OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
18 views

Applying ppolicy.ldif in OpenLdap

I just added the ppolicy.ldif schema to ldap by running the following: ldapadd -T EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif I then try to ldapadd my change.ldif file seen below #...
0
votes
0answers
8 views

How to set an ACL in OpenLDAP to allow a user to fully manage an OrganizationalUnit? [duplicate]

I just installed OpenLDAP on my Ubuntu Server 16.04 LTS. I have my OpenLDAP server setup as depicted in the image below: Just like the image depicts I would like the blue color coded cn=admin to be ...
1
vote
0answers
13 views

Unable to configure TLS options for OpenLDAP

I am struggling with setting up TLS for a new OpenLDAP server. The system is Debian Jessie (updated to the latest 8.5 stable), and I have set up the server by installing the slapd package, with almost ...
0
votes
0answers
21 views

How to change the 'olcAccess' values of olcDatabase in OpenLDAP via spring-ldap?

I'm a new person of using spring-ldap-2.0.4 in order to communicate openldap, and change olcAccess values of olcDatabase via spring LDAP interface without using LDIF, I have met a difficult problem, ...
1
vote
1answer
2k views

OpenLDAP to Samba 4 Migration, create middle layer / webservice for user initiated password migration/change?

for the last few days I have been looking into migrating an old linux server running a OpenLDAP/Samba 3 configuration with about 100 users to a new SBS Server running Samba 4 (like Zentyal or UCS). ...
1
vote
1answer
57 views

How to only allow users and/or groups access to certain client machines that are connected to an openldap server?

I would really like to figure out how I can allow users and/or groups access to certain client machines that are all connected to an OpenLDAP server. I would like to do this whether the user is ...
1
vote
2answers
47 views

id command is not showing secondary groups

During some days I've been working on a LDAP integration. Now, after configure almost everything that I needed, I came up with this last wall: The need of use secondary groups which are taken from the ...
0
votes
0answers
12 views

ldapadduser command throws “Could not guess current user”

I have ubuntu-12.04 server. I have setup OpenLdap server at 10.4.15.217. Its working fine. I have another Ubuntu-12.04 server where I installed ldapscripts using command "apt-get install ldapscripts"....
0
votes
1answer
37 views

Open Directory won't authenticate

I have 2 servers running Open Directory (Mac OS X). One is running the master Open Directory(OD) server, the other is running a replica. For a little while, the master has been down to Apple ...
0
votes
0answers
17 views

Install OPENLDAP as service from compiled source

I am using Centos 7 and compiled openldap from source and installed it in a custom location, however I found that it doesn't come with the option of installing as service as it would if I yum install ...
0
votes
1answer
60 views

Forcing OpenLDAP connections to use STARTTLS not allowing user to login

I have a basic OpenLDAP server running on Ubuntu 16.04LTS which authenticates users perfectly fine but I really wanted to make it more secure so I decided to use STARTTLS and How To Encrypt OpenLDAP ...
0
votes
2answers
228 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
89 views

Suddenly i can not join Windows clients to Samba PDC anymore

Some years ago i configured a Primary Domain Controller through Samba and LDAP (slapd) on an Ubuntu machine (13.10) at 192.168.69.203 which should be accessible by the NetBIOS name SRV1. I must note i ...
0
votes
1answer
59 views

Error while compiling apr-util for apache with LDAP support

I am currently trying to create a custom 64bit LAMPP stack on CentOS 7, in which each component should reside in its own folder, with every dependency included and in its own folder. Currently, I ...
-1
votes
2answers
491 views

Set up LDAP on Redmine with Zimbra LDAP

I'm trying to enable LDAP authentication for a Redmine installation. My LDAP Server is the one provided by Zimbra, and I'm perfectly sure that it works good (I use LDAP also for ownCloud server, in ...
0
votes
0answers
16 views

unable to delete entry.what am i missing?

Newbie question, There are 2 ldap servers i have inherited. I need to delete a user which keeps re-spawning. I was told that this is a syncrepl setup with another node. What do i need to do in order ...
1
vote
0answers
14 views

rfc2307bis LDAP schema: ipNetmaskNumber lookup for an ipHost object

I'm using Openldap for IAM, and consider using it also as a configuration management backend. The rfc2307bis schema has an ipHost class, which allows for ipHostNumber attribute, but not for the ...
2
votes
4answers
704 views

Is it possible to have non-replicated data on an LDAP consumer?

I've read all the available documentation, the Mastering OpenLDAP book, and like a zillion mail-list posts but I haven't found a way to make such scenario possible. I see several use cases for this ...
1
vote
1answer
36 views

OpenLDAP TLS CA configuration

I'm currently in the process of setting up two sychronized OpenLDAP servers, access through starttls/ldaps. On the client/slave, I had problems with the TLS connection. I'm using the directory-based ...
0
votes
0answers
15 views

error: found a non-fatal phpLDAPAdmin Bug

i just install openldap with phpldapadmin. but when i go to monitor menu i found: is this actually something can be solved? anyone ever solve this issue before? Thanks, AnD
1
vote
1answer
63 views

LDAP - how to use attribute from objectclass:account and objectclass:inetOrgPerson?

I have an openLDAP which I use for authenticating users to various servers, where each user can have access to a varying number of hosts. I am solving that requirement by using the "host" attribute, ...
1
vote
0answers
36 views

Import Windows 2008R2 .p12 certificate into Samba4 SDC

In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would ...
0
votes
1answer
40 views

error: Automatically removed objectClass from template as it is not defined in the schema

I'm installing openldap with phpldapadmin in 2 diffrent CENTOS 7 servers with configuration as follows: openldap server: firewall-cmd --permanent --add-service=ldap firewall-cmd --permanent --add-...
0
votes
1answer
48 views

Open LDAP Server migration

Im trying to migrate an Open LDAP Server from Ubuntu LTS to Arch Linux. So I followed the Guid by Alex Pánek. So first I backuped the Databases from the Ubuntu Maschine: ubuntu$ sudo slapcat -b cn=...
1
vote
0answers
82 views

`ldap_bind: Invalid credentials` during setup of LDAP server on Centos 7 VM

I am setting up an LDAP server on a centos 7 VM, by following the guide here. Everything is fine until the last part of step 4, after I create the base domain. I have not changed ldap.conf or similar ...
-1
votes
1answer
41 views

How to switch user in Linux with password

I have client with LDAP authenticatation, when user1 login to client, and switch to user2 (sudo su - user2), he just login without password. I want to make switching user in client with authentication ...
2
votes
1answer
50 views

LDAP Remote Login Logs

How would I log who authenticated against my ldap system on Linux in my lab? I have a lab with several workstations, and one server running openldap. I would like to have similar functionality as with ...
0
votes
0answers
38 views

certutil and pk12util fail to import distinct certificate/key to Mozilla NSS database

I am about to build LDAP access via TLS on a Centos 6.7 system. I created a CA key (CA.key) and certificate (CA.crt) in /etc/openldap/cacerts. Likewise I created server.key/server.csr and created a ...
1
vote
1answer
90 views

openSSL/openLDAP tls error

I have two openLDAP servers, each was setup side by side using a script that did all the heavy lifting, the two servers replicate their configs/users to each other, and for a long time I thought ...
1
vote
1answer
22 views

openldap alternative to modifying core schema syntax

I have an application that stores contacts in OpenLDAP. It uses the c attribute to store a string describing a country name. The syntax of c only allows a two-letter country code, but the application ...
2
votes
1answer
81 views

LDAP: error code 50 - no write access to parent while adding user in OpenLDAP

I am trying to create a user in OpenLDAP through my Java code(which works in all of LDAP environments I have tried so far). When I tried it with OpenLDAP, I got the following error: LDAP: error code ...
1
vote
1answer
62 views

Tool to manage samba accounts in LDAP

TLDR: Can I sensible manage samba accounts in openldap with Apache Directory Studio (or other general purpose ldap editors)? I'm currently trying to move away from GOsa as our LDAP management tool. (...
1
vote
1answer
39 views

OpenLDAP : retrieve members of a group

I enabled memberof module in openldap. Added two groups and some members under them. (groupOfNames) When I printed the members of a particular group using the filter (&(objectClass=groupOfNames)(...
1
vote
2answers
62 views

openldap give group write access to subtree

I have dn: ou=people,dc=example,dc=com objectClass: organizationalUnit ou: people and group of admins for it: dn: cn=people-admins,ou=groups,dc=example,dc=com objectClass: groupOfUniqueNames cn: ...
0
votes
2answers
76 views

How to connect postgresql with LDAP user?

I have a server with postgresql-9.4 fresh install and I have another server with LDAP already installed. I want to connect postgresql with LDAP user that already exists. What's the basic ...
0
votes
1answer
41 views

OpenLDAP proxy AD showing empty tree

I'm using OpenLDAP (in a docker container) mainly for two purposes: 1.) Having a local tree which actually stores my technical users. 2.) Proxy specific queries to my corporate active directory just ...
0
votes
2answers
68 views

OpenLDAP No such object (32)

I am trying to setup an OpenLDAP server with FusionDirectory as a frontend Following this guide: http://documentation.fusiondirectory.org/en/documentation/admin_installation_redhat_6 http://...
1
vote
1answer
457 views

Ubuntu - Installing OpenLDAP with meta?

I am trying to host an LDAP service that can help proxy between multiple LDAP servers. An example found here: http://blog.sejo.be/2010/01/8/openldap-en-3-ad-servers/ I thought I would give OpenLDAP a ...
0
votes
0answers
49 views

slapd: Disable wildcard search on LDAP-Attribute

i run a ldap server on a ubuntu machine (apt-get install ldap ldap-utils). The ldap server provides a kind of a global address-book. Each entry provides basicly the attributes title, givenname, ...
0
votes
1answer
2k views

ldap change schema and config password

I installed openldap server to fedora 20, and try use it for manage bugzilla accounts. So I first configure it for my domain, plus set password: dn: olcDatabase={0}config,cn=config changetype: modify ...
0
votes
1answer
44 views

What is the equivalent of a windows active directory user in Openldap?

If I want to maintain a sync between active directory users with unix attributes enabled, and openldap, what would be the user's type that I have to create in openldap? I could see that a user in ...
3
votes
2answers
115 views

Are SPNs specific to Windows and Active Directory?

Are Service Principle Names specific to Active Directory on Windows? Or do they exist in Linux OpenLDAP / Kerberos KDC servers too?
1
vote
0answers
39 views

Unspecified GSS failure. after setting up krb5/ldap authentication

new here, so I recently setup ldap/krb5 authentication on an centos7.2 vm. Krb5/ldap is working correclty as I can login using ldap user account. However, when I check the logs in the client machine /...
2
votes
1answer
29 views

How to use ldapsearch with SSL on different port (-p does not work)?

I have an OpenLDAP server running in a test environment with a firewall on the LAN forwarding port 8636 back to slapd listening on 636 (for an older application which does not support START_TLS). To ...
0
votes
0answers
31 views

Ldap server cannot accept Public IP

I have this LDAP server and 10 clients in the network. 2 clints can connect to server using server's private ip (10.10.10.10), but the other clients cannot ping private ip, so they use public ip ...
-1
votes
1answer
60 views

Remove all contents of an openldap server in Centos

I'm facing a problem and I don't know how to solve it. In fact, I have done some ldapadd and I've realised that I need to delete all things from the server. So what I've tested is to reinstall yum but ...
1
vote
0answers
45 views

Gosa with openldap giving php error on startup

I am trying to setup GOsa and OpenLDAP on a Centos 7 machine and am encountering some issues. Mainly when i access the /gosa webpage I get the following error: Fatal error: Class 'session' not found ...
2
votes
1answer
58 views

OpenLDAP - How to restrict Debian login to specific groups (posixGroup)?

I'm trying to restrict login to specific LDAP groups in Debian 8. The system is configured to use OpenLDAP (PAM) as authentication method. My goal is to configure the system to allow all local users ...
0
votes
1answer
114 views

slapd dead but pid file exists openldap

I am facing issue with our new LDAP servers as they go down one by one alternatively. When checked for the services it says: "slapd dead but pid file exists openldap" but show no service ...
0
votes
2answers
103 views

Modifying OpenLDAP Schema - Adding 'host' attribute to 'person' objectclass

We have a legacy custom webapp that authenticates users against an OpenLDAP server. We are trying to set up another, separate OpenLDAP server to replace the older one, but we need to make the new ...