OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
82 views

How can I set up Samba with LDAP auth for server in workgroup only?

http://serverfault.com/questions/ask?title=samba%20ldap%20workgroup%20only We have quite a few linux machines running SAMBA as standalone servers and are currently just replicating a smbpasswd file ...
0
votes
0answers
187 views

OpenLDAP client certificate giving “Unable to find the certificate or key necessary for authentication”

Initial setup of system I have an OpenLDAP server running on SLC6.5 and a client running Fedora 20. The server and client are both running OpenLDAP 2.4.39 which is built with Mozilla NSS as its SSL ...
0
votes
1answer
77 views

How to override a user's UID coming from an LDAP directory?

I am trying to setup Linux logins for users in an LDAP directory. The directory contains users which have a UID under 1000 and I believe this is causing problems with logins to those accounts as UID ...
0
votes
0answers
33 views

OpenLDAP - syncrepl errors but replication is working

I have 2 openldap servers working in master-slave configuration. I am using simple bind for replication but on slave side I find log entries like this: ldap_sasl_bind_s failed (-1) ...
0
votes
1answer
31 views

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories?

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories? Is there an Object Class that provides ObjectSID which can be used in other directory services such as ...
0
votes
1answer
24 views

Why does OpenLDAP not auto add inheritied objectclasses

I'm running into an issue, I'm attempting to add users with the following ldif; dn: mail=jsmith,ou=customers,dc=mydeqcust,dc=org cn: John Smith sn: Smith uid: jsmith mail: jsmith@dev.local ...
0
votes
0answers
86 views

Problems with OpenLDAP-Replication

we just set up a Ubuntu Server with OpenLDAP running. We also have a second server, running Ubuntu as well. Now i tried to set up the replication using this guide: ...
0
votes
0answers
39 views

Why I cannot add groupOfUniqueNames to LDAP?

Hi I'm trying to add groups for then add LDAP users to them but I don't know why LDAP is not adding. Previously I added users, organizational unit, etc. Here the exmaple of ldif that I would like to ...
0
votes
1answer
66 views

OpenLDAP server not working through ldap:// protocol

I have a vanilla Scientific Linux 6.6 install (essentially RHEL 6.6) which I am trying to set up as an LDAP server. I have installed openldap-servers and started slapd with service slapd start. This ...
0
votes
3answers
232 views

Caching OpenLDAP credentials for offline use on laptops

Our clients (Ubuntu 14.04) can login with there LDAP login. As soon as they have no network they cannot login with LDAP. Is there a way to cache those passwords and usernames, so that the laptops ...
0
votes
0answers
11 views

all ldap users are created on ubuntu client

We configured our LDAP on our Ubuntu 14.04 desktop's. When we login with the ldap user we can see all other users which are in LDAP... This was not what we needed. How can we disable this. Kr, ...
0
votes
0answers
144 views

LDAP with TLS: connect error(-11)

I configured OpenLDAP and today I've configured the TLS for more security following these guide lines: Configure OpenLDAP with TLS=required Modifying the cn=config.ldif with config file: dn: ...
0
votes
0answers
24 views

Connect OpenLDAP to Samba in read mode?

We have Samba 3 based domain controller. The password backend for the domain is pdb/*nix users, this means that we do not have LDAP service running with Samba (I may be wrong on this one, but I do not ...
0
votes
0answers
63 views

Migration of LDAP and GOsa-config to new server

I have a running LDAP-server (using Ubuntu 12.04) with GOsa installed on it. Is there a way to migrate the whole database including the GOsa-config to a new server (Ubuntu 14.04)? I tried exporting ...
0
votes
0answers
19 views

OpenLDAP Multiple Directory Manager Accounts / Groups

So the documentation sucks and the interwebs hasn't produced the answers I am looking for. Hopefully somebody here has some wisdom to unleash... I recently built an OpenLDAP server for Linux ...
-2
votes
1answer
83 views

How to disable anonymous read on OpenLDAP using cn=config [duplicate]

I am a newbie with openldap 2.4 and I need to restrict read access to anonymous. Actually, if someone write ldapsearch -x -H ldap://myipaddrr he can see all entries of my HDB database. How can I ...
0
votes
0answers
43 views

LDAP: Segmentation fault

I have this error when I use ldapsearch: Segmentation fault I've removed and reinstalled openldap and openldap-servers and after that, throws me this error. /var/log/messages: ldapsearch[20232]: ...
0
votes
1answer
280 views

ldapsearch result: Can't contact LDAP server (-1)

Anyone knows which the problem? I installed LDAP: yum -y install openldap-servers and then checked is the installation work well starting slapd service and doing ldapsearch like this: ldapsearch ...
1
vote
0answers
128 views

500 Internal Server Error: Which is the issue? [closed]

I've configured openldap in my server and also installed and configured mod_ldap but the server throws me a 500 Internal Server Error if I introduce right or bad user. I don't know if it's a bad ...
0
votes
0answers
73 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
1
vote
2answers
44 views

Bugzilla LDAP authentication broke after admin pw change - CentOS

Hey everyone I'm having an issue trying to get bugzilla authentication working again. I have looked all over and cant seem to find this anywhere. I am running bugzilla on a centOS server and over the ...
0
votes
1answer
70 views

LDAP: getent passwd don't show my recent user addition

I don't know why getent don't show my recently LDAP user addition. ldif file: dn: uid=user1,ou=People,dc=example,dc=com uid: user1 cn: user1 objectClass: account objectClass: posixAccount ...
0
votes
0answers
86 views

How to modify rootPW without edit .ldif manually but with ldap command tools in openldap?

I know if I want to change cn=config backend configuration, I shoud have my rootDN and rootPW set. But if I want to set my rootDN and rootPW, I need write previlege first. I think I run into endless ...
0
votes
0answers
28 views

How to add a new root suffix entry in openldap?

I try to add new root suffix in openldap following this guide Creating_and_Maintaining_Suffixes, but I got the error : ldap_add: Invalid syntax (21) additional info: objectclass: value #2 invalid ...
0
votes
1answer
752 views

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is ...
2
votes
0answers
72 views

Single Sign On Solution

I'm trying to come up with a single sign on solution for a small team. I've got four applications: dokuwiki redmine svn owncloud All of these I was told by folks support LDAP, and that it was ...
0
votes
1answer
61 views

OpenLDAP default configuration file is `/etc/ldap/slapd.d` rather than `/etc/ldap/slapd.conf`

My openldap (version 2.4.31) makes directory /etc/ldap/slapd.d as its default configuration files rather than /etc/ldap/slapd.conf as the old version does. I found it becomes more complicated to ...
0
votes
1answer
61 views

How to change OpenLDAP core attributes

Specifically, I need to add ORDERING caseIgnoreOrderingMatch to the givenName and surname attributes. I had hoped there was some way to do this using ldapmodify but the following is not working for me ...
0
votes
1answer
350 views

postgresql LDAP authentication

I am trying to give an LDAP authentication to my postgresql database. Here is my pg_hba.conf config file local all all md5 local all postgres md5 host all all 0.0.0.0/0 ldap ...
0
votes
0answers
26 views

Openldap ACLs don't work

I have following structure: dc=th,dc=company,dc=com | |->dmc | |->dmc_customer_company I create a group to manage write access to dmc_customer_company. Groups, divide by ...
0
votes
0answers
135 views

ldapsearch throws me a login fail (invalid credentials (49))

I'm starting with LDAP and trying to configure all in this tutorial step by step: http://wiki.openiam.com/pages/viewpage.action?pageId=7635198 But when I'm in 10th step: ldapsearch -h localhost -D ...
0
votes
0answers
164 views

GitLab & OpenLDAP: Invalid credentials

I have two machines with CentOS 7.0 on each one. The first one is domain controller with OpenLDAP only. I configured OpenLDAP according this tutorial: ...
0
votes
3answers
2k views

Installation OpenLDAP on CentOS 7

I'm following this OpenLDAP step by step tutorial: http://www.server-world.info/en/note?os=CentOS_7&p=openldap&f=1 Important: I'm working on CentOS 7 But when in the first part I try to start ...
0
votes
0answers
53 views

OpenLDAP & SASL (DIGEST MD5) on Ubuntu 14.4

I have an existing ldap implementation that I would like to start enabling SASL. I don't really have a lot of experience with openldap/slapd and I'd like to be able to configure it using the current ...
2
votes
0answers
98 views

OpenLDAP TLS - test results in Bad file descriptor

I have set up an openldap server including tls on ubuntu 14.04 following this guide. While testing the connection, I get results that I can not find an explanation for. ldapsearch -xLLL -Z -W -D ...
0
votes
1answer
66 views

OpenLDAP check database

favorite I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue: something slapd process doesn't restart for error in database ( about some ...
0
votes
1answer
20 views

OpenLDAP structure mulitple locations

I am new to OpenLDAP and I am a bit stuck with the structure. Everywhere I see examples like this: dc=our,dc=company,dc=com -ou=USERS -ou=GROUPS -ou=ROLES Our company has more geographical ...
0
votes
1answer
105 views

pam_check_host_attr not working properly

Disclaimer: I'm new to ldap, so hopefully I haven't done anything majorly wrong! Aim: To centralise user credentials and restrict client login to certain machines. I have a barebones openLDAP server ...
0
votes
1answer
56 views

Modifying OpenLDAP configuration using cn=config

I am really new to OpenLDAP. I am trying to view all the settings in cn=config and attempt to change the value of olcSizeLimit (http://www.openldap.org/doc/admin24/slapdconf2.html#cn=config) I try ...
0
votes
0answers
82 views

“ldap_start_tls: Can't Contact LDAP server (-1)” on Red Hat Linux 6.4

I have OpenLDAP working on a local development machine that is running Fedora 20. I was able to install it and get it working fine for my own local testing. I'm now trying to install OpenLDAP on a ...
0
votes
0answers
45 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
-1
votes
1answer
121 views

OpenLDAP data purged/whipped on Ubuntu server upgrade 12.04 to 14.04 LTS

I upgraded my Ubuntu server from 12.04 to 14.04 using standard do-release-upgrade. After upgrade I found that my OpenLDAP directory data is purged. This is an unexpected outcome of an upgrade. I ...
0
votes
1answer
503 views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
0
votes
1answer
64 views

Unable to connect to server via LDAPS

I'm running OpenLDAP on an up-to-date Debian box. I'm trying to run a simple command: ldapsearch -x -h <<IP>>:636 -D cn=<<BASE DN>> -d1 and I get this output: ldap_create ...
0
votes
1answer
273 views

How to enable DIGEST-MD5 SASL mechanism in Open Directory?

We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 But it doesn't support DIGEST-MD5: $ ldapsearch ...
1
vote
1answer
75 views

command line alternative to dpkg-reconfigure slapd

Is there a way to reconfigure slapd, providing all configuration options as command-line parameters/arguments? My goal is to be find an alternative to the interactive UI. Thank you
2
votes
0answers
21 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
0
votes
0answers
75 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
2
votes
1answer
170 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
2
votes
1answer
37 views

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all ...