Questions tagged [ldap]
Lightweight Directory Access Protocol (LDAP) is an application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network.
256
questions
1
vote
0
answers
30
views
What is the meaning of the "&" character "ad_access_filter" parameter of the sssd.conf configuration file
Here and there, I see a & character at the beginning of the ad_access_filter parameter.
But I see no & character in the ad_access_filter parameter of the sssd-ad manual :
$ man sssd-ad | sed -...
- 2,531
1
vote
1
answer
38
views
SSSD access filter parsing issues
I'm trying to set up a filter for SSSD to permit only members of a certain group access. This should work with the following two lines inside sssd.conf:
access_provider = ad
ad_access_filter = <...
- 121
0
votes
0
answers
21
views
Unable to start Ubuntu server after installing LDAP client
I'm having a problem with an installation.
The setup consists of a server with OPENLDAP and OPENVPN server configured.
I configured a client that connects to the server via the VPN, I followed the ...
- 1
0
votes
1
answer
564
views
chrony conflicts with time-daemon
I was trying to install freeipa-client on ubuntu 20.04 that will be used on a client with no apt access. I mannualy installed all the required .deb using dpkg.
after I successfully installed the ...
- 1
0
votes
0
answers
167
views
How to monitor Samba "LDAP" traffic?
I have Samba running as AD Domain Controller, I want to debug the LDAP connections coming to my Samba LDAP server.
I tried to raise the log level, but still I see no useful information except the very ...
4
votes
1
answer
191
views
How to check which package/process updated nsswitch?
I've experincing problems with my /etc/nsswitch.conf. I'm not longer able to use sudo as my personal user (ldap).
I've checked dpkg.log, and it seems it's been som upgrades on the packages which ...
- 171
0
votes
0
answers
93
views
SSH to ldap client hangs when ldap server is not reachable on ubuntu 20.04
I am using ubuntu 20.04 VM as ldap client and docker is my ldap server. When ldap server is not reachable ssh to ldap client vm gets hungs. Below are the auth logs
Dec 18 07:02:40 tpvm22 sshd[24790]: ...
0
votes
0
answers
83
views
OpenLDAP works but service doesn't start during boot
Couple of days ago, we've had to change LDAP Server to which our clients connect. We have no access to the server, only to the clients.
So as soon we changed server in ldap.conf after reboot libnss-...
- 13
0
votes
0
answers
32
views
How to default to encryption of new home directories when using ldap
When using adduser, one can pass --encrypt-home to encrypt the newly generated home directory. Supposedly, this can be made the default by correctly setting up /etc/adduser.conf.
However, for ...
0
votes
0
answers
49
views
openldap schema import error
I am trying to import schema in openldap which has been configured in ubuntu machine.
I am trying with below command and getting below error.
Can anyone help me on this.
cd /tmp/openldapldif &&...
0
votes
0
answers
121
views
Ubuntu 23.04 GUI won't allow LDAP Users to log in, CLI LDAP Works
Can someone help me to configure Open LDAP clients to log into Ubuntu 23.04 workstation via GUI, so far i can access and log in to the LDAP via CLI i have read a lot of articles regarding the ...
- 1
0
votes
0
answers
330
views
How to connect to an ldap server via ldapsearch?
Used
ldapsearch -x -b dc=domain,dc=com -H ldap://10.0.0.4
Issued
To perform this operation, you must ensure successful connection binding., data 0, v3839
After diving into Google, I came across the ...
- 1
0
votes
0
answers
435
views
Unable to link with the right version of libldap
I have a build machine where I have installed libldap-dev and the
target host, I only have libldap. The versions are same
Build:
$ dpkg -l | grep libldap
ii libldap-2.5-0:amd64 2.5.16+dfsg-...
- 49
1
vote
1
answer
381
views
Logins like [email protected] cause profile files to be owned by root
The users at my school are used to logging in to email, windows etc with a login [email protected] (authenticated with Active Directory via LDAP). Unfortunately this is causing havoc and corrupting ...
- 201
0
votes
1
answer
932
views
Some Azure Active Directory users are not able to login to Ubuntu Machines
Some AD Users are not able to access Ubuntu machine in the domain, the error after trying to access the server via ssh I get in /var/log/auth.log:
Jun 14 11:50:36 SR sshd[1467842]: Invalid user ...
- 194
0
votes
1
answer
303
views
Ubuntu LDAP - does not work without connection to LDAP server?
I've configured LDAP on couple U20 virtual servers. Everything works when those servers have connection to LDAP Server but as soon as I disconnect them I cannot login anymore.
Not even with root or ...
- 13
0
votes
1
answer
774
views
Could not chdir to home directory
I have configured my machine with autofs to mount an LDAP users directory when they log in to a machine. I have created a directory in home called /guests. However when the LDAP user logs in, it isn't ...
- 1
0
votes
0
answers
76
views
Ubuntu 20.04 name user add problem Bug #1927078
A problem occurred while upgrading the version of the Ubuntu system from 18.04 to 20.04.
18.04 user name For example, the user who was using 9128323 cannot log in in 20.04. (GUI only)
9128323 is a ...
- 1
1
vote
0
answers
97
views
"Not authorized to perform operation" accesing to a flash drive when logged in Kubuntu 22.04 only with numeric usernames of our LDAP
I've configured Kubuntu 22.04 with pam-ldap following:
https://help.ubuntu.com/community/LDAPClientAuthentication
After configuring ldap authentication, if I login in with a text username like "...
- 31
0
votes
0
answers
161
views
SSSD: Why do I have to use my previous windows password when I login to the server?
I have to change password every third (?) month and I can’t login with the one I currently use in windows but instead the one that I had before this one.
[sssd]
domains = (HIDDEN).local
...
- 7
0
votes
1
answer
192
views
How to disable ldap failed authentication message from audit.logs
I have to disable LDAP user failed PAM authentication messages from audit.logs
/var/log/audit.log | grep failed
type=USER_AUTH msg=audit(1660931213.045:2190121): pid=289 uid=0 auid=4294965 ses=4297295 ...
- 11
0
votes
1
answer
657
views
Ldap - access for specific machines
We have LDAP server with 300+ users-10 servers with different group. when we creating the users, every user has access of all the 10 servers. So I want to restrict the user access.
So LDAP user or ...
- 31
-1
votes
1
answer
731
views
Reduce the size of Ubuntu server
I have a Ubuntu 22.04 VM and would like to reduce the size on the HDD.
I have only to run :
a ldap server
a keycloak server
a freeradius server
I have already remove snapd.
Is there a method to ...
- 1
0
votes
1
answer
2k
views
Ubuntu 20.04 and ldap authentification
I struggle a little bit with setting up ldap authentification on Ubuntu 20.04. I followed this guide, that is, I installed the packages libnss-ldap libpam-ldap ldap-utils nscd.
nsswitch.conf looks
...
- 1
4
votes
1
answer
3k
views
What is the replacement tool for auth-client-config in 20.04
I am following the instructions to setup LDAP authentication for an Ubuntu Focal (20.04) client.
One of the steps is to execute the command sudo auth-client-config -t nss -p lac_ldap. Supposedly this ...
- 41
4
votes
2
answers
3k
views
curl dynamic linking problem in 21.10
I recently got a Dell Precision 3450 with ubuntu 20.04, and upgraded to ubuntu 21.10 in two steps (20.04 -> 21.04 -> 21.10). This required upgrading the file /usr/lib/os-release by hand, as ...
- 225
1
vote
1
answer
921
views
ldap-account-manager problem
I have a problem about ldap-account-manager remove.
Here is errors.
$ sudo apt-get remove ldap-account-manager -y
Reading package lists... Done
Building dependency tree
Reading state information... ...
- 13
0
votes
0
answers
199
views
how can I show ldap account on lightdm xfce
I got another problem with ldap account on lightdm greeter. Lightdm greeter could not list ldap user. Therefore, After logging in with LDAP account, I restarted the computer, the LDAP account was not ...
- 11
0
votes
1
answer
1k
views
pam_mkhomedir.so not working with nslcd + LDAP (Active Directory)
I'm trying to get pam_mkhomedir.so to create an LDAP user's local home directory upon initial login. I'm on Ubuntu 20.04 LTS.
Currently, users are added to my server via LDAP (Active Directory backend)...
- 141
-1
votes
1
answer
1k
views
How to create LDAP users in bulk on Linux (UBUNTU)
i just install LDAP server on my server and its working fine. now i would like to create 20 users with different names so is there any script to create users in bulk on LDAP server.
OS: ubuntu 20.04 ...
- 41
0
votes
1
answer
2k
views
SSSD - Unable to Authenticate Against Google LDAP After 20.04 Upgrade - Could not start TLS encryption. unknown error
I'm trying to authenticate against Google LDAP (G Suite/Google Admin) to allow my clients to log in using their Google credentials. I have no visibility on the LDAP side of things I can only generate ...
- 1
0
votes
1
answer
948
views
Openldap upgrade from 2.4 to 2.5
we are using Openldap version Version: 2.4.45+dfsg-1ubuntu1.10
how can I upgrade or migrate to 2.5?
Thanks
- 31
0
votes
0
answers
347
views
Nslcd:cannot open nsswitch.conf
When I try to run
systemctl status nslcd
An error in between the lines appear and it looks like this:
cannot open /etc/nsswitch.conf: Permission denied
I haven't change the permissions for neither of ...
- 1
0
votes
1
answer
2k
views
LDAP binding error
I have a secure LDAP configured on a Active Directory.
I am trying to query it using the ldapsearch command on Ubuntu.
Following are dummy details:
Domain Name: dc=qwerty,dc=com
LDAP Server: ...
- 101
1
vote
1
answer
2k
views
Domain AD users aren't get discovered after adding Ubuntu under AD domain control
I've Joined a my ad domain with my Ubuntu 20.04.2 LTS VM (I followed this doc) and I'veJoined the AD domain with Ubuntu as
sudo realm join -U Administrator win2016.local
realm list show below output
...
- 111
0
votes
1
answer
502
views
Open LDAP installation failed
I have tried this way.
sudo apt-get install -y slapd
But it is showing error. I am using Ubuntu 20.4.0.2
Reading package lists... Done
Building dependency tree
Reading state information... ...
1
vote
1
answer
2k
views
Samba with LDAP auth stopped working when upgrading Xenial to Fossa
We run an open source Java web application, which provides the users with a Windows file share to upload lots of big files. When a new
user account is added, the web app writes a user record to a ...
- 173
1
vote
1
answer
972
views
sudo constantly asking for password with LDAP SSH user
I'm using Ubuntu 16.04, just upgraded sudo from version 1.8.16 to 1.9.5p2. When I SSH to server by LDAP account, I try to run some sudo command, the server require to input password constantly, I'm ...
- 121
1
vote
1
answer
2k
views
LDAP authentication on Ubuntu 18.04
context
I'm trying to configure LDAP authentication on an Ubuntu 18.04 machine.
steps to reproduce
In order to do that, I followed the following steps:
apt install sssd libpam-sss libnss-sss
create ...
- 133
1
vote
0
answers
3k
views
SSSD with AD: How can I ensure AD groups not missing when ldap_id_mapping = False?
Why does altering ldap_id_mapping present different group memberships on the same AD user?
I was hoping to have my UID/GID be the same as AD with IDMU: SSSD with AD: use UID/GID specified on domain ...
- 1,326
1
vote
1
answer
1k
views
Enabling OpenLdap authentication in ubuntu 18.04
I am trying to enable LDAP authentication on my ubuntu client. So far I tried the following instructions:
https://www.tecmint.com/configure-ldap-client-to-connect-external-authentication/
https://www....
1
vote
0
answers
260
views
How to configuration sssd for sftp logins in kubernetes pod level
I have deployed SFTP service in kuberenetes pod level through statefulset.
I want to authenticate SFTP login users through LDAP, hence I configured sssd service to configure a ldap client on SFTP ...
- 11
4
votes
2
answers
3k
views
How to setup Strongswan to auth to LDAP?
I'm trying to create an L2TP/IPSEC VPN server in 20.04 that uses LDAP for user authentication.
I'm assuming Strongswan does this.
Where, in Strongswan or other configs would I add the LDAP server info?...
- 153
0
votes
1
answer
806
views
Cannot open log file Xorg.pid
I encounter serious problem. When I am trying to login to my LDAP User, gdm doesn't start my user session and want me to log in again.
I have connection to LDAP Server
I can login to that account on ...
- 101
1
vote
1
answer
843
views
Is it still possible to authenticate and authorize 20.04 against an unencrypted LDAP server?
20.04/'Focal Fossa' uses sssd to handle authentication, authorization, and user and group information against LDAP.
Nevertheless, sssd does not support authentication over an unencrypted channel.
I ...
- 41
0
votes
1
answer
184
views
Configure SSSD Package against Microsoft Patch (inforce LDAPS/tls)
I'm looking at altering some config of some Ubuntu machines that are using the SSSD package to bind to AD. As far as I understand, all ldap queries should be going through TSL from the config below.
...
- 149
1
vote
1
answer
4k
views
OpenLDAP Trouble Setting TLS Cipher List
My institution wants to configure one of our Ubuntu servers with OpenLDAP in order to interface with our SSO provider, Okta, using a server-side agent they have for provisioning users from their cloud ...
- 11
4
votes
1
answer
549
views
18.04 KDE screenlocker showing full username for Local Users, but not for remote (LDAP authenticated) users
I've got an issue where my KDE screenlocker will not show the full username for the logged in user (for this session) if that user is LDAP authenticated.
This means that when the screen is locked, you ...
- 674
1
vote
0
answers
1k
views
SSSD with "ldap_id_mapping = false" will fail to start, clearing /var/lib/sss/db/* and restarting service does not resolve
I’m working through a strange issue with SSSD on Ubuntu 18.04 - Unit is bound to the domain using Realmd, with SSSD as the primary authentication management service. If I change the line: ...
- 11
0
votes
1
answer
4k
views
LDAP client cannot login on GDM
I am setting up my Ubuntu 19.04 desktop to work with an openldap server.
I cannot login using GDM.
I have added nscd and I have changed my set-up as follows:
common-account:account [success=1 ...
- 183