OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

2
votes
2answers
5k views

Persuading openldap to work with SSL on Ubuntu with cn=config

I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance. I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
0
votes
1answer
4k views

LDAP+SAMBA login issues

I'm on a clean Ubuntu 13.10 install and I've just installed and configured openldap+samba. While I'm trying to configure a domain controller plus user shares. In order to ease LDAP management I've ...
1
vote
0answers
9 views

How to ensure encrypted OpenLDAP sessions using SASL/GSSAPI

I am running OpenLDAP 2.4 on a Debian jessie system. Clients typically connect to this LDAP server over port 389 using SASL/GSSAPI with our Kerberos infrastructure. When a client connects using SASL/...
1
vote
0answers
14 views

Cannot sync OpenLDAP directory with Azure AD

I am trying to connect and sync OpenLDAP with Microsoft Azure AD using Generic LDAP connector as described in the URL below: https://azure.microsoft.com/en-in/documentation/articles/active-directory-...
1
vote
1answer
3k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
0
votes
1answer
8 views

nslcd and kerberos without Reverse DNS

I am trying to get nslcd to connect with an ldap instance using GSSAPI and kerberos authentication. Problem i'm having is that nslcd keeps using the wrong principal to try and connected with the ...
6
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
5
votes
1answer
3k views

How to migrate LDAP (database,schema,configuration) to other machine

I'm using openldap 2.4.40, and i need to migrate my existing ldap database, configuration, and schema (basically everything ldap server related) to a new machine. the problem is, I use cn=config ...
0
votes
0answers
3 views

OpenLdap with ppolicy plugin: is it possible to auto-remove pwdFailureTime attributes?

OpenLdap 2.4.* is in use, with ppolicy plugin I noticed that pwdFailureTime multivalue attribute is being added to LDAP database, but looks like it is never deleted. Is there simple way to make ...
0
votes
1answer
11 views

testsaslauthd on openLDAP centos worked for first time but failed after that

testsaslauthd only works for first time after i edited the file /etc/saslauthd.conf and restarted openLDAP when i run it the second time, it is showing authentication failed. When i reedited the file ...
0
votes
2answers
725 views

Ubuntu server 10.10 OpenLDAP 2.4.23 gnutls 2.8.6 keep getting “TLS init def ctx failed: -1”

So I've read about the Debian/Ubuntu distros migrated to gnutls implementation for TLS/SSL. Fine with me, but I've spent the last week trying to configure OpanLDAP with TLS/SSL without success, keep ...
0
votes
1answer
1k views

LDAP installed, running, but can't connect remotely [Ubuntu 10.10]

I installed LDAP on my ubuntu 10.10 system, using the tutorial found here: https://help.ubuntu.com/10.10/serverguide/C/openldap-server.html Everything seems to be working well, when logged into the ...
0
votes
0answers
9 views

creating a consumer by cloning the provider in openldap, anything wrong with that?

I have setup an ldap server on centos 7 as a provider and created a consumer by simply cloning the provider and adding syncrepl.ldif to it and seems to work just fine. In all the documentations and ...
2
votes
3answers
3k views

Multiple rootdn on one ldap server

I have an OpenLDAP server with the following in its configuration file: suffix "o=a.b.priv" rootdn "cn=Manager,o=a.b.priv" I am setting up a new project which will make use of the ...
-2
votes
0answers
12 views

Microsoft identity Manager ldap [on hold]

I'm in trouble because I don't know what I have to do. I have a client with OpenLDAP and they want to upload their users to Azure Active Directory. I thought on using MIM or FIM but all what I see in ...
3
votes
0answers
28 views

Authentication vsftpd account using remote LDAP user

I'm trying to authenticate vsftpd from LDAP logins which hosted remotely another server . vsftpd hosted on Ubuntu 14.04.2 LTS (GNU/Linux 3.13.0-48-generic x86_64) amazon aws . from the LDAP server ...
0
votes
0answers
6 views

Can not select multiple LDAP servers with authconfig bug report

There is this bug report "Can not select multiple LDAP servers with authconfig" Red Hat Bugzilla – Bug 1142830; https://bugzilla.redhat.com/show_bug.cgi?id=1142830 which is suppose to be solved on ...
4
votes
2answers
4k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
1
vote
1answer
31 views

OpenLDAP client inside a docker container

I have a docker container running CentOS 6 with a non-root user and OpenLDAP. When I use getent passwd it just returns the data from /etc/passwd. The config file /etc/nsswitch.conf is customized ...
0
votes
1answer
3k views

what is the simple Command to check password expiry time of an openldap user account

I am running openldap 2.3.43.el5 on RHEL 5.3 I am trying to find a simple command that will tell you when the password for an ldap user will expire, any help would be greatly appreciated.This would ...
0
votes
1answer
89 views

User ldap cannot change password : LDAP password information update failed: Insufficient access

I'm using centos 6.7 to create LDAP server, but the user still cannot change their own password. The error when user try to change the password : [john2@servergw ~]$ passwd Changing password for ...
2
votes
0answers
57 views

LDAP changing password for wrong user?

I have an OpenLDAP server setup. I currently have two users added to my server. As far as my testing goes, a single user instance work just perfectly. My first issue arise when i have two users on the ...
-1
votes
0answers
14 views

openldap as filtering proxy for AD

I have successfully set up an OpenLDAP as proxy; this is so that public-facing servers not in our corp network can run LDAP-authenticating web apps without having to expose the Windows AD Server to ...
0
votes
2answers
1k views

ldapsearch result: Can't contact LDAP server (-1)

Anyone knows which the problem? I installed LDAP: yum -y install openldap-servers and then checked is the installation work well starting slapd service and doing ldapsearch like this: ldapsearch -...
0
votes
1answer
19 views

LDAP SSH + PubKey auth Fallback

I have followed this guide here : https://github.com/jirutka/ssh-ldap-pubkey In order to setup a LDAP server that allows authentication requesting both Password and Public Key in order to login. Now ...
1
vote
1answer
1k views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
0
votes
3answers
10k views

How to modify/add a new objectClass to an entry in OpenLDAP

I recently setup centralized authentication system using OpenLDAP. Now I need to extend the users that are defined in the database to include a new object class that contains some security related ...
1
vote
1answer
1k views

Auth fail on Samba server with LDAP backend‏

I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc. The samba schema is present in the LDAP, and in the users profile. ...
0
votes
1answer
9 views

how a client switches from provider to consmure openldap centos 7

I have setup a basic provider/consumer and client openldap on centos 7. Data does get replicated to the consumer when I add something to the provider and it is all synced up. The client can read info ...
3
votes
1answer
2k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
2
votes
3answers
14k views

ldapadd/ldapmodify: clarifications needed about these comamnds

The ldapmodify man page states that: The default for ldapmodify is to modify existing entries Yet when I try to import an LDIF file with ldapmodify I get the below error: ldapmodify: modify ...
0
votes
1answer
22 views

openldap replication on centos 7 not replicated

I have setup a simple openldap server on centos 7 minimum. Added a couple of users and setup a client that can retrieve the users using getentpasswd and ldapsearch works fine between the two. Then I ...
0
votes
0answers
13 views

Can't pass authentication when use openldap users

18) suffix: No '@' in User-Name = "t1", looking up realm NULL (18) mschap: ERROR: FAILED: No NT/LM-Password. Cannot perform authentication (18) mschap: ERROR: MS-CHAP2-Response is incorrect (18) MS-...
2
votes
1answer
2k views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by dn="cn=...
1
vote
2answers
1k views

OpenLdap 2.4 on centos 6 doesn't listen on port 636

I have an openldap 2.4 server on centos 6 whose confg I copied from those I have running under openldap 2.3 servers on centos 5 machines. On openldap 2.3, specifying TLSCACertificateFile, ...
2
votes
2answers
3k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware 1.2....
0
votes
1answer
6 views

Kerberos Bootstrap error with ldap

Up until recently I have had no issues deploying Kerberos with an LDAP backend for the database. Recently however I have started to get this error when trying to generate the password stash file ...
0
votes
2answers
110 views

LDAP+KERBEROS server configuration

I am following this guide to setup up kerberos server. the system configuration for kerberos server is below, can someone help me to resolve the issue, any help will be appreciated. Here is the ...
7
votes
2answers
18k views

How do I get openldap on Centos 6 to write anything to it's log files

I don't get any information in my log file for openldap on my Centos 6 server. This is how i configured it. SELinux is disabled at the moment. First created a folder where I'd like to store the log ...
1
vote
3answers
1k views

How to set Maximum Password Expiry in OpenLDAP Linux

I am trying to find how to change some password policy settings in OpenLDAP (on a system-wide level, not on a per user level) such that all LDAP account users (i.e., existing and new users) have their ...
1
vote
1answer
2k views

LDAP Client Search with SSL - CentOS7

Has anybody got SSL client authentication working with OpenLDAP (on CentOS7 - which is using moznss)? I've search for the last 2 days trying to get this to work, both with a certutil database and ...
1
vote
1answer
40 views

OpenLDAP debugging logs

I have OpenLDAP version 2.4.40 which is being cross compiled for a different (proprietary) target. This has been in place and working fine for many years but now I find myself needing to get some ...
0
votes
1answer
111 views

ldapsearch works for ldaps but getent passwd 'user' returns nothing on Centos 7 minimum openldap server

I have installed openldap on centos 7 minimum and added a user newuser01 to the database successfuly. ldapsearch works fine with both the master and the client using this format: ldapsearch -H ldaps:/...
0
votes
1answer
14 views

openldap best practice: changing server admin/bind password

I have an OpenLDAP server and many clients which bind to the server with username/password in order to authenticate against user's passwords. I'd like to change the server's password on a fairly ...
1
vote
4answers
2k views

OpenLDAP TLS Authentification

I am trying to implement TLS as per https://help.ubuntu.com/lts/serverguide/openldap-server.html When I try to modify cn=config database with this ldif file: dn: cn=config add: ...
0
votes
2answers
39 views

For centos 7 minimal ldap works but ldaps does not

I have an OpenLDAP server version openldap-2.4.40 that works fine on CentOS 7 minimal. I tested by issuing: ldapwhoami -H ldap://provider.med.cornell.edu -x \ -D "cn=Manager,dc=provider,dc=med,dc=...
1
vote
0answers
34 views

Openldap configuration on RHEL 6.6 client

We have a shell script which runs perl program to connect to LDAP server and make entries. This is the only script which uses ldap. This server is hosting all batch related files and run batch jobs ...
0
votes
1answer
1k views

GitLab & OpenLDAP: Invalid credentials

I have two machines with CentOS 7.0 on each one. The first one is domain controller with OpenLDAP only. I configured OpenLDAP according this tutorial: http://www.server-world.info/en/note?os=CentOS_7&...
0
votes
1answer
188 views

TLS for ldap and certificate

I have the httpd conf: LoadModule ldap_module modules/mod_ldap.so LoadModule ssl_module modules/mod_ssl.so LDAPTrustedGlobalCert CA_BASE64 /etc/openldap/certs/domenCA.crt <VirtualHost *:...
0
votes
1answer
61 views

Running (brew) openldap on osx El Capitan?

As Apple keeps making "improvements" to the LDAP that comes with OSX (i.e. keeps breaking it on each update), I had to do my own installation of openldap, which worked fine on Maverick and Yosemite (...