OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
1answer
20 views

kadmind error - krb5_recvauth: start_seq_get is not supported in the HDBGET keytab type

I'm trying to migrate a heimdal KDC with an OpenLDAP backend from a Debian 5.x server (heimdal 1.2.dfsg.1-2.1) to a Ubuntu 14.04 server (heimdal 1.6~git20131207+dfsg-1ubuntu1.1), and am running into ...
0
votes
2answers
61 views

OpenLDAP proxy : caching credentials in case Active Directory master unreachable

I'm setting up a Debian server in my company where users are managed in an Active Directory. I'd like to authenticate users with AD but I'm thinking it would be better, if feasible, to have a local ...
2
votes
1answer
42 views

How update passwords of user's already existing in ldap? [closed]

I want to update passwords [user's already existing in ldap] of the user by importing data from /etc/passwd and /etc/shadow. How to achieve this? I will give the overview of my setup. Nodes user ...
1
vote
1answer
58 views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with ...
0
votes
0answers
22 views

How can I restrict jabberd2 to only those users in an LDAP group?

I've setup openLDAP for use with jabberd2. I have users in multiple OUs and would like to create a group (ou=groups,cn=jabber,dc=my,dc=domain) to allow only those users with membership to login on the ...
1
vote
1answer
22 views

ACL - Subtree Admin should be able to modify password as well as the users themselves

dn: olcDatabase={1}hdb,cn=config objectclass: olcDatabaseConfig objectclass: olcHdbConfig olcaccess: {0}to dn.subtree="ou=subtree,dc=domain,dc=tld" by self write by dn="cn=subadmin,dc=domain,dc=tld" ...
1
vote
1answer
95 views

LDAP Client Search with SSL - CentOS7

Has anybody got SSL client authentication working with OpenLDAP (on CentOS7 - which is using moznss)? I've search for the last 2 days trying to get this to work, both with a certutil database and ...
0
votes
1answer
53 views

How to add a user containing a UID to OpenLDAP that runs on CentOS7?

Add a user user.ldif dn: uid=sampleuser,ou=people,dc=my-domain,dc=com objectClass: top objectClass: inetOrgPerson cn: sample user uid: sampleuser Problem [root@host ~]# ldapadd -x -W -D ...
2
votes
1answer
8k views

Unknown LDAP cn=config admin password

When I installed OpenLDAP I was asked to create a password for an admin user but now I realize there's another admin user for cn=config whose password I don't know. Does anyone know how should I ...
0
votes
1answer
46 views

Delete domain using ldapdelete

According to the man page of ldapdelete it should be possible to delete entries [root@controller ~]# man ldapdelete EXAMPLE The following command: ldapdelete "cn=Delete ...
2
votes
1answer
12k views

Reset the OpenLDAP root password [closed]

How to change the LDAP root password. In my root machine "/etc/ldap/sldap.d" file is not there. insted of the file sldap.d directory only is there. I have generated the password by using "slappasswd ...
2
votes
1answer
2k views

Switching OpenLDAP from cn=config to slapd.conf

In a fresh OpenLDAP Install on Debian 6 (or ubuntu 12.04) I would like to switch from modern cn=config style of configuration to traditional slapd.conf configuration. I have heard that it is possible, ...
0
votes
1answer
30 views

how to create two dits in rts openldap server

I have created a base database with like this olcDatabase={0}config.ldif # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. # CRC32 5ebe5cbf dn: olcDatabase={0}config objectClass: ...
0
votes
1answer
10 views

OpenLDAP doesn't return DN

our OpenLDAP installation does not return DN attribute in answers to queries. It is listed (and contains correct value) on the "Internal Attributes" page in phpldapadmin, but doesn't appear when I do ...
1
vote
1answer
192 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
4
votes
0answers
133 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
4
votes
3answers
2k views

Restoring openldap configuration from ldif file?

I am trying to restore my OpenLDAP server from an ldif file I made before it went horribly wrong. All of the websites I found talk about using slapadd but when I run slapadd -v -l ...
0
votes
0answers
90 views

OS X management - binding to OpenLDAP server

As my small company starts to realise the need to manage things more efficiently, I've been working on centralising management of our OS X workstations. Our overall environment consists of Linux and ...
0
votes
1answer
91 views

Working LDIF configuration example for openLDAP SQL backend

I need to provide access to a postgres database through LDAP and I am looking for a working configuration sample using LDIF files. All the examples I can find are using the old slapd.conf file for ...
0
votes
1answer
667 views

postgresql LDAP authentication

I am trying to give an LDAP authentication to my postgresql database. Here is my pg_hba.conf config file local all all md5 local all postgres md5 host all all 0.0.0.0/0 ldap ...
0
votes
0answers
15 views

Gnome user picture from LDAP

Is there any way to load user pictures/avatars for Gnome (these are displayed on login screen) from OpenLDAP? I'm using Debian 6 and 8 for clients and OpenLDAP server, also using GOsa for account ...
0
votes
1answer
18 views

ACL (openldap2.4) for subtree won't work for specific group

Here's a sample ldif of my implemented ACL: dn: olcDatabase={-1}frontend,cn=config objectclass: olcDatabaseConfig objectclass: olcFrontendConfig olcaccess: {0}to ...
0
votes
1answer
42 views

Weird authentication error from Active Directory Win 2008R2

I am trying to do a ldap query from a OpenBSD client to windows 2008R2 active directory and I am getting this error,"49: Invalid credentials". I don't understand why if I tried the same username and ...
6
votes
6answers
15k views

Web interface for LDAP management [closed]

We are going to implement LDAP for centralized authentication in our organization. Which is the best simple LDAP management tool available ?
1
vote
2answers
113 views

LDAP syncrepl with kerberos authentication

I'm trying to set up a replication server for LDAP using syncrepl. I would like to use Kerberos to authenticate the consumer, because we have it set up, and it seems more secure. The database ...
0
votes
1answer
221 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
4
votes
1answer
5k views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
0
votes
1answer
50 views

OpenLdap error: Your attempt to add uidNumber (2276) to <cn …> is NOT allowed. That attribute/value belongs to another entry

I'm using OpenLDAP. The management interface is phpLDAPadmin. Whilst this has made things easy, it also means I've not been exposed to the internals. There is an existing entry using the uidNumber ...
2
votes
1answer
638 views

How to configure Centos 5.3 using OpenLDAP to store and serve SSH public keys?

I want to be able to manage all my users logins via OpenLDAP. I am using Centos 5.3, OpenSSH 4.3p2-42 and OpenLDAP 2.3.43. I have installed GOsa2. Is there a GOsa plugin to manage the SSH keys in ...
0
votes
0answers
26 views

Assigning attributes to groups, roles, and permissions in LDAP

I noticed that I can add object-classes to groups, roles and permissions then I can set a value to there attributes. in the example below I added an object-class 'customName' and it has an attribute ...
3
votes
0answers
38 views

users in openLDAP Groups on Windows Server not gaining access to share

I have openldap and samba PDC setup. My windows server is a member of the samba Domain. I have a group created with users. I can see the group on the windows 2008 server, however when I add this group ...
3
votes
1answer
115 views

LDAP authentication fails

I try to set up an LDAP directory that will allow me to authenticate Debian users. Once the configuration of the LDAP server and PAM files is done, the authentication fails. I think the client doesn't ...
1
vote
2answers
115 views

What might be causing LDAP to refuse connections from some but not all sources? (not firewall)

I'm migrating servers to new infrastructure and have to set up LDAP again. It's not being used to access the server, rather as a repository of users from our website to be accessed by our BI ...
0
votes
3answers
3k views

Installation OpenLDAP on CentOS 7

I'm following this OpenLDAP step by step tutorial: http://www.server-world.info/en/note?os=CentOS_7&p=openldap&f=1 Important: I'm working on CentOS 7 But when in the first part I try to start ...
1
vote
1answer
158 views

what does the ldapadd error: "additional info: objectClass: value #3 invalid per syntax mean?

I have the ldif dn: olcOverlay=ppolicy,olcDatabase={1}hdb,cn=config objectClass: top objectClass: olcConfig objectClass: olcOverlayConfig objectClass: olcPPolicyConfig olcOverlay: ppolicy ...
0
votes
0answers
66 views

500 Error when trying to access my site with LDAP authentication

SOLVED Well I solved this problem. I configure my apache error log to debug level, and this way I can see that the error was my DN syntax (you can see it on error lines below) Then I go to check the ...
2
votes
1answer
100 views

LDAP authentication - avoid duplicate uidNumber

I have just successfully configured OpenLDAP Users authentication in a single CentOS6 box, based on SSSD. Took some time and many trials, but it's working. Now, I want to start adding users. I'm ...
0
votes
1answer
41 views

OpenLDAP will not start - Starting OpenLDAP: slapdrm: cannot remove `/var/lib/ldap/alock'

Hope someone can help me out here. I forgot the OpenLDAP admin password on a debian server and in the process, I specified the password in the slapd config file as follows: olcRootPW: ...
2
votes
1answer
40 views

SSH authentication based on existing OpenVPN tunnel

I have a single CentOS server, and several Windows clients that should connect to it, from remote. I've successfully setup OpenVPN (with Public Keys), with which the clients connect to the server; and ...
0
votes
0answers
72 views

Insufficient access to edit OpenLDAP cn=config with external SASL authentication

I want to add a schema to an OpenLDAP database that I've inherited. ldapadd -vY EXTERNAL -H ldapi:/// -f schema.ldif SASL/EXTERNAL authentication started SASL username: ...
1
vote
2answers
2k views

How to enable catch-all email in iRedMail Open Source edition?

How to create catch-all email alias for domain in iRedMail Open Source edition? I know that's possible via LDAP and found the following instructions: ...
2
votes
2answers
961 views

Does anyone have a valid and working example of OpenLDAP meta backend?

I have been Google'ing my fingers off and simply can not find a working example of how to merge/proxy a OpenLDAP server and windows AD server. Have anyone worked with this before? Any suggestions ...
3
votes
2answers
140 views

Usefulness of an absolute filter on an LDAP query?

I was perusing the source for OpenLDAP and I saw where the root DSE supports something called absolute filters. It looks like it's specified in RFC4526 It looks like the author that originally drafted ...
3
votes
2answers
6k views

Unable to modify schema in OpenLDAP using run-time configuration cn=config

I'm having trouble modifying the schema of an OpenLDAP installation using the run-time configuration (cn=config). What I'm trying to do is modify existing attributes and add new ones to a custom ...
0
votes
0answers
74 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
0
votes
1answer
97 views

Solutions for bridging Solaris/AIX to Active Directory?

I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully ...
0
votes
0answers
31 views

connect server via ssh using ldap account anywhere

I'm new in using openldap I'm using centOS7 to be my openldap server my question is, can I login server via ssh using ldap account without any client settings? something like when I done setting ...
0
votes
1answer
48 views

openldap SSL/TLS Cert: Get a 'real' one or use Self Signed?

I'm setting up SSL/TLS on OpenLDAP and wondering why the Debian Handbook has the user create a self-signed cert? Wouldn't one signed by a 'real' CA be more secure?
1
vote
1answer
121 views

CentOS 6.6 LDAP configuration failed

I'm trying to config OpenLDAP on CentOS 6.6 with this db.ldif config: dn: olcDatabase={0}config,cn=config changetype: modify replace: olcRootPW olcRootPW: {SSHA}UCCQrNoadIFC2lN0Y6YxzCfu9hT/jZni - ...
1
vote
3answers
1k views

LDAP sync with Outlook

I have a task to research the possibilities of LDAP as a centralized Address Book. I have setup a openLDAP on Debian 5.07. I managed to search the LDAP contacts from MS Outlook 2007 (with some ...