Ldap – cannot do an ldapdelete: Strong(er) authentication required (8)

authenticationldapopenldapUtilities

I'm fairly new to ldap and i'm trying to delete a ldap object. (i haven't set up SSL yet.) i use the command

ldapdelete -x 'dc=example,dc=com' 'cn=AnUser'

it gives me the error

ldap_delete: Strong(er) authentication required (8)
additional info: modifications require authentication

Does this mean i can't delete using simple authentication? (I can delete using ldapscripts but i really want to use only the ldap-utils)

EDIT:

I tried doing and ldapdelete -x -W 'dc=example,dc=com' 'cn=AnUser'

but it gives me a ldap_bind: Invalid credentials (49) error, but i'm sure the password is correct.

Best Answer

I think the syntax you want is:

ldapdelete -xW -D 'your account dn' 'object to delete'

Related Solutions

Ubuntu – getting a Ldap_bind: Invalid credentials (49) when adding a schema to ldap

LDAP 49 is basically failed to connect for credential reasons. Could be a bad DN. Could be a bad password. Could be a locked account, and so on.

GitLab & OpenLDAP: Invalid credentials

First of all, you shall probably change the configuration for allow_username_or_email_login to true.

Then you probably want to create a group gitlabusers holding the users you wish to grant access to the server and modify the user_filter to '(memberOf=cn=gitlabusers,ou=groups,dc=courseproject,dc=org)'

Then apply the changes using gitlab-ctl reconfigure and check the LDAP configuration using

   gitlab-rake gitlab:ldap:check RAILS_ENV=production

Unless this command succeed to give you the list of users you expect, you have a mistake in your configuration...

For info, my below configuration (against a FreeIPA server) works:

 gitlab_rails['ldap_enabled'] = true 
 gitlab_rails['ldap_servers'] = YAML.load <<-'EOS' # remember to close this block with 'EOS' below
   main: # 'main' is the GitLab 'provider ID' of this LDAP server
     label: 'IPA'
     host: 'ipa.mydomain.com'
     port: 389
     uid: 'uid'
     method: 'tls' # "tls" or "ssl" or "plain"
     bind_dn: 'uid=gitlab,cn=sysaccounts,cn=etc,dc=mydomain,dc=com'
     password: '<password>'
     active_directory: false
     allow_username_or_email_login: true
     #block_auto_created_users: false
     base: 'cn=users,cn=accounts,dc=mydomain,dc=com'
     user_filter: '(memberOf=cn=gitlabusers,cn=groups,cn=accounts,dc=mydomain,dc=com)'
     ## EE only
     group_base: 'cn=groups,cn=accounts,dc=mydomain,dc=com'
     #admin_group: ''
     #sync_ssh_keys: true
 EOS

Best Answer

Related Solutions

Ubuntu – getting a Ldap_bind: Invalid credentials (49) when adding a schema to ldap

GitLab & OpenLDAP: Invalid credentials

Related Topic