OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
33 views

certutil and pk12util fail to import distinct certificate/key to Mozilla NSS database

I am about to build LDAP access via TLS on a Centos 6.7 system. I created a CA key (CA.key) and certificate (CA.crt) in /etc/openldap/cacerts. Likewise I created server.key/server.csr and created a ...
1
vote
1answer
54 views

openSSL/openLDAP tls error

I have two openLDAP servers, each was setup side by side using a script that did all the heavy lifting, the two servers replicate their configs/users to each other, and for a long time I thought ...
1
vote
1answer
21 views

openldap alternative to modifying core schema syntax

I have an application that stores contacts in OpenLDAP. It uses the c attribute to store a string describing a country name. The syntax of c only allows a two-letter country code, but the application ...
2
votes
1answer
60 views

LDAP: error code 50 - no write access to parent while adding user in OpenLDAP

I am trying to create a user in OpenLDAP through my Java code(which works in all of LDAP environments I have tried so far). When I tried it with OpenLDAP, I got the following error: LDAP: error code ...
1
vote
1answer
61 views

Tool to manage samba accounts in LDAP

TLDR: Can I sensible manage samba accounts in openldap with Apache Directory Studio (or other general purpose ldap editors)? I'm currently trying to move away from GOsa as our LDAP management tool. (...
1
vote
1answer
37 views

OpenLDAP : retrieve members of a group

I enabled memberof module in openldap. Added two groups and some members under them. (groupOfNames) When I printed the members of a particular group using the filter (&(objectClass=groupOfNames)(...
1
vote
2answers
49 views

openldap give group write access to subtree

I have dn: ou=people,dc=example,dc=com objectClass: organizationalUnit ou: people and group of admins for it: dn: cn=people-admins,ou=groups,dc=example,dc=com objectClass: groupOfUniqueNames cn: ...
0
votes
2answers
58 views

How to connect postgresql with LDAP user?

I have a server with postgresql-9.4 fresh install and I have another server with LDAP already installed. I want to connect postgresql with LDAP user that already exists. What's the basic ...
0
votes
1answer
38 views

OpenLDAP proxy AD showing empty tree

I'm using OpenLDAP (in a docker container) mainly for two purposes: 1.) Having a local tree which actually stores my technical users. 2.) Proxy specific queries to my corporate active directory just ...
0
votes
2answers
54 views

OpenLDAP No such object (32)

I am trying to setup an OpenLDAP server with FusionDirectory as a frontend Following this guide: http://documentation.fusiondirectory.org/en/documentation/admin_installation_redhat_6 http://...
1
vote
1answer
444 views

Ubuntu - Installing OpenLDAP with meta?

I am trying to host an LDAP service that can help proxy between multiple LDAP servers. An example found here: http://blog.sejo.be/2010/01/8/openldap-en-3-ad-servers/ I thought I would give OpenLDAP a ...
0
votes
0answers
45 views

slapd: Disable wildcard search on LDAP-Attribute

i run a ldap server on a ubuntu machine (apt-get install ldap ldap-utils). The ldap server provides a kind of a global address-book. Each entry provides basicly the attributes title, givenname, ...
0
votes
1answer
2k views

ldap change schema and config password

I installed openldap server to fedora 20, and try use it for manage bugzilla accounts. So I first configure it for my domain, plus set password: dn: olcDatabase={0}config,cn=config changetype: modify ...
0
votes
1answer
38 views

What is the equivalent of a windows active directory user in Openldap?

If I want to maintain a sync between active directory users with unix attributes enabled, and openldap, what would be the user's type that I have to create in openldap? I could see that a user in ...
3
votes
2answers
115 views

Are SPNs specific to Windows and Active Directory?

Are Service Principle Names specific to Active Directory on Windows? Or do they exist in Linux OpenLDAP / Kerberos KDC servers too?
0
votes
0answers
63 views

User ldap cannot change password : LDAP password information update failed: Insufficient access

I'm using centos 6.7 to create LDAP server, but the user still cannot change their own password. The error when user try to change the password : [john2@servergw ~]$ passwd Changing password for ...
1
vote
0answers
28 views

Unspecified GSS failure. after setting up krb5/ldap authentication

new here, so I recently setup ldap/krb5 authentication on an centos7.2 vm. Krb5/ldap is working correclty as I can login using ldap user account. However, when I check the logs in the client machine /...
2
votes
1answer
27 views

How to use ldapsearch with SSL on different port (-p does not work)?

I have an OpenLDAP server running in a test environment with a firewall on the LAN forwarding port 8636 back to slapd listening on 636 (for an older application which does not support START_TLS). To ...
0
votes
0answers
26 views

Ldap server cannot accept Public IP

I have this LDAP server and 10 clients in the network. 2 clints can connect to server using server's private ip (10.10.10.10), but the other clients cannot ping private ip, so they use public ip ...
-1
votes
1answer
42 views

Remove all contents of an openldap server in Centos

I'm facing a problem and I don't know how to solve it. In fact, I have done some ldapadd and I've realised that I need to delete all things from the server. So what I've tested is to reinstall yum but ...
1
vote
0answers
33 views

Gosa with openldap giving php error on startup

I am trying to setup GOsa and OpenLDAP on a Centos 7 machine and am encountering some issues. Mainly when i access the /gosa webpage I get the following error: Fatal error: Class 'session' not found ...
2
votes
1answer
54 views

OpenLDAP - How to restrict Debian login to specific groups (posixGroup)?

I'm trying to restrict login to specific LDAP groups in Debian 8. The system is configured to use OpenLDAP (PAM) as authentication method. My goal is to configure the system to allow all local users ...
0
votes
1answer
90 views

slapd dead but pid file exists openldap

I am facing issue with our new LDAP servers as they go down one by one alternatively. When checked for the services it says: "slapd dead but pid file exists openldap" but show no service ...
0
votes
2answers
78 views

Modifying OpenLDAP Schema - Adding 'host' attribute to 'person' objectclass

We have a legacy custom webapp that authenticates users against an OpenLDAP server. We are trying to set up another, separate OpenLDAP server to replace the older one, but we need to make the new ...
1
vote
0answers
70 views

Can I allow configure Jenkins to use LDAP authentication while still allowing company github accounts to make commits?

We are running Jenkins CI as a critical application in our organisation. I've recently set up an openLDAP server and I am looking to migrate all of our applications to this over time. The LDAP ...
0
votes
0answers
108 views

LDAP user authentication access denied

Currently, I am configuring LDAP client for user authentication on the server. Only SSH key authentication is allowed (Password authentication is not allowed). My SSH configurtion (/etc/ssh/...
0
votes
1answer
113 views

How to enable TLS on OpenLDAP

I am using CentOS 5.I have a problem enabling TLS (or ssl) on OpenLDAP server. I followed this tutorial. I generated the certificates and I configured the path in slapd.conf as following ...
1
vote
0answers
68 views

Configuring OpenLDAP over TLS for RHEL/CentOS 6.5

i've been banging my head against the wall with something that seems to be a simple concept. I have two RHEL 6.5 servers. One will be acting as the OpenLDAP server, and one will be a client ...
1
vote
0answers
676 views

VSFTP and openLDAP based virtual users home directory

I have a VSFTPD server based on CentOS 6, configured to authenticate virtual users against an openLDAP server. I can login to the FTP server, however, authenticated users are not redirected to their ...
1
vote
0answers
18 views

OpenLDAP - ldappasswd failing with “invalid parameter supplied: unable to find callback”

I have an OpenLDAP syncrepl replica that has updateRef and chaining configured. I also have AuthzPolicy and AuthzTo configured and working with everything except ldappasswd (or more importantly ...
0
votes
1answer
114 views

how to join centos 7 to samba domain?

In my office, we use samba domain + ldap. I already join some Windows 7 machines, but now I need to join CentOS 7 to that domain. How can I do that? Below are steps that I already did: install nss-...
2
votes
1answer
2k views

How to migrate LDAP (database,schema,configuration) to other machine

I'm using openldap 2.4.40, and i need to migrate my existing ldap database, configuration, and schema (basically everything ldap server related) to a new machine. the problem is, I use cn=config ...
1
vote
1answer
49 views

forwarding mail loop in postfix

recently i configured my postfix server with dovecot, sasl and ldap according some tutorials. it works fine indeed but always when i receive email it disappears after literally 5 minutes, postfix says ...
1
vote
1answer
66 views

How can I authenticate users in OpenLDAP using multiple password schemes?

I've seen this Multiple OUs question, as well as the NO post, but without a good explanation it doesn't really solve the problem. I want to be able to allow users to authenticate using standard ...
-1
votes
1answer
39 views

Openldap Password change at first login

I have implemented openldap in centos 6, I want to push password change policy at first login. Which pwdPolicy ObjectClass and Attributes can accomplish this task ? # MyOrgPPolicy, Policies, ...
0
votes
0answers
21 views

openldap home directory permissions for different users

we are testing openldap server for a new domain in our company. How can we implement users with different permissions on home directory. we want some users to have full access to save data on desktop ...
2
votes
2answers
1k views

Does anyone have a valid and working example of OpenLDAP meta backend?

I have been Google'ing my fingers off and simply can not find a working example of how to merge/proxy a OpenLDAP server and windows AD server. Have anyone worked with this before? Any suggestions ...
1
vote
2answers
373 views

Replicate From OpenDJ to OpenLDAP?

I am considering retiring some of our older OpenDJ LDAP servers and replacing with OpenLDAP. (seems to be more widely supported) I am wondering if it's possible to replicate directly from OpenDJ to ...
-1
votes
1answer
30 views

samba openldap user file premissions

we are testing openldap server with samba3 backend for a new domain in our company. How can we implement users with different permissions on home directory. we want some users to have full access to ...
0
votes
0answers
32 views

openldap ppolicy users login Access denied

I'm having trouble logging in User created after following steps from Youtube link https://www.youtube.com/watch?v=_ZvnNVwWk-M&list=PLrUFyg1unBb8n0SJxJqQYMo9kRcY2Mly0&index=7 This video ...
0
votes
0answers
16 views

Openldap ACL restrict users to add/remove specific objectClass

I'm trying to restrict users so they can only add remove certain objectClass objects to their user in ldap. The user list [1] gave a way from the manual to do this. access to attrs=objectclass value=...
0
votes
0answers
12 views

What happens using SASL plaintext on an openldap server on the server side?

I have an OpenLDAP server and I use SASL with the login authentication mechanism. My user passwords are securely hashed and stored within my LDAP database. I understand that the login credentials are ...
0
votes
0answers
26 views

Copy specific entries from Active Directory to Openldap

I am handpicking some entries from Active directory and I want to populate it to openldap. The entries are somethings like dn, cn, unix attirbutes like uid, gid, memberrOf, manager, phonenumber, etc. ...
1
vote
1answer
371 views

OpenLDAP and pGina vs Active Directory (Using Samba4 Domain Controller)

Note: I know there are some questions talking about similar topic, but they were all a couple of years old, therefore I prefered to mention my exact situation to get the most proper solution according ...
0
votes
2answers
150 views

Cannot run SAMBA (DC) and OpenLDAP, (The port is being used)

I installed samba and made it a simple domain controller, and I intend to set it to make the authentication over OpenLDAP. The problem is I can NOT run both slapd and samba processes at the same time. ...
2
votes
1answer
3k views

openLDAP how to remove the nis schema from the current configuration

openLDAP 2.4 Ubuntu 14.04 I have found this question dn-based linux groups from ldap. I am trying to include the rfc2307bis schema, but it seems the nis schema must be removed from the configuration ...
0
votes
1answer
27 views

Allow LDAP Authentication (or connection)

I'm trying to make a webapp that authenticate throw a LDAP Server. But i get this error: ldap_bind(): Unable to bind to server: Can't contact LDAP server And when i try this command: ldapwhoami -...
0
votes
0answers
26 views

Openldap ActiveDirectory Proxy using Slapd.d

I am currently attempting to setup an OpenLDAP proxy that will proxy proxy between 2 Active Director Domains, and will be used to talk to work with Shibboleth IDP3. I've never worked with openLDAP ...
0
votes
1answer
25 views

ldap-overlay with fixed default attributes

i'm having a largish user-base (>>1000) which should be able to collectively use some sharing service. the user base is slowly but constantly changing. esp. we are not interested in privilege ...
0
votes
2answers
425 views

openldap TLS error -8179:Peer's Certificate issuer is not recognized

tl;dr Does this error mean that I need to find my company's ldap server's public certificate and install it, or that my company's ldap server needs to install my public cert? If the former, how can I ...