Tag Info

Hot answers tagged

16

I believe this is caused by mdns - multicast dns, for autoconfiguration of the .local domain. If you check in /etc/nsswitch.conf, you will probably see: hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 mdns4 is what is doing multicast dns. Try changing this to: hosts: files dns And see if it makes any difference. If it makes it work, you can ...


9

The contents of this post are based on this guide. It should work fine in 12.04. 1) Issue the following command: sudo apt-get install ldap-utils libpam-ldap libnss-ldap nslcd NOTE: During the installation of the above packages a dialog will pop up and ask about some LDAP configuration. Be sure to enter the correct values for your LDAP configuration. ...


6

You Question Needs a lot of explanation , so i will summarize my answer : First you should use Inspircd v2.0.15 because its stable , high performance and the most important for your usage , flagged as ldap support Link. First : You should edit your /etc/hosts file : YouserverIp hostname.example.com hostname Second : Install OpenLdap : ...


5

You can try eBox for the server, it has a very straightforward web interface, you can install it from the repositories, and has all the functionality you need. The whole process is documented in the Ubuntu Server Guide, check https://help.ubuntu.com/10.04/serverguide/C/ebox.html. However you still would have to take care of the configuration in the client ...


4

Neither NFS nor LDAP support disconnected operation: i.e., when the laptop cannot reach the servers, it will not be able to access any NFS-mounted directories, nor will it be able to perform user lookups. Basically, it will be stuck. A couple of workarounds could be the following. Instead of mouting home directories via NFS, you could keep local ...


4

There is the LDAP Administration Tool available from the repositories. There is also the GQ LDAP Client , but it's a bit older and (I'm going to be blunt) not as good. :)


4

I have implemented the same setup for our observatory network. We have several Linux clients, which use centralized logins using LDAP for the user data and PAM on the client side. The server hosts the users' home directories and delivers them via NFS to the clients, so I guess that's what you mean by "roaming profiles". To adress your questions: GUI ...


3

The configuration parameter you are looking for is pwdMaxAge as described here. However, you need to observe that this parameter is given in seconds. Hence you need to calculate number_of_days * 86400 if you want to specify a particular number of days.


3

because ldap is VERY hard to setup for beginners i would recommend an server configuration tool. (trust me i have spent nights to fight against openldap) you can checkout ebox (its a server managment gui) and it configure openldap-server + samba ( windows domain logons) Doku: http://doc.zentyal.org/en/directory.html


3

Sharing UIDs Assuming that the NAS is running a variant of Linux, and you have root access (if not I guess you need to ask QNAP), you have three options: Manually sync /etc/passwd between the two boxes (passwd is the file that contains the username/userid mapping). LDAP NIS If there are just a few users that don't change very often, the manual sync is ...


3

Passwords aren't stored themselve. They are transformed by a function, and the so produced value, which is called hash, is stored. If you login, the same function is performed on your input, and the generated value compared with the one in the stored value in the /etc/shadow file. The function is of a kind, which is hard to invert. So with the value in ...


2

The passwords (or better hashes) are most probably stored in the LDAP server. "Most probably" means that you could have a very strange setup where they are not. LDAP configuration is very flexible, but that also means that without inspecting the config files a clear answer on how it is done in your situation cannot be given. You probably have looked into ...


2

Here are instructions, adapted from http://davmail.sourceforge.net/thunderbirddirectorysetup.html. I successfully use these settings for my Exchange account. In DavMail, configure your settings as recommended from http://davmail.sourceforge.net/gettingstarted.html. Note the port number that you use for Local LDAP port (e.g. 1389). You can use any port ...


2

pGina pGina is an open source authentication system that replaces the built in authentication of the Microsoft Windows operating system. pGina uses easy-to-write plugins that allow a system to authenticate against virtually any source. Some examples are LDAP, RADIUS, SSH, FTP, SMTP, POP3, and many more. Getting Started In order to get up and running, ...


2

An example of LDPA schema with tables, short and easy to understand. Skills-1st is a website that has this tutorial that have everything of LDAP Schema Design. It have a html version and pdf too for download. Also in the OpenLDAP website you can find software, utilities, tools, a Quick-Start Guide and more about the open server. And I leave this question ...


2

To get the home directory automatically created on login, I had to put the line: session required pam_mkhomedir.so skel=/etc/skel umask=0022 into /etc/pam.d/common-session instead of /etc/pam.d/login - when I just had it in the later my home directory was not created.


2

You have system variables in pam so I would go with option 3. Set the variable in /etc/security/pam_env.conf: XDG_CACHE_HOME DEFAULT="/var/cache/users/@{PAM_USER}/.cache" #or any other place And make sure the directory exists in /etc/profile: if [ "$USER" == "root" ]; then unset XDG_CACHE_HOME else test -d $XDG_CACHE_HOME || mkdir -p ...


2

in the slapd.conf write access control rule access to attrs=userPassword by self =xw But you should be aware that specific rules are to be written first and general rule at the end. for example following rule has to be written at the end. access to * by * read for more information visit: http://www.openldap.org/doc/admin24/access-control.html ...


2

It turns out that the situation can be resolved by changing: member_attribute = CharField(db_column="member") to: member_attribute = ListField(db_column="member") And by this all the member values in Accounts entry are fetched.


2

This is a known bug that was introduced when Debian (and therefore Ubuntu) switched from using OpenSSL to GnuTLS with OpenLDAP because of the licensing difficulties with OpenSSL. The problem is with the way libgcrypt (the current crypto backend for GnuTLS) initializes. The problem has been around since Ubuntu 9.10 and hasn't really been addressed because ...


1

You haven't specify which IRCd to use and actually asked for it. So; here is an example for LDAP configuation to InspIRCd. For a complete list of IRCds; you may have a look to this Comparison of Internet Relay Chat daemons in which all -except two, supports Linux. and finally in this Table; you can find which does actually supports LDAP Authentication. ...


1

If you really want that the IRCd does the authentication, I would suggest InspIRCd. It has a ldapauth module, but you need to compile it yourself with ./configure --enable-extras=m_ldap.cpp make make install An example configuration how LDAP is used is in an example configuration file. Note that this module is experimental. And the configuration file ...


1

LDAP is not what you are looking for. You want a CardDAV / CalDAV server, which will store address cards and calendar info. DAViCal is available through the Ubuntu repositories and seems to suit your needs. You can get more info on it on their project website. To install in Ubuntu, open Terminal and run sudo apt-get install davical Edit: The installation ...


1

ldapdelete is to remove entries, you need to use ldapmodify to delete attributes. This command should remove attribute1 and attribute2 from the username entry: $ ldapmodify -D "uid=..." -w ... -h ... <<%EOF% dn: uid=username,ou=Non-Enterprise,ou=People,dc=foo,dc=com changetype: modify delete: attribute1 - delete: attribute2 %EOF%


1

you don't need to have any administrative role to change your own password in the ldap pasword. Being able to authenticate with your own credentials is enough. here is a script that you can use to allow a user to change password against your ldap server. It also forces users to use a password length of minimum 8 characters. The correct way would of course ...


1

I was making an incorrect assumption about what the PAM modules did. I assumed that having an account in LDAP could actually cause a module to create the user on the system (an assumption probably influenced by my webdev background) much like it could also create the home directories (pam_mkhomedir). Once I created the users locally using: sudo adduser ...


1

Have you configured the key MASTER_MAP_NAME in /etc/default/autofs to point out your ldap directory master map ? If so this will override and not use your local auto.master map, see auto.master man page. You can also verify which maps are in use with automount -m.


1

The issue was the file /etc/hosts, I had several entries for my localhost and the installation didn't create the Base DN. TO fix that clean your /etc/hosts: 127.0.0.1 localhost 127.0.1.1 dexter.example.com dexter Change "dexter" with your hostname.


1

This is what I do in Ubuntu 12.04 for a freeipa server 3.0.0 Install repos for sssd and freeipa-client sudo -E apt-add-repository http://ppa.launchpad.net/freeipa/ppa/ubuntu sudo -E apt-add-repository http://ppa.launchpad.net/sssd/updates/ubuntu sudo apt-get update sudo apt-get upgrade Update or verify fqdn in /etc/hosts, you should have a line like ...


1

Click the link below for the solution: How to configure Ubuntu as an LDAP client? Addtional - To make ldap user a sudoer: I got it from Ubuntu LDAP Admins and GUI Root Passwords. In file: /etc/polkit-1/localauthority.conf.d/51-ubuntu-admin.conf Here's what the file looks like: [Configuration] AdminIdentities=unix-group:admin Simply add ...



Only top voted, non community-wiki answers of a minimum length are eligible