search for: ldap_bind

Hi, I'm having a problem with one of the servers, an Sun E450 Solaris 2.6 box, that after some time it will no longer be able to send out LDAP requests to the LDAP server. The response to every ldap query is: ldap_bind: Can't contact LDAP server Checking the netstat output I see a lot (over 300) of TIME_WAIT state request to the ldap server: r0104su03.34321 mailhost.389 8760 0 8760 0 TIME_WAIT We have running Samba version 1.9.18p10 with LDAP support 'hacked-in', so t...

...rather that LDAP is accessed using SSL, but I cannot get Dovecot to connect. All that I did was change "uris" to "ldaps://localhost", and this appears in the maillog: Mar 18 12:53:00 server dovecot: Dovecot v1.0.rc15 starting up Mar 18 12:53:01 server dovecot: auth(default): ldap_bind((null)) failed: Can't contact LDAP server Is there additional configuration that is needed for SSL? Note that I altered the slapd.conf file from not requiring SSL to requiring SSL when I changed the "uris" parameter. And, of course, accessing the directory using ldapsearch works...

...ssh testuser at localhost testuser at localhost's password: Your password will expire in 31 minute(s). <== Last login: Wed Jun 8 12:22:08 2016 from localhost.localdomain ]$ ldapsearch -LLL -D uid=testuser,ou=People,dc=example,dc=com -w redhat "cn=testuser" -e ppolicy ldap_bind: Success (0) (Password expires in 1808 seconds) <== dn: uid=testuser,ou=People,dc=example,dc=com Does the same can be done for dovecot users authenticated by OpenLDAP in IMAP/POP? Thanks, -- Masaharu Kawada

...d plain LDAP to access the server, i.e. we did not use SSL/TLS. However it appears that the Samba-4 server is now insisting on using SSL/TLS regardless of the settings; if I attempt to perform an LDAP query without SSL/TLS I get:   ldapsearch -H 'ldap://172.16.6.2:389/' -D *** -w *** -b ** ldap_bind: Strong(er) authentication required (8)         additional info: BindSimple: Transport encryption required.   Note that this used to work prior to the upgrade.   Attempting to access via TLS:   ldapsearch -H 'ldap://172.16.6.2:389/' -D *** -w *** -b ** -Z ldap_bind: Strong(er) authentica...

Dear all, setting up a DMZ environment I was thinking to use an RODC there for user authentication. One of the application in the DMZ needs to access the directory via LDAP. When I tried to connect to the RODC using LDAP with simple bind, I always received the following error ldap_bind: Invalid credentials (49)         additional info: 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 6fa, v1db1 even though the credentials used are correct and do work with the "normal" DCs. I have already added the corresponding user to the group "Allow...

...9;m trying to head down that road for Dovecot authentication, but I'm getting stopped right away. For example, the following doesn't work: $ ldapsearch -xLLL -H ldap://localhost:389 \ -D "cn=Administrator,dc=HPRS,dc=local" -W -b "dc=HPRS,dc=local" Enter LDAP Password: ldap_bind: Invalid credentials (49) additional info: Simple Bind Failed: NT_STATUS_LOGON_FAILURE but ... $ ldbsearch -H ldap[s]://localhost -U Administrator returns 307 records of apparently everything. There was a related post back in April, 2011, but it trailed off. --Mark

Hi everyone, I am looking at a way to easily trace ldap queries to easily single out computers that have buggy software that download the whole AD (like a getent passwd with winbind enum users = yes for example). Increasing the debug level to 5 gives me the result I am looking for, however it is very very talkative and it fills up the log partition way too fast. I wanted to try to single out one

Am 27.02.20 um 11:32 schrieb L.P.H. van Belle via samba: > But your missing the important part. > > How ? > > Kerberos ? NTLM ? LDAP ? > > ;-) Ah ok Actually I want to use secure LDAP from a PHP docker container. So far no Kerberos involved as far as I see. (I have to dockerize a php app which is badly written ... and I want to clean up a bit, and let it bind

.... NOTE: the pass_attrs option # will (naturally) be ignored if you enable this auth_bind = yes Authenticated bind support is implemented asynchronously. This involves 2 asynchronous calls: the first being 'ldap_search' to find the dn to bind against and the second being the actual 'ldap_bind' call. I'd love to hear some feedback on this. Regards, Marc Maurer Better.be B.V. -------------- next part -------------- A non-text attachment was scrubbed... Name: dovecot_authbind_11252005.diff Type: text/x-patch Size: 7110 bytes Desc: not available URL: <http://dovecot.org/pi...

...t quite understand which LDAP credentials to use/how to create them for Samba 4 AD. Sample command against Samba 4 LDAP service: # ldapsearch -D "cn=Manager,dc=company,dc=lan" -w [password] -H ldap://10.100.0.4 -b "dc=ad-lan,dc=com" -s sub "(objectclass=*)" returns ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. I would appreciate a link to possible source of wisdom, or explanations in here. Note: I can do searches using Kerberos authentication on Samba 4 installation, like this: # kinit administrator...

...led: NT_STATUS_LOGON_FAILURE >> >> I don't know where to look?, this is Problem #1 >> >> The other: >> >> server:#ldapsearch -x -h servidor -s base -D >> CN=Administrator,CN=Users,CN=DOMINIO,DC=MTZ,DC=SLD,DC=CU -W >> Enter LDAP Password: >> ldap_bind: Strong(er) authentication required (8) >> additional info: BindSimple: Transport encryption required. >> >> >> I was looking around about the problem , I wish improve the security on my server, not >> lack it. >> >> Any suggestion are welcome. >&gt...

Hi, I'm trying to migrate samba 3 NT domain to samba 4 AD, we have migrated data and it seems correct, but now we need to connect with ldapsearch but always receive errors like ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. command used is /usr/bin/ldapsearch -H ldap://server -x -LLL -z 0 -D "uid=user,ou=Users,dc=domain,dc=com" -w "pwd" -b "ou=Users,dc=domain,dc=com" I have test...

..., written=7 0000: 15 03 01 00 02 02 30 ......0 TLS trace: SSL3 alert write:fatal:unknown CA TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS: can't connect. ldap_perror ldap_bind: Can't contact LDAP server (81) additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed As yo can see my ldap.conf contain both ssl start_tls and tls_cacertfile /usr/local/etc/openldap/server.pem. I created a CA certificate called server.pem...

...InProgress outstanding referrals 0, parent count 0 ** Response Queue: Empty ldap_chkResponseList for msgid=2, all=1 ldap_chkResponseList returns NULL ldap_int_select read1msg: msgid 2, all 1 ber_get_next tls_read: want=5, got=0 ldap_read: want=8 error=Success ber_get_next failed. ldap_perror ldap_bind: Can't contact LDAP server (81) Here's my slapd.conf include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/samba.schema...

...get the following error message (the password is definitely correct): # ldapsearch -LLL -H ldap://127.0.0.1 -b 'dc=bordengrammar,dc=kent,dc=sch,dc=uk' -D 'cn=ldapbindacc,cn=Users,dc=bordengrammar,dc=kent,dc=sch,dc=uk' -W '(sAMAccountName=Test.User)' Enter LDAP Password: ldap_bind: Invalid credentials (49) additional info: Simple Bind Failed: NT_STATUS_LOGON_FAILURE As I'm moving fro Samba 3 to 4, my AD knowledge is limited so I've been patching things together from various howto's. Has anyone succeeded in this who can give me some tips. Thanks, Julian...

...t to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE I don't know where to look?, this is Problem #1 The other: server:#ldapsearch -x -h servidor -s base -D CN=Administrator,CN=Users,CN=DOMINIO,DC=MTZ,DC=SLD,DC=CU -W Enter LDAP Password: ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. I was looking around about the problem , I wish improve the security on my server, not lack it. Any suggestion are welcome. T.I.A -- Jesús Reyes Piedra Admin Red Neurodearrollo,Cárdenas...

>OK, try running this on the Samba/ldap server: >ldapsearch -h 127.0.0.1 -D cn=admin,dc=drbhome,dc=ca -w -b "dc=drbhome,dc=ca" -s sub "(&(objectClass=sambaDomain)(sambaDomainName=DRBHOME))" sambaDomainName >Can you post the result. ldap_bind: Invalid credentials (49) Hm.

Hello All! I´m having a problem with an external application that need to authenticate at samba 4 database using ldap. We are experiencing many ldap_bind errors when bind at samba 4 ldap with php. Do you know if there is some kind of tunning that i can do at samba4 to work with many php ldap binds ? thanks!! -- ------------------------------------------- Edson Tadeu Almeida Silveira http://sites.google.com/site/edsontadeu/ -------------------...

...uestion is, can I just treat the Centos Directory Server as a generic OpenLDAP configuration on the client side? In more detail when I try to add account via ldapadd: -------------------------------- ldapadd -f sogo.ldif -x -W -D cn="Directory Manager",dc=XXX,dc=de Enter LDAP Password: ldap_bind: No such object (32) matched DN: dc=XXX,dc=de ------------------------------- It is my understanding that this means the "Directory Manager" user was not found. User authentication does not work from SOGo, at all. Any pointers? --------------------------------- Geoff Galitz...

I was tested try to conect users to "the openfire chat server", using ldap and recive the same error: ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. Its working fine on samba 4.2.3 running on opensuse13.2 x64. El 31/10/16 a las 10:39, Vinicius Bones Silva via samba escribió: > Hi, > > The ldapsearch message is because you can...