ldap

openldap and root password

I recently changed my root password, but when I restart Ldap (openldap-2.2.13) I couldn't log in with Ldap users to any application that is on this server. in /var/log/httpd/ssl_error_log I can find a lot of error like: [Tue Jun 01 02:27:24 2010] [warn] [client 89.138.98.214] [26762] auth_ldap authenticate: user foo authentication fail...

Connecting to Active Directory From Net::LDAP Perl

How to connect to Active Directory from Perl? I am using the Net::LDAP Module. Could you please give me some examples, that can help me get started. ...

Program occasionally stuck when writing to ldap

hey guys, I have 2 databases for my program : mysql and ldap. All transactions happen to mysql, but i need ldap to connect to ip-phones. There's an option to synchronise the ldap database. So when the ldap is brand new, and mysql contains like 200+ records, it may want to update. But when inserting all those entries, it "freezes". It ne...

What is equivalent LDAP attributes for Active Directory

What is equivalent LDAP attributes for Active Directory I am looking for password using Net::LDAP. I dont know to how to set the user password using Net::LDAP ...

Active Directory - Query Group for all machines

Hi, I'm trying to obtain a list of all Machines that are members of a known group. I have the group GUID and am constructing a query using the "memberof=" format and filtering by ObjectClass. This works fine but doesn't return machines if the PrimaryGroup attribute of a machine is set to be the known group. In this case, that machine...

Binary search of unaccesible data field in ldap from python

I'm interested in reproducing a particular python script. I have a friend who was accessing an ldap database, without authentication. There was a particular field of interest, we'll call it nin (an integer) for reference, and this field wasn't accessible without proper authentication. However, my friend managed to access this field thro...

Need help to config LDAP in OC4J server 10g

Hi, I need help for LDAP configuraiton in OC4J 10.1 server. I configured my LDAP setting into jazn.xml as .com:389/cn=XXX,dc=XXXX,dc=XXX"> .com:389/cn=XXX,dc=XXXX,dc=XXX" /> .com:/oiddas/ui/XXX/ldap/das/XX/XXX" /> .com:389" /> i restarted OC4J server. I am not able to understand how to see ...

read LDAP with Java

I need an efficient way to read all users from LDAP. I have a super/root password in Java All I need is just to list the names. All ideas are appreciated. ...

SearchResult in Java

I list users from LDAP with the following code: Hashtable<String, String> env = new Hashtable<String, String>(); env.put(Context.INITIAL_CONTEXT_FACTORY, CONTEXT); env.put(Context.PROVIDER_URL, HOST); env.put(Context.SECURITY_PRINCIPAL,USER); env.put(Context.SECURITY_CREDENTIALS,PASSWORD); DirContext ctx = ne...

Using LDAP functions to get Active Directory tokenGroups attribute in PHP

Greetings, I already have a working connection to the AD and can search and retrieve information from it. I've even developed a recursive method by which one can retrieve all groups for a given user. However, I'd like to avoid the recursion if possible. One way to do this is to get the tokenGroups attribute from the AD for the user, ...

How to improve my LDAP schema?

Hello, I have a OpenLDAP Database and it holds some project objects that look like dn: cn=Proj1,ou=Project,ou=ua,dc=org cn: Proj1 objectClass: top objectClass: posixGroup member: 001ag member: 002ag System: ABEL System: PCx Budget: ABEL:1000000:0.3 Budget: PCx:300000:0.3 One can see that the Budget attribute is a ":"-separated string...

ldapsearch and vcard creation

I'm using openldap on Mac OS X Server 10.6 and need to generate a vcard for all the users in a given group. By using the ldapsearch I can list all the memberUid's for all users in that group. I found a perl script (Advanced LDAP Search or ALS) that was written by someone that will generate the vcard easily. ALS can be found here http://w...

Remove or change an attribute syntax in AD LDS?

I've searched the net and I cant find any information about how to change an attribute syntax or remove an attribute from the schema in AD LDS, former ADAM. From some documents i´ve read they claim it is not possible. However I find that hard to believe. Is there no room for making an error? Regards ...

LDAP user data caching on local database

I am integrating LDAP authentication in my web enterprise application. I would like to show listing of people name and email. Instead of querying the LDAP server for the name and email each time a listing containing several users I thought about caching the data locally in the database. Do you guys know about caching LDAP data best prac...

NullPointerException while raise an embedded ldap server using spring

Hello, I'm trying to raise the Spring Embedded Ldap Server using: But I'm keep on getting this exception: 2010-06-10 14:33:35,559 ERROR main ApacheDSContainer start - Server startup failed java.lang.NullPointerException at org.apache.directory.server.core.schema.DefaultSchemaService.initialize(DefaultSchemaService.java:382) ...

How to use LDAP for authentication in Tomcat with Custom Authorization

Hello, I'm using JNDIRealm with Tomcat for authentication, which at the moment works fine. However, we do not store any roles in the LDAP, so all authenticated users are not returning any roles. This sends user's to an HTTP 401 failed authorization page. I'd like to assign an "Admin" role to any and all user's who authenticate succes...

Spring Embedded Server

Hey, I'm using spring 3.0.2 and ApacheDS 1.5.5 and I'm trying to run the embedded server using: The content of the user.s.ldif file is : dn: cn=The Postmaster,dc=example,dc=com objectClass: organizationalRole cn: The Postmaster But I always get this error: 16566 [main] INFO org.apache.directory.server.protocol.shared.store. LdifFil...

Practices for Group Management - in Application or Directory Service

Hi: I am trying to grapple with group management policies in a number of application and directory services (both AD and LDAP). Can anyone refer me to online or book resource that has examples or best practices for group management? Thanks. ...

Preventing LDAP injection

I am working on my first desktop app that queries LDAP. I'm working in C under unix and using opends, and I'm new to LDAP. After woking a while on that I noticed that the user could be able to alter the LDAP query by injecting malicious code. I'd like to know which sanitizing techniques are known, not only for C/unix development but in m...

Spring Security LDAP user data caching on local database

After asking: http://stackoverflow.com/questions/3009740/ldap-user-data-caching-on-local-database I want to cache LDAP user data in the application local database to allow fast queries. How may I cache LDAP user data in the local database using Spring Security. ...