Hot answers tagged

23

Open template file /usr/share/phpldapadmin/lib/TemplateRender.php in your favorite editor like: sudo vi /usr/share/phpldapadmin/lib/TemplateRender.php Search line $default = $this->getServer()->getValue('appearance','password_hash'); and change it to $default = $this->getServer()->getValue('appearance','password_hash_custom'); and save ...


11

You probably did not set the user-session in LightDM's config file, e.g. # /etc/lightdm/lightdm.conf [SeatDefaults] user-session=plasma-kde ... therefore LightDM looks into the user's ~/.dmrc file and finds Session=default and hence looks for /usr/share/xsessions/default.desktop which is missing.


8

The problem was solved through installing dev-versions of those libraries sudo apt-get install libldap2-dev sudo apt-get install libidn11-dev


7

You Question Needs a lot of explanation , so i will summarize my answer : First you should use Inspircd v2.0.15 because its stable , high performance and the most important for your usage , flagged as ldap support Link. First : You should edit your /etc/hosts file : YouserverIp hostname.example.com hostname Second : Install OpenLdap : ...


6

Had the same problem with my 16.04 desktop clients. Finally resolved replacing the libnss-ldap package with libnss-ldapd. Seems the same issue as in this bug report: https://bugs.launchpad.net/ubuntu/+source/libnss-ldap/+bug/1024475 EDIT: more info about these packages from the Debian wiki: There are currently two packages available to configure NSS ...


6

Best option here is to use sssd for this purpose. I use the AltSecurityIdentities to store the keys and join the servers to the domain using realmd. Once domain joined, add the following to the /etc/sssd/sssd.conf file under the [domain/] section: ldap_user_extra_attrs = altSecurityIdentities:altSecurityIdentities ldap_user_ssh_public_key = ...


5

Master slave in ldap goes by the name of provider and consumer. You don't specify what ldap server you are using so I presume we are talking about openLDAP. In older openLDAP config was saved in conf files. Nowadays all settings are stored in the ldap server itself. So you need to create the config and inject it to the ldap server so we will start by ...


5

ldapdelete is to remove entries, you need to use ldapmodify to delete attributes. This command should remove attribute1 and attribute2 from the username entry: $ ldapmodify -D "uid=..." -w ... -h ... <<%EOF% dn: uid=username,ou=Non-Enterprise,ou=People,dc=foo,dc=com changetype: modify delete: attribute1 - delete: attribute2 %EOF%


5

This is what I do in Ubuntu 12.04 for a freeipa server 3.0.0 Install repos for sssd and freeipa-client sudo -E apt-add-repository http://ppa.launchpad.net/freeipa/ppa/ubuntu sudo -E apt-add-repository http://ppa.launchpad.net/sssd/updates/ubuntu sudo apt-get update sudo apt-get upgrade Update or verify fqdn in /etc/hosts, you should have a line like this: ...


5

You can do this in two ways. One is to let the SSH configuration filter, and the other is to use pam_access. Using SSH configuration To /etc/ssh/sshd_config, add a AllowGroups line: AllowGroups Domain Admin From the manpage: AllowGroups This keyword can be followed by a list of group name patterns, separated by spaces. If specified, login is ...


5

So first of all ubuntu manage to create a long how to (https://help.ubuntu.com/14.04/serverguide/openldap-server.html) about LDAP which omits an important phase: You would have to run sudo dpkg-reconfigure slapd after you installed slapd and select : NO - your.domain.com - Organisation name - password - password - HDB - YES - YES - NO I found the solution ...


4

in the slapd.conf write access control rule access to attrs=userPassword by self =xw But you should be aware that specific rules are to be written first and general rule at the end. for example following rule has to be written at the end. access to * by * read for more information visit: http://www.openldap.org/doc/admin24/access-control.html MORE ...


4

I just checked slapd installation on a VM, and it does not create an example DN by default (which is a good thing): $ ls /etc/ldap/slapd.d cn=config cn=config.ldif You can either add entries all the way from a base DN, or run sudo dpkg-reconfigure slapd, in which case, you will be greeted with these choices: Pick No: Use an FQDN (such as example.com, my....


4

The setup you are describing is often referred to as a thin client configuration. You may find the Linux Terminal Server Project (LSTP) a good place to start.


4

After digging around for a while under System Settings > Software & Updates I remembered once upon a time that I disabled the install updates from the following sources because I got a little annoyed with the frequent interrupting pop-ups to upgrade. I prefer to manage my upgrades manually from apt on the terminal and I didn't want it to automatically ...


3

The system is not hanging. Just wait for a few minutes and the boot will continue. When booted into the system, edit your /etc/modprobe.d/blacklist.conf and add blacklist paevm to the bottom of the file.


3

I had the same problem with Debian Jessie 8 and found another solution here: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770135#46 The command systemctl restart systemd-logind.service or a complete reboot fixed the ssh login delay for me.


3

sure, thread is pretty old - but anyway: stumbled over this thread, when trying to fix lightdm not starting on a bananapi M3 (armbian) - solution was to apt install lightdm-gtk-greeter (which was not pulled in when installing lightdm) maybe this helps someone :)


3

A way to prevent this problem is to make sure the nss_initgroups_ignoreusers parameter - in /etc/ldap.conf (or /etc/libnss-ldap.conf, depending on your system) - is populated with all the (local) users in /etc/passwd: NSS_IGNOREUSERS="$(cut -d: -f1 /etc/passwd | sort | tr '\n' ',' | sed 's|,$||')" sed -i "s|^nss_initgroups_ignoreusers.*|...


3

OK, I find it and it was not that hard (I got lost with SASL stuff that are not relevant). The command is: ldappasswd -H ldap://localhost -D 'cn=Cristiano Ronaldo,ou=People,dc=test,dc=institute,dc=fr' -W 'cn=Cristiano Ronaldo,ou=People,dc=test,dc=institute,dc=fr' -S` where: -D is used to specify the binding user -W is used to prompt password for the ...


3

Add the following line to /etc/ldap/ldap.conf: TLS_REQCERT never It will prevent ldapsearch from validating the certificate. So not the most secure option. You can specify a CA certificate with TLS_CACERT /path/to/trusted/ca


3

I found it in my case! Quite easy, in fact! For starters, run ldapsearch -xLLLH ldap://<dc_uri> -b <dirbase> uid=<username> '*' > user.ldif grep loginshell user.ldif In my case, the user had a wrong login shell assigned (/bin/sh) which for me means dash and not bash. Solution is simple. Transform the user.ldif description file into a ...


3

Based on your samples, it sounds like what you actually want to do is append the following line (removing an additional space character) if the current line is exactly 78 characters long: $ sed '/.\{78\}/{N;s/\n //;}' file.ldif description: Gestion des acces de la CR 902 sur les environnements Big Data en ecriture distinguishedName: CN=GU_902_A_D5_IC_W,OU=...


2

The purpose of back_sock is to connect to an another socket that already exists. It's documented in the slapd-sock(5) manpage. It certainly does not create any socket. If you review your logs, you'll only see errors when an action is attempted, because the sock backend opens the socket each time it needs to do some action, and closes it afterwards. You'll ...


2

[UPDATE] In Ubuntu Server 14.04, the default file is located at/usr/share/doc/sssd-common/examples/sssd-example.confresulting in a new command ofsudo cp /usr/share/doc/sssd-common/examples/sssd-example.conf /etc/sssd/sssd.conf


2

If you really want that the IRCd does the authentication, I would suggest InspIRCd. It has a ldapauth module, but you need to compile it yourself with ./configure --enable-extras=m_ldap.cpp make make install An example configuration how LDAP is used is in an example configuration file. Note that this module is experimental. And the configuration file (...


2

It turns out that the situation can be resolved by changing: member_attribute = CharField(db_column="member") to: member_attribute = ListField(db_column="member") And by this all the member values in Accounts entry are fetched.


2

great article, helped me forward a lot, there are a few errors in the ldifs though , to watch out for: enable_sync_prov.ldif by dn="cn=admin,dc=acme,dc=ncom write should be by dn="cn=admin,dc=acme,dc=com" write Then the ldapadd/ldapmodify should be ran on cn=admin,cn=config portion of the tree , and not on cn=admin,dc=acme,dc=com.


2

sudo apt-get install ldap-utils libpam-ldap libnss-ldapd nslcd Use libnss-ldapd instead. Per bug:https://bugs.launchpad.net/ubuntu/+source/libnss-ldap/+bug/1024475


2

Current workaround is changing the existing script /etc/init.d/libnss-ldap to include: [...] case "$1" in start) cp -f /etc/nsswitch.conf.ldap /etc/nsswitch.conf ;; stop) cp -f /etc/nsswitch.conf.local /etc/nsswitch.conf ;; [...] you may need to first create nsswitch.conf.ldap and nsswitch.conf....


Only top voted, non community-wiki answers of a minimum length are eligible