for the LDAP
I have basic of setup of LDAP. Users can log and change of their password (passwd user_name) but when I am trying force expire the password: password -e uesr_name I can not do it. I got the error: ...
- 1
0
votes
1
answer
55
views
Decode LDAP-CRL and get FQDN
I have a certificate with the following CRL:
URL=ldap:///CN=GOLF Root-CA,CN=VSCERT02,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=toplevel-domain,DC=de?certificateRevocationList?base?...
- 21
1
vote
0
answers
143
views
Ldapsearch through ssh tunell
I have four machines A, B, C, D and I would like to use ldapsearch on the first machine through an ssh tunnel over to C with a jump from B to C. Currently ldapsearch on C contacts the ldap server on D,...
- 11
0
votes
1
answer
99
views
Connect HP (Enterprise) MFCs to Google Secure LDAP
HP Enterprise MFCs running FutureSmart Firmware 3/4/5 support connecting to an LDAP server to retrieve email addresses for the Address Book (as well as printer user login, etc).
Google supports Secure ...
- 775
0
votes
1
answer
690
views
LDAP proxy (or pass-through) to another LDAP server
This is probably somewhat similar to Using a LDAP proxy to debug LDAP requests but the answer there is not really helpful.
I need to connect multiple services which run in a Docker swarm to an ...
- 123
5
votes
2
answers
1k
views
Does a domain joined Windows 10 computer have built-in tools to query AD/LDAP?
I'm on a domain joined Windows 10 Computer and want to query the attributes of my own user account. Are there any built-in tools for that?
It is not an admin computer and I don't have RSAT installed. ...
- 1,036
0
votes
1
answer
864
views
Proxy auto login using domain credential
I am using pfSense with squid proxy, linked and configured with LDAP to my win server 2016.
Every user is allowed to navigate but I need to log urls based on username.
Proxy authentication popup works ...
- 1
0
votes
1
answer
811
views
Setting up high availability LDAP authentication using FreeIPA
I am trying to setup pfSense LDAP authentication using FreeIPA master/replica nodes.
I was able to directly connect to the master LDAP server using the hostname/ip-address but when it goes down how ...
1
vote
0
answers
192
views
openssl connection issue to ldap server
I'm running following command in docker container(Ubuntu 20.04) :
openssl s_client -debug -connect ldap-server-name:3269 < /dev/null
most of the time, it returns :
CONNECTED(00000003)
write to ...
- 125
1
vote
1
answer
681
views
OpenLDAP complains that the fields are not indexed
I am using OpenLDAP (slapd) v2.4.47 on Debian.
It complains in the following manner in the logfile (/var/log/debug)
slapd[1142]: conn=1508 op=4 SRCH base="cn=persons,cn=internal" scope=2 ...
- 364
0
votes
2
answers
560
views
How can make simple bind the default for ldapsearch?
I have the following in my ~/.ldaprc:
uri ldaps://my.corporate.ldap.server.com
base DC=corp,DC=companyname,DC=com
bindn CN=Ruben,OU=Users,OU=companyname,OU=SE,OU=Resources,DC=corp,DC=companyname,DC=...
- 653
2
votes
1
answer
4k
views
ldapmodify insufficient access (50)
I'm trying to enable logging in an openldap (slapd) server. So I tried to execute:
$ ldapmodify -D cn=admin,dc=domain,dc=tld -W -H ldap:/// <<EOF
> dn: cn=config
> changetype:modify
&...
- 178
0
votes
1
answer
363
views
How to use scrypt or Argon for Openldap version < 2.4.5
I know that support for Argon2 was released with OpenLdap 2.4.5 according to this link https://bugs.openldap.org/show_bug.cgi?id=8575, but what if I want to use it with a previous version like 2.4.4 ...
fishermansoccer
3
votes
1
answer
6k
views
LDAP filter to search for a DN
LDAP filters are powerful but I can't figure out how to search an object based on DN. Already I have many filter that searches for objects but searching for a specific DN does not seem to be supported....
- 787
0
votes
0
answers
349
views
OPENLDAP - ldapwhoami not working binding securely, but other applications does
I tried adding TLS hard in slapd.conf but it says
unknown directive inside backend database definition.
Tying by CLI the command
ldapwhoami.exe -H ldap://myldap.company.com -v -D "uid=dds,ou=...
- 671
1
vote
1
answer
647
views
ldap authorizedkeyscommand failed status 255
I have a user that can't login into one of our Centos7 boxes using his public key from the LDAP server.
The error message that sshd logs (DEBUG mode on) is error: AuthroizedKeysCommand /usr/libexec/...
- 159
0
votes
1
answer
39
views
LDAP Custom Attribute based from compare
I know that we can create new LDAP attributes and attach them to users.
What I am not able to find is if there a capability to create a new LDAP attribute which is the result of a subtraction between ...
- 1
0
votes
1
answer
290
views
POSIX group names: singular or plural?
I'm creating an LDAP structure, part of which, obviously, is group membership. Things such as vdi-user, vmware-user, etc.
When creating these groups, is it more proper to use singular or plural for ...
- 692
2
votes
1
answer
2k
views
How to use Apache Directory Studio with a proxy?
I want to connect to an LDAP server running on a server at ldap.subnet.example.com using Apache Directory Studio.
I am running Apache Directory Studio 2.0.0.v20200411-M15 with java-14-openjdk on ...
- 430
0
votes
1
answer
12k
views
How do I add PHP-LDAP to a Docker Container
I installed a MediaWiki on a Docker in CentOS 8. I want to integrate LDAP. I installed the LDAP extensions and activated it in the LocalSettings.php file. Now, when I try to login in my wiki I get ...
- 1
1
vote
0
answers
938
views
notepad.exe connects to tcp/389
I have recently began noticing several computers in my corporate network exhibiting some unexpected behavior when opening .txt and .rtf documents from a UNC path hosted on my DC using notepad.exe.
In ...
- 11
0
votes
2
answers
2k
views
How to run systemd user service with multiple Unix groups? (LDAP provides group membership)
I have a systemd user service which needs to access a folder owned by a Unix group which is inside another folder owned by another Unix group. "Others" do not even have read access. The user ...
- 101
1
vote
0
answers
93
views
phpldapadmin not authenticating ldap service
I am getting the above error message I pretty sure I am giving correct Login DN and password
I want to know how can I troubleshoot and inspect what is going wrong where
both the containers are ...
- 153
2
votes
1
answer
245
views
Using a LDAP proxy to debug LDAP requests
I currently fail to configure an application using LDAP/ActiveDirectory properly. The application - from my point of view - is a black box. Therefore, I cannot see what goes wrong with the LDAP ...
- 243
0
votes
0
answers
47
views
Linux Kerberos and Ldap problems
i am currently facing some problems with an Debian server which has joined our Active Directory.
The server sends out LDAP and Kerberos packages to multiple AD Controllers on different locations ...
- 3
0
votes
1
answer
253
views
389 LDAP server login failed
I have followed this tutorial to set up 389 LDAP server on CentOS 7.8.
Computer name [SE1]: ldap.sandbox.domain.eu
Administration Domain [sandbox.domain.eu]:
Suffix [dc=sandbox, dc=domain, dc=eu]:
...
- 413
2
votes
1
answer
158
views
What is best way to use LDAP-based services with Azure AD?
How can I connect Plastic SCM, which uses non-secure LDAP, to our Azure AD services for authentication?
Thanks!
- 121
1
vote
0
answers
947
views
How to test LDAP authentication from a windows 10 client without additional tools?
There is an LDAP server in the local network. How can I test from a windows computer whether user authentication works without installing additional tools (such as ldp.exe)?
0
votes
1
answer
145
views
Active directory authentication and LDAP
i am studying Active Directory directory services (AD) and all connected things (LDAP, kerberos, ...). I don't fully understand, how LDAP objects and AD interact between each other. So can you comment ...
2
votes
1
answer
656
views
how to use ldap 'Security Group' for httpd hosted Nagios wesite's authentication?
Here is what we are trying to achive:
We want to authenticate windows active directory users who are part of perticular "Security Group", for NagiOS.
I've created below new configuration ...
- 85
0
votes
1
answer
49
views
When I use ldapadd I get a response with possible options. How can I fix this?
sudo ldapadd -x -D cn=Manager, dc=localhost,dc=localdomain -W -f /home/liveuser/basedomain.ldif
Is the code that I type into Fedora31 terminal and the response that I get back is jsut all the ...
- 1
1
vote
1
answer
117
views
How to access internet which requires manual IPv4 settings and LDAP-username-password login during Arch Linux installation?
I am on an university-network that requires me to manually set IPv4 settings and then open an url on the browser to login with LDAP username and password to access internet.
I can connect to the ...
- 113
0
votes
1
answer
44
views
How can I set my password in OpenLDAP?
I have installed OpenLDAP in 192.168.0.2 (CentOS), and used LDAP Admin to copy People and Group form another OpenLDAP server (192.168.0.1),
People in 192.168.0.1 has a password, but in 192.168.0.2, ...
- 11
0
votes
1
answer
791
views
Unable to authenticate with AD after IP change
I have a linux environment with a single AD server. It looks like the previous sys admin setup ldap with kerberos and sssd. Recently we went through an IP change, changing the IP on the AD and all the ...
- 1
0
votes
1
answer
204
views
How to configure a specific application in PHP LDAP ADMIN?
I have this OU Application and I want to integrate the user provisioning using PHP LDAP ADMIN with proper authentication
- 1