Questions tagged [openldap]
OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.
1,468
questions
1
vote
2
answers
3k
views
How to check if an overlay is enabled with OpenLDAP?
Is there a way to automatically check if that an overlay, for instance memberof, is enabled with openldap?
A lot of tutorial out there explain how to enable memberof, but how can I know if this had ...
1
vote
1
answer
498
views
Cannot initialize openLDAP-backed kerberos realm using krb5_ldap_util with startTLS?
I have set up an openLDAP backed MIT Kerberos realm on a server after much iteration, and I am now trying to move it to its own server. When I first set it up on the original server, I created a ...
0
votes
1
answer
427
views
OpenLDAP ppolicy load error
I'm going to try run of openldap.
I created master-slave server and everything is ok.
However when I load the ppolicy module I get an error like below
SASL/EXTERNAL authentication started
SASL ...
1
vote
2
answers
1k
views
openLDAP config broken after Ubuntu upgrade (20.04 -> 22.04)
I have problems with openLDAP after updating from Ubuntu 20.04 to 22.04. If I use slapcat after the update it leads to the following error:
olcAttributeTypes: value #0 olcAttributeTypes: Duplicate ...
0
votes
1
answer
373
views
Does ldapmodify propagate changes of dn/uid to associated groups of the user?
I have to modify a user's UID and DN in an OpenLDAP server because of marriage. Now, I follow this example from Oracle's website: https://docs.oracle.com/cd/E22289_01/html/821-1273/adding-modifying-...
3
votes
2
answers
13k
views
Ubuntu 14.04, OpenLDAP TLS problems
I have set up an openldap server using this guide here.
It worked fine. But as I want to use sssd I also need TLS to be working for LDAP. I looked into and followed the TLS part of the guide.
I ...
0
votes
1
answer
125
views
OpenLDAP to 389-DS: Can I have "named password policies"?
I'm trying to understand how "password policy" works in 389-DS, compared to OpenLDAP 2.4:
In OpenLDAP 2.4 I could define multiple "named" password policy entries, and assign those ...
0
votes
1
answer
102
views
OpenLDAP configuration problems for different Active Directory domains
I'm working on a proof of concept that requires me to test authentication against three different Active Directory domains. Each domain controller in each domain will have a different set of users. ...
4
votes
3
answers
13k
views
Persuading openldap to work with SSL on Ubuntu with cn=config
I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance.
I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
1
vote
2
answers
699
views
OpenLDAP configure LDAPS, restart fails
I am attempting to get ldaps working with openldap. I have a wildcard ssl certificate that was issued for this domain and have used ldapmodify to add the relevant files to cn=config as show here.
...
8
votes
10
answers
23k
views
Using Lets Encrypt certificates with openLDAP
I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
1
answer
200
views
ldapmodify error 80 olcAccess Handler exited with 1
I have an error trying to add an olcAccess using ldapmodify command:
ldap_initialize( ldapi:///??base )
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=...
1
vote
2
answers
888
views
OpenLDAP and Kerberos servers on Ubuntu Server 22.04; Krb5 isn't creating /var/lib/krb5kdc/principal
I have an existing openldap server on Ubuntu Server 22.04 and am trying to set up a kerberos server with it, following this guide: https://ubuntu.com/server/docs/service-kerberos-with-openldap-backend
...
0
votes
1
answer
781
views
TLS Negotiation issue in OpenLDAP
I have the OpenLDAP Master-Slave architecture. One day I have restarted the slapd service in the LDAP Slave and then found the TLS negotiation issue in the Logs. Before restarting the service, it was ...
0
votes
1
answer
309
views
LDAP configuration for slapd-sock / slapo-sock / back-sock
Current system: CentOS 7.9, OpenLDAP 2.4
I would like to implement a "hook" into my LDAP operations so that when an ldapadd or ldapmodify operation takes place, a script is run in addition ...
0
votes
1
answer
597
views
TLS: could not load verify locations
I am trying to contact the organization's OpenLDAP server over SSL.
I am not sure if I am trying with the correct certificate, but I am using a .pfx file I found.
It is located at C:/cert/mycert.pfx
...
1
vote
1
answer
90
views
Error 20080078:BIO routines:bio_write_intern: uninitialized
My php test script for SSL connection to the LDAP server crashes.
When I run it from command line CLI crashes.
The message from the LDAP logging shows this before the crash:
Error 20080078:BIO ...
5
votes
4
answers
30k
views
how do you set the admin password on openldap 2.4
I am getting started with openLdap 2.4 and am having a bit of trouble, all the examples I see seem to refer to previous versions which used the text config file slapd.conf but from what I see on ...
0
votes
1
answer
307
views
LDAP auth for hosts : same user should have different posixgroup memberships while login to different machines(hosts)
Any idea on how to achieve following objective with openLDAP server with unix clients
Objective :
a) Each user should have separate access restrictions to different hosts(unix servers) through LDAP ...
1
vote
1
answer
200
views
Adding Chained CA certificate on /etc/ssl/certinfo.ldif file
I have been created following files for my LDAP server using certtool.
1.root.pem
2.ldap_crt.pem
3.ldap_key.pem
Above created files has been configured in the /etc/ssl/certinfo.ldif file like ...
0
votes
1
answer
184
views
Active directory to ldap synchronization
I have two LDAP servers. First is Active Directory and second is openLDAP. I need setup between these servers.
Is here anybody, who know, how to do it?
I tried to use this link for tutorial, but I ...
0
votes
0
answers
315
views
OpenLDAP slapd.d configuration directory not updated
I have 'inherited' an openldap (CentOS 7) server which configuration is handled dynamically (using a slapd.d directory and a tree of ldif files).
I used ldapmodify to add an attribute (olcDbCheckpoint)...
4
votes
1
answer
3k
views
LDAP (with ppolicy) errors on changing other user's password
I've set up an LDAP server with the ppolicy overlay, but now am having trouble resetting user's password in some cases: if the user has a failed login, then the pwdFailureTime attribute exists and ...
6
votes
2
answers
3k
views
OpenLDAP proxy cache not retrieving entries
I need to set up a local LDAP proxy cache which connects to our central Active Directory server. OpenLDAP Proxy Cache looks just like the thing. But following the manpages as closely as possible, I am ...
0
votes
1
answer
2k
views
LDAP on Ubuntu 16 won't connect
I've installed LDAP on an Ubuntu 16.04 machine, using this command:
sudo apt install slapd ldap-utils
This is my config file /etc/ldap/ldap.conf
#
# LDAP Defaults
#
# See ldap.conf(5) for details
#...
0
votes
1
answer
176
views
How to create accesslog in OpenLDAP with name "{2}accesslog"
I'm trying to setup OpenLdap on ubuntu.
The following command is trying to add the accesslog database:
ldapmodify -Y EXTERNAL -H ldapi:/// -f test.ldif
When the name is "{2}mdb", the result ...
1
vote
1
answer
2k
views
Restricting LDAP users from authenticating without a valid shell
What I'm trying to accomplish is if I changed the user's attributes in LDAP to have no shell; for example: /etc/noshell, I do not want the user to ssh successfully. I have changed the attribute of one ...
0
votes
2
answers
338
views
OpenLDAP push replication via proxy - Guide to setup syncrepl
I have some basic experience interacting with & troubleshooting OpenLDAP as well as
389-ds, but I don't have a whole lot of experience setting them up or configuring an
OpenLDAP server.
My goal is ...
0
votes
1
answer
2k
views
Installing OpenLDAP on Centos 7: Missing mdb Database?
I'm trying to install OpenLDAP on Centos 7 by following the instructions here:
http://www.openldap.org/doc/admin24/quickstart.html
Here is my slapd.ldif file, which is the same as the sample one ...
0
votes
1
answer
2k
views
Openldap+samba pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the domain. We cannot work reliably without it
After integration samba with openldap i got this type of error while trying to restart smb.service :
juil. 20 13:28:41 ldapmaster smbd[9761]: [2020/07/20 13:28:41.008764, 0] ../../source3/passdb/...
0
votes
1
answer
4k
views
How to import ldif users into FreeIPA?
Maybe it needs two steps:
Add users defined in the ldif file to OpenLDAP(Inside FreeIPA)
Migrate those added users from OpenLDAP to IPA
Current situation
Setup FreeIPA server, initilized an admin ...
-3
votes
1
answer
833
views
How to build OpenLDAP in windows and get binaries?
How can i get binaries for these tools: [ldapadd ldapcompare ldapdelete ldapexop ldapmodify ldapmodrdn ldappasswd ldapsearch ldapurl ldapvc ldapwhoami]
I tried to build openLDAP version 2.6.3 from ...
1
vote
0
answers
137
views
How to test OpenLDAP of my yocto-base Linux distribution
I've found that in my Yocto distribution I can install OpenLDAP that is an open source implementation of the Lightweight Directory Access Protocol.
Before starting the addition of this package to my ...
1
vote
1
answer
2k
views
Ubuntu OpenLDAP TLS negotiation failure
I've been following the Ubuntu Server Guide for OpenLDAP, and have run into an issue with what I suspect is replication. If I run the following command on the client with access to the server:
...
0
votes
2
answers
2k
views
OpenLDAP ACLs are not working
First things first, I'm currently working with an OpenLDAP: slapd 2.4.36 on a Fedora release 19 (Schrödinger’s Cat).
I've just install the openldap with yum and my configuration is the following one:
...
0
votes
2
answers
2k
views
OSX 10.7 Directory Utility - Editing OpenLDAP
I am attempting to get Macs, running os 10.7.5 Lion, to authenticate using OpenLDAP running on Ubuntu 12.0.4 LTS. One of the things that I would love to be able to do is to use Apple's lovely ...
0
votes
1
answer
3k
views
ldapadd works, but ldapsearch doesn't (openldap)
I use just installed Debian 6 with openldap 2.4. I have CentOS box too with openldap 2.3.
I make .ldif file from centOS (working configuration) box and successfully add all entries from ldif to Debian'...
0
votes
2
answers
132
views
SSSD direct bind
I use openldap with the following structure:
dc=example,dc=org
├── ou=groups
│ ├── cn=wheel
│ └── cn=adm
└── ou=users
├── uid=firstname.lastname
└── uid=firstname.lastname
Every setup of ...
0
votes
1
answer
133
views
How to change base dn from "dc=example,dc=org" to "ou=example,o=org" in openldap
How to change base dn from "dc=example,dc=org" to "ou=example,o=org" in openldap
This is what i have...
~# slapcat
dn: dc=example,dc=org
objectClass: top
objectClass: dcObject
...
0
votes
2
answers
2k
views
custom ldap conf for apache 2.2
System: Apache 2.2.12 on Suse linux 11 patchset 2, with PHP and Perl.
I want to create a custom ldap.conf file for use by Apache for user authentication to a remote system.
I can't put my config ...
0
votes
1
answer
792
views
Samba 4.16 integration with openldap 2.6 on Centos8 for 2FA
I want to setup 2factor authentication for both Linux and windows machine and want to manage the password via LDAP server.
For this, I am using LDAP(which provides TOTP functionality) to authenticate ...
1
vote
1
answer
2k
views
openSUSE 13.1 pam_ldap error trying to bind invalid credentials
Environment: new install of openSUSE 13.1 into a internal network of mostly 10.2 and 10.3 openSUSE. LDAP server (@(#) $OpenLDAP: slapd 2.3.19 (Jul 28 2006 17:00:02)) running on SUSE LE 10 .
...
2
votes
1
answer
2k
views
Mapping User and Group Ownership through LDAP
I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
0
votes
1
answer
2k
views
389-ds and openldap client setup
I am working towards a proof concept:
I have installed 389-dc on centos and enabled ssl via a self-signed certificate. (after a lot of reading)
I can see the port 636 is listening on the centos ...
0
votes
1
answer
3k
views
User ldap cannot change password : LDAP password information update failed: Insufficient access
I'm using centos 6.7 to create LDAP server, but the user still cannot change their own password.
The error when user try to change the password :
[john2@servergw ~]$ passwd
Changing password for ...
1
vote
2
answers
3k
views
Connection from samba to LDAP server failed
I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service.
Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working properly....
0
votes
1
answer
2k
views
openldap replication on centos 7 not replicated
I have setup a simple openldap server on centos 7 minimum. Added a couple of users and setup a client that can retrieve the users using getentpasswd and ldapsearch works fine between the two. Then I ...
0
votes
1
answer
2k
views
SASL Auth against LDAP
So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7
I am getting this flooding my error logs when I try to ...
0
votes
2
answers
3k
views
How to Turn off debug mode in OpenLDAP?
I have start open ldap server with log mode from below command
slapd -u ldap -g ldap -d 65
after that i tried to stop the server and restart again but still i am getting too many log in terminal. ...
1
vote
1
answer
2k
views
OpenLdap ACL Admin Group rights
Hi I have been trying to achieve Admin and operator level ACL to no avail.
So far I've got
access to attrs=userPassword,shadowLastChange
by self write
by anonymous auth
by set="[cn=...