Fedora Servers :: Access 'description' Attribute From LDAP?
Sep 5, 2011how can i access 'description' attribute stored in LDAP server from LDAP client(pam_ldap,nss_ldap).
View 2 Replieshow can i access 'description' attribute stored in LDAP server from LDAP client(pam_ldap,nss_ldap).
View 2 RepliesAssume, I have the below LDAP entry
Code:
Which command should I use programmatically (in ldap.h) to change only ONE of the attributes above? say i only want to change the userPassword from value secret -> notasecret
Do we use?
Code:
And how?
Recently installed Fedora 11 from CD on eeepc900HA. Update manager suggested 402 updates available. trying to update I get the following traceback error report:
Traceback (most recent call last):
On trying this process a second time after having selected specific packages I noticed that a prepare machine for upgrade package (not selected by me) seemed to be where the process stalled.
Trying a third time with attempt to upgrade some (random) python packages I get the same result via a system/admin/upgrade or download software .
After installing F11, I installed OpenLdap with the command "yum -y install openldap*" And added the password obtained through the command "slappasswd -s password -h {MD5}" into /etc/openldap/slapd.conf. Also, I specified the domain information within the file on "suffix" and "rootdn". I also modified the domain name in both /etc/openldap/ldap.conf and /etc/ldap.conf. I copied the Copied the /usr/share/doc/openldap-servers-2.4.15/DB_CONFIG.example to /var/lib/ldap/DB_CONFIG. Then started the server with the command /etc/rc.d/init.d/ldap start I then was able to create and delete OU's and CN's with the help of ldapadd and ldapdelete. I also created PERSON records using the base.ldif file with the content ;
dn: cn=user1, ou=domain, dc=example, dc=com
objectClass: person
cn: user1
sn: user1
Everything is OK until I try to add a person with an email address in the "mail" attribute. The error message is ;
***************************
adding new entry "cn=user1, ou=domain, dc=example, dc=com
ldap_add: Object class violation (65)
additional info: attribute 'mail' not allowed
***************************
This error message is appearing also with "uid" attribute. I have searched some forums and found some suggestions to include the line
"include /etc/openldap/schema/inetorgperson.scheme" in the file /etcopenldap/slapd.conf, which is already in.
LDAP Authentication for Web Access I am trying to build a LDAP server to allow access to the wireless network in conjunction with Meraki wireless access points. I am using Ubuntu 10.10 and trying to install OpenLDAP from their documentation but I keep running into the error "configure: error: MozNSS not found - please specify the location to the NSPR and NSS header files in CPPFLAGS and the location to the NSPR and NSS libraries in LDFLAGS (if not in the system location)" I have OpenSSL installed but I also got these when I ran ./configure
checking openssl/ssl.h usability... no
checking openssl/ssl.h presence... no
checking for openssl/ssl.h... no
checking gnutls/gnutls.h usability... no
[code]....
How to configure ldap technology in fedora & linux.
View 3 Replies View RelatedI'm new LDAP kind of stuff.I want to configure LDAP server and Client on windowsXP. could you tell me which Open source LDAP Server and client are best fit for windowsXP. Is OpenLdap not suitable for windows?
View 8 Replies View RelatedI just configured my first Directory Server. I was looking to use PHPLDAPADMIN to start administrating it. Any good how to's or Tut's?
View 4 Replies View RelatedI am using LDAP to manage the autofs and everything works fine. I have a situation here that I can't figure out how to do. I need to use 2 direct map in auto.master, but the LDAP service doesn't allow me to add 2 "cn: /-" entries in the directory.
The following is my auto.master map:
dn: ou=auto.master,ou=autofs,ou=dolphin,dc=example,dc= com,dc=my
objectClass: automountMap
objectClass: top
ou: auto.master
dn: cn=/-,ou=auto.master,ou=autofs,ou=dolphin,dc=example,dc =com,dc=my
objectClass: automount
objectClass: top
automountInformation: ldap://ldap.example.com.my/ou=auto.iso.indirect,ou=autofs,ou=dolphin,dc=examp le,dc=com,dc=my
cn: /-
I have another ldap entry auto.data.indirect but I have no idea how to inject it into the directory. Any ideas how to implement it? I am using Fedora 13.
Please let me know how to delete/flush complete LDAP database ? I tried deleting all files from /var/openl dap- data. but still top level data base attributes remains.initially I had set shadowExpire,shadowFlag etc, I want to remove all these.Kindly help me to build my new database.
View 5 Replies View RelatedI am trying to configure and compile the pam_ldap and nss_ldap for MIPS architecture. for this they need ldap library. so I am trying to compile openldap code for MIPS first, but the configuration is failing.The command and options used for configuration is as follows.
./configure --host=mips CC=/opt/montavista/pro/devkit/mips/fp_be/bin/mips_fp_be-gcc LD=/opt/montavista/pro/devkit/mips/fp_be/bin/mips_fp_be-ld CFLAGS="-g -O2 -I/usr/include -I/usr/include/openssl" LDFLAGS="-L/usr/lib" --prefix=/mips/ldap --with-yielding_select=no
[code]...
I have a openldap server running on one machine (fedora10) and pam_ldap.so and nss_ldap.so running on the other machine.
I have added a new user to the LDAP server database, this user is not created on client machine.
1. Can i login to the client machine using this new user?
2. Now if i try logging with this new user I am getting error messages, the error messages are as follows at client side
Sep 2 10:34:36 localhost sshd[8484]: Invalid user kim from 10.254.194.148
Sep 2 10:34:36 localhost sshd[8485]: input_userauth_request: invalid user kim
Sep 2 10:35:16 localhost sshd[8484]: pam_ldap: error trying to bind as user "cn=min soo,ou=people,dc=samsung,dc=com" (Invalid credentials)
[Code]....
I've setup an openldap server, and am trying to add .ldif files to the database.
I am constantly getting the following error, no matter what I do:
I have two touch screen monitors tha tI'm configuring for a dual-head display.That is working.For the touch screens it's a bit more complicated, each touch screen requires that I apply a specific config file for each individual TS (touch screen). Each config file is unique to it display. for that I'm using xinput to apply those configuration.My problem here is that the TSs are the same model and show up under udev and xinput under the same the same name minus the different hardware IDs whish is the only way that I can currently distiguish them.So far I've experimented with tweaking the udev rules for a particular TS with no luck (more than likely because I might be doing it wrong).I ned to be able to tell the two appart when I apply the configurations in xinput so I can write a script that will do this automatically for me.
View 1 Replies View RelatedMy os is fedora 11. The error message is :
Traceback (most recent call last):
File "/usr/share/PackageKit/helpers/yum/yumBackend.py", line 1830, in _runYumTransaction rpmDisplay=rpmDisplay)
File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 3813, in processTransaction
pkgs = self._downloadPackages(callback)
File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 3837, in _downloadPackages
probs = self.downloadPkgs(dlpkgs)
File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 1372, in downloadPkgs
self.plugins.run('predownload', pkglist=pkglist)
File "/usr/lib/python2.6/site-packages/yum/plugins.py", line 177, in run
func(conduitcls(self, self.base, conf, **kwargs))
File "/usr/lib/yum-plugins/presto.py", line 577, in predownload_hook
(problems, more) = downloadPkgs(conduit, pinfo, download_pkgs)
File "/usr/lib/yum-plugins/presto.py", line 419, in downloadPkgs
cb.start(text="<delta rebuild>", size=rebuild_size)
File "/usr/lib/python2.6/site-packages/urlgrabber/progress.py", line 129, in start self._do_start(now)
File "/usr/share/PackageKit/helpers/yum/yumBackend.py", line 2551, in _do_start
self.updateProgress(name, 0.0, "", "")
File "/usr/share/PackageKit/helpers/yum/yumBackend.py", line 2593, in updateProgress
pkg = self._getPackage(name)
File "/usr/share/PackageKit/helpers/yum/yumBackend.py", line 2534, in _getPackage
sections = name.rsplit('-', 2)
AttributeError: 'NoneType' object has no attribute 'rsplit'
I have LDAP authentication working via SSSD using authconfig-tui and a few minor modifications to sssd.conf (ie: max_id etc). The problem I am having is it would appear /etc/ldap.conf is being ignored and/or setups that work perfectly on RHEL5, F11 and F12 no longer work on F13. Specifically Im referring to "pam_check_host_attr" and "nss_map_attribute". It refuses to honor either of these options and I can only assume a number of the other options in our ldap.conf. For instance, "nss_map_attribute" is defaulting to the standard "homeDirectory" rather than "homeDirectoryLinux". This is related to a bunch of OSX clients we have and its not optional to use another setup. The host restriction is also a major issue.
Relevant sssd.conf:
[domain/default]
auth_provider = ldap
cache_credentials = True
i'm having an error when running a python script that uses the python-twisted-web components... i get the impression that this program was developed and tested in a debian environment. heres the readout:
Quote:
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/twisted/internet/base.py", line 1165, in run
self.mainLoop()
[code]......
I am trying to get Yumextender to work and I get a error window. The traceback is:
Code:
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/yumexbackend/yum_server.py", line 1314, in dispatcher
self.parse_command(args[0], args[1:])
File "/usr/lib/python2.7/site-packages/yumexbackend/yum_server.py", line 1242, in parse_command
self.get_packages(args[0], args[1]
File "/usr/lib/python2.7/site-packages/yumexbackend/yum_server.py", line 71, in newFunc
return func(*args, **kwargs) .....
File "/usr/lib/yum-plugins/auto-update-debuginfo.py", line 42, in enable_debuginfo_repos for opt, repoexp in opts.repos:
AttributeError: Values instance has no attribute 'repos'
I messed with some repos but with yum update it checks and says 0 Updates
I use fedora 8 & had previously tried to upgrade to 10, unsuccessfully. From then onwards, yum & rpm have refused to work. I tried deleting & rebuilding rpm database but it doesnt solve anything. Here is the error when I run yum
Code:
# yum update
Traceback (most recent call last):
File "/usr/bin/yum", line 29, in <module>
yummain.user_main(sys.argv[1:], exit_code=True)
[code]....
I tried to run preupgrade-cli and I get this error. This is on a fresh install of Fedora 11.
preupgrade-cli -y "Fedora 12 (Constantine)"
/usr/lib/python2.6/site-packages/yum/__init__.py:203: UserWarning: Use .preconf instead of passing args to _getConfig
warnings.warn('Use .preconf instead of passing args to _getConfig')
Loaded plugins: blacklist, whiteout
[code]....
I'm using Sun One LDAP server, (Soon to be moving to openldap). I have one Master server, no slaves, about 60 user accounts.
I'd like to add an attribute to each of the users DN's to restrict there ability to login to specific hostnames. I.e. I have hosts A, B and C. Dev staff can access A and B, but not C, and support staff need to access all of them.
I found a link at [url] which talked about using 'hostsallowedlogin' and 'hostsdeniedlogin' attributes but I'm presuming these are bespoke. If they are, how do you configure the ldap.conf to take note of these attributes when authorizing access?
I've a webpage that has some links to videos. When an user click on that link, I need the user to redirected to the login page which check credentials with ldap server and then grants access to the video. I've searched google for some code but all I found is some samples that authenticates the user. But when the user enters the login credentials how do I implement that code in the backend and redirect to the video if the user can authenticate himself?
View 3 Replies View RelatedI've several servers (windows+linux) that authenticate to an LDAP server. There is one machine that I would like to allow only certain groups from LDAP server to have access and I am not sure where to start.
If that cannot be done, is it possible to disable LDAP root user to access these machines?
I have searched all over. I cannot find any info on the description of the Fedora mirror release directory structure and the reason for having a "Fedora" and "Everything" directory? Yes I looked at [URL] I mostly work with the Red Hat 5.x. The Fedora release software is kept on a mirror and the DVD release as, (using i386 release):
[Code]....
In researching current ldap issue (not being able to do anything but log in) it seems that there are no concepts of privileges, roles, etc. that could be assigned to a user in LDAP.
I've only seen fields that deal with name, organization, etc., not with application-specific access control.
I have to assign certain access privileges to users authenticated via LDAP server based on the privilege level mentoned in the LDAP server. How to attain this.
Is it even possible to use LDAP on Ubuntu 11.04? After a full day of googling, every guide I can find is either for another version of Ubuntu or is horribly broken (including the official docs).
View 2 Replies View RelatedI have Fedora Directory Server with SSL running on my Linux Machine. I can see th output:
Code...
This shows that 636 port is open.But When I am attempting to this Linux Server from one of Windows Desktop it says "LDAP is Down".
I selected LDAPv3 and LDAPv3, hostname and SSL/TLS tried fetching base DN but it dint work.
I've been working though [URL] tutorial trying to get openldap working.
When I get to the point where i'm setting up the client. More specifically when I do ldapaddgroup testgroup I am sent this error
"You must have OpenLDAP client commands installed before running these scripts"
I have installed the ldapscripts package along with all the required ones. Has anyone been through this, I imagine it's some little nuance that I am missing.
I've currently got Ubuntu server configured so that clients can login using LDAP user accounts that I've created using ldapadduser (from the ldapscripts package).
I've also got NFS exports working so that /home can be exported to clients. Kerberos authentication is enabled for NFS and clients require a nfs/clienthostname.domain principal to be able to mount the NFS share.
However, I now realise that for LDAP users to be able to access the mount they need their own Kerberos principal. If I run kinit dan@DANBISHOP.ORG then I can access /home/dan as user dan otherwise I get permission denied.
My question then is how best to proceed... is there a way to configure the client/server so that once a client has mounted the nfs share using Kerberos, all users can access it without their own principal?
It seems more usual to create kerberos principles for all users, but then how does one manage users? Using ldapscripts is very easy, but if the admin then has to manually create kerberos principals everytime, it could become very tedious. Furthermore how do users change their password if kerberos is used for authentication?
I need to configure the DNS server and Ldap server in ubunru 10.10.
View 1 Replies View Related