The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
28 views

How to find out the list of users and their details on active directory?

I would like to know if there is a single line command in dsquery or LDIFDE or any other command to fetch the details of all the users in all the domains in my Active directory.
0
votes
1answer
14 views

what does the ldapadd error: "additional info: objectClass: value #3 invalid per syntax mean?

I have the ldif dn: olcOverlay=ppolicy,olcDatabase={1}hdb,cn=config objectClass: top objectClass: olcConfig objectClass: olcOverlayConfig objectClass: olcPPolicyConfig olcOverlay: ppolicy ...
2
votes
1answer
37 views

LDAP authentication - avoid duplicate uidNumber

I have just successfully configured OpenLDAP Users authentication in a single CentOS6 box, based on SSSD. Took some time and many trials, but it's working. Now, I want to start adding users. I'm ...
3
votes
1answer
54 views

OpenLDAP advanced ACL configuration

I have a multiple DITs in my OpenLDAP server. I made user cn=config the root so that cn=config has root access to all DITs (each DIT). In addition, there is a per-DIT administrator IDed as ...
1
vote
1answer
80 views

OpenLDAP & Asterisk - no global superior knowledge

I'm struggling to setup OpenLDAP to allow Asterisk to store information about users. I've tried to follow several howto's, but unfortunately I'm not able to set it up correctly. It seems like most ...
0
votes
0answers
28 views

LDAP ACLs with filters

I am trying to write LDAP ACL filters that would suspend authentication for domains that have a custom attribute set to some value. I created a custom object with an extra NAME attribute domainStatus ...
0
votes
0answers
35 views

Custom schema for OpenLDAP 2.4

I am new to OpenLDAP administration. My aim is to learn how to create custom schemas, and customize "my" directory server this way. I tried to add one optional attribute - ipPhone. Made a schema ...
1
vote
1answer
1k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
0
votes
0answers
210 views

Unable to use custom attribute in Apache DS LDAP

I am new to LDAP and stuff, and I am struggling with adding new attributes to the schema. I created a new objectclass with some custom attributes as done here. Exported it to an LDIF file, and ...
2
votes
0answers
371 views

SecErr: DSID-031A1190, 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to change the password of the currently logged in user via ldifde using this command: ldifde -i -f pwd.ldif -t 636 My AD server is running in SSL mode with a self signed certificate. The ...
2
votes
1answer
318 views

wrong attributeType while updating sambaPwdLastSet

I'm trying to reset the password expiry for a user (really set up a semi-automatic process for doing so) and it's making me cry: server is openldap slapd: 2.4.28-1.1ubuntu4.2 $ ldapsearch -x -b ...
1
vote
1answer
444 views

LDAP export attributes based on a different schema or import only valid attributes

I'm trying to export LDAP data from a Zimbra schema into a basic OpenLDAP schema. Obviously the Zimbra schema has much more attributes than the basic OpenLDAP. My question is if there is a way of: ...
1
vote
2answers
571 views

LDIF: Modify attr if exists; Add if not exists

Is there a way to do one of the following in an LDIF file? Ignore error (attr not found) when trying to delete an attribute Or: If attribute exists, modify it If it doesn't exist, add it
2
votes
1answer
5k views

How do I solve LDIFDE errors on “last token starts with 'C'” and “change-modify entry is missing the terminator '-'” when..?

How do I solve LDIFDE errors on "last token starts with 'C'" and "change-modify entry is missing the terminator '-'" when trying to pair existing users to exiting security groups (domain migration)? ...
3
votes
1answer
2k views

How to add admin users in 389 LDAP, fedora directory server

I want to create couple of Admin users who have access to create/delete users on a particular group/Organization Unit. For example, User: uid=testadmin, ou=people, dc=my,dc=net Should have access ...
1
vote
1answer
124 views

Multimaster LDAP replication on Ubuntu 11.04

I'm attempting to setup a multimaster pair on Ubuntu 11.04. I currently have a working single server which I've cloned to a 2nd server. The installed version of OpenLDAP is the default from the Ubuntu ...
0
votes
1answer
317 views

Sanitizing dates using sed or awk on an ldapsearch query

I'd like to pipe the output of an ldapsearch to sanitize the dates returned - I presume sed and/or awk can help with this but would appreciate a bit of help. The fixed length date format in the LDIF ...
2
votes
1answer
630 views

Error importing sudoers ldif schema to Active Directory

As per this question, we are on the process of migrating our sudoers file to Active Directory. As per the documentation, this requires importing the schema.ActiveDirectory LDIF which comes with the ...
3
votes
2answers
2k views

Restoring openldap configuration from ldif file?

I am trying to restore my OpenLDAP server from an ldif file I made before it went horribly wrong. All of the websites I found talk about using slapadd but when I run slapadd -v -l ...
1
vote
2answers
501 views

Change passwordPolicy objectClass in LDAP

I have the ff LDIF file for adding an attributeType passwordNonRootMayResetUserpwd. The attributeType is already existing. dn: cn=schema changetype: modify delete: objectClasses objectClasses: ( ...
2
votes
2answers
9k views

ldapadd/ldapmodify: clarifications needed about these comamnds

The ldapmodify man page states that: The default for ldapmodify is to modify existing entries Yet when I try to import an LDIF file with ldapmodify I get the below error: ldapmodify: modify ...
1
vote
2answers
8k views

ldap_add: Constraint violation (19)

I'm having issues importing users with ldapadd and ldif files. The error I'm getting is: ldap_add: Constraint violation (19) additional info: structuralObjectClass: no user modification allowed The ...
0
votes
1answer
9k views

LDAP: How to add a person to an existing group?

Using command-line (Linux) or LDIF, I could find many examples of creating a new group and defining its members, but no examples of this: How to add a user to an existing group? Let's say the person ...
0
votes
1answer
207 views

LDAP layout question

I am very new to LDAP & just trying to learn. I am using openldap on debian. Can someone clarify this - or alternately point me to some link which will clarify these basic concepts? Let's say I ...
0
votes
1answer
148 views

referral object in openldap that points to a DN containing spaces

I am trying to add a referral object in openldap that points to a DN in the remote server that has a space in one of the container names, something like this ref: ldap://ldap3.example.com/ou=test ...
1
vote
2answers
307 views

How to update ldap with ldif backups?

I have an openldap ldif backup file daily that I want to replicate in other server. I add the data with slapadd -v -l file.ldif but can I update the changes that have occurred in my other ldap ...
0
votes
1answer
967 views

Record must end with an empty line - missing changetype (LDIF)

I tried putting the following LDIF file in Apache Directory Studio, but it complained that the record must end with an empty line. Do you know why? dn: ...
0
votes
2answers
315 views

ldap ldif how to add

Having this initialization ldif dn: dc=localhost,dc=localdomain changetype: add objectclass: dcObject objectclass: organization o: My Example dc: localhost dn: cn=Manager,dc=localhost,dc=localdomain ...
0
votes
2answers
176 views

Modify AD Attribue for a specified list of users

How would you modify a set of AD attributes for a specified list of users? In particular, I would like to set the following for individual users since the exchange general tab under user properties ...