OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
0answers
455 views

nss_ldap failover with partially dead server

I've implemented a pair of openldap proxies running a few meta databases to merge and filter an AD DC cluster. I'm having a few issues around the clients failing over between boxes when one service is ...
1
vote
0answers
436 views

Connect to OpenLDAP with Mac OS X Workgroup Manager?

I would like to be able to manage my openldap server using the mac os x workgroup manager. How do I authenticate as it asks for a username and password as opposed to DN? I believe it has something ...
1
vote
0answers
755 views

Using automount on RHEL5, why are variables in the auto.master never expanded?

I'm migrating from NISPLUS to LDAP (openldap) and from RHEL4 to RHEL5. The LDAP server is running on RHEL5u4 as are the clients. On RHEL5 variable expansion in auto.master never works, whether in ...
0
votes
0answers
15 views

LDAP Kerberos authentication on linux

I have configured my RHEL linux machine to be authenticated against active directory without being joining it to domain, using nss-pam-ldapd pam_ldap samba-winbind openldap-devel krb5-devel. I am able ...
0
votes
0answers
10 views

What does Samba need from LDAP for a valid account?

I have inherited an OpenLDAP system, coupled to a FreeNAS and it is quite a headache to create users all the time. I just want to create a user that can access its own homes share. I have a working ...
0
votes
0answers
26 views

NT4 domain administrator account - how to specify in smb.conf

I'm a domain administrator for a very old NT4 based network which needs to be taken out back and shot. I had a chat with the colleague who runs the domain, and he wants to move to Samba based NT4 ...
0
votes
0answers
17 views

OpenLDAP back-perl “critical control unavailable in context”

I am trying to setup a perl script that is used as backend for specific data processing. The overall code works fine, but, when the LDAP client sends a search request with and additional control ...
0
votes
0answers
19 views

How can I restrict jabberd2 to only those users in an LDAP group?

I've setup openLDAP for use with jabberd2. I have users in multiple OUs and would like to create a group (ou=groups,cn=jabber,dc=my,dc=domain) to allow only those users with membership to login on the ...
0
votes
0answers
58 views

OS X management - binding to OpenLDAP server

As my small company starts to realise the need to manage things more efficiently, I've been working on centralising management of our OS X workstations. Our overall environment consists of Linux and ...
0
votes
0answers
15 views

Gnome user picture from LDAP

Is there any way to load user pictures/avatars for Gnome (these are displayed on login screen) from OpenLDAP? I'm using Debian 6 and 8 for clients and OpenLDAP server, also using GOsa for account ...
0
votes
0answers
18 views

Assigning attributes to groups, roles, and permissions in LDAP

I noticed that I can add object-classes to groups, roles and permissions then I can set a value to there attributes. in the example below I added an object-class 'customName' and it has an attribute ...
0
votes
0answers
52 views

500 Error when trying to access my site with LDAP authentication

SOLVED Well I solved this problem. I configure my apache error log to debug level, and this way I can see that the error was my DN syntax (you can see it on error lines below) Then I go to check the ...
0
votes
0answers
56 views

Insufficient access to edit OpenLDAP cn=config with external SASL authentication

I want to add a schema to an OpenLDAP database that I've inherited. ldapadd -vY EXTERNAL -H ldapi:/// -f schema.ldif SASL/EXTERNAL authentication started SASL username: ...
0
votes
0answers
68 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
0
votes
0answers
29 views

connect server via ssh using ldap account anywhere

I'm new in using openldap I'm using centOS7 to be my openldap server my question is, can I login server via ssh using ldap account without any client settings? something like when I done setting ...
0
votes
0answers
49 views

Setting up LDAP to authenticate users in data center

I'm a newbie to linux and networking. Somehow I'm assigned to research the tasks of setting up the authentication for users to login in from local office to data center. Here's the hypothetical ...
0
votes
0answers
56 views

LDAP ACLs with filters

I am trying to write LDAP ACL filters that would suspend authentication for domains that have a custom attribute set to some value. I created a custom object with an extra NAME attribute domainStatus ...
0
votes
0answers
68 views

Can't read PID file on OpenLdap using RedHat 6/ Centos

When I try to execute command "service slapd debug", I receive this message [root@elara ~]# service slapd debug slapd: [INFO] Using /etc/default/slapd for configuration slapd: [INFO] Halting ...
0
votes
0answers
33 views

OpenLDAP with GOSA² Host-Authentication (accessTo attribute of User)

i'm having a problem with rebuilding our LDAP in combination with GOSA². We are hosting several linux machines and not all users may have access to all of them. In the past we realized this as a ...
0
votes
0answers
111 views

Multiple DN suffixes in openLDAP

I'm trying to create multiple dn suffixes with openLDAP, but it doesn't seem to work. I want have this: ou=Jamaika,dc=gov,dc=com ou=Jamaiks-shadow,dc=gov-shadow,dc=com-shadow Should look like ...
0
votes
0answers
39 views

Error while integrating OpenLDAP and Kerberos

I am trying to set up Kerberos with OpenLDAP backend. I followed this doc http://web.mit.edu/Kerberos/www/krb5-1.12/doc/admin/conf_ldap.html and this ...
0
votes
0answers
40 views

OS X server Open Directory fail over successfully but not the user home directories

We setup the OS X server Open Directory(OD) master and replica. Users are created on master and their home directories are on the master server. When the master OD server is down, the OD client (MAC) ...
0
votes
0answers
100 views

Samba AD DC Authentication Problems

I'm trying to setup an AD PDC using Samba4 on Ubuntu 14.04. My endgame here is to have an AD domain with users created by LDAP that can login to the domain and use roaming profiles, so that any users ...
0
votes
0answers
30 views

LDAP-based GnuPG keyserver for use with BES5?

Like the title already gives away: Can the LDAP-based Keyserver be used with an Exchange+BES5 setup? Some background: We need a keyserver for BES5, and the commonly used product for this is ...
0
votes
0answers
105 views

Getting error when integrating cloudera hue with ldap server?

I have configured ldap server on centos machine.I am able to execute ldapadd and ldapsearch sucessfully. But while integrating ldap with cloudera hue getting following error RuntimeError: Failed ...
0
votes
0answers
123 views

Cannot show openldap config using ldapsearch

im trying to get my Openldap settings in cn=config, and load a new schema in it, but i'm not able to get my cn=config with ldapsearch tool. root@ip-10-0-2-4:/tmp# ldapsearch -Y EXTERNAL -H ldapi:/// ...
0
votes
0answers
332 views

OpenLDAP client certificate giving “Unable to find the certificate or key necessary for authentication”

Initial setup of system I have an OpenLDAP server running on SLC6.5 and a client running Fedora 20. The server and client are both running OpenLDAP 2.4.39 which is built with Mozilla NSS as its SSL ...
0
votes
0answers
52 views

OpenLDAP - syncrepl errors but replication is working

I have 2 openldap servers working in master-slave configuration. I am using simple bind for replication but on slave side I find log entries like this: ldap_sasl_bind_s failed (-1) ...
0
votes
0answers
116 views

Problems with OpenLDAP-Replication

we just set up a Ubuntu Server with OpenLDAP running. We also have a second server, running Ubuntu as well. Now i tried to set up the replication using this guide: ...
0
votes
0answers
55 views

Why I cannot add groupOfUniqueNames to LDAP?

Hi I'm trying to add groups for then add LDAP users to them but I don't know why LDAP is not adding. Previously I added users, organizational unit, etc. Here the exmaple of ldif that I would like to ...
0
votes
0answers
12 views

all ldap users are created on ubuntu client

We configured our LDAP on our Ubuntu 14.04 desktop's. When we login with the ldap user we can see all other users which are in LDAP... This was not what we needed. How can we disable this. Kr, ...
0
votes
0answers
217 views

LDAP with TLS: connect error(-11)

I configured OpenLDAP and today I've configured the TLS for more security following these guide lines: Configure OpenLDAP with TLS=required Modifying the cn=config.ldif with config file: dn: ...
0
votes
0answers
34 views

Connect OpenLDAP to Samba in read mode?

We have Samba 3 based domain controller. The password backend for the domain is pdb/*nix users, this means that we do not have LDAP service running with Samba (I may be wrong on this one, but I do not ...
0
votes
0answers
26 views

OpenLDAP Multiple Directory Manager Accounts / Groups

So the documentation sucks and the interwebs hasn't produced the answers I am looking for. Hopefully somebody here has some wisdom to unleash... I recently built an OpenLDAP server for Linux ...
0
votes
0answers
60 views

LDAP: Segmentation fault

I have this error when I use ldapsearch: Segmentation fault I've removed and reinstalled openldap and openldap-servers and after that, throws me this error. /var/log/messages: ldapsearch[20232]: ...
0
votes
0answers
115 views

How to modify rootPW without edit .ldif manually but with ldap command tools in openldap?

I know if I want to change cn=config backend configuration, I shoud have my rootDN and rootPW set. But if I want to set my rootDN and rootPW, I need write previlege first. I think I run into endless ...
0
votes
0answers
39 views

How to add a new root suffix entry in openldap?

I try to add new root suffix in openldap following this guide Creating_and_Maintaining_Suffixes, but I got the error : ldap_add: Invalid syntax (21) additional info: objectclass: value #2 invalid ...
0
votes
0answers
32 views

Openldap ACLs don't work

I have following structure: dc=th,dc=company,dc=com | |->dmc | |->dmc_customer_company I create a group to manage write access to dmc_customer_company. Groups, divide by ...
0
votes
0answers
282 views

ldapsearch throws me a login fail (invalid credentials (49))

I'm starting with LDAP and trying to configure all in this tutorial step by step: http://wiki.openiam.com/pages/viewpage.action?pageId=7635198 But when I'm in 10th step: ldapsearch -h localhost -D ...
0
votes
0answers
267 views

GitLab & OpenLDAP: Invalid credentials

I have two machines with CentOS 7.0 on each one. The first one is domain controller with OpenLDAP only. I configured OpenLDAP according this tutorial: ...
0
votes
0answers
88 views

OpenLDAP & SASL (DIGEST MD5) on Ubuntu 14.4

I have an existing ldap implementation that I would like to start enabling SASL. I don't really have a lot of experience with openldap/slapd and I'd like to be able to configure it using the current ...
0
votes
0answers
93 views

“ldap_start_tls: Can't Contact LDAP server (-1)” on Red Hat Linux 6.4

I have OpenLDAP working on a local development machine that is running Fedora 20. I was able to install it and get it working fine for my own local testing. I'm now trying to install OpenLDAP on a ...
0
votes
0answers
47 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
0answers
98 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
0
votes
0answers
45 views

Custom schema for OpenLDAP 2.4

I am new to OpenLDAP administration. My aim is to learn how to create custom schemas, and customize "my" directory server this way. I tried to add one optional attribute - ipPhone. Made a schema ...
0
votes
0answers
136 views

ApacheDS create new ldap base domain

I want to create and manage multiple ldap base domains(domain.com, example.net..) on a single Ubuntu server 14.04. I created my second domain(dc=example,dc=com) through olc method by ldapadd -Y ...
0
votes
0answers
47 views

Apache HTTP Server LDAP authentication with netgroups

Is it possible to do a group authentication in Apache HTTP Server ("Require ldap-group") but instead of a normal (posix) ldap group to use a netgroup?
0
votes
0answers
107 views

adding VLV support to OpenLDAP 2.4.31

Apologize in advance - I am not an admin, so the question being asked might be trivial. Still, I am stuck. Any assistance would be greatly appreciated. I am trying to add Virtual List View support to ...
0
votes
0answers
84 views

moving openldap server from centos to ubuntu

I am trying to setup ldap server on my ubuntu 14.04. I had previous ldap server setup installed on CentOS 6 which uses flat-file configuration i.e slapd.conf method for ldap. I did take backup for my ...
0
votes
0answers
49 views

Openldap Master Slave configuration

I have a configuration with a Master and Slave 4. Provider and Consumer are identical CentOS release 6.5 rpm -qa | grep ldap openldap-clients-2.4.23-34.el6_5.1.x86_64 ...