Server :: Setting Single Sign On Using OpenLDAP
Jan 24, 2011Setting up a single signon using ldap server ?
View 1 RepliesSetting up a single signon using ldap server ?
View 1 Repliesconfiguring single signon using ldap
View 1 Replies View RelatedDoes anyone know of a good tutorial for setting up single sign-on/login sync over a pure Linux network without any AD boxes in it? I have read this can be achieved through LDAP+Kerberos+PAM...I have these installed on a server...the users and groups on the server is configured to use them and a client has been pointed toward the LDAP server and has Kerberos enabled and users and Groups set to use the LDAP server as a backend.
I expected to see the users and groups list from the server show up on my client, or at least be able to login on the client as one such user. Am I misunderstanding what I read or am I just probably misconfiguring everything? My ultimate goal is for my clients to authenticate against my server and not have to sign in again when using server resources (Samba shares etc.).
I have read that NFS and NIS are old technologies that are going by the wayside and that Samba, LDAP authentication and such are overall better and more secure...What are everyone's thoughts on this? My network is just a home network so security isnt really a big problem...im just trying to set it up like a corporation with my limited resources would for the practice and education of doing it.
Does anybody have any documentation or can assist with any sort of steps on how to install a SSO server on Centos 5.4.We have just over 150 Centos servers country wide and we would like to implement an SSO server to manage the users and their login credentials locally and centrally.
View 1 Replies View RelatedI've been surfing and googling for a while trying to figure out how to set up my PC running Fedora 13 to connect to Windows AD using Single Sign On services. I couldn't find any guide or tutorial or anything. I believe I'm not the only case when the company is running Windows AD for authentication.
View 2 Replies View RelatedI have just installed openldap on my Red Hat server and it is running:
[code]...
However when I try to add my first ldif file base.ldif, no matter how many time I enter in the correct password I get invalid credentials [root@server init.d]# ldapadd -D "cn=Manager,dc=mathcs.duq,dc=edu" -W -f /home/oberlanderm/base.ldif Enter LDAP Password: ldap_bind: Invalid credentials (49) I have to be forgetting someting simple,
[code]....
I'm trying to set up an OpenLDAP server on a clean install of 10.04 server (AMD64). Following the server guide [URL] I get down to the "Setting up ACL" step:
$ ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W oldDatabase=hdb oldAccess
This command fails with "ldap_bind: Invalid credentials (49)"
When I replace the dn with what it seems like it should be:
$ ldapsearch -xLLL -b cn=config -D cn=admin,dc=example,dc=com -W oldDatabase=hdb oldAccess
I get "No such object (32)"
I have a feeling this is because 10.04 no longer asks you for the admin username and password during the initial debconf (nor does dpkg-reconfigure).
I can continue through the guide using this form of the commands (which were used earlier in the Guide):
$ sudo ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config olcDatabase=hdb olcAccess
But I'm a little concerned that I'm not able to properly use the admin user to make LDAP changes to the configuration. It also seems like the Server Guide ought to use the 'sudo ... -Y EXTERNAL' form of the commands throughout if cn=admin,cn=config isn't going to work.
I'm following the tutorial at [URL] to set up openldap on maverick. However, when I try to do
[Code]....
I have a problem my ubuntu is the latest distro but the shiftkeys are not working like when i whant an @ sign i cant make that sign the keybaord layout has been changed i even have done most of the solutions found on the site and no use.
View 1 Replies View Relatedwhen ever i try to sign in to my messaging system it gives me this message and wont let me sign in,< Received unexpected response from [URL] useTLS=1 is not allowed for non secure requests.>
View 3 Replies View RelatedI have question about the UNIX sockets. my goal is to connect multiple sockets from a single client to a single server and keep them open...I'm not sure if that is possible to create or not. Do you have any suggestion or an example of code?
View 1 Replies View RelatedI configured my openldap but now I want to implement SSL-TLS
This is my basic slapd.conf configuration
Code:
And I created this script (simple I know) to create this TLS/SSL Config but it won't work users cannot login
path when I am moving certs /etc/openldap/cacerts
Code:
As you see I create the key and certificate, assign permissions, add stuff to slapd.conf and finally copy thecer to a client PC
On client side I use authconfig-tui
My enviroment is Centos 5.5
what is wrong on my config?
Code:
$ su -c 'yum install wine'
this forum won't let me put all the text in Transaction Check Error: package openldap-2.4.21-6.fc13.x86_64 (which is newer than openldap-2.4.21-4.fc13.i686) is already installed package nss-softokn-freebl-3.12.4-19.fc13.x86_64 (which is newer than nss-softokn-freebl-3.12.4-17.fc13.i686) is already installed
Openldap 2.4.11 uses cn=config as the main configuration instead of slapd.conf .
How to add a new schema to openldap 2.4.11 that uses cn=config.
I was thinking of merging my openldap and samba bdc servers. Is it ok for a server to authenticate against itself? (ie ldap.conf points to localhost)
View 1 Replies View RelatedI have a RHEL 5.4 server installed in a server farm. The server is administered under a central AD, which means that administrators are registered in the AD.
However, I have to deploy an application on the linux server, that will use it's own OpenLDAP server. This means that this application will be the client to the LDAP server installed on the same RHEL server.
I tried installing OpenLDAP using yum and it resulted in a very fatal issue. Somehow the configuration files used for finding the Linux server from the AD was overwritten and the Linux server was not reachable anymore.
After some investigations, and possibly, rebuild, the server has been handed over to me.
The problem is how should I install OpenLDAP so that the existing connection to AD is not lost.
On the Linux server I see a /etc/openldap directory but only contains ldap.conf and cacerts directory.
I am having some trouble with Cyrus SASL and OpenLDAP. I tried to configure OpenLDAP using SASL for all conection but I cannot map the SASL-DN to OpenLDAP's DN. Below is my configuration file, slapd.conf
[code]...
After I finished the configuration, I try to use ldapsearch tool to verify, but I cannot:
[code]...
I work for a university institute and administrate its servers "incidently". Currently I am putting some work into our mail server configuration (sendmail 8.13.1 with amavisd-new-2.6.4). Recently I got amavis to verify DKIM signed mails. Now my plan was to sign outgoing Emails ourselves. This is what I have done (I replaced some names for privacy reasons):
I created a private key:
Code:
/usr/local/amavisd/amavisd genrsa /var/dkim/SEL1_DKIMkey.pem
Changed permissions for the user running amavis:
Code:
chown -R vscan.vscan /var/dkim/ && chmod -R 700 /var/dkim
Editet my /etc/amavisd.conf:
[Code]....
Send Testmails to sa-test@sendmail.net and check-auth@verifier.port25.com . They automatically create answer mails considering signature information.
Send emails to my external account at some other provider.
The problem is that amavis is not signing the mails. Both automatic test emails reported, that the mail had not been signed. The mail to my external account also did not contain any DKIM information.
"My" system:
Code:
# uname -r & cat /etc/issue
2.6.9-89.0.11.ELsmp
Red Hat Enterprise Linux AS release 4 (Nahant Update 8)
I configured dk-milter on a server and created dns records for that, But I'm not getting sendmail to sign emails. dk-milter configuration is correct but the problem with sendmail.
[Code]...
Just installed openldap server on a VM CentOS called 'ldapsrv', it works fine, ldapsearch returns all ldap information.
Installed openldap client on another VM CentOS called 'ldapclient1', configured it with most basic configuration, no ssl/tls etc. but ldapsearch returns error:
ldapsrv is pingable:
Some outputs:
PHP Code:
PHP Code:
I've configured OPENLDAP server on the CentOs 5.3. Well everything is working fine .All the uses have been added to the database.database is bdb in ldap configuration.Now client machine is on windows xp. how to integrate Windows Xp with the LDAP server for authentication.
View 5 Replies View RelatedI want to configure Netgroup in openldap. I am using Redhat Linux 5.5.
View 1 Replies View RelatedI currently have an OpenLDAP server where everytime I add a new user their DN looks like this:
DN: cn=username,ou=people,dc=domainname,dc=com
Is their anyway I can change there dn to be in the following format?
username@domainname.com
I'm having much problems trying to configure openldap on Ubuntu 10.0.4 LTS
I have tried many tutorials, many configuration but still without results, I made the following script (for not repeating the same work, again & again)
Code:
#!/bin/sh
passwd=xxxxxx
dc1=host
dc2=com
[Code]....
I want to build a domain like abc.com in my LAN environment. Kindly tell me step by step procedure of installing OpenLDAP on CentOS 5.3.
View 2 Replies View RelatedI configured OpenLdap and now I want to configure it using TLS-SSL
But I cannot get it working with the Linux clients. Environment: Centos 5.5
Openldap Server configuration:
have xml files which has a lot of lines which contains ' which should be thesign.Should I use the sed command to change this in a complete file or grep
View 5 Replies View RelatedI am planning to deploy an OpenLDAP server in my LAN for basic authentication, but I have no idea how to do it. I would like to know how to configure an OpenLDAP Server, and I would also like to know about knowledge resources, if any.
View 3 Replies View RelatedI am systems administator of the university CS lab. I have a Mac here and I'm trying to extend the directory to our OpenLDAP server. We use NFS as well. I know nothing of Macs in this respect except for the fact that they already have LDAP on them, which seems to be convenient.
View 3 Replies View RelatedI have no ACLs in place yet but want to use a user called ldap-auth-user to bind to the ldap servers directory from the client servers. However I keep on getting ldap_bind: Invalid credentials (49). Error. I know the UserPassword is correct because I can log into a server using that id and password through the LDAP directory. I am guessing it has something to do with the way I created the account.
This Works:
ldapsearch -D 'cn=Manager,dc=test,dc=com' -x 'uid=testuser' -W
This Doesn't:
ldapsearch -D 'cn=ldap-auth-user,dc=test,dc=com' -x 'uid=testuser' -W
Here is the ldap-auth-users entry in the directory
[root@ldap-build-01 ~]# ldapsearch -D 'cn=Manager,dc=test,dc=com' -x 'uid=ldap-auth-user' -W
Enter LDAP Password:
# extended LDIF
[code]....