OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
36 views

Samba 4.1.5 replicate user/pass domain only

Is there any possible way to replicate username, password, and group only to an openLDAP directory? Or sync OpenLDAP directory Password to Samba 4.1.5 AD? Most of our implementation uses OpenLDAP, ...
0
votes
0answers
27 views

ejabberd + ldap_filter (uidNumber greater than) is not working

I have configuration ejabberd + ldap users which works fine, unless I try to filter only users with uid greater than 1000. =INFO REPORT==== 2014-02-26 09:52:22 === D(<0.268.0>:eldap:697) : ...
0
votes
0answers
14 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
25 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
0answers
31 views

Sudo Command Alias option equivalent in OpenLDAP

I have an OpenLDAP installation that manages Sudo as well. Everytime I create a sudoers role, I have to list the commands that that sudoers role can run. This leads to a lot of repetition. Is there ...
0
votes
0answers
21 views

OpenLDAP SQL backend failing

I'm running OpenLDAP with a SQL (Oracle) backend. This works fine with OpenLDAP 2.3 but after upgrading to 2.4.38 it fails with an error that is not helpful at all: 52d3ec0c ...
0
votes
0answers
32 views

OpenLDAP provider-consumer server failed to establish connection

I have configured 2 OpenLDAP servers as provider and consumer to have replication but I am getting following error in the OpenLDAP log of the consumer server. bdb_dn2id: get failed: DB_NOTFOUND: No ...
0
votes
0answers
58 views

OpenLdap- make test fails

I am trying to configure and install an ldap server following this guide. I am stuck on step 6, make test. it fails on the first test with the following message: cd tests; make test make[1]: Entering ...
0
votes
0answers
120 views

OpenLDAP server logs filled with “TLS negotiation failure”

I recently migrated an old OpenLDAP setup to a newer server, with a more robust certificate setup. Currently, most hosts are required to verify the cert matches the host: tls_checkpeer yes ...
0
votes
0answers
30 views

Import accounts from Kerberos/OpenLDAP to linux

I have a configuration of our own Kerberos server and OpenLDAP server that manages user accounts. I want to get rid of Kerberos and LDAP altogether and import a list of users as well as their shadow ...
0
votes
0answers
24 views

Liferay and user export to OpenLDAP

I have a question about Liferay. I configurated my system with Liferay + Jasig CAS Authentication and OpenLDAP. I can authenticate my user correctly and I can import user account from LDAP (Ldap ...
0
votes
0answers
22 views

self-service subversion account creation solution

I am managing a svn server. I need to create user account every time a new user request. Is there a solution front end that user can create the account in a self-service manner? I believe svn can ...
0
votes
0answers
82 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
0
votes
0answers
42 views

Export Moodle's users to OpenLDAP

I setted the LDAP sync to import all LDAP users into Moodle (Moodle.org)...it is ok. I would to know if is possible to export a Moodle user into my LDAP server. For example: I have a new moodle user ...
0
votes
0answers
23 views

first login/password change ldap -> call script on local machine

i have machines which authenticate against openldap using pam_ldap. I would like to be able to call shell scripts somehow (to update services which don't integrate with ldap) (which should be ...
0
votes
0answers
18 views

openldap mods check attributetype undefined

We have a openldap 2 nodes running on mirrormode set up. We recently added a new attributetype, after that we are seeing this message on slave node. And i can see the Attributype from ApacheDirectory ...
0
votes
0answers
44 views

How to enable TLS on OpenLDAP

I use CentosOS 5. I have a problem to enable TLS (or ssl) on OpenLDAP server. I followed this tutorial... so: I generate the cerificates; I setted the path in sladp.conf TLSCertificateFile ...
0
votes
0answers
70 views

Can I configure samba file server for auth users with ldap server which has no samba scheme

I has a samba server(3.6.3-2ubuntu2.6). And uses libpam-smbpass package for authenticate users, which is connecting to smb server for file sharing from linux and mac os x hosts. But libpam-smbpass ...
0
votes
0answers
21 views

In openldap, how to grant write access to automountMap to a user additional to rootDn?

The need is to define/create a user/account other than rootDn to have all rights on Dn:automountMapName=auto_environments,dc=company,dc=com to add/delete of mount entries. I'm a newbie to openldap ...
0
votes
0answers
16 views

Multiple certificates on the OpenLDAP server

We are using OpenLDAP in our server environment with MD5 certificates. I wonder if it's possible to add a certificate that uses SHA-256/512 encryption instead. This way we can use both MD5 and ...
0
votes
0answers
45 views

Bind Linux to Open Directory

So I am trying to bind a linux machine to Open Directory. It works fine if I don't automate it. [root@app-setup-testbox1 ~]# kadmin -p admin -w PASSWORD -q "addprinc -randkey host/$HOSTNAME" ...
0
votes
0answers
183 views

Storing GPG keys in LDAP with TLS using gpgme

I'm trying to send my GPG public key to our LDAP server, but I'm hitting a wall. My LDAP server only allows LDAP with Start_TLS over port 389, or LDAPS on port 636. I've got the following lines in my ...
0
votes
0answers
263 views

How to configure openLdap push based replication on Openldap 2.4.x?

I have machine installed OpenLdap which should replicated to another as slave. In this case, next time slave is on internet and use dynamic Ip Address which automatically change periodically. I've ...
0
votes
0answers
98 views

OpenLDAP replication trouble

I still unable to setup replication between LDAP nodes %(, followed instructions from : http://www.secure-computing.net/wiki/index.php/OpenLDAP/replication Server, lapd.conf TLS_CACERTDIR ...
0
votes
0answers
53 views

Openldap password policy password history not working

After a frustrating google, I finally got password policy overlay in openldap load into system. Account-locking tested and it seems work. But when testing about password history, I can get pwdHistory ...
0
votes
0answers
187 views

Samba username doesn't work once I join a Windows XP machine to my domain

I have set up a PDC using Samba, LDAP and Postgresql. I have successfully added all the necessari entries to my database and can also see all the necessary entreis in LDAP. I can also successfully ...
0
votes
0answers
92 views

samba server with authentication users from ldap without samba schema

How can i organize my environment with samba server when samba server auth clients from localnetwork in openldap catalog without any samba schema. For example i have users and groups such as: # ...
0
votes
0answers
41 views

Unable to install OpenLDAP in debian based elementary OS

Hi while installing openldap when i enter the command: apt-get install slapd I get the following output Reading package lists... Done Building dependency tree Reading state information... ...
0
votes
0answers
106 views

NFS + LDAP Setup. Nobody:nobody files ownership

I'm trying to setup an Ubuntu 12.04 NFS client and with users authenticating with an LDAP server via PAM. The users' home dirs are located in the NFS share (named /usrhome/, ie each user gets ...
0
votes
0answers
44 views

OpenLDAP pwdChecker Library for Amazon Linux EC2 instance

After installing the package openldap-devel, the instance is still missing the portable.h and slap.h files which are needed for the pwdChecker Library. So I was wondering has anyone been able to ...
0
votes
0answers
68 views

Enforce Size limit for jpegPhoto attribute in LDAP schema

I am wondering if it is possible to enforce a file size limit on the jpegPhoto attribute in OpenLDAP via the schema definition in the inetorgperson schema file? I have only heard of it being possible, ...
0
votes
0answers
37 views

Openldap disable Anonymous access to userPassword

I would like to disable my openldap server anonymous users to be able to read userPassword field. After I set this ACL: vim olcDatabase\={0}config.ldif ... olcDatabase: {0}config ...
0
votes
0answers
93 views

Using mod_authnz_ldap on httpd and getting the message “Server is unwilling to perform”

I'm trying to access some files hosted on a SMB share through httpd using LDAP. I'm using CentOS release 5.8 (Final), Apache/2.2.3 Prefork with mod_authnz_ldap module enabled. The LDAP authentication ...
0
votes
0answers
49 views

OpenLDAP Proxy with Client Authentication via Smartcard

I have two OpenLDAPs configured. The first one on machine A acts as proxy for the second one on machine B using the ldap backend. Now I enabled TLS and client authentication for the LDAP on machine ...
0
votes
0answers
46 views

How do I get OpenAM to set OpenLDAP pwdReset upon admin reset of user password?

I would like to have OpenAM (9.5.2) set the pwdReset flag to TRUE on a user's account when an admin resets the user's password via the OpenAM UI. Is this supported? From the documentation that I ...
0
votes
0answers
120 views

OpenLDAP proxy Active Directory : force -b <base> with rwm rules?

We have changed your directory OpenLdap by Active Directory. Many process used OpenLdap. I create a openldap proxy to access to Active Directory. It works very well... :) Unfortunately, many ...
0
votes
0answers
30 views

PublicKeys in Openldap

I have configured the following:- Openldap on EC2 instance with OpenSSH-LPK patch (I am able to add public keys using phpldapadmin) Another EC2 instance with libnss-ldap libpam-ldap ldap-utils on, ...
0
votes
0answers
82 views

Apache 2.2, mod_authz_ldap authentication fails on CentOS 6.3

Lately LDAP authenticaion used in BackupPC installation ceased to work after latest upgrades of Apache and corresponding modules. Setup: OpenLDAP (2.3.43-12) server used for domain authentication. ...
0
votes
0answers
80 views

Ubuntu 13.04 - OpenLDAP invalid crendetials

I'm trying to follow the Ubuntu official OpenLDAPServer guide with no success. When I tried to log into the server it says( ...
0
votes
0answers
73 views

How can I get Openindiana built in samba to use an OpenLDAP server?

I built an OpenIndiana / NAPP-IT server to use for samba home shares. Up to now I had planned to use a KVM virtual machine to run the samba/ldap stack, then connect the vm to the ZFS volume thru ...
0
votes
0answers
114 views

Using openldap for ssh authentication

I am looking at setting up an openldap server to work as a central ssh gateway. Am I right in thinking that i need to install an openldap server, and then configure the client server to authenticate ...
0
votes
0answers
32 views

slapd Target is quarantined

I have a syncrepl set up in my slapd that was previously working. I've checked the ssl connection using: $openssl s_client -connect host.mydomain.com.au:636 -key /etc/ca/host.key -cert ...
0
votes
0answers
30 views

What does rc -2 mean in OpenLDAP syncrepl?

I am having an issue with syncRepl. I keep getting an rc -2 during syncrepl for replication. What does this mean?
0
votes
0answers
51 views

Combining CA's into a single PEM

I have been wondering if it is possible to combine two CA certificates into a single .pem, then use that pem to allow clients with certs signed by either CA to create TLS connections with an LDAP ...
0
votes
0answers
180 views

LDAP Replication Issue: Need to convert Slave server to a Master server

We have followed this url https://help.ubuntu.com/10.04/serverguide/openldap-server.html for setting LDAP replication and is working fine. Now our master server goes down so please help us to change ...
0
votes
0answers
151 views

su not giving proper message for restricted LDAP groups

I have configured PAM authentication on Linux box to restrict particular group only to login. I have enabled pam and ldap through authconfig and modified access.conf like below, [root@test root]# ...
0
votes
0answers
1k views

Creating an OS X Mountain Lion 10.8 OpenDirectory database with a specific domain in mind

Mountain Lion Server has been one of the most infuriating things ever recently. Above and beyond tons of crashing I've been completely unable to do the following in a way that makes sense to both me ...
0
votes
0answers
147 views

Fix the entryUUIDs in OpenLDAP

I have a small OpenLDAP database that I am trying to set up syncrepl on. However the initial syncrepl load is barfing because apparently there are a small number of entryUUID operational attributes ...
0
votes
0answers
201 views

ldap setup on ubuntu

I have setup an openldap master on ubuntu server 11.04 and I am trying to get a slave server also ubuntu 11.04 to use it for authentication purposes but when I try to use the credentials on the master ...
0
votes
0answers
3k views

How do I enable pwdPolicy in openldap on Centos 6?

Shouldn't it be enough to execute the following? Or do I need to do anything special to my users, like adding or having a specific objectClass or something? ldapadd -H ldaps://ldap.syco.net -x -D ...