OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
17 views

Why isn't pwdReset automatically set when pwdMustChange is true?

Every other directory server, i.e. Oracle's will automatically set pwdReset to TRUE if pwdMustChange is defined in the policy: When a user's password is changed by another user, such as a password ...
0
votes
0answers
12 views

LDAP dynlist not working with syncrepl replication

I'm using syncrepl replication with one master and many slaves. I'm also using dynlist overlay. Dynlist works on the master, but not on slaves. When I run a query on master, everything works ...
0
votes
1answer
13 views

AD LDS data refreshing from script

I need to setup a white pages servers located into a DMZ, which contains up to date identities information gathered from a remote OpenLDAP server with a specific account. I cannot enable syncrepl ont ...
0
votes
1answer
46 views

CentOS 7 autofs wildcard mount not working

I've got a couple of CentOS 7 client machines authenticating against OpenLDAP right now. The next step is to get autofs working. Which I have, but my map loads all users at once. I'd like to avoid ...
7
votes
2answers
152 views

SSSD rejects LDAP login with su: incorrect password

I've set up an LDAP server with user accounts. I've successfully configured a Rails application to authenticate against this LDAP server. I'm now trying to configure SSSD to authenticate against LDAP, ...
1
vote
2answers
63 views

Support users in openldap catalog with samba specific attributes

2016 is coming. We still use openldap. I have openldap server from ubuntu 12.04 with existing users. It provides the authentication layer in addition to containing the user, group, and machine ...
1
vote
3answers
859 views

Managing Linux user accounts + Samba + more

I have a network of about 3-6 CentOS servers, with about 5-10 users (currently, and near future). I'm looking for a solution for centralized managements of users. My requirements from it are: Linux ...
1
vote
1answer
38 views

Export LDAP schema without data

For testing purposes, I need a copy of our LDAP server without any personal data. What is the best way, to export this from an existing OpenLDAP server? I tried ldapsearch and Apache Directory ...
0
votes
2answers
376 views

how do you set the admin password on openldap 2.4

I am getting started with openLdap 2.4 and am having a bit of trouble, all the examples I see seem to refer to previous versions which used the text config file slapd.conf but from what I see on ...
0
votes
0answers
258 views

Cannot show openldap config using ldapsearch

im trying to get my Openldap settings in cn=config, and load a new schema in it, but i'm not able to get my cn=config with ldapsearch tool. root@ip-10-0-2-4:/tmp# ldapsearch -Y EXTERNAL -H ldapi:/// ...
2
votes
3answers
601 views

<suffix> invalid DN 21 (Invalid syntax) on Converting slapd.conf OpenLdap

Actually i want to configure ldap as master-slave replication using syncrepl method, On any reference which i found,I'm running on Centos 6 machine and openldap v2.4.23. I following step by step on ...
1
vote
1answer
54 views

Why openldap password policy pwdMinLength doesn't work on Ubuntu 14.04?

I have defined openldap password policy overlay The pwdMinLength: 9 is not working, i'm still able to create user with password less < 9 character, The password Password Policy Overlay on OpenLDAP ...
0
votes
3answers
914 views

How to set Maximum Password Expiry in OpenLDAP Linux

I am trying to find how to change some password policy settings in OpenLDAP (on a system-wide level, not on a per user level) such that all LDAP account users (i.e., existing and new users) have their ...
-2
votes
2answers
178 views

Bad hdb.ldif, need help to configure it

contents of /etc/openldap/slapd.d/cn=config/olcDatabase={2}hdb.ldif 1 # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. 2 # CRC32 2e34b404 3 dn: olcDatabase={2}hdb 4 objectClass: ...
2
votes
3answers
2k views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
0
votes
1answer
26 views

OpenLDAP extend ACL properly

I have a fresh installed server with this in it: How should I extend the ACL to give a specific user write access a description property under a specific subtree of items? More specificly I want to ...
0
votes
1answer
33 views

Linux LDAP to Ldapadmin configuration issues

I'm learning how to setup and use OpenLDAP installed on an Ubuntu server. I executed sudo apt-get install slapd ldap-utils -y and set my ldap domain to test.mydomain.com. I can execute ldapadd ...
1
vote
1answer
90 views

What does Samba need from LDAP for a valid account?

I have inherited an OpenLDAP system, coupled to a FreeNAS and it is quite a headache to create users all the time. I just want to create a user that can access its own homes share. I have a working ...
0
votes
0answers
24 views

LDAP Self-Service Interface for Profile-Management

I am searching for a Self-Service webinterface for my LDAP Users, I Airways have LAm installier for creating everything but my Users want to update their Passwords, Displaynames and Profilepictures on ...
0
votes
1answer
59 views

ldap_modify: Insufficient access (50) for cn=config as -H ldapi:/// -Y EXTERNAL

I'm setting up a second LDAP server. I've converted a slapd.conf to a slapd.d database using slaptest. I'm trying to apply this LDIF: # cat loglevel.ldif dn: cn=config changetype:modify replace: ...
0
votes
0answers
17 views

OpenLdap allop overlay olc

Is there any way to configure operational attributes to be shown for every request? (openldap 2.4) There is the allop overlay, but it seems to be not working with olc only with slapd.conf. I'm able ...
4
votes
2answers
92 views

OpenLDAP proxy cache not retrieving entries

I need to set up a local LDAP proxy cache which connects to our central Active Directory server. OpenLDAP Proxy Cache looks just like the thing. But following the manpages as closely as possible, I am ...
1
vote
1answer
176 views

ldap_add: Other (e.g., implementation specific) error (80) when adding pw-sha2.la module

I'm getting this error when trying to add a module to OpenLDAP: # ldapadd -H ldapi:/// -Y EXTERNAL -D 'cn=config' -f ./module.ldif SASL/EXTERNAL authentication started SASL username: ...
0
votes
1answer
60 views

How do I add an openLDAP contrib module with cn=config layout to Ubuntu?

I'm trying to get the pw-radius module loaded into my Ubuntu 12.04 slapd server but not sure how to go about it. Going off the README file in the passwd module directory, I've built the pw-radius ...
0
votes
1answer
16 views

OpenLDAP ACL stored as hash?

Does anyone know why when I add these 3 ACLs the third is represented in the olcDatabase\={2}hdb.ldif as a random string? ACLs: olcAccess: {0}to attrs=userPassword,shadowLastChange by ...
0
votes
1answer
31 views

i cant canfigure pgina for ldap login

hi this is mi ldap user tree: dc=intranet,dc=internet,dc=com cn=admin cn=user1 cn=bna ou=buo cn=user2 I want to log with anyone user in the tree and assign ...
1
vote
1answer
118 views

Configuring HP iLO for OpenLDAP

I have been working with some new HP DL360 Gen9 server. I'm attempting to configure these for LDAP authentication against our OpenLDAP directory and not having much luck. First, all of our ...
1
vote
1answer
86 views

How to install a trusted certificate on client machine to enable LDAP authentication?

I downloaded a TurnKey Linux OpenLDAP vm instance. It now runs in a vm. I am using this for user account authentication over a network. The client machine is a stock CentOS 7 machine. Everything on ...
-1
votes
0answers
141 views

How to Change maxPasswdAge parameter in OpenLDAP in Linux [duplicate]

I am trying to find how to change some password policy settings in openLDAP (on a system-wide level - not on a per user level) such that ALL LDAP account users (ie existing and new users) have their ...
1
vote
2answers
249 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
2
votes
0answers
21 views

OpenLDAP: partial syncrepl-ed cn=config

I would like to be able to syncrepl only a subtree of cn=config, namely cn=schema,cn=config: # {0}config, config dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: ...
1
vote
1answer
61 views

OpenLDAP configure LDAPS, restart fails

I am attempting to get ldaps working with openldap. I have a wildcard ssl certificate that was issued for this domain and have used ldapmodify to add the relevant files to cn=config as show here. ...
0
votes
3answers
271 views

Installing openLDAP

I have followed installing openLDAP from http://www.openldap.org/doc/admin24/quickstart.html and follow the tasks up to # 9. when I run [ su root -c /usr/local/libexec/slapd ] it asks for password ...
2
votes
1answer
70 views

Passwords not working after migration from /etc/shadow to LDAP

I've migrated RHEL6 user accounts from traditional /etc/passwd, /etc/shadow, and /etc/group files to OpenLDAP. However, trying to log in as the migrated users does not work because of incorrect user ...
1
vote
1answer
113 views

ldap_add: Protocol error (2) additional info: no attributes provided

I'm following this guide to migrate existing users in /etc/passwd and /etc/group on a RHEL6 machine to a new, external OpenLDAP server. I'm trying to apply this file: # cat people_group.ldif dn: ...
2
votes
1answer
178 views

ldap_modify: Insufficient access (50) when changing password

I'm trying to modify the LDAP admin password on a fresh OpenLDAP install on CentOS 6.7 (similar to RHEL 6.7). I created a file called change_ldap_password.ldif: # Hash your password: # slappasswd -h ...
1
vote
1answer
376 views

How to migrate LDAP (database,schema,configuration) to other machine

I'm using openldap 2.4.40, and i need to migrate my existing ldap database, configuration, and schema (basically everything ldap server related) to a new machine. the problem is, I use cn=config ...
0
votes
1answer
91 views

ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1) for ldapi:/// on CentOS

(This is a follow-up to ldap_modify: Insufficient access (50) when changing password as we identified a separate issue during diagnostics.) Before modifying the cn=config LDAP database, I'm trying to ...
3
votes
1answer
74 views

Master is Dead - Promote LDAP Slave to Master

I have inherited an undocumented openLdap setup - one Master server with two slaves. The Master died hard last night - disc corruption - the backup was a clone system on the same server and disk - so ...
0
votes
1answer
85 views

Reset Passwords of LDAP-Users at the first login

I have an LDAP Installation running on an Centos7 system. I want to create a big number of users. Those users will get a default password, so I want them to change the password at the (only)first ...
3
votes
2answers
2k views

How to add admin users in 389 LDAP, fedora directory server

I want to create couple of Admin users who have access to create/delete users on a particular group/Organization Unit. For example, User: uid=testadmin, ou=people, dc=my,dc=net Should have access ...
0
votes
0answers
18 views

Delete root dse from 389 directory server

I have a mail server with kolab 3 installed, when I was installing the server, for testing purposes, i created a second domain that I'll name test.com, now I want to delete this domain from my ldap ...
0
votes
1answer
244 views

Openldap - ldap user can't add entry: Insufficient access (no write access to parent)

I'ld like to make an addressbook in LDAP (for mailing clients, in first step for my RoundCube). Server is Debian 7.9, slapd 2.4.31 (OpenLDAP). After the successfully installation, I've created a ...
6
votes
2answers
10k views

LDAP: backup with slapcat vs ldapsearch

Used: openldap-servers-2.4.23-34.el6_5.1.x86_64 Task: create script for crontab to create scheduled database full backup. 1) slapcat - create file in in the default format, Berkeley DB. 2) slapcat ...
0
votes
2answers
119 views

Unable to get OpenLDAP with TLS working

I have an OpenLDAP 2.4.39 server running on a Centos 7 host which is populated with a minimal set of data. It work as expected when TLS is not used. I use this for authentication with dokuwiki today. ...
2
votes
4answers
8k views

How to add new attribute to an existing LDAP user objects

I want to add mail attribute to the existing ldap users. I think, its possible with using ldapmodify but not sure how. I have done that using phpldapadmin web GUI manually, but I have like more than ...
0
votes
0answers
35 views

Configure ldap.conf host with ipv6

In my ldap.conf is it possible to use HOST to configure an IPv6 address? I know that I can configure an IPv6 address using URI. The linux manual on ldap.conf doesn't state if it only support IPv4 for ...
0
votes
0answers
14 views

restore parts of an LDAP Database

Let's say I have a replicated LDAP setup and someone comes along and deletes an account by accident. Naturally this deletion then gets replicated to all the slaves. How would one go about restoring ...
0
votes
0answers
95 views

How to enable TLS on OpenLDAP

I am using CentOS 5.I have a problem enabling TLS (or ssl) on OpenLDAP server. I followed this tutorial. I generated the certificates and I configured the path in slapd.conf as following ...
1
vote
1answer
38 views

OpenLDAP using ipv6 link-local address “Can't contact LDAP Server (-1)”

I'm trying to use IPV6 to connect to my LDAP server. Everything works if I use ipv4 but I'm not ipv6 link-local address. I used the following command on my server using its own ipv6 address. Any clue ...