0
votes
0answers
27 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
-1
votes
1answer
158 views

Ubuntu 14.04, OpenLDAP TLS problems

So i have set up an openldap server using this guide here. It worked fine. But as i want to use sssd i also need TLS to be working for ldap. So i looked into and followed the TLS part of the guide. ...
0
votes
3answers
38 views

OpenLDAP ACLs are not working

First things first, I'm currently working with an OpenLDAP: slapd 2.4.36 on a Fedora release 19 (Schrödinger’s Cat). I've just install the openldap with yum and my configuration is the following one: ...
3
votes
1answer
335 views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
0
votes
1answer
47 views

What could make OpenLDAP ignore access restrictions?

I'm trying to configure a new installation of OpenLDAP (2.6.39) on Arch Linux. I've used the default core packages to install and configure it, however I cannot get it to obey any access control ...
0
votes
0answers
79 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
1answer
46 views

Sudo Command Alias option equivalent in OpenLDAP

I have an OpenLDAP installation that manages Sudo as well. Everytime I create a sudoers role, I have to list the commands that that sudoers role can run. This leads to a lot of repetition. Is there ...
0
votes
2answers
132 views

starting Standalone LDAP Daemon, slapd

I am following THIS guide to install an ldap server. At step 9 i use: /usr/local/libexec/slapd instead of: su root -c /usr/local/libexec/slapd since i dont have access to su I get this ...
0
votes
1answer
38 views

DNS Portability with regards to LDAP/Kerberos

How portable is a DNS server when it comes to LDAP, especially Kerberos which I am using for authentication? Meaning, how much do I have to change to use the same LDAP server with 2 different DNS ...
0
votes
0answers
82 views

OpenLdap- make test fails

I am trying to configure and install an ldap server following this guide. I am stuck on step 6, make test. it fails on the first test with the following message: cd tests; make test make[1]: Entering ...
1
vote
2answers
130 views

openldap cacerts directory symbolic link to /etc/pki/tls/certs - Yes/No? Why?

Every single article/how-to/blog on openldap talks about putting the ldap cert for ldaps in the /etc/openldap/cacerts directory. I am wondering why not just put the cert(s) in /etc/pki/tls/certs and ...
0
votes
1answer
142 views

Unknown LDAP cn=config admin password

when I installed openldap I was asked to create a password for an admin user but now i realize there's another admin user for cn=config whose password i don't know. Does anyone know how should i ...
1
vote
0answers
31 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
0
votes
1answer
480 views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
0
votes
1answer
762 views

How to use iRedMail's LDAP database for user authentication?

I have a few servers set up and I'd like to centralize access for users using LDAP. I have my primary server that is hosting email using iRedMail, and there already happens to be an LDAP database that ...
3
votes
1answer
145 views

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 ...
0
votes
0answers
23 views

self-service subversion account creation solution

I am managing a svn server. I need to create user account every time a new user request. Is there a solution front end that user can create the account in a self-service manner? I believe svn can ...
0
votes
0answers
23 views

openldap mods check attributetype undefined

We have a openldap 2 nodes running on mirrormode set up. We recently added a new attributetype, after that we are seeing this message on slave node. And i can see the Attributype from ApacheDirectory ...
0
votes
0answers
78 views

Can I configure samba file server for auth users with ldap server which has no samba scheme

I has a samba server(3.6.3-2ubuntu2.6). And uses libpam-smbpass package for authenticate users, which is connecting to smb server for file sharing from linux and mac os x hosts. But libpam-smbpass ...
6
votes
1answer
1k views

Why does this ldapadd command quit with an “Invalid syntax” error?

I'm very new to openldap but extremely well versed in the linux/unix environment. I'm trying to setup my very first test openldap environment using the guide here. I've also read most of the admin ...
0
votes
0answers
52 views

Bind Linux to Open Directory

So I am trying to bind a linux machine to Open Directory. It works fine if I don't automate it. [root@app-setup-testbox1 ~]# kadmin -p admin -w PASSWORD -q "addprinc -randkey host/$HOSTNAME" ...
0
votes
1answer
79 views

Finding out my current LDAP server type

How can i find out if my current LDAP sever type is Standalone, Master or Replica (slave)? I am using OpenLDAP on SLES 11.
3
votes
1answer
215 views

ldapquery an Active Directory server for users that belongs to a group named X

When I do this at the bash prompt on a CentOS 6.4 ldapsearch -LLL -H ldap://adserver.example.com -x -D someuser@example.com -w somepass -b 'OU=Users,DC=example,DC=com' ...
1
vote
1answer
58 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
0
votes
1answer
37 views

Using autobind without LDAPI

I am trying to automate the installation of my OpenLDAP servers. Currently packages get installed (openldap-clients, openldap-servers) and started with their default configurations. I have a LDIF ...
0
votes
1answer
60 views

Split authentication and NSS lookups for users and groups to different servers

I've asked this question previously: Multiple Bind and base DNs in ldap.conf Since that previous question was answered in the negative, I'm looking for other options such as splitting authentication ...
1
vote
0answers
78 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
2
votes
2answers
154 views

Is there way to detect and track the changes made to OpenLDAP

I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc. I'm wondering is there a way to track changes made to LDAP ...
1
vote
2answers
324 views

CentOS 5.8 - NSCD can't caching the password

I try to configure NSCD to connect ldap users to my PC. I like, that users could login offline in this PCs (online ldap users works fine). Actually, i can use the user, but when i try to introduce ...
1
vote
1answer
424 views

Bind DN entry missing in stash file - while initializing database for realm

I'm trying to run kerberos with ldap back-end on Centos 6.3 After creating Realm with: kdb5_ldap_util -D "cn=admin,dc=example,dc=com" create -sscope sub -sf ...
0
votes
1answer
381 views

Difference between openldap 2.3 and 2.4

There is a difference between openldap 2.3 and 2.4 - specifically with ldapmodify... If no "changetype:" line is present, the default is "add" if the -a flag is set (or if the program was invoked as ...
0
votes
1answer
186 views

Why all LDAP user passwords are incorrectly imported? And can't be modified?

First of all I am new to OpenLDAP setup. I have followed instructions coming from: HowToForge.com linux openldap setup #root dn: dc=localhost,dc=com dc: localhost objectClass: dcObject objectClass: ...
1
vote
1answer
2k views

Open LDAP and ActiveDirectory synchronization

I have been searching on google for a while to find out the best way to synchronize the user database between OpenLDAP and an ActiveDirectory, but with not a clear results ! What i want to achieve ...
0
votes
0answers
32 views

What does rc -2 mean in OpenLDAP syncrepl?

I am having an issue with syncRepl. I keep getting an rc -2 during syncrepl for replication. What does this mean?
0
votes
1answer
910 views

ubuntu 12.10 openldap issue Invalid DN syntax (34)"

I'm following: https://help.ubuntu.com/12.10/serverguide/openldap-server.html and when I get to the part that says ldapsearch -x -LLL -H ldap:/// -b dc=example,dc=com dn I get: Invalid DN ...
1
vote
1answer
935 views

ldap_bind: Invalid credentials (49) using openLDAP

I understand this error has been asked quite a few times on Server Fault and I have done some extensive googling, however, I can not, for the life of me, figure out exactly why I am unable to ...
0
votes
3answers
5k views

How to change expired LDAP user password under linux?

can somebody give an advice how to change the LDAP password already expired? I have an LDAP user and the password for this user is expired: # su user You are required to change your password ...
1
vote
0answers
318 views

How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package

I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package. I have used the following command to ...
1
vote
2answers
1k views

How to enable catch-all email in iRedMail Open Source edition?

How to create catch-all email alias for domain in iRedMail Open Source edition? I know that's possible via LDAP and found the following instructions: ...
0
votes
1answer
154 views

how do you set the admin password on openldap 2.4

I am getting started with openLdap 2.4 and am having a bit of trouble, all the examples I see seem to refer to previous versions which used the text config file slapd.conf but from what I see on ...
0
votes
0answers
157 views

su not giving proper message for restricted LDAP groups

I have configured PAM authentication on Linux box to restrict particular group only to login. I have enabled pam and ldap through authconfig and modified access.conf like below, [root@test root]# ...
0
votes
1answer
43 views

openLDAP TLS using only IP addresses

Basically the problem is this: I am setting up an openLDAP server on a CentOS 6.3 and an openLDAP client on Ubuntu 11.04. The problem is, I don't know how to set-up a nameservice for the openLDAP ...
0
votes
1answer
208 views

Configure host access rights in OpenLDAP

I've set up an OpenLDAP-Server to authenticate users to our Ubuntu-servers. The authentication works quite well but I'd like to restict the user's access to certain servers. I know this can be done ...
0
votes
1answer
590 views

what is the simple Command to check password expiry time of an openldap user account

I am running openldap 2.3.43.el5 on RHEL 5.3 I am trying to find a simple command that will tell you when the password for an ldap user will expire, any help would be greatly appreciated.This would ...
0
votes
1answer
583 views

One established server reports “Invalid SID” for a new Samba user

We have two linux samba servers authenticating against LDAP that have been working fine for some time. Recently I added a new user to LDAP. He can log in fine to one server, but the other reports an ...
1
vote
1answer
420 views

Can't configure PAM + LDAP on Debian Lenny - Getting error=49 on server logs

I've been migrating some servers and desktops using Ubuntu 10.04 from getting the users from an old OpenLDAP implementation to a newer Centos Active Directory. I haven't had any problems so far, until ...
1
vote
2answers
138 views

Error getting PAM / Linux integrated with Active Directory

I'm trying to add a Linux server to a network which is controlled by AD. The aim is that users of the server will be able to authenticate against the AD domain. I have Kerberos working, but NSS / ...
0
votes
1answer
763 views

OpenLDAP fails to stop ,but starts Ok but then status shows as slapd stopped

We are running openldap 2.3.43 on RHel 5.3.,Our LDAP server has been behaving erratically lately 1.It fails to stop when you issue command service ldap restart but it "seems" to starts OK ...
1
vote
0answers
304 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
0
votes
1answer
232 views

Authenticate Teamcity against LDAP using StartTLS

I am running a 6.5 version of Teamcity on a Debian Squeeze server and I use OpenLDAP to authenticate users. I know I can use LDAPS to be able to use encrypted password authentication, however this ...