Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

Filter by
Sorted by
Tagged with
0 votes
1 answer
1k views

OpenLDAP: Why would you ever use refreshOnly for replication?

I'm reading about OpenLDAP replication and I don't understand why you would use refreshOnly mode vs. refreshAndPersist mode. I've tried to do some searching online, but wasn't able to find any ...
0 votes
1 answer
501 views

Store OpenLDAP connection on a php session with cookies [closed]

Só I have a ldap server that should be managed via php, I can modify anything in Apache,OpenLDAP or php. But as this site already covered I can't store a LDAP connection in a _SESSION variable on php.....
1 vote
0 answers
667 views

Open Directory Password Change Issues on OS X Server 10.10

I'm having a problem with 50+ workstations (10.9 and 10.10) when a user changes their OD password (either at the OS X login screen or the System Preferences). The password change updates on the ...
0 votes
1 answer
1k views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ldap_url_parse_ext(ldap://99.99.99.99)...
0 votes
1 answer
2k views

How to add Organisations to LDAP via LDIF?

I want to initially add a couple of organisations. So I created an organisations.ldif in order to add them via ldapadd -Q -Y EXTERNAL -H ldapi:/// -W -f organisations.ldif My file looks like this ...
20 votes
1 answer
23k views

LDAP Structure: dc=example,dc=com vs o=Example

I am relatively new to LDAP, and have seen two types of examples of how to set up your structure. One method is to have the base being: dc=example,dc=com while other examples have the base being o=...
2 votes
1 answer
1k views

Getting error when integrating cloudera hue with ldap server?

I have configured ldap server on centos machine.I am able to execute ldapadd and ldapsearch sucessfully. But while integrating ldap with cloudera hue getting following error RuntimeError: Failed to ...
-1 votes
1 answer
7k views

How to install LDAP server and add a user?

I need to test that our application can connect to more than one LDAP servers. We have one working one (running on OSX server). I need to setup another one. We tried to set LDAP server on SuSE using ...
0 votes
0 answers
514 views

OpenLDAP & Posix Groups/Account configuration

with following configuration I am not able to add POSIX users/groups to the LDAP server. If some can educate me about significance of dc in this case, is it FQDN that I mentioned when I created ...
0 votes
1 answer
364 views

Audit logging for OpenLDAP changes

How can I produce and examine an audit trail of changes made to an OpenLDAP database, such as which user was created when, by whom, when was it edited, what was edited etc?
2 votes
1 answer
167 views

OpenLDAP - Make required attribute of superclass optional in objectclass

My OpenLDAP schema defines an objectclass which is a subclass of person. Let's call it myPerson for the sake of simplicity. Since person must have a cn, myPerson should also have one. I would like to ...
1 vote
1 answer
2k views

Can connect to my OpenLDAP server locally but not externally

I have a problem with my OpenLDAP server. I can't connect to it externally from client, it only works locally. My OpenLDAP server is running on a Raspberry Pi with Rasbian as the OS. When I run this ...
2 votes
1 answer
3k views

Bind DN entry missing in stash file - while initializing database for realm

I'm trying to run kerberos with ldap back-end on Centos 6.3 After creating Realm with: kdb5_ldap_util -D "cn=admin,dc=example,dc=com" create -sscope sub -sf /var/kerberos/krb5kdc/example_stash....
0 votes
1 answer
1k views

Discrepancy in exporting LDIF OpenLDAP vs Apache Directory Studio

very new to the world of LDAP. I find that when I export an LDIF file in my OpenLDAP instance on Linux, running the slapcat command as such: ./slapcat -f /somewhere/slapd.conf -l backup.ldif it does ...
1 vote
1 answer
315 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
0 votes
1 answer
174 views

OS X server Open Directory fail over successfully but not the user home directories

We setup the OS X server Open Directory(OD) master and replica. Users are created on master and their home directories are on the master server. When the master OD server is down, the OD client (MAC) ...
2 votes
1 answer
4k views

A way to update the plain text password to ssha in Open ldap for 400K Users

Is there any command/extension available to update the "userPassword" attribute from a user object in LDAP server to SSHA hashed passsword from plain text? we found that users in LADP are stored in ...
1 vote
3 answers
6k views

PAM Authentication with LDAP on Debian Jessie Not Finding LDAP Users

Debian Jessie (specifically, Debian Server Wheezy x64 with testing repos) OpenLDAP 2.4.39 libpam-ldapd 0.9.4-1 Upon installing libpam-ldapd, the dpkg configuration asked for my LDAP address ...
0 votes
1 answer
992 views

LDAP group access controls

I'm trying to set up our LDAP server so that members of the pwmadmins group can change people's passwords for them. To be more specific, we have PWM for Tomcat set up and are trying to let pwmadmins ...
0 votes
0 answers
720 views

LDAP Kerberos authentication on linux

I have configured my RHEL linux machine to be authenticated against active directory without being joining it to domain, using nss-pam-ldapd pam_ldap samba-winbind openldap-devel krb5-devel. I am able ...
2 votes
1 answer
1k views

Adding more than one DIT

I have posted this question in dba.stackexchange.com but it is considered off-topic and people suggest that I should post it here so I am posting it here. I have an openldap server up and running on ...
0 votes
2 answers
1k views

pam_ldap user password changes using rootbinddn on Debian Jessie

When configuring pam_ldap on Debian Jessie, end user password changes are utilizing the rootbinddn, circumventing OpenLDAP's ppolicy overlay. This is allowing end users to change their passwords ...
0 votes
0 answers
942 views

NT4 domain administrator account - how to specify in smb.conf

I'm a domain administrator for a very old NT4 based network which needs to be taken out back and shot. I had a chat with the colleague who runs the domain, and he wants to move to Samba based NT4 ...
2 votes
4 answers
8k views

LDAP Migration to new LDAP Server

I need to move my ldap server to a newer one. It is currently running on Ubuntu 7.04 server. Is there a way of backing up this server, installing a fresh openldap server on a newer Ubuntu 11.04 server,...
0 votes
1 answer
877 views

Migration of LDAP and GOsa-config to new server

I have a running LDAP-server (using Ubuntu 12.04) with GOsa installed on it. Is there a way to migrate the whole database including the GOsa-config to a new server (Ubuntu 14.04)? I tried exporting ...
1 vote
1 answer
1k views

What files get modified by the authconfig?

I am trying to identify which files are edited with the following command, but can not find. authconfig --enablemd5 --enableshadow --enablecache --enablelocauthorize --enableldap --enableldapauth --...
0 votes
2 answers
2k views

Where are LDAP user's home stored

I have been goolging around LDAP these days. And I'm trying to deploy a central authentication server for quite a few ubuntu servers. After all the research, one question come to my mind. Where are ...
0 votes
1 answer
688 views

Authenticating users in OpenLDAP from multiple OUs

I am new to openLDAP and trying to figure out the best way to layout my DIT. The problem I'm running into is many of my applications want to use a specific baseDN in which to look in for ...
2 votes
1 answer
3k views

Not able to add memberOf overlay openldap 2.3.9

I am currently working on integrating LDAP authentication into a system and I would like to restrict access based on LDAP group. The only way to do this is via a search filter and therefore I believe ...
0 votes
2 answers
864 views

OpenLDAP - possible to search without specifying base?

I am having some issues with OpenLDAP and Spring security, where the latter does a search with the whole path in dn (filter), and an empty base. OpenLDAP does not like this, and the query fails. The ...
1 vote
1 answer
177 views

kadmind error - krb5_recvauth: start_seq_get is not supported in the HDBGET keytab type

I'm trying to migrate a heimdal KDC with an OpenLDAP backend from a Debian 5.x server (heimdal 1.2.dfsg.1-2.1) to a Ubuntu 14.04 server (heimdal 1.6~git20131207+dfsg-1ubuntu1.1), and am running into ...
0 votes
2 answers
1k views

OpenLDAP proxy : caching credentials in case Active Directory master unreachable

I'm setting up a Debian server in my company where users are managed in an Active Directory. I'd like to authenticate users with AD but I'm thinking it would be better, if feasible, to have a local ...
2 votes
1 answer
797 views

How update passwords of user's already existing in ldap? [closed]

I want to update passwords [user's already existing in ldap] of the user by importing data from /etc/passwd and /etc/shadow. How to achieve this? I will give the overview of my setup. Nodes user id ...
1 vote
1 answer
3k views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with [(&(uid=bla)(objectclass=posixAccount)(uid=*)(&(uidNumber=*)(!(uidNumber=0))))][dc=my-...
1 vote
1 answer
455 views

ACL - Subtree Admin should be able to modify password as well as the users themselves

dn: olcDatabase={1}hdb,cn=config objectclass: olcDatabaseConfig objectclass: olcHdbConfig olcaccess: {0}to dn.subtree="ou=subtree,dc=domain,dc=tld" by self write by dn="cn=subadmin,dc=domain,dc=tld" ...
4 votes
1 answer
9k views

How to add a user containing a UID to OpenLDAP that runs on CentOS7?

Add a user user.ldif dn: uid=sampleuser,ou=people,dc=my-domain,dc=com objectClass: top objectClass: inetOrgPerson cn: sample user uid: sampleuser Problem [root@host ~]# ldapadd -x -W -D "cn=...
1 vote
1 answer
2k views

Delete domain using ldapdelete

According to the man page of ldapdelete it should be possible to delete entries [root@controller ~]# man ldapdelete EXAMPLE The following command: ldapdelete "cn=Delete Me,dc=...
0 votes
1 answer
476 views

how to create two dits in rts openldap server

I have created a base database with like this olcDatabase={0}config.ldif # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. # CRC32 5ebe5cbf dn: olcDatabase={0}config objectClass: ...
0 votes
1 answer
105 views

OpenLDAP doesn't return DN

our OpenLDAP installation does not return DN attribute in answers to queries. It is listed (and contains correct value) on the "Internal Attributes" page in phpldapadmin, but doesn't appear when I do ...
2 votes
1 answer
3k views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
5 votes
0 answers
970 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
4 votes
3 answers
9k views

Restoring openldap configuration from ldif file?

I am trying to restore my OpenLDAP server from an ldif file I made before it went horribly wrong. All of the websites I found talk about using slapadd but when I run slapadd -v -l ~ns01/...
0 votes
1 answer
769 views

Working LDIF configuration example for openLDAP SQL backend

I need to provide access to a postgres database through LDAP and I am looking for a working configuration sample using LDIF files. All the examples I can find are using the old slapd.conf file for ...
2 votes
1 answer
13k views

postgresql LDAP authentication

I am trying to give an LDAP authentication to my postgresql database. Here is my pg_hba.conf config file local all all md5 local all postgres md5 host all all 0.0.0.0/0 ldap ldapserver=...
0 votes
1 answer
158 views

ACL (openldap2.4) for subtree won't work for specific group

Here's a sample ldif of my implemented ACL: dn: olcDatabase={-1}frontend,cn=config objectclass: olcDatabaseConfig objectclass: olcFrontendConfig olcaccess: {0}to dn.subtree="ou=someou,dc=somedc,dc=...
0 votes
1 answer
66 views

Weird authentication error from Active Directory Win 2008R2

I am trying to do a ldap query from a OpenBSD client to windows 2008R2 active directory and I am getting this error,"49: Invalid credentials". I don't understand why if I tried the same username and ...
0 votes
1 answer
1k views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
0 votes
1 answer
400 views

OpenLdap error: Your attempt to add uidNumber (2276) to <cn ....> is NOT allowed. That attribute/value belongs to another entry

I'm using OpenLDAP. The management interface is phpLDAPadmin. Whilst this has made things easy, it also means I've not been exposed to the internals. There is an existing entry using the uidNumber ...
2 votes
1 answer
1k views

How to configure Centos 5.3 using OpenLDAP to store and serve SSH public keys?

I want to be able to manage all my users logins via OpenLDAP. I am using Centos 5.3, OpenSSH 4.3p2-42 and OpenLDAP 2.3.43. I have installed GOsa2. Is there a GOsa plugin to manage the SSH keys in ...
3 votes
0 answers
99 views

users in openLDAP Groups on Windows Server not gaining access to share

I have openldap and samba PDC setup. My windows server is a member of the samba Domain. I have a group created with users. I can see the group on the windows 2008 server, however when I add this group ...

1
17 18
19
20 21
30