OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
0answers
320 views

CVS authentication with openldap

I have migrated the CVS from Windows to Linux and imported the repo's as needed. Now I have to setup ldap authentication ( Remote Server/Linux/Open LDAP ) for CVS. As per other blogs, it says we have ...
1
vote
0answers
460 views

LDAP secondary group working for only some users

On an Ubuntu box, I'm having issues with LDAP secondary groups for one user, sabnzbd. The user should be a part of the media group. daniel@server:~$ id sabnzbd uid=4996(sabnzbd) gid=4996(sabnzbd) ...
1
vote
0answers
268 views

openSuse and openldap:ldap only login

I 've managed to setup ldap server and i can search it succefully from the server machine. i ve added to the database all info except from the fstab file and automount info. I migrated succefully the ...
1
vote
0answers
1k views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
1
vote
0answers
230 views

LDAP not showing secondary groups

Currently, I have a LDAP server (running ClearOS if that makes any difference) containing a database of users. So, I went and setup LDAP on a couple of my debian VMs, using libpam-ldapd and I ...
1
vote
0answers
648 views

How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package

I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package. I have used the following command to ...
1
vote
0answers
44 views

having trouble with bog standard openldap server db

I am having trouble getting an "out of the box" openldap server working. The examples on the openldap site still refer to the slapd.conf file, but the install does not make that. if I start the ...
1
vote
0answers
4k views

How to configure OpenLDAP 2.4.23 for SSL on CentOS 6.3?

I have installed openldap 2.4.23 on CentOS 6.3 using the yum package 'openldap-servers'. When I follow instructions to configure openldap for SSL (such as ...
1
vote
0answers
820 views

LDAP Berkeley DB

I'm trying to configure slapd on my machine and I keep getting this error. I can recover at times using db7.7_recover but not always. I see this problem if the slapd deamon is killed for any reason. ...
1
vote
0answers
431 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
1
vote
0answers
45 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
0answers
453 views

Can ApacheDS LDAP change root user name?

ApacheDS 1.5 has the following account by default. Bind dn or user: uid=admin,ou=system Bind password: secret i would like to change it to the following to avoid making changes in my code Bind dn ...
1
vote
0answers
1k views

Password expires 45 days even though 'Password Must Change' is set to 'never' (Samba+LDAP)

Since a few months ago Samba ask each of our users to change password at log on every 45 days (the default) and I have not been able to disable it. This setup had been running for 2 years before then ...
1
vote
0answers
488 views

nss_ldap failover with partially dead server

I've implemented a pair of openldap proxies running a few meta databases to merge and filter an AD DC cluster. I'm having a few issues around the clients failing over between boxes when one service is ...
1
vote
0answers
508 views

Connect to OpenLDAP with Mac OS X Workgroup Manager?

I would like to be able to manage my openldap server using the mac os x workgroup manager. How do I authenticate as it asks for a username and password as opposed to DN? I believe it has something ...
1
vote
0answers
816 views

Using automount on RHEL5, why are variables in the auto.master never expanded?

I'm migrating from NISPLUS to LDAP (openldap) and from RHEL4 to RHEL5. The LDAP server is running on RHEL5u4 as are the clients. On RHEL5 variable expansion in auto.master never works, whether in ...
0
votes
0answers
13 views

How to change the 'olcAccess' values of olcDatabase in OpenLDAP via spring-ldap?

I'm a new person of using spring-ldap-2.0.4 in order to communicate openldap, and change olcAccess values of olcDatabase via spring LDAP interface without using LDIF, I have met a difficult problem, ...
0
votes
0answers
6 views

ldapadduser command throws “Could not guess current user”

I have ubuntu-12.04 server. I have setup OpenLdap server at 10.4.15.217. Its working fine. I have another Ubuntu-12.04 server where I installed ldapscripts using command "apt-get install ...
0
votes
0answers
9 views

Install OPENLDAP as service from compiled source

I am using Centos 7 and compiled openldap from source and installed it in a custom location, however I found that it doesn't come with the option of installing as service as it would if I yum install ...
0
votes
0answers
45 views

Suddenly i can not join Windows clients to Samba PDC anymore

Some years ago i configured a Primary Domain Controller through Samba and LDAP (slapd) on an Ubuntu machine (13.10) at 192.168.69.203 which should be accessible by the NetBIOS name SRV1. I must note i ...
0
votes
0answers
14 views

unable to delete entry.what am i missing?

Newbie question, There are 2 ldap servers i have inherited. I need to delete a user which keeps re-spawning. I was told that this is a syncrepl setup with another node. What do i need to do in order ...
0
votes
0answers
11 views

error: found a non-fatal phpLDAPAdmin Bug

i just install openldap with phpldapadmin. but when i go to monitor menu i found: is this actually something can be solved? anyone ever solve this issue before? Thanks, AnD
0
votes
0answers
24 views

certutil and pk12util fail to import distinct certificate/key to Mozilla NSS database

I am about to build LDAP access via TLS on a Centos 6.7 system. I created a CA key (CA.key) and certificate (CA.crt) in /etc/openldap/cacerts. Likewise I created server.key/server.csr and created a ...
0
votes
0answers
37 views

slapd: Disable wildcard search on LDAP-Attribute

i run a ldap server on a ubuntu machine (apt-get install ldap ldap-utils). The ldap server provides a kind of a global address-book. Each entry provides basicly the attributes title, givenname, ...
0
votes
0answers
50 views

User ldap cannot change password : LDAP password information update failed: Insufficient access

I'm using centos 6.7 to create LDAP server, but the user still cannot change their own password. The error when user try to change the password : [john2@servergw ~]$ passwd Changing password for ...
0
votes
0answers
25 views

Ldap server cannot accept Public IP

I have this LDAP server and 10 clients in the network. 2 clints can connect to server using server's private ip (10.10.10.10), but the other clients cannot ping private ip, so they use public ip ...
0
votes
0answers
77 views

LDAP user authentication access denied

Currently, I am configuring LDAP client for user authentication on the server. Only SSH key authentication is allowed (Password authentication is not allowed). My SSH configurtion ...
0
votes
0answers
21 views

openldap home directory permissions for different users

we are testing openldap server for a new domain in our company. How can we implement users with different permissions on home directory. we want some users to have full access to save data on desktop ...
0
votes
0answers
30 views

openldap ppolicy users login Access denied

I'm having trouble logging in User created after following steps from Youtube link https://www.youtube.com/watch?v=_ZvnNVwWk-M&list=PLrUFyg1unBb8n0SJxJqQYMo9kRcY2Mly0&index=7 This video ...
0
votes
0answers
14 views

Openldap ACL restrict users to add/remove specific objectClass

I'm trying to restrict users so they can only add remove certain objectClass objects to their user in ldap. The user list [1] gave a way from the manual to do this. access to attrs=objectclass ...
0
votes
0answers
11 views

What happens using SASL plaintext on an openldap server on the server side?

I have an OpenLDAP server and I use SASL with the login authentication mechanism. My user passwords are securely hashed and stored within my LDAP database. I understand that the login credentials are ...
0
votes
0answers
24 views

Copy specific entries from Active Directory to Openldap

I am handpicking some entries from Active directory and I want to populate it to openldap. The entries are somethings like dn, cn, unix attirbutes like uid, gid, memberrOf, manager, phonenumber, etc. ...
0
votes
0answers
25 views

Openldap ActiveDirectory Proxy using Slapd.d

I am currently attempting to setup an OpenLDAP proxy that will proxy proxy between 2 Active Director Domains, and will be used to talk to work with Shibboleth IDP3. I've never worked with openLDAP ...
0
votes
0answers
17 views

Allow or disallow some users login in Dovecot based in their network

I have a server running dovecot with IMAP and LDAP authentification. All works as expected, however I would want to let some users to access the mail server from outside and other to access from the ...
0
votes
0answers
19 views

How to set initial user password in openldap?

I am new in setting up LDAP server. I have configured Openldap server and able to add test users from LDIF file. The LDIF file has username and password for each user. Now for the real part, I have ...
0
votes
0answers
24 views

OpenLDAP proxy gone for good

I recently had to troubleshoot a Windows AD issue. Users suddenly lost access to shared folders and network drives. After some research I discovered that there was a Linux CentOS machine that crashed ...
0
votes
0answers
211 views

Freeradius/Openldap/802.1X: PEAP-MSCHAPv2 XOR certificates

For WPA2 Enterprise I would like to have user authentication which is supported out-of-the-box by as many clients as possible (i.e., PEAP-MSCHAPv2). Furthermore, for laptops, workstations etc. I ...
0
votes
0answers
60 views

Why isn't pwdReset automatically set when pwdMustChange is true?

Every other directory server, i.e. Oracle's will automatically set pwdReset to TRUE if pwdMustChange is defined in the policy: When a user's password is changed by another user, such as a password ...
0
votes
0answers
36 views

LDAP dynlist not working with syncrepl replication

I'm using syncrepl replication with one master and many slaves. I'm also using dynlist overlay. Dynlist works on the master, but not on slaves. When I run a query on master, everything works ...
0
votes
0answers
32 views

LDAP Self-Service Interface for Profile-Management

I am searching for a Self-Service webinterface for my LDAP Users, I Airways have LAm installier for creating everything but my Users want to update their Passwords, Displaynames and Profilepictures on ...
0
votes
0answers
23 views

OpenLdap allop overlay olc

Is there any way to configure operational attributes to be shown for every request? (openldap 2.4) There is the allop overlay, but it seems to be not working with olc only with slapd.conf. I'm able ...
0
votes
0answers
26 views

Delete root dse from 389 directory server

I have a mail server with kolab 3 installed, when I was installing the server, for testing purposes, i created a second domain that I'll name test.com, now I want to delete this domain from my ldap ...
0
votes
0answers
39 views

Configure ldap.conf host with ipv6

In my ldap.conf is it possible to use HOST to configure an IPv6 address? I know that I can configure an IPv6 address using URI. The linux manual on ldap.conf doesn't state if it only support IPv4 for ...
0
votes
0answers
14 views

restore parts of an LDAP Database

Let's say I have a replicated LDAP setup and someone comes along and deletes an account by accident. Naturally this deletion then gets replicated to all the slaves. How would one go about restoring ...
0
votes
0answers
64 views

Requesting parent OU doesn't seem to work right with Meta-Backend OU as child

I got a huge problem here. I’ve been trying to merge users from a local LDAP (ou=local-users,ou=accounts,dc=domain: which authenticates against a remote active directory (which is not ...
0
votes
0answers
97 views

CentOS7 ldap client not authenticating with ldap server

I am using ApacheDS which was a breeze to setup thanks to the apacheds mailing list. I am able to retrieve ldapsearch results, however, I am not able to get anything by doing a:"getent passwd ". ...
0
votes
0answers
75 views

Windows Server 2008 R2 + Active Directory + Extended Schema Custom Attribute for RDN

I am migrating my ldap schema from OpenLDAP to Microsoft AD. I have added my schema changed to AD schema. I am using a custom attribute called "UniqueID" to store rdn of each entry in the Ldap Server ...
0
votes
0answers
32 views

Yast authentication server configuration: Global settings empty

I try to enable TLS/SSL for my LDAP-Server on a SLES12. So I enabled LDAP over SSL (ldaps) in Yast > Authentication Server Configuration > Startup Configuration. Fine so far. But when it comes ...
0
votes
0answers
115 views

olcRequires: difference between authz and bind (with olcDisallows: bind_anon)?

With OpenLDAP, what is the difference between: olcDisallows: bind_anon oldRequires: bind and: olcRequires: authc It seems to me that both configurations would require the client to authenticate ...
0
votes
0answers
10 views

RETCODE OpenLDAP overlay configuration

I am looking for various ways to disable Simple Paged Search results on OpenLDAP. Somehow, my attempts to disable paged searches by disabling it in contiguration using olcSizeLimit or olcLimits ...