Tag Info

Hot answers tagged

23

I believe this is caused by mdns - multicast dns, for autoconfiguration of the .local domain. If you check in /etc/nsswitch.conf, you will probably see: hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 mdns4 is what is doing multicast dns. Try changing this to: hosts: files dns And see if it makes any difference. If it makes it work, you can ...


12

The contents of this post are based on this guide. It should work fine in 12.04. 1) Issue the following command: sudo apt-get install ldap-utils libpam-ldap libnss-ldap nslcd NOTE: During the installation of the above packages a dialog will pop up and ask about some LDAP configuration. Be sure to enter the correct values for your LDAP configuration. ...


6

There is an example sssd.conf at /usr/share/doc/sssd/examples/sssd-example.conf. You can copy it with sudo cp /usr/share/doc/sssd/examples/sssd-example.conf /etc/sssd/sssd.conf


6

You Question Needs a lot of explanation , so i will summarize my answer : First you should use Inspircd v2.0.15 because its stable , high performance and the most important for your usage , flagged as ldap support Link. First : You should edit your /etc/hosts file : YouserverIp hostname.example.com hostname Second : Install OpenLdap : ...


5

You can try eBox for the server, it has a very straightforward web interface, you can install it from the repositories, and has all the functionality you need. The whole process is documented in the Ubuntu Server Guide, check https://help.ubuntu.com/10.04/serverguide/C/ebox.html. However you still would have to take care of the configuration in the client ...


5

Neither NFS nor LDAP support disconnected operation: i.e., when the laptop cannot reach the servers, it will not be able to access any NFS-mounted directories, nor will it be able to perform user lookups. Basically, it will be stuck. A couple of workarounds could be the following. Instead of mouting home directories via NFS, you could keep local ...


5

There is the LDAP Administration Tool available from the repositories. There is also the GQ LDAP Client , but it's a bit older and (I'm going to be blunt) not as good. :)


4

I have implemented the same setup for our observatory network. We have several Linux clients, which use centralized logins using LDAP for the user data and PAM on the client side. The server hosts the users' home directories and delivers them via NFS to the clients, so I guess that's what you mean by "roaming profiles". To adress your questions: GUI ...


3

Passwords aren't stored themselve. They are transformed by a function, and the so produced value, which is called hash, is stored. If you login, the same function is performed on your input, and the generated value compared with the one in the stored value in the /etc/shadow file. The function is of a kind, which is hard to invert. So with the value in ...


3

pGina pGina is an open source authentication system that replaces the built in authentication of the Microsoft Windows operating system. pGina uses easy-to-write plugins that allow a system to authenticate against virtually any source. Some examples are LDAP, RADIUS, SSH, FTP, SMTP, POP3, and many more. Getting Started In order to get up and running, ...


3

because ldap is VERY hard to setup for beginners i would recommend an server configuration tool. (trust me i have spent nights to fight against openldap) you can checkout ebox (its a server managment gui) and it configure openldap-server + samba ( windows domain logons) Doku: http://doc.zentyal.org/en/directory.html


3

Sharing UIDs Assuming that the NAS is running a variant of Linux, and you have root access (if not I guess you need to ask QNAP), you have three options: Manually sync /etc/passwd between the two boxes (passwd is the file that contains the username/userid mapping). LDAP NIS If there are just a few users that don't change very often, the manual sync is ...


3

The configuration parameter you are looking for is pwdMaxAge as described here. However, you need to observe that this parameter is given in seconds. Hence you need to calculate number_of_days * 86400 if you want to specify a particular number of days.


2

An example of LDPA schema with tables, short and easy to understand. Skills-1st is a website that has this tutorial that have everything of LDAP Schema Design. It have a html version and pdf too for download. Also in the OpenLDAP website you can find software, utilities, tools, a Quick-Start Guide and more about the open server. And I leave this question ...


2

To get the home directory automatically created on login, I had to put the line: session required pam_mkhomedir.so skel=/etc/skel umask=0022 into /etc/pam.d/common-session instead of /etc/pam.d/login - when I just had it in the later my home directory was not created.


2

You have system variables in pam so I would go with option 3. Set the variable in /etc/security/pam_env.conf: XDG_CACHE_HOME DEFAULT="/var/cache/users/@{PAM_USER}/.cache" #or any other place And make sure the directory exists in /etc/profile: if [ "$USER" == "root" ]; then unset XDG_CACHE_HOME else test -d $XDG_CACHE_HOME || mkdir -p ...


2

It turns out that the situation can be resolved by changing: member_attribute = CharField(db_column="member") to: member_attribute = ListField(db_column="member") And by this all the member values in Accounts entry are fetched.


2

in the slapd.conf write access control rule access to attrs=userPassword by self =xw But you should be aware that specific rules are to be written first and general rule at the end. for example following rule has to be written at the end. access to * by * read for more information visit: http://www.openldap.org/doc/admin24/access-control.html ...


2

According to Apache documentation: "Directory-path is either the full path to a directory, or a wild-card string using Unix shell-style matching. In a wild-card string, ? matches any single character, and * matches any sequences of characters." If mediawiki directory full path is /var/www/html/mediawiki try: <Directory /var/www/html/mediawiki> ...


2

This is a known bug that was introduced when Debian (and therefore Ubuntu) switched from using OpenSSL to GnuTLS with OpenLDAP because of the licensing difficulties with OpenSSL. The problem is with the way libgcrypt (the current crypto backend for GnuTLS) initializes. The problem has been around since Ubuntu 9.10 and hasn't really been addressed because ...


2

Have you gone through the Active Directory HowTo?


2

Files As for files, I would go for a net based sync for common files (say Ubuntu One or Dropbox) and then have a shared folder for bigger files (maybe Music, Photos, Video and Ubuntu ISOs). This could be an NFS mount, that when it fails doesn't matter too much, or a Samba share, or probably one of a number of other technologies. LDAP LDAP failing ...


2

Maybe this tutorial answers your question.


2

Try to follow the chapter on installing and configuring an OpenLDAP server in the Ubuntu Server Guide.


2

This link helped install LDAP without any error and had to edit only the starting lines 2,3 and 4. Just checked the ldap installation and configuration with webmin


2

Here are instructions, adapted from http://davmail.sourceforge.net/thunderbirddirectorysetup.html. I successfully use these settings for my Exchange account. In DavMail, configure your settings as recommended from http://davmail.sourceforge.net/gettingstarted.html. Note the port number that you use for Local LDAP port (e.g. 1389). You can use any port ...


2

The passwords (or better hashes) are most probably stored in the LDAP server. "Most probably" means that you could have a very strange setup where they are not. LDAP configuration is very flexible, but that also means that without inspecting the config files a clear answer on how it is done in your situation cannot be given. You probably have looked into ...


2

There is an installation/configuration guide on http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-pdc.html


2

How to change the bash shell for existing users is explained here



Only top voted, non community-wiki answers of a minimum length are eligible