OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
0answers
4 views

Open Directory Password Change Issues on OS X Server 10.10

I'm having a problem with 50+ workstations (10.9 and 10.10) when a user changes their OD password (either at the OS X login screen or the System Preferences). The password change updates on the ...
0
votes
1answer
124 views

Getting error when integrating cloudera hue with ldap server?

I have configured ldap server on centos machine.I am able to execute ldapadd and ldapsearch sucessfully. But while integrating ldap with cloudera hue getting following error RuntimeError: Failed ...
-2
votes
1answer
5k views

How to install LDAP server and add a user?

I need to test that our application can connect to more than one LDAP servers. We have one working one (running on OSX server). I need to setup another one. We tried to set LDAP server on SuSE using ...
0
votes
0answers
8 views

OpenLDAP & Posix Groups/Account configuration

with following configuration I am not able to add POSIX users/groups to the LDAP server. If some can educate me about significance of dc in this case, is it FQDN that I mentioned when I created ...
0
votes
2answers
2k views

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is ...
3
votes
2answers
4k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
3
votes
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
0
votes
0answers
7 views

disable simple paged results control support

Trying to make my client, originally developed for OpenLDAP, also compatible with Oracle DSEE. Oracle DSEE is missing support for simple paged results, which the client code uses. Yet, ODSEE supports ...
0
votes
0answers
127 views

(Zimbra)OpenLDAP SSHA512

So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology. So my boss wanted me to create an OpenLDAP Database, and ...
0
votes
1answer
13 views

Audit logging for OpenLDAP changes

How can I produce and examine an audit trail of changes made to an OpenLDAP database, such as which user was created when, by whom, when was it edited, what was edited etc?
0
votes
1answer
2k views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
0
votes
0answers
20 views

Central windows login and access management windows 7 home network [closed]

I want to configure my home network computers(7) with following One computer which can act as server for all authentication and access management. I know it can be done with Active directory and ...
2
votes
1answer
18 views

OpenLDAP - Make required attribute of superclass optional in objectclass

My OpenLDAP schema defines an objectclass which is a subclass of person. Let's call it myPerson for the sake of simplicity. Since person must have a cn, myPerson should also have one. I would like to ...
0
votes
1answer
21 views

Setup a openldap proxy to another LDAP server on centos 6

I'm trying to get a local server to authenticate to its own openldap-server and then proxy to corporate LDAP if user is not found locally. Local users work Auth to local LDAP server works Auth to ...
0
votes
0answers
27 views

SASL Auth against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
1
vote
1answer
32 views

Can connect to my OpenLDAP server locally but not externally

I have a problem with my OpenLDAP server. I can't connect to it externally from client, it only works locally. My OpenLDAP server is running on a Raspberry Pi with Rasbian as the OS. When I run this ...
2
votes
1answer
961 views

Bind DN entry missing in stash file - while initializing database for realm

I'm trying to run kerberos with ldap back-end on Centos 6.3 After creating Realm with: kdb5_ldap_util -D "cn=admin,dc=example,dc=com" create -sscope sub -sf ...
0
votes
1answer
16 views

Discrepancy in exporting LDIF OpenLDAP vs Apache Directory Studio

very new to the world of LDAP. I find that when I export an LDIF file in my OpenLDAP instance on Linux, running the slapcat command as such: ./slapcat -f /somewhere/slapd.conf -l backup.ldif it ...
0
votes
5answers
15k views

Kerberos Login Failed: Cannot resolve network address for KDC in requested realm - Kerio and Open Directory

I'm attempting to connect Kerio to an Open Directory instance. I'm using kinit to test the setup, and I get the following: $ kinit -V -S host/server.domain.co.uk@server.domain.co.uk ...
2
votes
1answer
31 views

Integrating postfix with LDAP to eMail Users with Access to A Specific Host

I have a working openLDAP v3 installation under Ubuntu 14.04 (slapd 2.4.31-1) with phpldapadmin, sudo-ldap and other packages installed. I'm trying to integrate postfix with LDAP so I can send emails ...
1
vote
1answer
1k views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
0
votes
1answer
1k views

ldap change schema and config password

I installed openldap server to fedora 20, and try use it for manage bugzilla accounts. So I first configure it for my domain, plus set password: dn: olcDatabase={0}config,cn=config changetype: modify ...
2
votes
1answer
51 views

different ldapsearches , no output [closed]

when I use ldapsearch -LLLZZ -H ldap://centos7s.domen.lan -x I get everything out: dn: dc=domen,dc=lan objectClass: domain dc: domen o: domen.lan organization description: The Domen Company dn: ...
2
votes
2answers
2k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
1
vote
1answer
2k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
2
votes
3answers
2k views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
0
votes
1answer
333 views

GitLab & OpenLDAP: Invalid credentials

I have two machines with CentOS 7.0 on each one. The first one is domain controller with OpenLDAP only. I configured OpenLDAP according this tutorial: ...
0
votes
1answer
1k views

ldapsearch returns result, but getent does not

I am setting up a fresh CentOS 7 server to and need to setup LDAP authentication i.e. there already exists a server that authenticates users, which we use for other GNU/Linux servers. For instance, ...
4
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
1
vote
1answer
195 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
1
vote
0answers
15 views

Configuring HP iLO for OpenLDAP

I have been working with some new HP DL360 Gen9 server. I'm attempting to configure these for LDAP authentication against our OpenLDAP directory and not having much luck. First, all of our ...
0
votes
0answers
90 views

TLS for ldap and certificate

I have the httpd conf: LoadModule ldap_module modules/mod_ldap.so LoadModule ssl_module modules/mod_ssl.so LDAPTrustedGlobalCert CA_BASE64 /etc/openldap/certs/domenCA.crt <VirtualHost ...
0
votes
1answer
58 views

OS X server Open Directory fail over successfully but not the user home directories

We setup the OS X server Open Directory(OD) master and replica. Users are created on master and their home directories are on the master server. When the master OD server is down, the OD client (MAC) ...
1
vote
1answer
43 views

A way to update the plain text password to ssha in Open ldap for 400K Users

Is there any command/extension available to update the "userPassword" attribute from a user object in LDAP server to SSHA hashed passsword from plain text? we found that users in LADP are stored in ...
1
vote
3answers
1k views

PAM Authentication with LDAP on Debian Jessie Not Finding LDAP Users

Debian Jessie (specifically, Debian Server Wheezy x64 with testing repos) OpenLDAP 2.4.39 libpam-ldapd 0.9.4-1 Upon installing libpam-ldapd, the dpkg configuration asked for my LDAP address ...
1
vote
2answers
5k views

ldap_modify: Other (e.g., implementation specific) error (80), <olcAccess> handler exited with 1

When modifying the Open-LDAP configuration using: dn: olcDatabase={2}hdb,cn=config changetype: modify replace: olcAccess olcAccess: {0}to * by ...
0
votes
1answer
35 views

LDAP group access controls

I'm trying to set up our LDAP server so that members of the pwmadmins group can change people's passwords for them. To be more specific, we have PWM for Tomcat set up and are trying to let pwmadmins ...
0
votes
0answers
27 views

LDAP Kerberos authentication on linux

I have configured my RHEL linux machine to be authenticated against active directory without being joining it to domain, using nss-pam-ldapd pam_ldap samba-winbind openldap-devel krb5-devel. I am able ...
0
votes
0answers
20 views

What does Samba need from LDAP for a valid account?

I have inherited an OpenLDAP system, coupled to a FreeNAS and it is quite a headache to create users all the time. I just want to create a user that can access its own homes share. I have a working ...
1
vote
1answer
30 views

Adding more than one DIT

I have posted this question in dba.stackexchange.com but it is considered off-topic and people suggest that I should post it here so I am posting it here. I have an openldap server up and running on ...
0
votes
2answers
93 views

pam_ldap user password changes using rootbinddn on Debian Jessie

When configuring pam_ldap on Debian Jessie, end user password changes are utilizing the rootbinddn, circumventing OpenLDAP's ppolicy overlay. This is allowing end users to change their passwords ...
2
votes
1answer
66 views

how can I use openssl to download my ldap cert over port 389 instead of 636 (TLS)?

I've used to use the following command to download my server SSL certs from LDAP in order to add them to tomcat/java keystores: openssl s_client -connect 10.140.136.192:636 Since LDAP SSL (port ...
0
votes
0answers
59 views

NT4 domain administrator account - how to specify in smb.conf

I'm a domain administrator for a very old NT4 based network which needs to be taken out back and shot. I had a chat with the colleague who runs the domain, and he wants to move to Samba based NT4 ...
2
votes
4answers
4k views

LDAP Migration to new LDAP Server

I need to move my ldap server to a newer one. It is currently running on Ubuntu 7.04 server. Is there a way of backing up this server, installing a fresh openldap server on a newer Ubuntu 11.04 ...
0
votes
1answer
131 views

Migration of LDAP and GOsa-config to new server

I have a running LDAP-server (using Ubuntu 12.04) with GOsa installed on it. Is there a way to migrate the whole database including the GOsa-config to a new server (Ubuntu 14.04)? I tried exporting ...
1
vote
1answer
26 views

What files get modified by the authconfig?

I am trying to identify which files are edited with the following command, but can not find. authconfig --enablemd5 --enableshadow --enablecache --enablelocauthorize --enableldap --enableldapauth ...
0
votes
0answers
23 views

OpenLDAP back-perl “critical control unavailable in context”

I am trying to setup a perl script that is used as backend for specific data processing. The overall code works fine, but, when the LDAP client sends a search request with and additional control ...
0
votes
2answers
64 views

Where are LDAP user's home stored

I have been goolging around LDAP these days. And I'm trying to deploy a central authentication server for quite a few ubuntu servers. After all the research, one question come to my mind. Where are ...
0
votes
1answer
26 views

Authenticating users in OpenLDAP from multiple OUs

I am new to openLDAP and trying to figure out the best way to layout my DIT. The problem I'm running into is many of my applications want to use a specific baseDN in which to look in for ...
2
votes
1answer
981 views

Not able to add memberOf overlay openldap 2.3.9

I am currently working on integrating LDAP authentication into a system and I would like to restrict access based on LDAP group. The only way to do this is via a search filter and therefore I believe ...