Re: ldap_result() failed: Can't contact LDAP server

2024-03-06 Thread Dan Ritter
Shaheena Kazi wrote: > Package: nslcd > > I have upgraded from Debian 11 to Debian 12. > > The problem is that I keep getting the below errors in the syslog... > 893:2024-02-29T16:30:13.055665+00:00 hostname-shaheena nslcd[7712]: > [d062c2] ldap_start_tls_s() failed (ur

ldap_result() failed: Can't contact LDAP server

2024-03-06 Thread Shaheena Kazi
Package: nslcd I have upgraded from Debian 11 to Debian 12. The problem is that I keep getting the below errors in the syslog... 893:2024-02-29T16:30:13.055665+00:00 hostname-shaheena nslcd[7712]: [d062c2] ldap_start_tls_s() failed (uri=ldap:// 127.0.0.1:389/): Can't contact LDAP s

Re: using pam-ldap to allow ssh logins from only *some* ldap accounts (and not all)

2021-12-10 Thread Alex Mestiashvili
that sentiment in them). Our goal is to allow not just *any* LDAP user in our openldap (version 2.4.40) directory, but only those specified as members of a particular group (in our LDAP). We have a custom LDAP attribute (groupSR) that is attached directly to the user's entry (ou=People,uid=) o

Re: using pam-ldap to allow ssh logins from only *some* ldap accounts (and not all)

2021-12-10 Thread Roberto C . Sánchez
sponses with RTFM or somethings close to > that sentiment in them). > > Our goal is to allow not just *any* LDAP user in our openldap (version > 2.4.40) directory, but only those specified as members of a particular group > (in our LDAP). We have a custom LDAP attribute (groupSR)

using pam-ldap to allow ssh logins from only *some* ldap accounts (and not all)

2021-12-10 Thread charlie derr
just *any* LDAP user in our openldap (version 2.4.40) directory, but only those specified as members of a particular group (in our LDAP). We have a custom LDAP attribute (groupSR) that is attached directly to the user's entry (ou=People,uid=) or we could easily also populate a "mor

Re: Debian: LDAP migration

2021-08-26 Thread Bastien Durel
Le jeudi 26 août 2021 à 17:54 +0300, IL Ka a écrit : > 1. Export your data to LDIF using `slapcat` > https://www.openldap.org/software/man.cgi?query=slapcat > > 2. Install Debian 11 with OpenLDAP on some test machine > 3. import LDIF using `ldapadd` or `ldapmodify` and see if it works > https://ww

Re: Debian: LDAP migration

2021-08-26 Thread IL Ka
1. Export your data to LDIF using `slapcat` https://www.openldap.org/software/man.cgi?query=slapcat 2. Install Debian 11 with OpenLDAP on some test machine 3. import LDIF using `ldapadd` or `ldapmodify` and see if it works https://www.digitalocean.com/community/tutorials/how-to-use-ldif-files-to-m

Re: Debian: LDAP migration

2021-08-26 Thread Bastien Durel
Le jeudi 26 août 2021 à 16:02 +0200, Dieter Heußner a écrit : > My aim is that the LDAP server runs on a supported Debian version > (v10 or > v11). As far as I understand the IT situation with respect to LDAP > server, > there are two alternatives: > 1. Upgrade LDAP server fro

Debian: LDAP migration

2021-08-26 Thread Dieter Heußner
/unsupported) Debian versions. There is a 64-bit Linux server, running Debian 8.2 (let's call it DEB82) with Samba (thus enabling storage of user data on network drives). On DEB82 KVM/ libvirt is installed. One of the VM guest is the LDAP server running Debian v6.0.4. My aim is that the LDAP s

Re: Help Understanding Samba/ssh/LDAP/sssd/Kerberos/File Sharing?

2021-02-23 Thread Kent West
ll over the map), there are basically three ways of authenticating users > for logging into a Debian box (at the console, or possibly via ssh, or > possibly to access Samba fileshares): > > 1) the oldest and least-preferred method - LDAP and > manual configuration of various files >

Re: Help Understanding Samba/ssh/LDAP/sssd/Kerberos/File Sharing?

2021-02-18 Thread Nicholas Geovanis
. >> > My experience is that any medium-sized and larger organization uses LDAP. > Either Windows based AD acting as LDAP servers or true LDAP servers > handling authentication. > My suggestion is to grab a copy of OReilly's Samba book(s). IBM and Redhat used to have

Re: Help Understanding Samba/ssh/LDAP/sssd/Kerberos/File Sharing?

2021-02-18 Thread Nicholas Geovanis
ver the map), there are basically three ways of authenticating users > for logging into a Debian box (at the console, or possibly via ssh, or > possibly to access Samba fileshares): > > 1) the oldest and least-preferred method - LDAP and > manual configuration of various files >

Help Understanding Samba/ssh/LDAP/sssd/Kerberos/File Sharing?

2021-02-18 Thread Kent West
gging into a Debian box (at the console, or possibly via ssh, or possibly to access Samba fileshares): 1) the oldest and least-preferred method - LDAP and manual configuration of various files 2) the winbindd method - still supported, but perhaps on the road to deprecation in favor of sssd 3) the &q

Re: NSS-LDAP group preventing proper boot

2019-09-30 Thread Sven Hartge
; while I could achieve the same with simply a dynamic loaded library as > libnss-ldap. nss-ldapd and pam-ldapd only require the nslcd daemon and not "multiple daemons". Also the design of nss-ldapd and pam-ldapd is vastly superior over the older nss-ldap and pam-ldap approach, as you

Re: NSS-LDAP group preventing proper boot

2019-09-30 Thread Marc Franquesa
loaded library as libnss-ldap. Regards Missatge de Alex Mestiashvili del dia dv., 20 de set. 2019 a les 19:22: > On 9/20/19 7:42 AM, Marc Franquesa wrote: > > After making a clean install of Buster and setup it, the system doesn't > > boot propery and enters emergency mo

Re: NSS-LDAP group preventing proper boot

2019-09-20 Thread Alex Mestiashvili
On 9/20/19 7:42 AM, Marc Franquesa wrote: > After making a clean install of Buster and setup it, the system doesn't > boot propery and enters emergency mode with some systemd-udevd errors on > timing out. > > I tracked down and isolated the issue to be caused by nss-ldap g

NSS-LDAP group preventing proper boot

2019-09-19 Thread Marc Franquesa
After making a clean install of Buster and setup it, the system doesn't boot propery and enters emergency mode with some systemd-udevd errors on timing out. I tracked down and isolated the issue to be caused by nss-ldap group mapping: If I remove ldap from nsswtich.conf groups (only for g

Re: libnss-ldap, pam_groupdn

2019-08-13 Thread Sven Hartge
jul...@kotysch.de wrote: > I have a Debian 10 system that uses libnss-ldap to authenticate against > an LDAP server. This is working very well. To confirm: You are using "libnss-ldap" and *not* "libnss-ldapd", correct? If yes, then could you please try "libnss

libnss-ldap, pam_groupdn

2019-08-13 Thread julian
Hi! I have a Debian 10 system that uses libnss-ldap to authenticate against an LDAP server. This is working very well. Now I’m trying to restrict the access with the pam_groupdn directive in /etc/libnss-ldap.conf. But this is not working. Everyone can login, the LDAP group is not checked

Re: mariadb ldap auth

2018-09-07 Thread mj
Hi Selim, Wow thanks for teaching me about apt-file, didn't know that one! For me, on linux mint, output looks different: user@e7470 ~ $ sudo apt-file search dialog.so ...> percona-server-5.6-dbg: /usr/lib/debug/usr/lib/mysql/plugin/dialog.so percona-server-server-5.6: /usr/lib/mysql/plugin/

Re: mariadb ldap auth

2018-09-07 Thread Selim T . Erdoğan
On Thu, Sep 06, 2018 at 12:20:22PM +0200, mj wrote: > > But this seems to work only from the localhost mariadb is running on. Trying > this from a remote mysql client gives: > > > user@e7470 ~ $ mysql -udomain_user -p -h mysqlserver.full.address > > Enter password: ERROR 2059 (HY000): Authenticat

mariadb ldap auth

2018-09-06 Thread mj
Hi, I have installed mariadb and configured pam authentication, and configured a mysql pam module like this: /etc/pam.d/mysql auth required pam_winbind.so account required pam_winbind.so which basically gives my samba winbind users access to mysql with their windows cred

ldap and rfc2307bis

2018-06-24 Thread malcolm moore
How do I get rid of nis.schema and add rfc2307bis on slapd  I'm using Buster ( 22June ) This has been driving me nuts now all day ... any help please Ta M  

ldap and rfc2307bis

2018-06-22 Thread malcolm moore
How do I get rid of nis.schema and add rfc2307bis on slapd  I'm using Buster ( 22June ) This has been driving me nuts now all day ... any help please Ta M  

Re: good LDAP resources

2017-03-03 Thread briand
I have < 10 machines, and it should be < 10 machines for the forseeable future, so I think LDAP is probably too brute a force. I'll look into NIS and some of the other tools people have mentioned. Thanks very much for the help everyone ! Brian

Re: good LDAP resources

2017-02-27 Thread deloptes
Dan Ritter wrote: > On Sat, Feb 25, 2017 at 02:16:27PM -0800, bri...@aracnet.com wrote: >> I need to set-up some sort of password server for a small network so that >> i don't have to set-up accounts on every machine. >> >> It looks like LDAP is the b

Re: good LDAP resources

2017-02-27 Thread Dan Ritter
On Sat, Feb 25, 2017 at 02:16:27PM -0800, bri...@aracnet.com wrote: > I need to set-up some sort of password server for a small network so that i > don't have to set-up accounts on every machine. > > It looks like LDAP is the best way to do that. > > Is it ? > >

Re: good LDAP resources

2017-02-27 Thread Greg Wooledge
On Sat, Feb 25, 2017 at 02:16:27PM -0800, bri...@aracnet.com wrote: > I need to set-up some sort of password server for a small network so that i > don't have to set-up accounts on every machine. > > It looks like LDAP is the best way to do that. > > Is it ? For a small

Re: good LDAP resources

2017-02-25 Thread Joshua Schaeffer
LDAP can be very difficult to learn if you are just starting out with it, but also very powerful. There may be other faster solutions then a manual setup, but I found that I learned the most by doing all of it manually. On Red Hat based systems, I believe their IPA solution is quite good. It

good LDAP resources

2017-02-25 Thread briand
I need to set-up some sort of password server for a small network so that i don't have to set-up accounts on every machine. It looks like LDAP is the best way to do that. Is it ? I've been looking at the LDAP how-to's and even tried to turn things on using one of them, but I

Re: Samba (4.1.17) ldap backend create user failed

2016-04-06 Thread Gary Dale
On 06/04/16 05:59 AM, basti wrote: Hello, I have upgrade my samba PDC from 3.xx (lenny) to 4.1 (jessie). ldap and samba shares work all fine. When I try to add a user I get the following smbpasswd -a foobar New SMB password: Retype new SMB password: ldapsam_create_user: Unable to allocate a

Samba (4.1.17) ldap backend create user failed

2016-04-06 Thread basti
Hello, I have upgrade my samba PDC from 3.xx (lenny) to 4.1 (jessie). ldap and samba shares work all fine. When I try to add a user I get the following smbpasswd -a foobar New SMB password: Retype new SMB password: ldapsam_create_user: Unable to allocate a new user id: bailing out! Failed to add

nginx, ldap and dotdeb

2016-03-02 Thread Erwan David
Hello I am looking for a solution for ldap basic authentication in nginx. nginx versions in Jessie do not incorporate auth_ldap module, thus I am blocked. However I saw that the version on dotdeb does. So my question is : Is dotdeb reliable ? If I do not want to reecompile nginx from source, it&#

Re: Q: LDAP on Debian easy/short way

2014-05-03 Thread Rob Owens
On Wed, Apr 23, 2014 at 05:39:32PM -0700, Snow Leopard wrote: > NOTE: configuration of slapd by editing /etc/ldap/slapd.conf is > considered "outdated" is there a document with good explanation of > "modern way" with good examples > I have always used LDAP Accou

Q: LDAP on Debian easy/short way

2014-04-23 Thread Snow Leopard
Hi, is there an alternative for next book on LDAP (this book is good but quite outdated -- 2003) http://secretoslinux.files.wordpress.com/2010/08/oreilly_-_ldap_system_administration.pdf Particularly I am interested in next 1. [+] installation of slapd (accomplished) 2. [+] configuration of

Re: Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Ric Moore
On 04/13/2014 04:45 PM, Snow Leopard wrote: Hi Atle, in my case I am certificate agency (self-signed certificate) and I issue "private key" and "certificate" (cacert.pem) as for root "CA" as for LDAP server (server-key.pem and server-cert.pem) and LDAP perl scr

Re: Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Snow Leopard
Hi Atle, in my case I am certificate agency (self-signed certificate) and I issue "private key" and "certificate" (cacert.pem) as for root "CA" as for LDAP server (server-key.pem and server-cert.pem) and LDAP perl script client (client-key.pem and client-cert.pem

Re: Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Atle Solbakken
3_GET_SERVER_CERTIFICATE:certificate verify failed at ./ldap_sec.pl line 25, line 751. root@install:~/prog# It seems to me that the "verify"-option tells Net::LDAP whether it should verify that the certificate the server you are connecting to is using has been signed by a k

Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Snow Leopard
Hi, I am trying to write perl script with Net::LDAP module, start_tls command and stumbled on a problem. I would appreciate if somebody could point me to "the source of the problem". If there is better place to get an assistance in resolution of the problem please indicate in

Squeeze/Wheezy: autofs-ldap -> syntax error in map near [ /nethome/files/disc01 ]

2013-09-26 Thread Denny Fuchs
hi, I'm trying to get autofs with LDAP working. We have two file servers (old/new) and several LDAP entries, like described in: /usr/share/doc/autofs-ldap/examples/ldap-automount-rfc2307-bis-auto.direct: === # extended LDIF # # LDAPv3 # base with scope su

Re: Problems with LDAP Authentication

2013-06-13 Thread Ger Hooton
Thanks Petter for your response. It looks like the authentication process looks for the user in /etc/passwd first and if the user is not there it gives up, ie. dose not go to the LDAP server. However, if LDAP is first then everything works fine. Also I note that if I do su - username as root

PAM, LDAP, and pam_groupdn

2013-03-20 Thread Stephan Seitz
Hi! System: Debian 7 I have a Debian 7 system that uses libpam-ldap and libnss-ldap to authenticate against an LDAP server. This is working very well without messing with the PAM configuration. Now I’m trying to restrict the access with the pam_groupdn directive in /etc/pam_ldap.conf. But

cached ldap fails

2013-02-13 Thread S Scharf
I am trying to configure a Debian Testing system to authenticate against my office LDAP server. I installed libldap, libnss-ldap, libpam-ldap, libnss-db and libpam-ccreds. Everything works with the LDAP server connected, but when I disconnect the network, the login screen fails, and a "su

Re: ldap users with users samba.

2013-01-18 Thread Arun Khan
On Fri, Jan 18, 2013 at 11:44 PM, rodrigo tavares wrote: > Hello ! > > I trying sync ldap users with users samba. > > I´m using a interface, by create ldap users. > > So, when ldap user be created, i want account e password samba be created. A couple of days ago, I had sugge

ldap users with users samba.

2013-01-18 Thread rodrigo tavares
Hello ! I trying sync ldap users with users samba. I´m using a interface, by create ldap users. So, when ldap user be created, i want account e password samba be created. No my smb.conf I put the follow lines:     ldap admin dn = cn=admin,dc=def,dc=mg,dc=gov,dc=br     ldap

Re: Integrate passwords LDAP for samba users.

2013-01-16 Thread Arun Khan
On Wed, Jan 16, 2013 at 8:53 PM, rodrigo tavares wrote: > Hello, > > I have a debian with smb +ldap. > > Its possible when I to create ldap users send this password for samba users > ? > So, i dont´t need make to password for samba users. Install smbldap-tools package.

LDAP on a laptop

2013-01-06 Thread Rob Owens
I've got a laptop that connects to an LDAP server for authentication. It's currently running Ubuntu 10.04 and I'll be moving it to Wheezy once its released. I'm currently testing it out on a spare hard drive. Ubuntu is configured to cache the LDAP credentials so it can be

PAM: External radius for password / internal LDAP for the rest

2012-12-06 Thread Denny Schierz
hi, at the moment we importing every day students from a external LDAP server and copy them into our local LDAP tree. So we have a own password database, in LDAP. Now we have access to the main radius for the whole university so we can authenticate most of our users via the radius, but not all

getting ldap info for user authentication

2012-07-05 Thread Umarzuki Mochlis
Hi, I installed ownCloud on Squeeze and want to get these info to get users from zimbra-ldap (openldap) to be used as login user for owncloud Host: (i assume openldap server's IP) Base: (i assume dc=mydomain,dc=com as per email's domain) Name: Password: User Login Filter: User List Fil

Re: any stable open source ldap software for SSO

2012-06-22 Thread John A. Sullivan III
On Fri, 2012-06-22 at 14:23 +, Camaleón wrote: > On Fri, 22 Jun 2012 09:06:39 +0800, Umarzuki Mochlis wrote: > > > 2012/6/22 Camaleón : > >> On Wed, 20 Jun 2012 10:30:57 -0400, John A. Sullivan III wrote: > >> > >> > > > >> If you're replying to my post you removed too much of the quoted text

Re: any stable open source ldap software for SSO

2012-06-22 Thread Camaleón
On Fri, 22 Jun 2012 09:06:39 +0800, Umarzuki Mochlis wrote: > 2012/6/22 Camaleón : >> On Wed, 20 Jun 2012 10:30:57 -0400, John A. Sullivan III wrote: >> >> > >> If you're replying to my post you removed too much of the quoted text >> ;-) >> >>> I admit that I have never extensively used OpenLDAP

Re: any stable open source ldap software for SSO

2012-06-21 Thread Umarzuki Mochlis
2012/6/22 Camaleón : > On Wed, 20 Jun 2012 10:30:57 -0400, John A. Sullivan III wrote: > > > If you're replying to my post you removed too much of the quoted text ;-) > >> I admit that I have never extensively used OpenLDAP but, when we did our >> initial research, the feedback seemed to be that i

Re: any stable open source ldap software for SSO

2012-06-21 Thread Camaleón
On Wed, 20 Jun 2012 10:30:57 -0400, John A. Sullivan III wrote: > On Wed, 2012-06-20 at 13:45 +, Camaleón wrote: >> On Wed, 20 Jun 2012 09:42:50 +0800, Umarzuki Mochlis wrote: >> >> > this is for a organization with 2000+ windows 7 & windows xp desktops >> > and multiple file sharing software

Re: any stable open source ldap software for SSO

2012-06-20 Thread John A. Sullivan III
On Wed, 2012-06-20 at 13:45 +, Camaleón wrote: > On Wed, 20 Jun 2012 09:42:50 +0800, Umarzuki Mochlis wrote: > > > this is for a organization with 2000+ windows 7 & windows xp desktops > > and multiple file sharing softwares > > > > any idea aside openldap? > I admit that I have never exten

Re: any stable open source ldap software for SSO

2012-06-19 Thread John A. Sullivan III
On Wed, 2012-06-20 at 09:42 +0800, Umarzuki Mochlis wrote: > this is for a organization with 2000+ windows 7 & windows xp desktops > and multiple file sharing softwares > > any idea aside openldap? > > have anyone configured openldap for the above situation? > > any gotchas when working with win

any stable open source ldap software for SSO

2012-06-19 Thread Umarzuki Mochlis
this is for a organization with 2000+ windows 7 & windows xp desktops and multiple file sharing softwares any idea aside openldap? have anyone configured openldap for the above situation? any gotchas when working with windows 2003 and 2008 servers? -- Regards, Umarzuki Mochlis http://debmal.m

Re: getent passwd doesn't show ldap user

2012-04-25 Thread stefano malini
nt)") nslcd: [8b4567] DEBUG: ldap_simple_bind_s(NULL,NULL) (uri="ldap://localhost:389";) nslcd: [8b4567] ldap_result() failed: No such object Looking back at your first post, I now see that you have a very restrictive ACL with "by * none". access to * by dn.base=&qu

Re: getent passwd doesn't show ldap user

2012-04-23 Thread Per Carlson
Hi Stefano > nslcd: [8b4567] DEBUG: myldap_search(base="dc=amahoro,dc=bi", > filter="(objectClass=posixAccount)") > nslcd: [8b4567] DEBUG: ldap_simple_bind_s(NULL,NULL) > (uri="ldap://localhost:389";) > > nslcd: [8b4567] ldap_result() failed: No

Re: getent passwd doesn't show ldap user

2012-04-23 Thread stefano malini
nslcd: DEBUG: add_uri(ldap://localhost:389) nslcd: version 0.7.15 starting nslcd: DEBUG: unlink() of /var/run/nslcd/socket failed (ignored): No such file or directory nslcd: DEBUG: setgroups(0,NULL) done nslcd: DEBUG: setgid(107) done nslcd: DEBUG: setuid(105) done nslcd: accepting connections

Re: getent passwd doesn't show ldap user

2012-04-23 Thread stefano malini
Hi Per, > Try stopping the caching daemon ("sudo service nscd stop") and try > again. getent still doesn't resolve? i tried without success > I'm not 100% sure, but LDAP might bee needed in pam as well. > Installing libpam-ldapd should do that automatically.

Re: getent passwd doesn't show ldap user

2012-04-23 Thread Per Carlson
Hi Stefano. >> Did you install nslcd by it self or in companion with libnss-ldapd and >> libpam-ldapd? > > nslcd has been installed automatically installing libnss-ldapd. Ok. > This is my /etc/nsswitch.conf: > > passwd:         files ldap > group:          file

Re: getent passwd doesn't show ldap user

2012-04-23 Thread stefano malini
s is my /etc/nsswitch.conf: # /etc/nsswitch.conf # # Example configuration of GNU Name Service Switch functionality. # If you have the `glibc-doc-reference' and `info' packages installed, try: # `info libc "Name Service Switch"' for information about this file. passwd:

Re: getent passwd doesn't show ldap user

2012-04-23 Thread Per Carlson
files ldap group: files ldap shadow: files ldap You need libnss-ldapd for the "ldap" rule in the lines above. > At the moment getent passwd doesn't show ldap user. > I create a user nslcd_proc for nslcd lookups. > this user belong to the System organizati

getent passwd doesn't show ldap user

2012-04-23 Thread stefano malini
hi, installed openldap and configured nslcd.conf and nsswitch.conf on debian squeeze server. At the moment getent passwd doesn't show ldap user. I create a user nslcd_proc for nslcd lookups. this user belong to the System organizationalUnit. You can see some checks. FIRST SHELL nslcd -d

Re: Authentication problem using ldap credentials

2012-04-06 Thread Camaleón
On Fri, 06 Apr 2012 09:36:25 +0200, stefano malini wrote: > i've problems trying login from my client ubuntu 10.10 using ldap user > credential. ldap server is debian squeeze. i can enter using the local > user of my computer and i can login from a shell using ldap user > creden

Authentication problem using ldap credentials

2012-04-06 Thread stefano malini
Hi, i've problems trying login from my client ubuntu 10.10 using ldap user credential. ldap server is debian squeeze. i can enter using the local user of my computer and i can login from a shell using ldap user credential. this is the output of auth.log: Apr 4 15:50:51 dello gdm-se

Re: Problem with Kerberos5 using LDAP backend

2012-03-06 Thread Arturo Borrero Gonzalez
= EXAMPLE.ES >        example.es = EXAMPLE.ES > > > Il giorno 06 marzo 2012 13:31, Arturo Borrero Gonzalez > ha scritto: >> >> Hi there! >> >> I'm using the package krb5-kdc-ldap to use mi kerberos with LDAP backend. >> I've followed the debian a

Re: Problem with Kerberos5 using LDAP backend

2012-03-06 Thread emmanuel segura
Borrero Gonzalez < cer.i...@linuxmail.org> ha scritto: > Hi there! > > I'm using the package krb5-kdc-ldap to use mi kerberos with LDAP backend. > I've followed the debian and ubuntu documentation and I find some > issues I can't solve: > > · I fill the LDAP

Problem with Kerberos5 using LDAP backend

2012-03-06 Thread Arturo Borrero Gonzalez
Hi there! I'm using the package krb5-kdc-ldap to use mi kerberos with LDAP backend. I've followed the debian and ubuntu documentation and I find some issues I can't solve: · I fill the LDAP tree using the "kdb5_ldap_util" as seen in documentation. The LDAP server is

LDAP: Switch to SHA512 Hash Lenny/Squeeze

2011-10-17 Thread Denny Schierz
hi, we want switch from old DES crypt to SHA512 on our Lenny and Squeeze images. It works for local accounts, but I'm not sure, if it works also in LDAP. If I change the password from a LDAP user, than I expecting a longer string: local user: foobar:$6$rounds=65536$7NJOqSFw $UDB6zSUxHi

Re: Problem about ldap

2011-06-18 Thread Rob Owens
On Sat, Jun 18, 2011 at 06:26:14PM +0800, Magicloud Magiclouds wrote: > Hi, > This may not be a proper place to ask this. I am using ldap-utils in > debian sid. When I do search, kind like: > $ ldapsearch -x -h ldap-server -d "CN=Users,DC=M,DC=com" -b > "CN=Magi

Problem about ldap

2011-06-18 Thread Magicloud Magiclouds
Hi, This may not be a proper place to ask this. I am using ldap-utils in debian sid. When I do search, kind like: $ ldapsearch -x -h ldap-server -d "CN=Users,DC=M,DC=com" -b "CN=Magicloud,CN=Users,DC=M,DC=com" -w "A^b3" It failed with error on binding. If I c

Re: Lenny -> Squeeze : Apache2:LDAP SSL auth not working anymore

2011-03-31 Thread Stephen Young
tParentPath off AuthType Basic AuthName "USVN" AuthBasicProvider ldap AuthzLDAPAuthoritative off AuthLDAPURL ldaps://myserver.mydomain.com:989/cn=users,dc=myserver,dc=mydomain,dc=com?uid AuthzSVNAccessFile /var/www/usvn-1.0/files/authz

Lenny -> Squeeze : Apache2:LDAP SSL auth not working anymore

2011-03-06 Thread Denny Schierz
hi, after upgrading Lenny to Squeeze, ldap auth over .htacces/virtual-host.config stops working when using SSL. I've searched hours on friday and though packages are missing or broken. Apache2 brings only "Internal Server Error", but nothing in the error/debug logfiles. Apac

Re: Exim4 : allow relaying for authenticateed users (LDAP,PAM over TLS)

2011-01-09 Thread William Cooper
On 9 January 2011 12:15, Frank Lin PIAT wrote: > Hello, > > I want to allow my remote users to submit emails through SMTP > on port 587 (using TLS). Obviously I want to enforce authenticate > for those mail submission (my user are stored in LDAP, with passwrd > as plain tex

Re: Exim4 : allow relaying for authenticateed users (LDAP,PAM over TLS)

2011-01-09 Thread Andrew Reid
On Sunday 09 January 2011 11:15:25 Frank Lin PIAT wrote: > > Does anyone knows a good howto. I am especially wondering how to > instruct EXIM to use PAM/LDAP rather than the local /etc/exim4/passwd) It has been a long time since I did this, but my recollection is that Exim is one

Re: Exim4 : allow relaying for authenticateed users (LDAP,PAM over TLS)

2011-01-09 Thread Boyd Stephen Smith Jr.
In , Frank Lin PIAT wrote: >I want to allow my remote users to submit emails through SMTP >on port 587 (using TLS). I do this with exim currently. >Obviously I want to enforce authenticate >for those mail submission Of course, no reason to be an open relay. >(my user are store

Exim4 : allow relaying for authenticateed users (LDAP,PAM over TLS)

2011-01-09 Thread Frank Lin PIAT
Hello, I want to allow my remote users to submit emails through SMTP on port 587 (using TLS). Obviously I want to enforce authenticate for those mail submission (my user are stored in LDAP, with passwrd as plain text, so both PAM and LDAP should be possible [?]). Does anyone knows a good howto

Re: libnss-ldap udev problem

2010-10-14 Thread Marc Franquesa
es: i386, arm and mips) have this exact same issue: > udev hangs indefinitely when using libnss-ldap. No timeouts, no error > messages, ... nothing, I can press Ctrl+C and the boot process continue. > If I configure nsswitch to use only local files, udev boots correctly. > > I a

libnss-ldap udev problem

2010-10-10 Thread Marc Franquesa
indefinitely when using libnss-ldap. No timeouts, no error messages, ... nothing, I can press Ctrl+C and the boot process continue. If I configure nsswitch to use only local files, udev boots correctly. I am using libnss-ldap, and my /etc/nsswitch.conf is this: passwd: files ldap [UNAVAIL

ldap client: gnutls problem

2010-09-01 Thread Frank Van Damme
Hello list, I have ran into a problem with apache and Openldap which I pinned down to gnutls. I have a LDAP server set up with TLS (it also runs Debian) but connecting to it turns out to be a problem. It works fine for local or unencrypted connections but from another Debian box it doesn&#

Re: I can't see my /etc/ldap/slapd.conf file after upgrade testing

2010-08-28 Thread Eric KOM
t;> I'm trying to solve this problem but not result. >> After upgrade testing, I can't fund the /etc/ldap/sdapd.conf but the >> server is still running. >> >> Thank you in advance >> >> > Try: find / -name sdapd.conf > > > -- >

Re: I can't see my /etc/ldap/slapd.conf file after upgrade testing

2010-08-28 Thread Jordon Bedwell
On 8/28/2010 1:23 AM, Eric KOM wrote: Hi! I'm trying to solve this problem but not result. After upgrade testing, I can't fund the /etc/ldap/sdapd.conf but the server is still running. Thank you in advance Try: find / -name sdapd.conf -- To UNSUBSCRIBE, email to debian

I can't see my /etc/ldap/slapd.conf file after upgrade testing

2010-08-27 Thread Eric KOM
Hi! I'm trying to solve this problem but not result. After upgrade testing, I can't fund the /etc/ldap/sdapd.conf but the server is still running. Thank you in advance -- Yours truly, Eric KOM 110 LAWN STREET ROSETTENVILLE 2190 JOHANNESBURG SOUTH AFRICA Phone: +27 (0) 788 791 334 F

pam-ldap breaks dhcp

2010-08-16 Thread Laurent Blume
Hi all, I'm doing some pam-ldap tests using Lenny in a VBox. I do all the pam configuration successfully, it tests fine, including login. However, on first reboot, udev complains a lot about missing groups (like in this bug report http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=516149)

Samba PDC, LDAP con Cluster

2010-05-14 Thread cosme
Samba PDC, LDAP con Cluster Tengo instalado un controlador de dominio con Samba PDC OpenLDAP PAM/NSS, he buscado alguna configuracion para agregar un BDC pero nada. Me han dicho que una mejor opcion sería agregar un cluster ya que tiene más ventajas además de equilibrar las cargas. Alguna

help on ldap

2010-05-02 Thread abdelkader belahcene
Hi, I wanted to use php to manage my ldap server. I used php5-ldap from debian site. The php ran correctly , same thing for ladp ; but when I tried the ldap-connect via the module php, nothing is appeared and the window froze ( blank page ), after that any simple php command didn't work u

Samba BDC con LDAP PAM/NSS

2010-04-29 Thread cosme
Samba BDC con LDAP PAM/NSS Hola He buscado pero en definitiva nada claro y es que necesito implementar un Backup Domain Controler para Debian Lenny. Tengo la idea para la parte de el smb.conf de Samba, pero cómo configuro LDAP, PAM y NSS??? He estado haciendo pruebas pero no he dado con la

Re: ldap help ?

2010-04-25 Thread Alexander Samad
,dc=example,dc=com > sn: Doe > givenName: John > cn: John Doe > > I get correct answer > > I tried to do it from a remote machine  where ( ubuntu 9.10 )   (IP > 172.19.6.50) > I installed package for authentication in this client machine > > libnss-ldap > ldap-auth-config

samba y ldap

2010-04-23 Thread cosme
Hola Me pueden sugerir algunos sitios para descargar informacion de como implementar un PDC y BDC con Samba y ldap o si es posible algo que tengan a la mano. Salu2 Cosme -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Troubl

ldap help ?

2010-04-22 Thread abdelkader belahcene
m a remote machine where ( ubuntu 9.10 ) (IP 172.19.6.50) I installed package for authentication in this client machine *libnss-ldap ldap-auth-config I ran pam-auth-update * everything seemed correct like it is decalred in the document *http://doc.ubuntu.com/ubuntu/serverguide/C/openldap-serve

Re: LDAP: possible problems with user authentication

2010-02-25 Thread Rob Owens
On Mon, Feb 22, 2010 at 10:42:31AM -0400, Germana Oliveira wrote: > Hi! > > Some service (software) companies have been telling us 'not to use > ldap for user authentication' instead they recommend us to use > Microsoft Active Directory, this because, they say, LDAP

Re: LDAP: possible problems with user authentication

2010-02-23 Thread mourik jan c heupink
Hi germana, I have been searching for some tools (free software tools) and i have found some: Maybe these links will interest you also: http://www.ldap-account-manager.org/ and http://ldapadmin.sourceforge.net/ regards, mj -- www.muzieknoteren.nl -- To UNSUBSCRIBE, email to debian-user-

Re: LDAP: possible problems with user authentication

2010-02-23 Thread Germana Oliveira
I have been searching for some tools (free software tools) and i have found some: Apache Directory Server: looks good but i dont like the java stuff. "Apache Directory Server is an open source LDAP directory server implemented in java." GOsa: looks very good and development in php,

Re: LDAP: possible problems with user authentication

2010-02-23 Thread Sjoerd Hardeman
Please don't top post Germana Oliveira schreef: So, you're telling me that ADS/LDAP do the same thing you can do just with LDAP (without the interface) .. i mean, a directory service. Groups, rights and security is manage by the OS itself ¿?. What Active Directory does is to gi

Re: LDAP: possible problems with user authentication

2010-02-23 Thread Germana Oliveira
So, you're telling me that ADS/LDAP do the same thing you can do just with LDAP (without the interface) .. i mean, a directory service. Groups, rights and security is manage by the OS itself ¿?. What Active Directory does is to give you the facility to manage all those things together? But

Re: LDAP: possible problems with user authentication

2010-02-22 Thread Alex Samad
ee Software, or something similar in LDAP > or with LDAP (openLdap) You are mixing things up. ADS/LDap is a directory service, what you do with that information is up to you. ADS has a nice gui interface to place users in to groups. The filesystem and security engine of windows determ

Re: LDAP: possible problems with user authentication

2010-02-22 Thread Germana Oliveira
i just forgot something. AD manage the (user) permissions and groups stuff: Like - this user can access to this printer or that user can not use pen drive - and i haven`t found yet something like that in free Software, or something similar in LDAP or with LDAP (openLdap) Someone have some idea

Re: LDAP: possible problems with user authentication

2010-02-22 Thread Germana Oliveira
ice (software) companies have been telling us 'not to use >> ldap for user authentication' instead they recommend us to use >> Microsoft Active Directory, this because, they say, LDAP is >> problematic, talking about domain, and hard to use - for example is >>

Re: LDAP: possible problems with user authentication

2010-02-22 Thread Joe
Germana Oliveira wrote: Hi! Some service (software) companies have been telling us 'not to use ldap for user authentication' instead they recommend us to use Microsoft Active Directory, this because, they say, LDAP is problematic, talking about domain, and hard to use - for examp

  1   2   3   4   5   6   7   8   9   >