OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
1answer
1k views

LDAP Client Search with SSL - CentOS7

Has anybody got SSL client authentication working with OpenLDAP (on CentOS7 - which is using moznss)? I've search for the last 2 days trying to get this to work, both with a certutil database and ...
1
vote
1answer
14 views

OpenLDAP debugging logs

I have OpenLDAP version 2.4.40 which is being cross compiled for a different (proprietary) target. This has been in place and working fine for many years but now I find myself needing to get some ...
0
votes
1answer
56 views

ldapsearch works for ldaps but getent passwd 'user' returns nothing on Centos 7 minimum openldap server

I have installed openldap on centos 7 minimum and added a user newuser01 to the database successfuly. ldapsearch works fine with both the master and the client using this format: ldapsearch -H ldaps:/...
0
votes
1answer
13 views

openldap best practice: changing server admin/bind password

I have an OpenLDAP server and many clients which bind to the server with username/password in order to authenticate against user's passwords. I'd like to change the server's password on a fairly ...
0
votes
1answer
4k views

LDAP+SAMBA login issues

I'm on a clean Ubuntu 13.10 install and I've just installed and configured openldap+samba. While I'm trying to configure a domain controller plus user shares. In order to ease LDAP management I've ...
1
vote
1answer
3k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
6
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
1
vote
4answers
2k views

OpenLDAP TLS Authentification

I am trying to implement TLS as per https://help.ubuntu.com/lts/serverguide/openldap-server.html When I try to modify cn=config database with this ldif file: dn: cn=config add: ...
-1
votes
1answer
23 views

Best architecture/components for a mixed environment (window + Linux) [closed]

I would like to ask for recommendations; In my mediumsize company (less than 150 users) most clients are using Windows machines, the servers are mostly Windows serves .... I would like to migrate to ...
0
votes
2answers
32 views

For centos 7 minimal ldap works but ldaps does not

I have an OpenLDAP server version openldap-2.4.40 that works fine on CentOS 7 minimal. I tested by issuing: ldapwhoami -H ldap://provider.med.cornell.edu -x \ -D "cn=Manager,dc=provider,dc=med,dc=...
1
vote
0answers
30 views

Openldap configuration on RHEL 6.6 client

We have a shell script which runs perl program to connect to LDAP server and make entries. This is the only script which uses ldap. This server is hosting all batch related files and run batch jobs ...
0
votes
1answer
1k views

GitLab & OpenLDAP: Invalid credentials

I have two machines with CentOS 7.0 on each one. The first one is domain controller with OpenLDAP only. I configured OpenLDAP according this tutorial: http://www.server-world.info/en/note?os=CentOS_7&...
0
votes
1answer
181 views

TLS for ldap and certificate

I have the httpd conf: LoadModule ldap_module modules/mod_ldap.so LoadModule ssl_module modules/mod_ssl.so LDAPTrustedGlobalCert CA_BASE64 /etc/openldap/certs/domenCA.crt <VirtualHost *:...
0
votes
1answer
30 views

Running (brew) openldap on osx El Capitan?

As Apple keeps making "improvements" to the LDAP that comes with OSX (i.e. keeps breaking it on each update), I had to do my own installation of openldap, which worked fine on Maverick and Yosemite (...
1
vote
0answers
75 views

How to allow users on an openLDAP server to create, update, and modify users under a certain organizationalUnit?

I have been stuck on trying to allow openLDAP users that are in a certain group (EX: cn=Admins,dc=mydomain,dc=com) to create, modify, update, and delete users that are in another organizationalUnit (...
0
votes
0answers
11 views

Applying ppolicy.ldif in OpenLdap

I just added the ppolicy.ldif schema to ldap by running the following: ldapadd -T EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif I then try to ldapadd my change.ldif file seen below #...
0
votes
0answers
8 views

How to set an ACL in OpenLDAP to allow a user to fully manage an OrganizationalUnit? [duplicate]

I just installed OpenLDAP on my Ubuntu Server 16.04 LTS. I have my OpenLDAP server setup as depicted in the image below: Just like the image depicts I would like the blue color coded cn=admin to be ...
0
votes
1answer
1k views

LDAP installed, running, but can't connect remotely [Ubuntu 10.10]

I installed LDAP on my ubuntu 10.10 system, using the tutorial found here: https://help.ubuntu.com/10.10/serverguide/C/openldap-server.html Everything seems to be working well, when logged into the ...
3
votes
2answers
4k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
0
votes
1answer
3k views

what is the simple Command to check password expiry time of an openldap user account

I am running openldap 2.3.43.el5 on RHEL 5.3 I am trying to find a simple command that will tell you when the password for an ldap user will expire, any help would be greatly appreciated.This would ...
1
vote
0answers
10 views

Unable to configure TLS options for OpenLDAP

I am struggling with setting up TLS for a new OpenLDAP server. The system is Debian Jessie (updated to the latest 8.5 stable), and I have set up the server by installing the slapd package, with almost ...
0
votes
2answers
1k views

ldapsearch result: Can't contact LDAP server (-1)

Anyone knows which the problem? I installed LDAP: yum -y install openldap-servers and then checked is the installation work well starting slapd service and doing ldapsearch like this: ldapsearch -...
1
vote
1answer
1k views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
3
votes
1answer
2k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
1
vote
1answer
2k views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by dn="cn=...
2
votes
2answers
3k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware 1.2....
0
votes
0answers
19 views

How to change the 'olcAccess' values of olcDatabase in OpenLDAP via spring-ldap?

I'm a new person of using spring-ldap-2.0.4 in order to communicate openldap, and change olcAccess values of olcDatabase via spring LDAP interface without using LDIF, I have met a difficult problem, ...
1
vote
1answer
2k views

OpenLDAP to Samba 4 Migration, create middle layer / webservice for user initiated password migration/change?

for the last few days I have been looking into migrating an old linux server running a OpenLDAP/Samba 3 configuration with about 100 users to a new SBS Server running Samba 4 (like Zentyal or UCS). ...
1
vote
1answer
41 views

How to only allow users and/or groups access to certain client machines that are connected to an openldap server?

I would really like to figure out how I can allow users and/or groups access to certain client machines that are all connected to an OpenLDAP server. I would like to do this whether the user is ...
1
vote
2answers
38 views

id command is not showing secondary groups

During some days I've been working on a LDAP integration. Now, after configure almost everything that I needed, I came up with this last wall: The need of use secondary groups which are taken from the ...
0
votes
0answers
8 views

ldapadduser command throws “Could not guess current user”

I have ubuntu-12.04 server. I have setup OpenLdap server at 10.4.15.217. Its working fine. I have another Ubuntu-12.04 server where I installed ldapscripts using command "apt-get install ldapscripts"....
0
votes
1answer
28 views

Open Directory won't authenticate

I have 2 servers running Open Directory (Mac OS X). One is running the master Open Directory(OD) server, the other is running a replica. For a little while, the master has been down to Apple ...
0
votes
0answers
12 views

Install OPENLDAP as service from compiled source

I am using Centos 7 and compiled openldap from source and installed it in a custom location, however I found that it doesn't come with the option of installing as service as it would if I yum install ...
0
votes
1answer
60 views

Forcing OpenLDAP connections to use STARTTLS not allowing user to login

I have a basic OpenLDAP server running on Ubuntu 16.04LTS which authenticates users perfectly fine but I really wanted to make it more secure so I decided to use STARTTLS and How To Encrypt OpenLDAP ...
0
votes
2answers
140 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
84 views

Suddenly i can not join Windows clients to Samba PDC anymore

Some years ago i configured a Primary Domain Controller through Samba and LDAP (slapd) on an Ubuntu machine (13.10) at 192.168.69.203 which should be accessible by the NetBIOS name SRV1. I must note i ...
0
votes
1answer
40 views

Error while compiling apr-util for apache with LDAP support

I am currently trying to create a custom 64bit LAMPP stack on CentOS 7, in which each component should reside in its own folder, with every dependency included and in its own folder. Currently, I ...
-1
votes
2answers
475 views

Set up LDAP on Redmine with Zimbra LDAP

I'm trying to enable LDAP authentication for a Redmine installation. My LDAP Server is the one provided by Zimbra, and I'm perfectly sure that it works good (I use LDAP also for ownCloud server, in ...
0
votes
0answers
15 views

unable to delete entry.what am i missing?

Newbie question, There are 2 ldap servers i have inherited. I need to delete a user which keeps re-spawning. I was told that this is a syncrepl setup with another node. What do i need to do in order ...
1
vote
0answers
11 views

rfc2307bis LDAP schema: ipNetmaskNumber lookup for an ipHost object

I'm using Openldap for IAM, and consider using it also as a configuration management backend. The rfc2307bis schema has an ipHost class, which allows for ipHostNumber attribute, but not for the ...
2
votes
4answers
681 views

Is it possible to have non-replicated data on an LDAP consumer?

I've read all the available documentation, the Mastering OpenLDAP book, and like a zillion mail-list posts but I haven't found a way to make such scenario possible. I see several use cases for this ...
1
vote
1answer
35 views

OpenLDAP TLS CA configuration

I'm currently in the process of setting up two sychronized OpenLDAP servers, access through starttls/ldaps. On the client/slave, I had problems with the TLS connection. I'm using the directory-based ...
0
votes
0answers
14 views

error: found a non-fatal phpLDAPAdmin Bug

i just install openldap with phpldapadmin. but when i go to monitor menu i found: is this actually something can be solved? anyone ever solve this issue before? Thanks, AnD
1
vote
1answer
52 views

LDAP - how to use attribute from objectclass:account and objectclass:inetOrgPerson?

I have an openLDAP which I use for authenticating users to various servers, where each user can have access to a varying number of hosts. I am solving that requirement by using the "host" attribute, ...
1
vote
0answers
29 views

Import Windows 2008R2 .p12 certificate into Samba4 SDC

In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would ...
0
votes
1answer
30 views

error: Automatically removed objectClass from template as it is not defined in the schema

I'm installing openldap with phpldapadmin in 2 diffrent CENTOS 7 servers with configuration as follows: openldap server: firewall-cmd --permanent --add-service=ldap firewall-cmd --permanent --add-...
0
votes
1answer
43 views

Open LDAP Server migration

Im trying to migrate an Open LDAP Server from Ubuntu LTS to Arch Linux. So I followed the Guid by Alex Pánek. So first I backuped the Databases from the Ubuntu Maschine: ubuntu$ sudo slapcat -b cn=...
1
vote
0answers
52 views

`ldap_bind: Invalid credentials` during setup of LDAP server on Centos 7 VM

I am setting up an LDAP server on a centos 7 VM, by following the guide here. Everything is fine until the last part of step 4, after I create the base domain. I have not changed ldap.conf or similar ...
-1
votes
1answer
39 views

How to switch user in Linux with password

I have client with LDAP authenticatation, when user1 login to client, and switch to user2 (sudo su - user2), he just login without password. I want to make switching user in client with authentication ...
2
votes
1answer
49 views

LDAP Remote Login Logs

How would I log who authenticated against my ldap system on Linux in my lab? I have a lab with several workstations, and one server running openldap. I would like to have similar functionality as with ...