Questions tagged [ldap]
LDAP is Lightweight Directory Access Protocol.
304
questions
2
votes
1
answer
749
views
how to use ldap 'Security Group' for httpd hosted Nagios wesite's authentication?
Here is what we are trying to achive:
We want to authenticate windows active directory users who are part of perticular "Security Group", for NagiOS.
I've created below new configuration ...
- 85
0
votes
1
answer
71
views
When I use ldapadd I get a response with possible options. How can I fix this?
sudo ldapadd -x -D cn=Manager, dc=localhost,dc=localdomain -W -f /home/liveuser/basedomain.ldif
Is the code that I type into Fedora31 terminal and the response that I get back is jsut all the ...
- 1
1
vote
1
answer
181
views
How to access internet which requires manual IPv4 settings and LDAP-username-password login during Arch Linux installation?
I am on an university-network that requires me to manually set IPv4 settings and then open an url on the browser to login with LDAP username and password to access internet.
I can connect to the ...
- 113
0
votes
1
answer
56
views
How can I set my password in OpenLDAP?
I have installed OpenLDAP in 192.168.0.2 (CentOS), and used LDAP Admin to copy People and Group form another OpenLDAP server (192.168.0.1),
People in 192.168.0.1 has a password, but in 192.168.0.2, ...
- 11
0
votes
1
answer
1k
views
Unable to authenticate with AD after IP change
I have a linux environment with a single AD server. It looks like the previous sys admin setup ldap with kerberos and sssd. Recently we went through an IP change, changing the IP on the AD and all the ...
- 1
0
votes
1
answer
274
views
How to configure a specific application in PHP LDAP ADMIN?
I have this OU Application and I want to integrate the user provisioning using PHP LDAP ADMIN with proper authentication
- 1
0
votes
0
answers
26
views
Execute script with networking before booting Linux
I would like to have my Linux systems use hard disks that are encrypted, and can be decrypted with some sort of key in Active Directory.
I would like the system to prompt for a username and password ...
- 31
0
votes
0
answers
141
views
No Login with LDAP on MediaWIki
I've been reading a lot about how to connect my wikimedia with ldap, and authenticate users with that plugin and users of a specific group. I still don't achieve anything, it always tells me that the ...
0
votes
2
answers
75
views
Samba+LDAP - Diagnosing Problems (Access Denied)
I really need some help because I can't identify what's going on... I'm pretty lost here... =|
PROBLEM:
I have a server "server_a" with a directory "group_a_folder" ("/srv/...
- 1,244
1
vote
0
answers
107
views
Migrate debian login from ldap to local login
we have a debian stretch machine on which the users login by ldap. Since we want to shut down our ldap server(not used anymore except by this single machine), i have to search for a way to migrate the ...
- 11
0
votes
1
answer
4k
views
Apache2 ignores "authorization result of <RequireAny>: denied (no authenticated user yet)" and let random user to login
I am trying to figure out why Apache2 ignores "authorization result of : denied (no authenticated user yet)" and let random user to login.
Apache vhost config is :
<VirtualHost *:443>
...
0
votes
0
answers
209
views
Bugzilla with LDAP fails
I have been trying to integrate Bugzilla with Active directory and have below configuration set.
Error: The login or password you entered is not valid.
The access log showing no error, showing 201 as ...
- 105
1
vote
0
answers
456
views
ldapsearch: Multiple identical pages when using paged search
I am running the following ldapsearch command on an eDirectory LDAP server that has paged search enabled:
ldapsearch -LLL -x -h server -p port -D admin -w password -b base -s sub "(&(objectclass=...
- 11
3
votes
1
answer
2k
views
Adding custom schema to openldap
I want to setup my postfix with ldap authentication. I follow this tutorial https://blog.tnyc.me/postfix-with-ldap
I need to setup a PostfixBookMailAccount but therefore i need to load that schema. I ...
- 191
1
vote
1
answer
1k
views
ApacheDS autostart failed in CentOS 7
I installed ApacheDS on CentOS 7, but it doesn't start when the system boot and I should start it manually, what should I do?
3
votes
0
answers
738
views
LDAP, PAM, and expiring accounts
I'm using LDAP on a Debian 9.8 system. After receiving a
Your account has expired; please contact your system administrator
for one of my users, I tried unsuccessfully several of the solutions ...
- 31
1
vote
1
answer
966
views
LDAP: How to bind via system ID/Password and then user ID/password for Authorization?
This command works and give me back a large response with all sorts of information about user with user ID XXXXXXX.
ldapsearch -D 'uid=<system ID>,ou=system,ou=users,dc=<domain>,dc=com' -...
- 43
1
vote
0
answers
153
views
Laravel AD LDAP sometimes return null for email?
Just wondering if anyone else has had this problem and maybe suggestions where to look to troubleshoot.
I created a laravel application with ADLDAP2 addon. It authenticates against AD, and had work ...
- 11
1
vote
0
answers
122
views
How to set up ldap pagination in TeamCity
I am using LDAP login and synchronization in teamcity, but recently we have tipped over the sizeLimit in number of users, which has broken synchronization. I cannot limit the users being looked at any ...
1
vote
1
answer
1k
views
Why won't LDAP client authenticate users
I have followed instructions here: https://computingforgeeks.com/install-and-configure-openldap-phpldapadmin-on-ubuntu-18-04-lts/
and Added users as per https://computingforgeeks.com/how-to-install-...
- 11
0
votes
1
answer
4k
views
How does this ldapsearch command succeed without using the intermediate certificate?
I have an LDAP server (Active Directory domain controller) with a certificate that is signed by an internal intermediary CA and that of course is signed by an internal root CA. I feel like I am ...
1
vote
1
answer
1k
views
Redirect users with Apache and LDAP
at work we are having the problem that we want to redirect users depending on whether they are member of a particular LDAP group, when they access a URL that is managed via Apache2.
There are three ...
4
votes
0
answers
2k
views
Why does AD return searchResRef (LDAP references) for every LDAP search?
The SearchResultReference message is pretty clearly in RFC 4511 section 4.5.3 (https://www.rfc-editor.org/rfc/rfc4511#section-4.5.3) but I am wondering about more specific details of why AD seems to ...
- 41
0
votes
1
answer
42
views
Serch in Active Directroy not showing some of the Users
I have installed AD DS on a Windows server 2016 and imported 1600 Users, 200 OU and 3000 groups. When I try to search using an LDAP Browser all the LDAP objects using the filter objectClass=User I ...
- 1
0
votes
2
answers
479
views
Jenkins OpenLDAP plugin authentication fails, but lookup is successful
I've setup an OpenLDAP server with following structure:
dn: dc=test-project,dc=com objectclass: top objectclass: dcObject objectclass: organization
dn: cn=admin,dc=test-project,dc=com
description: ...
- 1
3
votes
1
answer
19k
views
pam_sss(sshd:account): Access denied for user AD
sssd.conf:
[sssd]
domains = corp.com
config_file_version = 2
services = nss, pam
[domain/corp.com]
ad_domain = corp.lecapam.com
krb5_realm = CORP.COM
realmd_tags = manages-system joined-with-samba
...
- 51
1
vote
1
answer
5k
views
ldapsearch not accepting password with -w
I'm trying to use the ldapsearch command to query an LDAP server. I can authenticate correctly when I use the -W option, which prompts for the password that I paste in. However when I use the -w ...
0
votes
1
answer
460
views
How to add new Status attribute to LDAP user objects
I am trying to add a status attribute on LDAP, just like Active directory in Windows, so I can enable or disable user using status attribute.
anyone can help me how it can be possible on LDAP
0
votes
1
answer
126
views
Zabbix ldap url support
Does Zabbix support accessing ldap:hostname/... checks? I attempted to set up an item using HTTP check to check the following:
ldap://{HOST.IP}/principalName=username,cn=Users,SECAUTHORITY=DEFAULT?dn?...
0
votes
0
answers
218
views
Ldap - centos: cannot create home folder on login
I added
session optional pam_mkhomedir.so umask=0047 skel=/etc/skel
on my
/etc/pam.d/system-auth
but when I try to do
su user
I got something like
Impossible to create and initialize ...
- 701
0
votes
1
answer
6k
views
Ldap - Can't 'log in' but can ldapsearch - (Log) transport endpoint not connected
I have this problem:
I'm on centos 7 I tryed to set ldap remote credentials access by this:
[192.168.9.105 #] authconfig --enableldap --enableldapauth
--ldapserver=ldap://192.168.9.104 --ldapbasedn="...
- 701
1
vote
0
answers
25
views
Why is my JMeter executed Add not showing in LDAP
I am currently testing an LDAP system using Jmeter.
The standard LDAP template in JMeter is pretty much setup and I just needed to fill in my username and password, specify a host and DN to connect ...
- 173
0
votes
1
answer
8k
views
Ldap configuration on gitlab error :Could not authenticate you from Ldapmain because "Invalid credentials for username"
I have an issue when I try to connect my LDAP to Gitlab:
Could not authenticate you from Ldapmain because "Invalid credentials for username.
This is my file conf /etc/gitlab/gitlab.rb :
...
- 1
3
votes
1
answer
678
views
Add all LDAP users to a local group?
Is there a way to add every LDAP users to a local group on Debian ?
I have more than 1500 ldap users, and they need to be in local groups ('video', 'audio' and 'games') on some computers (Raspbian)....
- 31
0
votes
1
answer
2k
views
Deleting a user from Call manager (CUCM)
I have tried to delete a user from the named server but the response is this "NOTE: The add and delete function are disabled because the user directory is sync with LDAP". What should I do.
- 1
1
vote
0
answers
282
views
Apache DS LDAP Server Fails to Start After Schema Addition
In an attempt to add the memberOf and sAMAccountName attributes from MSFT, I'm importing the LDIF found in this answer. The import succeeds and the new attributes appear in the tree but when I restart ...
- 11
0
votes
1
answer
843
views
How to "Require password change at next login" without resetting password
When you reset an user's password in macOS Server.app's Open Directory (I think it's using slapd), you can also check the option Require password change at next login.
The question: can you also ...
- 301
0
votes
0
answers
33
views
Deny every action on an organisation unit for a group in phpLDAPadmin (LDAP)
I want to deny every access for a group (group trainees like in my picture) to the organisation unit Ulist in my phpLDAPadmin. How can I do it ?
I don't know how to configure a simple access control ...
- 1
0
votes
1
answer
3k
views
enable ldap for wekan
Trying to setup wekan simply using snap on ubuntu server.
what I am doing is simply enable ldap by instruction:
Ldap Enable.
To enable the ldap of Wekan:
$ snap set wekan LDAP_ENABLE='true'
...
- 1
0
votes
2
answers
186
views
Given self signed CRT and KEY files, can I install these into a Windows Active Directory intranet setup for all machines to pick up?
I'm looking into setting up the Zulip chat server on a local Active Directory intranet. The chat server requires an SSL certificate which I'm able to generate CRT and KEY files from OpenSSL.
However ...
- 445
0
votes
2
answers
1k
views
LDAP the right choice?
So I'm looking for a solution for ssh key authorisation access to numerous servers, and have been pointed towards using LDAP. I wanted to present the use case and see if LDAP would be applicable and ...
- 1
1
vote
1
answer
655
views
Enroll MacOS 10.13 in FreeIPA domain?
I tried following this guide to enroll a mac on OS X 10.13.6 in my FreeIPA domain that all the linux machines on my home network are.
All the steps worked, but I can't log in with any freeipa users ...
- 752
0
votes
1
answer
24
views
Authentication and policy management of macOS clients
Can I manage authentication and policy of macOS clients by LDAP?
Is it possible or there are other solutions?
- 149
0
votes
1
answer
705
views
prioritize LDAP when using passwd and group
I have several servers, one of which, say S1, is used as LDAP server. Other servers are configured to authenticate against the LDAP server.
When a user is added, I always create a unix user on S1, ...
- 25
2
votes
2
answers
23k
views
ldapsearch - Strong(er) authentication required - Transport encryption required
I'm trying search my company's AD with ldapsearch. However I always get the error:
ldap_bind: Strong(er) authentication required (8)
additional info: BindSimple: Transport encryption required....
- 440
1
vote
0
answers
135
views
LDAP create members relations for users and groups
I don't have an access to LDAP server, instead I've a DB with tables for Users and Groups.
Now I want to build a table with members relationship, in other words I would like to build a table where ...
- 119
0
votes
1
answer
768
views
Can I use a different machine with same MAC address and PC name to join a domain?
I have a old Windows PC named pc1 which is joined to domain1 currently. However. today I tried to join the same domain with a new different computer with same OS version, MAC address and computer name....
- 113
2
votes
1
answer
1k
views
Generation of SSHFP Records in FreeIPA
MY SETUP
I have a cluster of machines running Centos 7.3, and I am using Kerberos / LDAP for authentication. Kerberos / LDAP are as packaged in FreeIPA 4.4.0.
All hosts have an address on 192.168.1....
- 1,019
0
votes
1
answer
103
views
Two different servers (with one tied to SAP), with different login id's. Can they all sync?
Forgive me in advance: I USED to be a network admin many moons ago, but moved to management and my skills have weakened over time. So I might use wrong terms... background first, then question:
...
- 11
0
votes
1
answer
2k
views
Change password on client with sssd kerberos and ldap
I have an error when I use passwd in ldap user session.
I get:
passwd: Authentication token manipulation error
I check this link but it didn't help.
In my cn=config/olcDatabase={1}mbd.ldif I ...
- 33