OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
56 views

how to join centos 7 to samba domain?

In my office, we use samba domain + ldap. I already join some Windows 7 machines, but now I need to join CentOS 7 to that domain. How can I do that? Below are steps that I already did: install ...
1
vote
1answer
1k views

How to migrate LDAP (database,schema,configuration) to other machine

I'm using openldap 2.4.40, and i need to migrate my existing ldap database, configuration, and schema (basically everything ldap server related) to a new machine. the problem is, I use cn=config ...
1
vote
1answer
42 views

forwarding mail loop in postfix

recently i configured my postfix server with dovecot, sasl and ldap according some tutorials. it works fine indeed but always when i receive email it disappears after literally 5 minutes, postfix says ...
1
vote
1answer
45 views

How can I authenticate users in OpenLDAP using multiple password schemes?

I've seen this Multiple OUs question, as well as the NO post, but without a good explanation it doesn't really solve the problem. I want to be able to allow users to authenticate using standard ...
-1
votes
1answer
30 views

Openldap Password change at first login

I have implemented openldap in centos 6, I want to push password change policy at first login. Which pwdPolicy ObjectClass and Attributes can accomplish this task ? # MyOrgPPolicy, Policies, ...
0
votes
0answers
20 views

openldap home directory permissions for different users

we are testing openldap server for a new domain in our company. How can we implement users with different permissions on home directory. we want some users to have full access to save data on desktop ...
2
votes
2answers
1k views

Does anyone have a valid and working example of OpenLDAP meta backend?

I have been Google'ing my fingers off and simply can not find a working example of how to merge/proxy a OpenLDAP server and windows AD server. Have anyone worked with this before? Any suggestions ...
0
votes
2answers
341 views

Replicate From OpenDJ to OpenLDAP?

I am considering retiring some of our older OpenDJ LDAP servers and replacing with OpenLDAP. (seems to be more widely supported) I am wondering if it's possible to replicate directly from OpenDJ to ...
-1
votes
1answer
30 views

samba openldap user file premissions

we are testing openldap server with samba3 backend for a new domain in our company. How can we implement users with different permissions on home directory. we want some users to have full access to ...
0
votes
0answers
26 views

openldap ppolicy users login Access denied

I'm having trouble logging in User created after following steps from Youtube link https://www.youtube.com/watch?v=_ZvnNVwWk-M&list=PLrUFyg1unBb8n0SJxJqQYMo9kRcY2Mly0&index=7 This video ...
0
votes
0answers
13 views

Openldap ACL restrict users to add/remove specific objectClass

I'm trying to restrict users so they can only add remove certain objectClass objects to their user in ldap. The user list [1] gave a way from the manual to do this. access to attrs=objectclass ...
0
votes
0answers
10 views

What happens using SASL plaintext on an openldap server on the server side?

I have an OpenLDAP server and I use SASL with the login authentication mechanism. My user passwords are securely hashed and stored within my LDAP database. I understand that the login credentials are ...
0
votes
0answers
22 views

Copy specific entries from Active Directory to Openldap

I am handpicking some entries from Active directory and I want to populate it to openldap. The entries are somethings like dn, cn, unix attirbutes like uid, gid, memberrOf, manager, phonenumber, etc. ...
1
vote
1answer
168 views

OpenLDAP and pGina vs Active Directory (Using Samba4 Domain Controller)

Note: I know there are some questions talking about similar topic, but they were all a couple of years old, therefore I prefered to mention my exact situation to get the most proper solution according ...
0
votes
2answers
90 views

Cannot run SAMBA (DC) and OpenLDAP, (The port is being used)

I installed samba and made it a simple domain controller, and I intend to set it to make the authentication over OpenLDAP. The problem is I can NOT run both slapd and samba processes at the same time. ...
2
votes
1answer
3k views

openLDAP how to remove the nis schema from the current configuration

openLDAP 2.4 Ubuntu 14.04 I have found this question dn-based linux groups from ldap. I am trying to include the rfc2307bis schema, but it seems the nis schema must be removed from the configuration ...
0
votes
1answer
25 views

Allow LDAP Authentication (or connection)

I'm trying to make a webapp that authenticate throw a LDAP Server. But i get this error: ldap_bind(): Unable to bind to server: Can't contact LDAP server And when i try this command: ldapwhoami ...
0
votes
0answers
24 views

Openldap ActiveDirectory Proxy using Slapd.d

I am currently attempting to setup an OpenLDAP proxy that will proxy proxy between 2 Active Director Domains, and will be used to talk to work with Shibboleth IDP3. I've never worked with openLDAP ...
0
votes
1answer
23 views

ldap-overlay with fixed default attributes

i'm having a largish user-base (>>1000) which should be able to collectively use some sharing service. the user base is slowly but constantly changing. esp. we are not interested in privilege ...
0
votes
2answers
160 views

openldap TLS error -8179:Peer's Certificate issuer is not recognized

tl;dr Does this error mean that I need to find my company's ldap server's public certificate and install it, or that my company's ldap server needs to install my public cert? If the former, how can I ...
0
votes
0answers
14 views

Allow or disallow some users login in Dovecot based in their network

I have a server running dovecot with IMAP and LDAP authentification. All works as expected, however I would want to let some users to access the mail server from outside and other to access from the ...
1
vote
3answers
12k views

ldap_add: Constraint violation (19)

I'm having issues importing users with ldapadd and ldif files. The error I'm getting is: ldap_add: Constraint violation (19) additional info: structuralObjectClass: no user modification allowed The ...
1
vote
0answers
18 views

Ldap on Centos7: why my RootDN doesn't work?

On a fresh centos7 ldap server I use a ldif like this replace: olcRootDN olcRootDN: dc=Manager,dc=mydomo,dc=mydom - replace: olcAccess olcAccess: {0}to * by ...
0
votes
3answers
6k views

How to disable anonymous access on LDAP

I need to secure my LDAP server and am not quite sure the best way to go about it. I am running Debian "Lenny", and using OpenLDAP (slapd). I notice that if I run: ldapsearch -x -W -b ...
0
votes
0answers
19 views

How to set initial user password in openldap?

I am new in setting up LDAP server. I have configured Openldap server and able to add test users from LDIF file. The LDIF file has username and password for each user. Now for the real part, I have ...
0
votes
1answer
61 views

how to configure proper credentials in OpenLDAP

I don't understand how to configure users and passwords on the OpenLDAP server. What I describe in this question is based on a clean install of OpenLDAP 2.4 on Centos 7 (via yum). After starting ...
1
vote
2answers
1k views

OpenLDAP TLS Authentification

I am trying to implement TLS as per https://help.ubuntu.com/lts/serverguide/openldap-server.html When I try to modify cn=config database with this ldif file: dn: cn=config add: ...
0
votes
1answer
47 views

OpenLDAP/SSSD Automatically Add User to Local Group

I've got a host of servers running various flavors of Linux all setup as OpenLDAP clients via SSSD. I added an LDAP group (sysadmins). I also added a sysadmins group on all of my servers. The members ...
0
votes
2answers
46 views

pam_groupdn doesn't work at all. always all users allowed to log in

i have tried to install pam, ldap on fedora23. i have configured pam.d/system-auth as follows: #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time ...
1
vote
1answer
36 views

Add several new entries to LDAP fails

I can't add more than one record to LDAP. I have blank line before a new DN entry but it seems it doesn't work for some season. ldapadd -x -D cn=Manager,dc=hadoop,dc=local -w -f ldap.ldif ...
2
votes
1answer
1k views

Sometime ProFTPD session closed immediately after Login successful

The version that I'm using: ProFTPD Version: 1.3.3c (maint) Scoreboard Version: 01040003 Built: Wed Dec 1 2010 16:41:40 ICT Loaded modules: mod_cap/1.0 mod_ldap/2.8.22 mod_auth_pam/1.1 ...
3
votes
2answers
11k views

VsFTPd - LDAP - PAM

I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both LDAP and PAM, I have some difficulties. VsFTPd runs ...
0
votes
1answer
142 views

Install openLDAP server on pfsense

I have a pfsense router with 25 clients ( linux and windows ). I want to filter the internet traffic for some of the clients using squid guard. I have researched the options and I would like to use ...
1
vote
0answers
44 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
2
votes
1answer
24k views

ldap_modify: Insufficient access (50)

I am running an OpenLDAP 2.4 server that uses the SSL service for communication. It works for lookups. I am trying to add mirror mode replication. So this is the command that I'm executing: ...
0
votes
1answer
29 views

OpenLDAP Filtering Users that are part of Groups of Groups

LDAP Configuration: MemberOf Overlay is enabled Users are part of an organizationalUnit called People. Each user is a "memberOf" a role. For example, a user in their role at a company is a ...
2
votes
1answer
8k views

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 ...
1
vote
1answer
56 views

ldap ssl v2 v3 can't read server hallo A

I need to connect ApacheDS database using startTLS with OpenLDAP client. My ldaprc file contains: URI ldap://127.0.0.1:7323 ldaps://127.0.0.1:7423 SSL start_tls SASL_MECH plain TLSCipherSuite ...
0
votes
1answer
69 views

Enable anonymous bind in openldap

I have setup ldap server successfully on centos 7, It works fine. However, i cannot access the server with 'anonymous' bind, which according to every google search it should be. When I execute; ...
1
vote
2answers
4k views

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is ...
5
votes
3answers
304 views

How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?

I'm setting up OpenLDAP slapd on Ubuntu 14.04 Trusty Tahr. I want certain instances (replication etc.) that aren't users to be able to login via SASL using DIGEST-MD5 mechanism. Unlike users, they ...
0
votes
1answer
67 views

ldapmodify error - Server is unwilling to perform (53) additional info: no global superior knowledge

Ok guys, I've been beating my head against the wall over this one all day, and I'm getting nowhere. I'm trying to run ldapmodify against OpenLDAP in a script to update a couple of attributes for a ...
1
vote
0answers
33 views

LDAP ACL for restricting applications with same user dn

Currently we need to configure Group based LDAP login for our custom applications. We have applications named app1, app2 etc. For restricting users to login for a particular application for eg app1 ...
3
votes
3answers
97 views

Kerberos with OpenLDAP backend: Password Sync HowTo

The basic setup is an OpenLDAP server. The users are provisioned and the passwords are set. Now we decided to add an MIT KDC for being able to use Kerberos. We configured the MIT KDC to utilize the ...
5
votes
3answers
353 views

When setting up OpenLDAP for the first time, what are some things to keep in mind?

I'm in the process of reading up on documentation and setting up OpenLDAP to handle authentication throughout my network, for email, web services, user accounts, any anything else that I could throw ...
4
votes
2answers
151 views

AWS Simple AD: “KDC has no support for encryption type” for users created with adtool, but not with MS Management Console

Background I am trying to log in (via SSH, to an Amazon Linux EC2 instance running sssd) as users that I've created in my AWS Directory Services Simple AD. I am authenticating with kerberos and ...
1
vote
1answer
198 views

sssd one ldap server for authentication and one for automounting, is this possible?

Says it all in the title really :) I am looking into SSSD but have a requirement that it must use ldap-1 for user authentication and then get the home directory automount information from ldap-2. ...
1
vote
1answer
2k views

Openldap ppolicy, how to unlock account?

I have enabled OpenLDAP password policy overlay and account lockout is now working fine. On 5 authentication failures the account is getting locked out. On resetting the password the account becomes ...
0
votes
0answers
23 views

OpenLDAP proxy gone for good

I recently had to troubleshoot a Windows AD issue. Users suddenly lost access to shared folders and network drives. After some research I discovered that there was a Linux CentOS machine that crashed ...
0
votes
0answers
176 views

Freeradius/Openldap/802.1X: PEAP-MSCHAPv2 XOR certificates

For WPA2 Enterprise I would like to have user authentication which is supported out-of-the-box by as many clients as possible (i.e., PEAP-MSCHAPv2). Furthermore, for laptops, workstations etc. I ...