OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.
38
votes
12answers
1k views
You're an open source shop.. how do you do shared calendaring?
I run an open source collaboration suite, I'm happy with it, my userbase are happy with it too... all except for calendaring. It's a serious sore point, and I'm scrambling to find a solution.
I've ...
20
votes
2answers
38k views
How do I configure LDAP on Centos 6 for user authentication in the most secure and correct way?
During the last couple of days I have been using a lot of F-words, while browsing Internet for good documentation about how to setup an LDAP-server. So far I have found none, but plenty that are less ...
13
votes
6answers
12k views
Active Directory vs OpenLDAP
This is for a small company (12 developers) who haven't implemented any centralized user database - they've grown organically and just created accounts on computers as they needed.
From a management ...
13
votes
1answer
7k views
LDAP Structure: dc=example,dc=com vs o=Example
I am relatively new to LDAP, and have seen two types of examples of how to set up your structure.
One method is to have the base being: dc=example,dc=com while other examples have the base being ...
12
votes
2answers
165 views
SSH only works after intentionally failed password
So, I'm having a rather weird problem. I have a server, that when I try to SSH into, immediately closes the connection if I type in the correct password on the first attempt. However, if I ...
12
votes
5answers
21k views
Setting up RADIUS + LDAP for WPA2 on Ubuntu
I'm setting up a wireless network for ~150 users. In short, I'm looking for a guide to set RADIUS server to authenticate WPA2 against a LDAP. On Ubuntu.
I got a working LDAP, but as it is not in ...
9
votes
3answers
6k views
Does Nginx support LDAP authentication?
Hey
Does nginx support ldap authentication? I have just migrated from apache and would like to move all of my authentications which are based on openldap and mod_auth_ldap to nginx.
Let me know if ...
9
votes
2answers
12k views
How do I configure Reverse Group Membership Maintenance on an openldap server? (memberOf)
I am currently working on integrating LDAP authentication into a system and I would like to restrict access based on LDAP group. The only way to do this is via a search filter and therefore I believe ...
8
votes
1answer
357 views
Starting openLDAP
I work as a sysadmin in a company and i am required to Deploy openLDAP. I have read a lot of materials but i really can't figure out where to start.
First about the company:
Services:
Email: every ...
8
votes
3answers
3k views
Hosted LDAP Services
Are there any enterprise-grade services for externally hosted LDAP used for authenticating users in our company?
Internally, we have many development and test servers that have system users locally ...
7
votes
2answers
3k views
What's the best OpenLDAP VMWare appliance (VM) that you USED?
What's the best OpenLDAP VMWare appliance (VM) that you USED?
6
votes
2answers
519 views
Is OpenLDAP a viable alternative to Windows LDAP?
Just a simple question; this question is not meant to attack Windows or start a flame war in anyway. I want a viable solution to the way authentication is done in Windows DC environment (LDAP) on ...
6
votes
5answers
1k views
Small, simple LDAP server as an alternative to OpenLDAP [closed]
I have taken a look at the installation and configuration instructions for the newer OpenLDAP releases and decided that it's too much work to set up for my small userbase. Basically, I only use LDAP ...
6
votes
2answers
401 views
samba+openldap vs ad for medium size network
We are going to have an organized network with an NT user authentication and proxy server. In choosing between Active Directory and Samba Server, I wanted to choose Samba server (I do love Open Source ...
5
votes
3answers
288 views
When setting up OpenLDAP for the first time, what are some things to keep in mind?
I'm in the process of reading up on documentation and setting up OpenLDAP to handle authentication throughout my network, for email, web services, user accounts, any anything else that I could throw ...
5
votes
5answers
47k views
How to set ulimits in Solaris 10
I normally use pam_limits.so and /etc/security/limits.conf to set ulimits on file size, CPU time, etc. for the regular users logging in to my server running Ubuntu. What is the best way of doing ...
5
votes
3answers
2k views
OpenLdap synchronize home directory between client and server
I have recently setup Ubuntu ldap client authentication on karmic and lucid desktop clients and the ldap server is running on an 10.04 LTS server and this is the link I followed for client setup and ...
5
votes
2answers
481 views
Access control to 100's of LAMP box via LDAP
This is every SysAdmin's nightmare of things to do. Basically we want to control who has access to which hosts. As simple it may sound, the problem is to find a scalable and low maintenance(mgmt. ...
5
votes
2answers
4k views
How to handle nested groups in LDAP
I am total LDAP newbie and I am just researching if I can use it for my next project or better stay away from it.
The project will depend heavily on the concept of nested groups and I frequently need ...
5
votes
2answers
524 views
Configure OpenLDAP with TLS=required
Nowadays, OpenLDAP needs to be configured with ldapmodify cn=config, as describe here. But nowhere I can find how you configure it to only accept TLS traffic. I just confirmed that our server accepts ...
4
votes
3answers
1k views
Linux console is unusable when LDAP server is down
When our OpenLDAP server lost power the CentOS machines' console became nearly unusable.
We were trying to login with a local account, but each command would take minutes to return. Even simple ...
4
votes
5answers
2k views
Web interface for LDAP management
We are going to implement LDAP for centralized authentication in our organization. Which is the best simple LDAP management tool available ?
4
votes
1answer
1k views
Replication from OSX OpenDirectory to OpenLDAP
I have an OpenDirectory server running on an OSX Server machine, and I'd like to increase the reliability of the service by having a slave server. The problem is, I only have 1 OSX Server but I have ...
4
votes
1answer
340 views
Slappasswd output randomized
I was expecting slappasswd to produce a fixed hash but it appears that the output is randomized as I never get the same output for the same input password:
$ slappasswd -s secret
...
4
votes
3answers
4k views
Active Directory and OpenLDAP synchronization
I have been digging holes on google to find out the best way to synchronize the user database between AD and OpenLDAP. What i want to achieve is, have user database in AD and then propagate these ...
4
votes
2answers
1k views
Keep AD Group Synced in OpenLDAP with POSIX Account Augmentation
What's the most obvious way of achieving the following: The site has an working AD infrastructure and certain parts of the infrastructure are tightly coupled GNU/Linux machines where people from the ...
4
votes
2answers
9k views
How Do I Configure OpenLDAP to use MySQL (Ubuntu 9.04)?
My intention is to make a MySQL table of Customer Contact Information available to Outlook/Thunderbird clients as an Address Book (via LDAP).
I'm aware that OpenLDAP has a MySQL backend option, but I ...
4
votes
3answers
1k views
Retrieve operational attributes from OpenLDAP
I've been having trouble trying to find some good documentation on how to retrieve operational attributes from OpenLDAP.
I would like to retrieve the base distinguished name of an LDAP server by ...
4
votes
1answer
386 views
What are best practices to store delegated permissions in OpenLDAP?
My network's core user database is managed by OpenLDAP. Recently we need to introduce a possibility for one user to act on second user's behalf. As all application-related rights and permissions are ...
4
votes
2answers
926 views
How do I update the memberOf attributes of existing objects after adding the OpenLDAP Reverse Group Membership Maintenance overlay?
This is a follow-up to this question: I added the memberof overlay to an existing OpenLDAP 2.4 server. Now I want to update the existing user objects.
For new group memberships, the memberOf ...
4
votes
1answer
276 views
openldaps wildcard certificate not accepted
my wildcard certificate doesn't get accepted with ldap 2.4.23. when i try to connect i get the following error:
TLS certificate verification: subject:
...
4
votes
1answer
837 views
LDAP change user pass on client
I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck.
...
3
votes
2answers
2k views
Calculate Days Since 1/1/1970
How can you calculate the number of days since 1/1/1970? This is for updating the shadowLastChange attribute on OpenLDAP.
Is there a way to do this using the linux date command?
3
votes
2answers
2k views
OpenLDAP - where is my slapd.conf?
I have installed OpenLDAP on Unbuntu 10.04.
I wanted to configure my ldap but I can't find slapd.conf in /etc/ldap/
In this directory there is a ldap.conf but seems not to be the same.
How can I ...
3
votes
4answers
914 views
Can I manage Windows 7 machines with an open source server?
Can I manage a small office of Windows machines with an open source solution? (~15 users)
(XP Pro, but will be moving to Windows 7 Pro as we get new computers over the next few months... as budget ...
3
votes
1answer
3k views
CentOS 6.2 there is no slapd.conf after installating openldap
I have just installed fresh Centos 6.2 with openldap and samba with yum command. I'm having a bit of issue with finding the slapd.conf file. There is a folder for slap.d/ but no conf file in it by ...
3
votes
2answers
5k views
How do I migrate user-accounts from OpenLDAP to Active-Directory?
We want to migrate our user-accounts from OpenLDAP to Active-Directory without
changing the passwords and such. The users shouldn't notice the difference against which server they're authenticating ...
3
votes
4answers
253 views
How to tag former employees in LDAP structure?
I have ou=People and there I have stored our employees. I have to somehow divide them to our current employees and former employees. What I was thinking about was to create 2 groups, ...
3
votes
2answers
153 views
Is the new cn=config interface in OpenLDAP ready for production?
I recently began learning Samba and OpenLDAP, and have become increasingly frustrated with the apparent disconnect between the old configuration (using slapd.conf) and the new one using the cn=config ...
3
votes
2answers
498 views
Move Windows accounts and settings to OpenLDAP
I need to transfer my machine-based accounts to a directory service, namingly OpenLDAP, run behind a Mac OS X server. The idea is that I have to make sure that the settings, the programs installed and ...
3
votes
2answers
475 views
Multiple LDAP servers with mod_authn_alias: failover not working when the first LDAP is down?
I've been trying to setup redundant LDAP servers with Apache 2.2.3.
/etc/httpd/conf.d/authn_alias.conf
<AuthnProviderAlias ldap master>
AuthLDAPURL ...
3
votes
1answer
157 views
What are the differences in schemas of main directory servers?
Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
3
votes
1answer
116 views
When updating the schema in OpenLDAP, should we reload the master or the slave first?
We currently have one master server that is replicated to two read-only slaves. We are adding to the schema. Is it recommended to reload the master first or the slaves?
3
votes
2answers
417 views
Authenticating Exchange with OpenLDAP
Got a customer server coming in that's exchange and I want it to talk to the existing setup, users hate more than one login!
Can Exchange 2010 get authentication from OpenLDAP? (running on CentOS ...
3
votes
4answers
309 views
Which identity management products are suitable for small to medium business?
Let's scope out an average setup:
Web company
About 50 users
A few User Groups (Management, Support, Developers, Sys-Admins, Testers, Sales)
A bunch of permissions (Only management is allowed to ...
3
votes
1answer
705 views
Where do I find USEFUL official documentation for LDAP authentication on Centos/RHEL 6?
Does it exist any official installation documentation about how to setup an LDAP server that I can connect my clients to with authconfig. I'm will be Centos 6 and RHEL 6.1.
What I can find is this. ...
3
votes
3answers
4k views
How do I install a new schema for OpenLDAP on Debian 5 with dynamic config=cn backend?
I'm importing an openldap database from another server and while importing, I got some errors with some users, the problem is that the mozillaAbPersonAlpha is not a valid objectClass.
#!ERROR [LDAP ...
3
votes
2answers
836 views
Active Directory using Samba/Open LDAP for user accounts
I know this is the wrong way round... but
Is it possible to use AD in front of Samba for our PC clients, so that the user accounts are in Samba/Open LDAP.
Managing our fleet of Windows PC's is ...
3
votes
2answers
220 views
Ubuntu 11.04 and OpenLDAP - where is the config?
I've been asked to setup a multimaster LDAP environment on Ubuntu 11.04 - instead of a single master server. I cloned the master server and recreated it into two VMs. I am trying to follow the ...
3
votes
1answer
294 views
Adding apple.schema from OS X Lion Server fails
When I try to add apple.schema to my OpenLDAP running on Debian this is the error I get;
root@directory:~# ldapadd -Y EXTERNAL -H ldapi:/// -f apple.schema
SASL/EXTERNAL authentication started
SASL ...
