Questions tagged [ldap]
the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services
417 questions
3
votes
4
answers
242
views
How to count the number of multi-valued attributes in an LDAP entry... or lines in a paragraph, where diff paragraphs have different numbers of lines?
I'm trying to figure out a way of counting how many attribute values (for a multi-valued attribute in LDAP) various different users have. For example, the data looks something like this...
dn: uid=...
- 33
1
vote
0
answers
58
views
Debian: sssd does not start because of permission problems of /etc/sssd/sssd.conf that are automatically set
On Debian 13 a fresh installed sssd (2.10.1) shows strange permission errors after the start using systemctl restart sssd.service:
systemd[1]: Starting sssd.service - System Security Services Daemon......
- 153
0
votes
1
answer
34
views
Debian as client to several different (!) LDAP servers using LDAP/NSS / nss-pam-ldapd
I want to use a Debian Stable system to authentificate to two different LDAP servers that provide user/password/group data using e.g. LDAP/NSS / nss-pam-ldapd (https://wiki.debian.org/LDAP/NSS, https:/...
- 153
2
votes
1
answer
169
views
What is the exact meaning of olcAccess: {1}to dn.exact="" by * read
The OpenLdap installation of Ubuntu 24.04 brings ACLs:
dn: olcDatabase={-1}frontend,cn=config
...
olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
...
- 43
0
votes
1
answer
74
views
Change default ldap filters for system queries?
I have a bunch of AlmaLinux machines with SSSD configured to allow LDAP auth and it's working fine.
We have a very huge LDAP directory and some users got multiple entries following this schema.
dn: cn=...
- 1,236
0
votes
0
answers
62
views
Trying to to install symas for openldap on an M3 Mac running Arm64 Rocky Linux 9 gives an error
First, we will install the packages onto VM1 with
sudo wget https://repo.symas.com/configs/SOFL/rhel8/sofl.repo -O /etc/yum.repos.d/sofl.repo:
[bill@target ~]$ sudo wget https://repo.symas.com/configs/...
- 111
0
votes
1
answer
60
views
Pam with krb5: very strange local user login, krb5 user login, root..no
This is my pam.conf for Slackware 15.0
#%PAM-1.0
#
# Most of these PAM modules have man pages included, like
# pam_unix(8) for example.
#
##################
# Authentication #
##################
...
- 14.5k
0
votes
1
answer
71
views
Two OU and without tree
I have the two OU: 1.People 2.newOU . My dc is nodomain. I have the following search and every thing is ok:
root@debian:~/ldif# ldapsearch -c -Y EXTERNAL -H ldapi:/// -b dc=nodomain -D cn=admin,...
- 11.3k
-1
votes
1
answer
89
views
Empty output in ldapsearch
I have the following ldapsearch:
root@debian:~/ldif# ldapsearch -LLLQ -Y EXTERNAL -H ldapi:/// -b dc=nodomain -D cn=admin,dc=nodomain,cn=Pahlevanzadeh,ou=People,uid=mohsen,loginShell=/usr/bin/csh
...
- 11.3k
0
votes
1
answer
42
views
Invalid Credential after defining users and OU
At first I define a new OU with the following LDIF with ldapadd -x -D "cn=admin,dc=nodomain" -W -f ./ou.ldif :
root@debian:~# cat ou.ldif
dn: OU=People,DC=nodomain
objectClass: ...
- 11.3k
1
vote
0
answers
1k
views
Bursts of errors "Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Client (...) not found in Kerberos database."
I have set up some RHEL9 servers to authenticate through the AD for the domain EXAMPLE.XYZ; this is done via Ansible playbooks, and so far all works well. (It's the same setup as this previous ...
- 32.4k
0
votes
1
answer
106
views
changing password ldap_bind: Invalid credentials (49)
Information:
I installed ldap-utils and slapd, during installation of slapd, with ncurses dialog, I imported password of administrator.
Then I changed it via
ldapmodify -Q -Y EXTERNAL -H ldapi:/// &...
- 11.3k
0
votes
0
answers
69
views
login not responding when nslcd retries more than 2000 entries
"I am using nslcd for LDAP queries and Active Directory as the LDAP server. When a search is performed with the base DN set to only com, it retrieves over 2000 entries. This causes the login page ...
2
votes
1
answer
123
views
How to set correctly a password aging using krb5?
I have a Solaris server, it use ldap for user authentication and kerberos for password.
The user can change his password, I have only problem with password aging
for example:
passwd -r ldap -n 12 ...
- 14.5k
0
votes
1
answer
744
views
Auto-unlocking gnome-keyring does not work when using pam_sss
The Gnome Keyrings "Login" and "Default" are not unlocked automatically on my Linux Mint 22 machine.
This is an LDAP user account and login goes throughg pam_sss.so (SSSD). The ...
- 748
