Questions tagged [openldap]
OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.
1,472
questions
1
vote
1
answer
519
views
Cannot initialize openLDAP-backed kerberos realm using krb5_ldap_util with startTLS?
I have set up an openLDAP backed MIT Kerberos realm on a server after much iteration, and I am now trying to move it to its own server. When I first set it up on the original server, I created a ...
- 163
1
vote
2
answers
942
views
OpenLDAP and Kerberos servers on Ubuntu Server 22.04; Krb5 isn't creating /var/lib/krb5kdc/principal
I have an existing openldap server on Ubuntu Server 22.04 and am trying to set up a kerberos server with it, following this guide: https://ubuntu.com/server/docs/service-kerberos-with-openldap-backend
...
- 163
1
vote
1
answer
511
views
Is it possible to make ldif config in one file like slapd.conf?
slapd deprecated slapd.conf, prefer ldif conf, slapd -F dir to use the new ldif conf, but the dir must follow the ldif structure
cn=config.ldif
cn=config/
cn=schema.ldif
cn=schema/
is it possible ...
- 113
1
vote
1
answer
7k
views
LDAP finds user, but "permission denied" when logging in
I am setting up an LDAP client in Red Hat 8.
After setting up the config files I did an LDAP user test and it came back successfully:
# id myusername
uid=666(myusername) gid=510(active_users) groups=...
- 121
1
vote
3
answers
5k
views
every LDAP user gives "permission denied" with LDAP and sssd (Centos7)
I am trying to limit LDAP logins to the "admin" group.
This is my /etc/sssd/sssd.conf file:
[domain/default]
autofs_provider = ldap
ldap_tls_reqcert = allow
auth_provider = ldap
...
- 15
1
vote
1
answer
34
views
Questions about Debian OpenDLAP configuration
I have the slapd/stable,now 2.4.57+dfsg-3 amd64 Debian 11 package. I read the official OpenLDAP documentation and Debian article.
But I cannot understand the difference between the multiple ...
user942938
1
vote
1
answer
1k
views
What am I missing to setup sudo access with openldap?
I'm using lxd/lxc containers (Oracle Linux 8) to rapidly deploy the environment (so if you have lxd setup, you can modify the ip scheme to match lxd's bridge subnet / DNS and then paste the code into ...
- 161
1
vote
1
answer
789
views
Let openldap users change password with passwd in centos, i broke it
Tried to do the above with this tutorial:
https://www.unixguide.net/content/openldap-allow-users-change-their-password-unix-passwd-command
So I created this ldif:
dn: olcDatabase={2}hdb,cn=config
...
- 149
1
vote
1
answer
288
views
Debian 10, OpenLDAP, LetsEncrypt, Error 80 trying to add
...I have never had so much trouble enabling secure communications.
I believe this to be a valid CA cert chain for Let's Encrypt
The contents of /etc/ssl/le/ca-chain.pem
-----BEGIN CERTIFICATE-----
...
1
vote
1
answer
3k
views
attribute to enable/disable user on openLDAP using java
My users are inetOrgPerson . What would be the attribute to enable/disable users ?
I am using JNDI library and i am trying this code that is for active directory but i am getting
LDAP: error code 17 - ...
- 11
1
vote
1
answer
680
views
LDAPError while authenticating aprasad: INAPPROPRIATE_AUTH
My env.
AWX( Ansible Tower) on Centos 7 with docker.
And I'm trying to connect AWX with LDAP.
It's finding the user but not able aloowing it to authenticate.
I was able to run ldapsearch command and ...
- 21
1
vote
2
answers
3k
views
How to check if an overlay is enabled with OpenLDAP?
Is there a way to automatically check if that an overlay, for instance memberof, is enabled with openldap?
A lot of tutorial out there explain how to enable memberof, but how can I know if this had ...
- 195
1
vote
1
answer
53
views
Debian-based servers can authenticate users on OpenLDAP when RH-based servers cannot [closed]
I'm putting centralized authentication in my LAN infrastructure. The LDAP server is up and running, and all Debian/Ubuntu servers manage to authenticate users against the LDAP.
Now, all my CentOS8/...
- 75
1
vote
1
answer
2k
views
OpenLDAP uidNumber assignation
I am new to LDAP.
I am creating items from the posixAccount ObjectClass, which requires uidNumber ( must attribute ).
How can/should I assign that number to that item? Is there a guideline about it ...
- 15
1
vote
2
answers
748
views
SSSD, openLDAP, MIT Kerberos: "id username" doesn't find enty in LDAP, but ldapsearch does
I have installed openLDAP, MIT Kerberos and SSD on Debian 10 Systems based on this tutorial Integrated Kerberos-OpenLDAP provider on Debian squeeze.
Each of the three components is on its own Proxmox ...
- 23
1
vote
2
answers
464
views
OPENLDAP: how to set attributes as required?
I installed OPENLDAP 2.4.44 on CentOS 7.
Now I need to set any attributes as required, is it possible?
I need that all users have this attributes required:
- givenName
- sn
- cn
- userPassword
- ...
- 169
1
vote
1
answer
4k
views
LDAP - Grant user write permission to group / organizationalUnit
I tried to grant cn=admin,ou=Administrators,dc=example,dc=com full write access to ou=People,dc=example,dc=com so that this admin can create (and of course read) new entries under ou=People and also ...
- 311
1
vote
2
answers
3k
views
Openldap passwords hashing with olcPasswordHash
I am tying to make openldap to store all userPassword attributes hashed with {SSHA} alogorithm. I managed to configure frontend db with olcPasswordHash :
dn: olcDatabase={-1}frontend
objectClass: ...
- 13
1
vote
1
answer
1k
views
How to migrate users between two different versions of OpenLDAP?
I need to export and import users between Two different versions of OpenLDAP, Old openldap version is 2.42 and new one has version 2.44. Both the openldap servers are setup on Ubuntu.
In this answer ...
- 215
1
vote
1
answer
1k
views
Error message when setting up OpenLDAP on CentOS
I was adding my domain in the LDAP database and create a file called ldapdomain.ldif for my domain
dn: olcDatabase={1}monitor,cn=config
changetype: modify
replace: olcAccess
olcAccess: {0}to * by
dn....
1
vote
1
answer
4k
views
Openldap enable ssl on replication
Can you told me how can i modify current configuration for olcSyncRepl?
I have following situation:
I Configured master ldap server and slave server
I Configured replication between these two ...
- 13
1
vote
1
answer
886
views
OPENLDAP 2.4 , allow anonymous access only to get User Publickey
I'm trying to do the following :
I have openldap 2.4.45 server (test) which contains users, groups like this :
o=Example(dc=example,dc=com)
ou=users
uid=alice
uid=bob
PublicKey="...."
...
- 13
1
vote
1
answer
3k
views
Vsftpd user authentication
I've set up a virtual machine running Centos 7 and VSFTPD.
VSFTPD is working great when connecting with local users. It chroots the user into his previously created home in /ftp/pub/{user_name} with ...
- 13
1
vote
2
answers
4k
views
systemd, override, slapd daemon fails
I've tried to override the standard slapd (OpenLDAP) daemon start parameters with systemd, but as soon as I override the ExecStart, the daemon fails to start. My questions is why it fails and how I ...
- 53
1
vote
1
answer
3k
views
openldap with haproxy - (ldap_result() failed: Can't contact LDAP server)
I'm having an issue with openldap proxied via haproxy. The authentication works perfectly fine on CentOS (7.5.1804) and Debian (9.4). The only problem is that I'm getting errors in syslog and authlog:
...
- 23
1
vote
1
answer
4k
views
OPENLDAP: How to delete an o= entry?
I created an organization (o=otherorg,dc=example,dc=com) inside my OpenLDAP server running on Debian stretch.
Now I want to remove it, but no tool I tried allows me to.
Below is a chunk of slapcat ...
- 145
1
vote
1
answer
3k
views
ldapmodify error 80 while trying to add ssl certificate
Okay, so I've been trying to configure TLS with LDAP on my Debian Jessie server, so far without success. I keep running into the dreaded error 80 when I run my ldapmodify command.
Here's the content ...
- 121
1
vote
1
answer
2k
views
Getting openldap + postgres working
I'm having an issue configuring openldap v2.4.46 + postgres (9.6.x), I'm running into a problem i cannot find an answer to.
Installation steps
yum install -y vim libacl-devel libblkid-devel gnutls-...
- 131
1
vote
1
answer
1k
views
How to migrate LDAP to other computer
How can I migrate LDAP from one computer to other..??
I tried using:
slapcat -n 0 -l (config file location)
and
slapcat -n 1 -l (database backup ldif path)
It gives this error:
$ slapcat -d -1 -...
- 13
1
vote
1
answer
8k
views
SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:
I have an openldap master and 2 openldap slaves. Using a non self-sign CA.
openldap master: name debian based on stretch
slapd 2.4.44+dfsg-5+d amd64
openssl 1.1.0f-3+deb9u1 amd64
openldap ...
1
vote
1
answer
2k
views
OpenLDAP: Adding olcObjectClasses to scheme
I have added a scheme to OpenLDAP via cn=conf. The scheme was taken from WSO2 Identity Server, but was modified to apply to cn=conf and OpenLDAP.
The scheme loaded without error, but doesn't work. ...
1
vote
1
answer
1k
views
How can I configure two different OpenLDAP olcLimits based on user?
When runing an ldapsearch from the command line using an anonymous bind, I'd like to allow a user/application to have unlimited results returned as long as paging is used.. For the cn=admin user, I'd ...
- 3,784
1
vote
1
answer
4k
views
SSH using LDAP credentials is showing perimission denied (public key) [closed]
I have 2 machines (LDAP Server and LDAP Client) I am learning to configure LDAP Server and I am following the digital ocean tutorial. phpldapdmin is working fine and I have configured the client also....
1
vote
1
answer
3k
views
sssd ldap authentication cannot automount home directories
I have managed to setup ldap authentication. but I do not manage to have the home directories automatically mount when logged in.
the auto.master and auto.home are stored in the ldap.
this is my ...
- 53
1
vote
1
answer
463
views
OpenLdap. Setting a database as a branch of another database
I'm using OpenLdap 2.4.44. I have a mdb database with three different 'branches' dev, tst, pre as folllows:
dc=mytest,dc=com
dc=dev
ou=
dc=tst
ou=users
dc=pre
ou=...
1
vote
1
answer
2k
views
Open LDAP and Exchange synchronisation
I am currently testing some IP Phone solutions and we want to use a Central Phonebook. The Phone we currently have and are most likely want to keep, is a Grandstream GXP2130. It can access an LDAP ...
1
vote
1
answer
4k
views
LDAP coruption after upgrade
I upgraded openldap from openldap-2.4.39-8.el6.x86_64 to 2.4.40-12.el6.x86_64 and after restarting the server i get the following error. I am trying to work out how to recover as I don't have a backup....
- 363
1
vote
1
answer
2k
views
OpenLDAP Give Group Write Access
Our openldap has multiple groups: useradmins, agt, ib, iss, itt
The "useradmins" group has always had permissions to edit (write) to all of the groups. I recently performed a simple 'yum update' and ...
- 357
1
vote
1
answer
1k
views
How to set up correctly openldap subordination?
I can't get to make this configuration work as expected:
# Database LDAP for ldap1
database ldap
suffix "ou=ldap1,dc=local"
uri ldap://ldap1
idassert-bind bindmethod=simple
binddn="...
- 542
1
vote
1
answer
7k
views
How to allow users on an openLDAP server to create, update, and modify users under a certain organizationalUnit?
I have been stuck on trying to allow openLDAP users that are in a certain group (EX: cn=Admins,dc=mydomain,dc=com) to create, modify, update, and delete users that are in another organizationalUnit (...
- 153
1
vote
1
answer
1k
views
Tool to manage samba accounts in LDAP
TLDR: Can I sensible manage samba accounts in openldap with Apache Directory Studio (or other general purpose ldap editors)?
I'm currently trying to move away from GOsa as our LDAP management tool. (...
- 134
1
vote
1
answer
3k
views
slapd dead but pid file exists openldap
I am facing issue with our new LDAP servers as they go down one by one alternatively. When checked for the services it says:
"slapd dead but pid file exists openldap"
but show no service running ...
- 11
1
vote
2
answers
4k
views
how to join centos 7 to samba domain?
In my office, we use samba domain + ldap. I already join some Windows 7 machines, but now I need to join CentOS 7 to that domain. How can I do that?
Below are steps that I already did:
install nss-...
- 11
1
vote
1
answer
1k
views
How can I authenticate users in OpenLDAP using multiple password schemes?
I've seen this Multiple OUs question, as well as the NO post, but without a good explanation it doesn't really solve the problem.
I want to be able to allow users to authenticate using standard ...
- 3,784
1
vote
1
answer
11k
views
Enable anonymous bind in openldap
I have setup ldap server successfully on centos 7, It works fine. However, i cannot access the server with 'anonymous' bind, which according to every google search it should be.
When I execute;
...
- 158
1
vote
1
answer
2k
views
Why isn't pwdReset automatically set when pwdMustChange is true?
Every other directory server, i.e. Oracle's will automatically set pwdReset to TRUE if pwdMustChange is defined in the policy:
When a user's password is changed by another user, such as a password ...
- 11
1
vote
1
answer
4k
views
How to install a trusted certificate on client machine to enable LDAP authentication?
I downloaded a TurnKey Linux OpenLDAP vm instance. It now runs in a vm. I am using this for user account authentication over a network. The client machine is a stock CentOS 7 machine. Everything on ...
- 11
1
vote
1
answer
2k
views
OpenLDAP using ipv6 link-local address "Can't contact LDAP Server (-1)"
I'm trying to use IPV6 to connect to my LDAP server. Everything works if I use ipv4 but I'm not ipv6 link-local address. I used the following command on my server using its own ipv6 address. Any clue ...
- 25
1
vote
1
answer
2k
views
How can I configure openLDAP to lookup userPassword via FreeRadius?
I am running Ubuntu 12.04 and OpenLDAP 2.4.28-1.1ubuntu4.5. I have users populated in LDAP with userPassword attribute being an {SHA1} hash. Users are able to login over SSH and authenticate to web ...
- 3,784
1
vote
1
answer
2k
views
Can connect to my OpenLDAP server locally but not externally
I have a problem with my OpenLDAP server. I can't connect to it externally from client, it only works locally. My OpenLDAP server is running on a Raspberry Pi with Rasbian as the OS.
When I run this ...
- 284