Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

Filter by
Sorted by
Tagged with
1 vote
2 answers
3k views

How to check if an overlay is enabled with OpenLDAP?

Is there a way to automatically check if that an overlay, for instance memberof, is enabled with openldap? A lot of tutorial out there explain how to enable memberof, but how can I know if this had ...
1 vote
1 answer
498 views

Cannot initialize openLDAP-backed kerberos realm using krb5_ldap_util with startTLS?

I have set up an openLDAP backed MIT Kerberos realm on a server after much iteration, and I am now trying to move it to its own server. When I first set it up on the original server, I created a ...
0 votes
1 answer
427 views

OpenLDAP ppolicy load error

I'm going to try run of openldap. I created master-slave server and everything is ok. However when I load the ppolicy module I get an error like below SASL/EXTERNAL authentication started SASL ...
1 vote
2 answers
1k views

openLDAP config broken after Ubuntu upgrade (20.04 -> 22.04)

I have problems with openLDAP after updating from Ubuntu 20.04 to 22.04. If I use slapcat after the update it leads to the following error: olcAttributeTypes: value #0 olcAttributeTypes: Duplicate ...
0 votes
1 answer
373 views

Does ldapmodify propagate changes of dn/uid to associated groups of the user?

I have to modify a user's UID and DN in an OpenLDAP server because of marriage. Now, I follow this example from Oracle's website: https://docs.oracle.com/cd/E22289_01/html/821-1273/adding-modifying-...
3 votes
2 answers
13k views

Ubuntu 14.04, OpenLDAP TLS problems

I have set up an openldap server using this guide here. It worked fine. But as I want to use sssd I also need TLS to be working for LDAP. I looked into and followed the TLS part of the guide. I ...
0 votes
1 answer
125 views

OpenLDAP to 389-DS: Can I have "named password policies"?

I'm trying to understand how "password policy" works in 389-DS, compared to OpenLDAP 2.4: In OpenLDAP 2.4 I could define multiple "named" password policy entries, and assign those ...
0 votes
1 answer
102 views

OpenLDAP configuration problems for different Active Directory domains

I'm working on a proof of concept that requires me to test authentication against three different Active Directory domains. Each domain controller in each domain will have a different set of users. ...
4 votes
3 answers
13k views

Persuading openldap to work with SSL on Ubuntu with cn=config

I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance. I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
1 vote
2 answers
699 views

OpenLDAP configure LDAPS, restart fails

I am attempting to get ldaps working with openldap. I have a wildcard ssl certificate that was issued for this domain and have used ldapmodify to add the relevant files to cn=config as show here. ...
8 votes
10 answers
23k views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0 votes
1 answer
200 views

ldapmodify error 80 olcAccess Handler exited with 1

I have an error trying to add an olcAccess using ldapmodify command: ldap_initialize( ldapi:///??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=...
1 vote
2 answers
888 views

OpenLDAP and Kerberos servers on Ubuntu Server 22.04; Krb5 isn't creating /var/lib/krb5kdc/principal

I have an existing openldap server on Ubuntu Server 22.04 and am trying to set up a kerberos server with it, following this guide: https://ubuntu.com/server/docs/service-kerberos-with-openldap-backend ...
0 votes
1 answer
781 views

TLS Negotiation issue in OpenLDAP

I have the OpenLDAP Master-Slave architecture. One day I have restarted the slapd service in the LDAP Slave and then found the TLS negotiation issue in the Logs. Before restarting the service, it was ...
0 votes
1 answer
309 views

LDAP configuration for slapd-sock / slapo-sock / back-sock

Current system: CentOS 7.9, OpenLDAP 2.4 I would like to implement a "hook" into my LDAP operations so that when an ldapadd or ldapmodify operation takes place, a script is run in addition ...
0 votes
1 answer
597 views

TLS: could not load verify locations

I am trying to contact the organization's OpenLDAP server over SSL. I am not sure if I am trying with the correct certificate, but I am using a .pfx file I found. It is located at C:/cert/mycert.pfx ...
1 vote
1 answer
90 views

Error 20080078:BIO routines:bio_write_intern: uninitialized

My php test script for SSL connection to the LDAP server crashes. When I run it from command line CLI crashes. The message from the LDAP logging shows this before the crash: Error 20080078:BIO ...
5 votes
4 answers
30k views

how do you set the admin password on openldap 2.4

I am getting started with openLdap 2.4 and am having a bit of trouble, all the examples I see seem to refer to previous versions which used the text config file slapd.conf but from what I see on ...
0 votes
1 answer
307 views

LDAP auth for hosts : same user should have different posixgroup memberships while login to different machines(hosts)

Any idea on how to achieve following objective with openLDAP server with unix clients Objective : a) Each user should have separate access restrictions to different hosts(unix servers) through LDAP ...
1 vote
1 answer
200 views

Adding Chained CA certificate on /etc/ssl/certinfo.ldif file

I have been created following files for my LDAP server using certtool. 1.root.pem 2.ldap_crt.pem 3.ldap_key.pem Above created files has been configured in the /etc/ssl/certinfo.ldif file like ...
0 votes
1 answer
184 views

Active directory to ldap synchronization

I have two LDAP servers. First is Active Directory and second is openLDAP. I need setup between these servers. Is here anybody, who know, how to do it? I tried to use this link for tutorial, but I ...
0 votes
0 answers
315 views

OpenLDAP slapd.d configuration directory not updated

I have 'inherited' an openldap (CentOS 7) server which configuration is handled dynamically (using a slapd.d directory and a tree of ldif files). I used ldapmodify to add an attribute (olcDbCheckpoint)...
4 votes
1 answer
3k views

LDAP (with ppolicy) errors on changing other user's password

I've set up an LDAP server with the ppolicy overlay, but now am having trouble resetting user's password in some cases: if the user has a failed login, then the pwdFailureTime attribute exists and ...
6 votes
2 answers
3k views

OpenLDAP proxy cache not retrieving entries

I need to set up a local LDAP proxy cache which connects to our central Active Directory server. OpenLDAP Proxy Cache looks just like the thing. But following the manpages as closely as possible, I am ...
0 votes
1 answer
2k views

LDAP on Ubuntu 16 won't connect

I've installed LDAP on an Ubuntu 16.04 machine, using this command: sudo apt install slapd ldap-utils This is my config file /etc/ldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details #...
0 votes
1 answer
176 views

How to create accesslog in OpenLDAP with name "{2}accesslog"

I'm trying to setup OpenLdap on ubuntu. The following command is trying to add the accesslog database: ldapmodify -Y EXTERNAL -H ldapi:/// -f test.ldif When the name is "{2}mdb", the result ...
1 vote
1 answer
2k views

Restricting LDAP users from authenticating without a valid shell

What I'm trying to accomplish is if I changed the user's attributes in LDAP to have no shell; for example: /etc/noshell, I do not want the user to ssh successfully. I have changed the attribute of one ...
0 votes
2 answers
338 views

OpenLDAP push replication via proxy - Guide to setup syncrepl

I have some basic experience interacting with & troubleshooting OpenLDAP as well as 389-ds, but I don't have a whole lot of experience setting them up or configuring an OpenLDAP server. My goal is ...
0 votes
1 answer
2k views

Installing OpenLDAP on Centos 7: Missing mdb Database?

I'm trying to install OpenLDAP on Centos 7 by following the instructions here: http://www.openldap.org/doc/admin24/quickstart.html Here is my slapd.ldif file, which is the same as the sample one ...
0 votes
1 answer
2k views

Openldap+samba pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the domain. We cannot work reliably without it

After integration samba with openldap i got this type of error while trying to restart smb.service : juil. 20 13:28:41 ldapmaster smbd[9761]: [2020/07/20 13:28:41.008764, 0] ../../source3/passdb/...
0 votes
1 answer
4k views

How to import ldif users into FreeIPA?

Maybe it needs two steps: Add users defined in the ldif file to OpenLDAP(Inside FreeIPA) Migrate those added users from OpenLDAP to IPA Current situation Setup FreeIPA server, initilized an admin ...
-3 votes
1 answer
833 views

How to build OpenLDAP in windows and get binaries?

How can i get binaries for these tools: [ldapadd ldapcompare ldapdelete ldapexop ldapmodify ldapmodrdn ldappasswd ldapsearch ldapurl ldapvc ldapwhoami] I tried to build openLDAP version 2.6.3 from ...
1 vote
0 answers
137 views

How to test OpenLDAP of my yocto-base Linux distribution

I've found that in my Yocto distribution I can install OpenLDAP that is an open source implementation of the Lightweight Directory Access Protocol. Before starting the addition of this package to my ...
1 vote
1 answer
2k views

Ubuntu OpenLDAP TLS negotiation failure

I've been following the Ubuntu Server Guide for OpenLDAP, and have run into an issue with what I suspect is replication. If I run the following command on the client with access to the server: ...
0 votes
2 answers
2k views

OpenLDAP ACLs are not working

First things first, I'm currently working with an OpenLDAP: slapd 2.4.36 on a Fedora release 19 (Schrödinger’s Cat). I've just install the openldap with yum and my configuration is the following one: ...
0 votes
2 answers
2k views

OSX 10.7 Directory Utility - Editing OpenLDAP

I am attempting to get Macs, running os 10.7.5 Lion, to authenticate using OpenLDAP running on Ubuntu 12.0.4 LTS. One of the things that I would love to be able to do is to use Apple's lovely ...
0 votes
1 answer
3k views

ldapadd works, but ldapsearch doesn't (openldap)

I use just installed Debian 6 with openldap 2.4. I have CentOS box too with openldap 2.3. I make .ldif file from centOS (working configuration) box and successfully add all entries from ldif to Debian'...
0 votes
2 answers
132 views

SSSD direct bind

I use openldap with the following structure: dc=example,dc=org ├── ou=groups │ ├── cn=wheel │ └── cn=adm └── ou=users ├── uid=firstname.lastname └── uid=firstname.lastname Every setup of ...
0 votes
1 answer
133 views

How to change base dn from "dc=example,dc=org" to "ou=example,o=org" in openldap

How to change base dn from "dc=example,dc=org" to "ou=example,o=org" in openldap This is what i have... ~# slapcat dn: dc=example,dc=org objectClass: top objectClass: dcObject ...
0 votes
2 answers
2k views

custom ldap conf for apache 2.2

System: Apache 2.2.12 on Suse linux 11 patchset 2, with PHP and Perl. I want to create a custom ldap.conf file for use by Apache for user authentication to a remote system. I can't put my config ...
0 votes
1 answer
792 views

Samba 4.16 integration with openldap 2.6 on Centos8 for 2FA

I want to setup 2factor authentication for both Linux and windows machine and want to manage the password via LDAP server. For this, I am using LDAP(which provides TOTP functionality) to authenticate ...
1 vote
1 answer
2k views

openSUSE 13.1 pam_ldap error trying to bind invalid credentials

Environment: new install of openSUSE 13.1 into a internal network of mostly 10.2 and 10.3 openSUSE. LDAP server (@(#) $OpenLDAP: slapd 2.3.19 (Jul 28 2006 17:00:02)) running on SUSE LE 10 . ...
2 votes
1 answer
2k views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
0 votes
1 answer
2k views

389-ds and openldap client setup

I am working towards a proof concept: I have installed 389-dc on centos and enabled ssl via a self-signed certificate. (after a lot of reading) I can see the port 636 is listening on the centos ...
0 votes
1 answer
3k views

User ldap cannot change password : LDAP password information update failed: Insufficient access

I'm using centos 6.7 to create LDAP server, but the user still cannot change their own password. The error when user try to change the password : [john2@servergw ~]$ passwd Changing password for ...
1 vote
2 answers
3k views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working properly....
0 votes
1 answer
2k views

openldap replication on centos 7 not replicated

I have setup a simple openldap server on centos 7 minimum. Added a couple of users and setup a client that can retrieve the users using getentpasswd and ldapsearch works fine between the two. Then I ...
0 votes
1 answer
2k views

SASL Auth against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
0 votes
2 answers
3k views

How to Turn off debug mode in OpenLDAP?

I have start open ldap server with log mode from below command slapd -u ldap -g ldap -d 65 after that i tried to stop the server and restart again but still i am getting too many log in terminal. ...
1 vote
1 answer
2k views

OpenLdap ACL Admin Group rights

Hi I have been trying to achieve Admin and operator level ACL to no avail. So far I've got access to attrs=userPassword,shadowLastChange by self write by anonymous auth by set="[cn=...

1 2
3
4 5
30