OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

4
votes
1answer
2k views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
4
votes
1answer
474 views

Trying to authenticate to a Dell PowerConnect 5324 switch using FreeRADIUS and OpenLDAP

So here's the situation. I want to be able to use my LDAP credentials to log into this switch. Since there is no support for LDAP on the switch itself, I figured that FreeRADIUS has an LDAP module, ...
3
votes
1answer
2k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
3
votes
1answer
603 views

Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory

Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
2
votes
1answer
18 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
2
votes
1answer
515 views

Not able to add memberOf overlay openldap 2.3.9

I am currently working on integrating LDAP authentication into a system and I would like to restrict access based on LDAP group. The only way to do this is via a search filter and therefore I believe ...
2
votes
1answer
83 views

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the ...
2
votes
1answer
522 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
2
votes
1answer
241 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
2
votes
1answer
158 views

OpenLdap configuration

Simple enough question; is there a way you can configuare your ldap server so it only accepts kerberos authentication and rejects any other type. I'm almost 100% certain this can be done, i just do ...
2
votes
1answer
2k views

How do I use Openfire with OpenLDAP and ldap.clientSideSorting?

The system log on my Openfire + OpenLDAP installation is getting flooded with this message: slap_global_control: unrecognized control: 1.2.840.113556.1.4.473 This means that Openfire wants OpenLDAP ...
1
vote
1answer
29 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
1
vote
1answer
121 views

Connect Liferay 6.1.1 to LDAP Zimbra from Virtualbox

I want to connect liferay to zimbra in Virtual Box and I need to fill this form : ![Capture of liferay try to connect to ldap in VB] http://i.stack.imgur.com/cUOuV.png I got the url and password ...
1
vote
1answer
890 views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
1
vote
1answer
99 views

ldap ppolicy implementation for brute force prevention

I have an openldap server (with user passwords) open worldwide which I'm trying to secure. Step 1 was to limit access to data to authenticated users via ACLs. Step 2, to prevent brute force attacks, ...
1
vote
1answer
66 views

Copy Active Directory User to OpenLDAP

I have Active directory installed on my Windows SErver. I want to copy some of Active directory User to OpenLDAP. on my Active directory User cn=admin,ou=resources,dc=mydomain,dc=com I want to copy ...
1
vote
1answer
130 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
1
vote
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
1
vote
1answer
442 views

rsyslog forward all except ldap

I have Centos 6 servers running openLDAP. In the rsyslog.conf, I forward the logs to my central server with this line: *.* @10.10.10.10:514 openldap seems incredibly chatty. I have 3 servers in ...
0
votes
0answers
16 views

Apache HTTP Server LDAP authentication with netgroups

Is it possible to do a group authentication in Apache HTTP Server ("Require ldap-group") but instead of a normal (posix) ldap group to use a netgroup?
0
votes
0answers
19 views

adding VLV support to OpenLDAP 2.4.31

Apologize in advance - I am not an admin, so the question being asked might be trivial. Still, I am stuck. Any assistance would be greatly appreciated. I am trying to add Virtual List View support to ...
0
votes
0answers
36 views

moving openldap server from centos to ubuntu

I am trying to setup ldap server on my ubuntu 14.04. I had previous ldap server setup installed on CentOS 6 which uses flat-file configuration i.e slapd.conf method for ldap. I did take backup for my ...
0
votes
0answers
14 views

Openldap Master Slave configuration

I have a configuration with a Master and Slave 4. Provider and Consumer are identical CentOS release 6.5 rpm -qa | grep ldap openldap-clients-2.4.23-34.el6_5.1.x86_64 ...
0
votes
0answers
25 views

OpenLDAP 2.4 pass-through SASL configuration

I am having a hard time configuring pass-through on LDAP 2.4, mainly because most of the information in the internet is written for the older LDAP versions... I am looking to configure SASL but when ...
0
votes
0answers
33 views

I am not able to configure LDAP on Debian 7.7

I have a Debian 7.7 box and have installed openldap-2.4.31 from repos, but I can't manage to configure it. I run the install commands and it goes well, I am following this how to, then when I try to ...
0
votes
0answers
16 views

Need informatio​n on alock file in data directory of OpenLDAP 2.4.39

I have taken the OpenLDAP 2.4.39 and able to work properly but when I do slapcat it hangs and always complains on alock,But if I delete alock file and restart it works fine. I have 4.6.21 version of ...
0
votes
0answers
21 views

OpenLDAP on CentOS 6.5, changing OU?

Followed these instructions (apparently not completely) http://www.itmanx.com/kb/centos6/install-openldap-phpldapadmin Under "Create initial LDAP structure" where I define the initial structure, ...
0
votes
0answers
69 views

OpenLDAP Invalid credentials on CentOS 7

Afternoon all I'm using Puppet to provision some OpenLDAP servers. The module I'm using is: datacentred-ldap, and the manifest I'm using looks like: ldap-class This process works fine on CentOS 6 ...
0
votes
0answers
65 views

How can I use LDAP and Kerberos for web auth only, not server auth

I have read this question on proper kerberos integration and this question on enterprise authentication, neither are helpful to me at this point in time though they did provide some good background. ...
0
votes
0answers
15 views

Issues in olcAccess in OpenLDAP

I have applied ACLs in OpenLDAP using olcAccess. My applied conf is as follows :- olcAccess: {0}to attrs=userPassword by dn="cn=Manager,dc=tacacs,dc=abc,dc=in" write by ...
0
votes
0answers
107 views

Confused about olcServerID for LDAP Sync Replication

Simplified question: How do you set olcServerID in olcDatabase configuration files? More detailed question: I have looked through several documents on how to enable Sync Replication for OLC on ...
0
votes
0answers
42 views

OpenLDAP PAM authen does not support SSHA on FreeBSD10

OpenLDAP PAM authen does not support SSHA? Hi everyone, Now, I lost one day to figure out, the reason my FreeBSD10 can not authenticate SSH user via LDAP because pam_ldap and nss_ldap do not support ...
0
votes
0answers
213 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
0
votes
0answers
66 views

openldap proxy with 3 ldap (openldap,ad,edir) how to rewrite date format from active directory one to ldap

I have a openldap with meta backend connected to 3 ldap (one openldap, one edir and one AD). I test authentication again the proxy , it's working. my problem : dev team is working to use this ...
0
votes
0answers
99 views

MacOS builtin OpenLDAP: DB_NOTFOUND error

I am trying to setup builtin OpenLDAP server in MacOS Mavericks. I managed to configure and start it. I can login with a LDAP client using the root credentials and create new users. My problem is that ...
0
votes
0answers
40 views

Issues setting up a backup OpenLDAP server

I've been trying to replicate the OpenLDAP server we currently have, so that we can use it in the event the main server crashes. I was able to get the database transferred, as well as the TLS certs, ...
0
votes
0answers
37 views

How to make a role with all permissions on Ldap?

I'm working with Open Ldap and want to make a role which has all permissions. I mean if I make a new permission on the future, the role should automatically has that permission and no need to add the ...
0
votes
0answers
97 views

OpenLDAP+pam_ldap+ppolicy does not notify user that they are blocked

We have an OpenLDAP server configured to use the password policy overlay in order to lock users when they reach a certain number of failed password attempts. This is working perfectly but when a ...
0
votes
0answers
163 views

ejabberd + ldap_filter (uidNumber greater than) is not working

I have configuration ejabberd + ldap users which works fine, unless I try to filter only users with uid greater than 1000. =INFO REPORT==== 2014-02-26 09:52:22 === D(<0.268.0>:eldap:697) : ...
0
votes
0answers
102 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
141 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
0
votes
0answers
49 views

OpenLDAP SQL backend failing

I'm running OpenLDAP with a SQL (Oracle) backend. This works fine with OpenLDAP 2.3 but after upgrading to 2.4.38 it fails with an error that is not helpful at all: 52d3ec0c ...
0
votes
0answers
134 views

OpenLdap- make test fails

I am trying to configure and install an ldap server following this guide. I am stuck on step 6, make test. it fails on the first test with the following message: cd tests; make test make[1]: Entering ...
0
votes
0answers
61 views

How to enable TLS on OpenLDAP

I use CentosOS 5. I have a problem to enable TLS (or ssl) on OpenLDAP server. I followed this tutorial... so: I generate the cerificates; I setted the path in sladp.conf TLSCertificateFile ...
0
votes
0answers
330 views

Storing GPG keys in LDAP with TLS using gpgme

I'm trying to send my GPG public key to our LDAP server, but I'm hitting a wall. My LDAP server only allows LDAP with Start_TLS over port 389, or LDAPS on port 636. I've got the following lines in my ...
0
votes
0answers
140 views

OpenLDAP replication trouble

I still unable to setup replication between LDAP nodes %(, followed instructions from : http://www.secure-computing.net/wiki/index.php/OpenLDAP/replication Server, lapd.conf TLS_CACERTDIR ...
0
votes
0answers
289 views

Samba username doesn't work once I join a Windows XP machine to my domain

I have set up a PDC using Samba, LDAP and Postgresql. I have successfully added all the necessari entries to my database and can also see all the necessary entreis in LDAP. I can also successfully ...
0
votes
0answers
95 views

How can I get Openindiana built in samba to use an OpenLDAP server?

I built an OpenIndiana / NAPP-IT server to use for samba home shares. Up to now I had planned to use a KVM virtual machine to run the samba/ldap stack, then connect the vm to the ZFS volume thru ...
0
votes
0answers
179 views

Using openldap for ssh authentication

I am looking at setting up an openldap server to work as a central ssh gateway. Am I right in thinking that i need to install an openldap server, and then configure the client server to authenticate ...
0
votes
0answers
43 views

What does rc -2 mean in OpenLDAP syncrepl?

I am having an issue with syncRepl. I keep getting an rc -2 during syncrepl for replication. What does this mean?