Questions tagged [ldap]
the Lightweight Directory Access Protocol (LDAP), a protocol used for modifying and querying items stored in directory services
416 questions
0 votes
0 answers
12 views
Debian: sssd does not start because of permission problems of /etc/sssd/sssd.conf that are automatically set
On Debian 13 a fresh installed sssd (2.10.1) shows strange permission errors after the start using systemctl restart sssd.service: systemd[1]: Starting sssd.service - System Security Services Daemon......
- 143
0 votes
1 answer
14 views
Debian as client to several different (!) LDAP servers using LDAP/NSS / nss-pam-ldapd
I want to use a Debian Stable system to authentificate to two different LDAP servers that provide user/password/group data using e.g. LDAP/NSS / nss-pam-ldapd (https://wiki.debian.org/LDAP/NSS, https:/...
- 143
2 votes
1 answer
155 views
What is the exact meaning of olcAccess: {1}to dn.exact="" by * read
The OpenLdap installation of Ubuntu 24.04 brings ACLs: dn: olcDatabase={-1}frontend,cn=config ... olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage ...
- 43
0 votes
1 answer
63 views
Change default ldap filters for system queries?
I have a bunch of AlmaLinux machines with SSSD configured to allow LDAP auth and it's working fine. We have a very huge LDAP directory and some users got multiple entries following this schema. dn: cn=...
- 1,226
0 votes
0 answers
56 views
Trying to to install symas for openldap on an M3 Mac running Arm64 Rocky Linux 9 gives an error
First, we will install the packages onto VM1 with sudo wget https://repo.symas.com/configs/SOFL/rhel8/sofl.repo -O /etc/yum.repos.d/sofl.repo: [bill@target ~]$ sudo wget https://repo.symas.com/configs/...
- 111
0 votes
1 answer
56 views
Pam with krb5: very strange local user login, krb5 user login, root..no
This is my pam.conf for Slackware 15.0 #%PAM-1.0 # # Most of these PAM modules have man pages included, like # pam_unix(8) for example. # ################## # Authentication # ################## ...
- 14.3k
0 votes
1 answer
61 views
Two OU and without tree
I have the two OU: 1.People 2.newOU . My dc is nodomain. I have the following search and every thing is ok: root@debian:~/ldif# ldapsearch -c -Y EXTERNAL -H ldapi:/// -b dc=nodomain -D cn=admin,...
- 11.3k
-1 votes
1 answer
80 views
Empty output in ldapsearch
I have the following ldapsearch: root@debian:~/ldif# ldapsearch -LLLQ -Y EXTERNAL -H ldapi:/// -b dc=nodomain -D cn=admin,dc=nodomain,cn=Pahlevanzadeh,ou=People,uid=mohsen,loginShell=/usr/bin/csh ...
- 11.3k
0 votes
1 answer
34 views
Invalid Credential after defining users and OU
At first I define a new OU with the following LDIF with ldapadd -x -D "cn=admin,dc=nodomain" -W -f ./ou.ldif : root@debian:~# cat ou.ldif dn: OU=People,DC=nodomain objectClass: ...
- 11.3k
1 vote
0 answers
1k views
Bursts of errors "Failed to initialize credentials using keytab [MEMORY:/etc/krb5.keytab]: Client (...) not found in Kerberos database."
I have set up some RHEL9 servers to authenticate through the AD for the domain EXAMPLE.XYZ; this is done via Ansible playbooks, and so far all works well. (It's the same setup as this previous ...
- 32.4k
0 votes
1 answer
91 views
changing password ldap_bind: Invalid credentials (49)
Information: I installed ldap-utils and slapd, during installation of slapd, with ncurses dialog, I imported password of administrator. Then I changed it via ldapmodify -Q -Y EXTERNAL -H ldapi:/// &...
- 11.3k
0 votes
0 answers
65 views
login not responding when nslcd retries more than 2000 entries
"I am using nslcd for LDAP queries and Active Directory as the LDAP server. When a search is performed with the base DN set to only com, it retrieves over 2000 entries. This causes the login page ...
2 votes
1 answer
108 views
How to set correctly a password aging using krb5?
I have a Solaris server, it use ldap for user authentication and kerberos for password. The user can change his password, I have only problem with password aging for example: passwd -r ldap -n 12 ...
- 14.3k
0 votes
1 answer
692 views
Auto-unlocking gnome-keyring does not work when using pam_sss
The Gnome Keyrings "Login" and "Default" are not unlocked automatically on my Linux Mint 22 machine. This is an LDAP user account and login goes throughg pam_sss.so (SSSD). The ...
- 748
-2 votes
1 answer
538 views
LDAP: What is the most suitable solution for remote home directories today? [closed]
I have created an LDAP (OpenLDAP and LAM) server with a structure, I solved the remote configuration of using sudo. I configured the client stations (will be exclusively Linux Ubuntu) to use LDAP with ...
- 609