3
votes
1answer
115 views

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 ...
0
votes
1answer
347 views

How can I rename a shortname in OpenLDAP on OS X Server 10.6 (Invalid DN syntax (34))

The company I work for is running OS X Server 10.6. All of the users were created with a first.last username syntax. This is causing problems and so we are trying to change the usernames to ...
1
vote
3answers
508 views

Adding/modifying users to OPENLDAP?

Is it recommended to add users/modify properties of users to OpenLDAP after stopping the service ? I have been facing issues on adding users when the OpenLDAP server is running. I am using scripts ...
1
vote
1answer
3k views

Adding inetOrgPerson to account/posixAccount LDAP entries

I have a LDAP database we have been using for managing user accounts on our hosts, these entries have account and posixAccount as objectClass. Now we'd like to extend this to also use it as an adress ...
3
votes
3answers
795 views

How to allow a group to change user passwords?

I have the following openldap server configuration: access to attrs=userPassword by self write by anonymous auth by set="[cn=users,ou=Group,dc=my-company,dc=de]/memberUid & user/uid" ...
3
votes
2answers
6k views

How do I migrate user-accounts from OpenLDAP to Active-Directory?

We want to migrate our user-accounts from OpenLDAP to Active-Directory without changing the passwords and such. The users shouldn't notice the difference against which server they're authenticating ...