Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [pam-ldap]

80 questions
0
votes
0 answers

Why I cannot find ldap.conf file when I want to integrate 389-ds and samba on centos 7?

I am working on two servers, a samba server and a 389-ds server. Now I want to integrate them so that samba shares are authenticated via ldap server. I have followed instructions on…
Mohammad
  • 103
  • 4
0
votes
2 answers

PAM - LDAP authentication interaction

So far from what I understand it gets given a username/password pair, it then searches the LDAP for the username and tries to log into the LDAP using the distinguished name and the password pair, if it succeeds then the authentication is successful,…
Aaron
  • 101
  • 1
0
votes
1 answer

pam google authenticator can't compute location of secret file

I've installed Google Authentication on all the machines in our system, and while the authentication during login works fine, our machines are producing logs that have this line over and over: sshd(pam_google_authenticator)[2 Failed to compute…
Clare
  • 3
  • 3
0
votes
2 answers

pam_ldap user password changes using rootbinddn on Debian Jessie

When configuring pam_ldap on Debian Jessie, end user password changes are utilizing the rootbinddn, circumventing OpenLDAP's ppolicy overlay. This is allowing end users to change their passwords without conforming to the password policy defined…
Corvar
  • 91
  • 9
0
votes
0 answers

What are the minimum permissions for a libpam-ldap unix domain socket?

I'm setting up an LDAP server and libpam-ldap to run on the same host, communicating via a UNIX domain socket. I'd like to give this socket the minimum permissions necessary, so random local users can't try binding to LDAP and guessing other users'…
Wolfgang
  • 101
  • 1
0
votes
2 answers

how to use authconfig for ssh through LDAP connection

I'm newbies on Centos7. The ssh connection is working for all user which is the /etc/passwd. That's meaning I can connect to my server with this kind of users I added The other users which are present in the LDAP 've got this error in the…
dubis
  • 113
  • 3
  • 10
0
votes
1 answer

What are disadvantages of using nsswitch compat?

In my current LDAP set-up "getent passwd" shows all 600+ users that exist in the LDAP, not enumerating only the 20 LDAP-users that have permission to access this netgroup/server. This can be solved by compat mode to filter the…
ujjain
  • 3,983
  • 16
  • 53
  • 91
0
votes
1 answer

Users seeing all other LDAP users on RHEL default behavior?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent passwd", all users on the entire LDAP Server are shown,…
ujjain
  • 3,983
  • 16
  • 53
  • 91
0
votes
1 answer

centos 5.x and ldap failover

I am having trouble with LDAP authentication fail-over. We currently have two CentOS-DS directory servers working in a multi-master setup. One Server per site. Normally, logins process fine. However, I am having trouble with the fail-over part. …
Brian
  • 1,233
  • 2
  • 14
  • 25
0
votes
1 answer

PAM setup with pam_ldap

I am running ubuntu 10.10 and trying to setup pam with pam_ldap. The guide at: http://wiki.debian.org/LDAP/PAM says, among other things: In order to globally enable LDAP authentication through PAM, configure /etc/pam_ldap.conf accordingly and edit…
NinjaCat
  • 576
  • 1
  • 9
  • 21
0
votes
0 answers

Is Certificates are required for STARTTLS connection on LDAP

My LDAP server's ldap.conf file # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. BASE dc=coretesting,dc=com URI ldap://ldap.coretesting.com…
ram ajay
  • 11
  • 2
0
votes
0 answers

Is it possible to add memberUid as bind DN

Can we use memberUid for bind dn string. Here is my sample ldif file dn: cn=posixgroup,dc=memtesting,dc=com objectClass: top objectClass: posixGroup gidNumber: 1001 cn: posixgroup memberUid: posixuser dn:…
ram ajay
  • 11
  • 2
0
votes
1 answer

What are all the certificates mandatory to be provide while setting TLSVerifyClient option to demand

In my case, I had set TLSVerifyClient to demand. I couldn't be able to establish a connection While providing TLSCACertificateFile alone. While setting the TLSVerifyClient option demand is it mandatory to provide the following option or …
ram ajay
  • 11
  • 2
0
votes
0 answers

Remote side unexpectedly closed network connection RHEL 7.9

I have a situation where a rhel server becomes inaccessible using AD accounts but lets a local account to login. We are using a PAM tool that serves as our AD broker that enables us to login with AD credentials and enforces MFA. The issue is…
doublehunter
  • 1
  • 1
0
votes
0 answers

nss_ldap failed to bind to LDAP server

i have configured ldap client (ubuntu 20.04) with nss_ldap to connect on ldap server and accept users in a specific group, it seems that everything is working fine, the client can access the ldap server and ldap users can access the client machine.…
Khloud Mostafa
  • 1
  • 3
1 2 3 4
5
6