OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.
0
votes
1answer
586 views
Samba with remote LDAP authentication doesn`t see users properly
I'm trying to setup a samba server authenticated by a remote LDAP server, and I'm having some problems that I can't figure how to solve.
I was able to make an getent passwd at samba server and I ...
1
vote
0answers
208 views
How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package
I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package.
I have used the following command to ...
0
votes
0answers
219 views
Need help setting up OpenLDAP on OSX Mountain Lion [closed]
I'm trying to get OpenLDAP manually configured on OSX Mountain Lion. I'd prefer to do it manually instead of installing OSX server, but if that's the only option (i.e., OpenLDAP on OSX isn't meant to ...
1
vote
0answers
35 views
having trouble with bog standard openldap server db
I am having trouble getting an "out of the box" openldap server working.
The examples on the openldap site still refer to the slapd.conf file, but the install does not make that.
if I start the ...
1
vote
2answers
456 views
How to enable catch-all email in iRedMail Open Source edition?
How to create catch-all email alias for domain in iRedMail Open Source edition?
I know that's possible via LDAP and found the following instructions:
...
0
votes
1answer
110 views
how do you set the admin password on openldap 2.4
I am getting started with openLdap 2.4 and am having a bit of trouble, all the examples I see seem to refer to previous versions which used the text config file slapd.conf but from what I see on ...
0
votes
0answers
119 views
su not giving proper message for restricted LDAP groups
I have configured PAM authentication on Linux box to restrict particular group only to login.
I have enabled pam and ldap through authconfig and modified access.conf like below,
[root@test root]# ...
0
votes
3answers
1k views
CentOS openLDAP cert trust issues
# LDAPTLS_CACERTDIR=/etc/ssl/certs/ ldapwhoami -x -ZZ -H ldaps://ldap.domain.tld
ldap_start_tls: Can't contact LDAP server (-1)
additional info: TLS error -8172:Peer's certificate issuer has ...
2
votes
1answer
362 views
LDAP userPassword encryption?
When I use ldapsearch command, I see my password (is 'abc123') is encrypted in openldap:
userPassword:: e1NTSEF9THk4YmtNTUxHV09sOEYvdUdKRE1McFR6eTU2OWNQRVo=
I tried to encode my password on ...
-1
votes
1answer
64 views
openLDAP restrict user
Hi I'm newbie on LDAP but I was able to follow ubuntu's installation guide, add few user using posixgroup then successfully accessed the ssh using the created account.
Now, lets say I have user1, and ...
0
votes
0answers
1k views
Creating an OS X Mountain Lion 10.8 OpenDirectory database with a specific domain in mind
Mountain Lion Server has been one of the most infuriating things ever recently. Above and beyond tons of crashing I've been completely unable to do the following in a way that makes sense to both me ...
0
votes
1answer
215 views
Kerberos with LDAP backend still using db2
I've installed and configured LDAP, installed and configured kerberos to use LDAP as the backend, as follows:
[dbdefaults]
ldap_kerberos_container_dn = dc=voltage,dc=com
[dbmodules]
...
2
votes
1answer
165 views
ldap export and import
Is it possible to export all the data inside openldap for example using ldapsearch or some other tool to a (ldif?) file and then import everything on another server and put this in a script that would ...
2
votes
1answer
188 views
How to get openldap to honor pwdReset=TRUE
We have a custom application that's using openldap (2.4.32) as a user database. Per customer requirement, I'm modifying it to use openldap's ppolicy overlay. The requirement is to force the user to ...
12
votes
2answers
165 views
SSH only works after intentionally failed password
So, I'm having a rather weird problem. I have a server, that when I try to SSH into, immediately closes the connection if I type in the correct password on the first attempt. However, if I ...
1
vote
0answers
491 views
Saslauth with ldapdb on debian
I'm trying to get saslauthd working with openldap.
ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either.
getent passwd ...
0
votes
1answer
38 views
openLDAP TLS using only IP addresses
Basically the problem is this: I am setting up an openLDAP server on a CentOS 6.3 and an openLDAP client on Ubuntu 11.04. The problem is, I don't know how to set-up a nameservice for the openLDAP ...
1
vote
0answers
2k views
How to configure OpenLDAP 2.4.23 for SSL on CentOS 6.3?
I have installed openldap 2.4.23 on CentOS 6.3 using the yum package 'openldap-servers'.
When I follow instructions to configure openldap for SSL (such as ...
2
votes
3answers
111 views
ldap does not respond to ldapsearch with -ZZ parameter
I have followed the instructions found here up to the point where ldapsearch is executed with -ZZ. The problem is after executing ldapsearch with -ZZ, there is no more response.
Is there any step ...
0
votes
1answer
312 views
Testlink stop working when configuring it to use LDAP
I have a TestLink webservice running on a server, and OpenLDAP running on other server. There are no firewall problems between them (I managed to configure Redmine, on the same server as TestLink, to ...
0
votes
1answer
68 views
Is it possible to store Hashed data in a different field than userPassword in LDAP
I've been asked to store hashed data in a LDAP server. Putting hashed passwords is easy but I'm not sure if LDAP allows to store data like email hashed or even encrypted.
Creating a LDIF file with a ...
3
votes
2answers
220 views
Ubuntu 11.04 and OpenLDAP - where is the config?
I've been asked to setup a multimaster LDAP environment on Ubuntu 11.04 - instead of a single master server. I cloned the master server and recreated it into two VMs. I am trying to follow the ...
0
votes
1answer
543 views
Ubuntu OpenLDAP and Mac OS X Roaming Profiles
Today, I'm installing OpenLDAP on Ubuntu 11.04. I have gone through the installation before a few times, but what I have never been able to do is use Mac OSX Lion's Directory Utility to administer ...
0
votes
1answer
83 views
What are the benefits of using ldap with Samba?
I am curious to know what are the benefits of using LDAP with Samba? In other words, without integrating LDAP with Samba, what are the limitations of Samba?
2
votes
1answer
270 views
OpenLDAP memberOf overlay - changing memberOf attribute name
I set up the memberOf overlay for OpenLDAP - how do I change the memberOf attribute name?
I want to change it to "isMemberOf".
I tried changing this attribute in the configuration
...
1
vote
1answer
264 views
Removing/modifying LDAP objectclasses/attributes using olc
I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema:
objectIdentifier tests orgUlyssisOID:4
...
0
votes
1answer
633 views
OpenLDAP 2.4.23 - Debian 6.0 - Import schema - Insufficient access (50)
Good day to everybody.
I'm trying to add a new schema inside OpenLDAP. But getting an error:
ldap_add: Insufficient access (50)
root@ldap:/# ldapadd -c -x -D cn=admin,dc=domain,dc=com -W -f ...
0
votes
1answer
136 views
Configure host access rights in OpenLDAP
I've set up an OpenLDAP-Server to authenticate users to our Ubuntu-servers. The authentication works quite well but I'd like to restict the user's access to certain servers.
I know this can be done ...
1
vote
4answers
76 views
Installing and deploying LDAP for own applications
We have a set of various web applications dedicated to our distributors and partners. Some are standard packages such as Alfresco, others are custom-made web sites.
All are protected by a login. We'd ...
0
votes
1answer
264 views
what is the simple Command to check password expiry time of an openldap user account
I am running openldap 2.3.43.el5 on RHEL 5.3 I am trying to find a simple command that will tell you when the password for an ldap user will expire, any help would be greatly appreciated.This would ...
1
vote
1answer
131 views
Adding custom attribute to openldap
I am attempting to setup ConTagged - The LDAP Address Book but I am having a few issues with some of the attributes. The problem is that some of them are undefined and they do not seem to be in the ...
1
vote
1answer
348 views
Unable to add schema in OpenLDAP using run-time configuration cn=config
I have the following ldif file which I am trying to load into openLDAP:
Custom schema being created for the Monas project
dn: cn=testSchemas,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: ...
1
vote
1answer
342 views
nagios - Web interface: authentication through kerberos OK, what about authorization on cgi.cfg?
I have successfully installed nagios, and it provides authentication through apache2 which contacts a kerberos authentication server to authenticate users.
Now, users are authenticated, but they ...
1
vote
0answers
119 views
Auto set Active Directory attributes upon new User creation
I have successfully created an OpenLDAP (CentOS 6.2) to Active Directory (Windows Server 2008 R2) connection. I can login to my CentOS using an AD user.
Problem is, the AD user has to have these ...
-3
votes
1answer
383 views
ldap client failed to bind to ldap server
I have a windows ldap client setup and I have been able to connect to it using the gui ldap admin client. When I try to connect to it using my ubuntu 12.04 client I get the following error in my ...
0
votes
1answer
413 views
gnutls vs openssl with openldap, debian and centos
I have a Debian 6.0.5 server running openldap. It appears to be compiled against gnutls. I used gnutls' certtool to generate a self-signed certificate and I have used it on a few debian client ...
1
vote
1answer
299 views
OpenLDAP schema location (cn=schema,cn=config) does this exist?
We're trying to get an instance of OpenLDAP up and running. I'm using ApacheDS as the browser. When I go to create my objects in the LDAP database, I see that a number of the objects and attributes ...
0
votes
0answers
166 views
Failed Administrator login on WSO2 IS with external OpenLDAP
I have an installation of WSO2 Identity Server and I'm trying to make it work with an external OpenLDAP instance I have followed this guide:
...
1
vote
3answers
542 views
centralized authenticaion with OpenLDAP for Red Hat Linux with slapd.conf configuration
I am currenty working on to setup a centralized authenticaion with OpenLDAP for Red Hat Linux .
Objective - Setup a Centralized OpenLDAP authentication for Red Hat Linux Servers where client can ...
0
votes
0answers
217 views
How to make windows SSPI authenticate (bind) against OpenLDAP with SASL/GSSAPI?
I have a working samba + openldap setup with many windows workstations on that domain.
We want to make a proprietary application (running on Windows) authenticate against our OpenLDAP. The app has ...
2
votes
0answers
89 views
added apple.schema to slapd.conf but Workgroup Manager still doesn't work
I've included apple.schema, apple_auxillary.schema, and samba.schema in the slapd.conf file. Rebooted the slapd service with no errors. When I try to connect to the OpenLDAP server with Workgroup ...
3
votes
1answer
294 views
Adding apple.schema from OS X Lion Server fails
When I try to add apple.schema to my OpenLDAP running on Debian this is the error I get;
root@directory:~# ldapadd -Y EXTERNAL -H ldapi:/// -f apple.schema
SASL/EXTERNAL authentication started
SASL ...
0
votes
1answer
235 views
One established server reports “Invalid SID” for a new Samba user
We have two linux samba servers authenticating against LDAP that have been working fine for some time. Recently I added a new user to LDAP. He can log in fine to one server, but the other reports an ...
1
vote
1answer
211 views
Samba+LDAP: Minimal permissions for sambaLMPassword/sambaNTPassword?
What are the minimum permissions for the attributes sambaLMPassword/sambaNTPassword for the the LDAP administrator account so that Samba is just enabled to use it for authentication for ldapsam ...
0
votes
0answers
122 views
Fix the entryUUIDs in OpenLDAP
I have a small OpenLDAP database that I am trying to set up syncrepl on.
However the initial syncrepl load is barfing because apparently there are a small number of entryUUID operational attributes ...
1
vote
0answers
227 views
LDAP Berkeley DB
I'm trying to configure slapd on my machine and I keep getting this error. I can recover at times using db7.7_recover but not always. I see this problem if the slapd deamon is killed for any reason.
...
0
votes
1answer
338 views
Why is slapd logging “connection_read(12): no connection!”?
Why is slapd logging "connection_read(12): no connection!" ?
This is a fresh install.
There are no other connections.
Message also logged at olcLogLevel: none.
the command
kldap1 ~ # ldapwhoami
...
0
votes
1answer
634 views
How to configure AD server for client TLS authentication
How can I configure my Active Directory LDAP server (Windows 2008) to enable certificate verification and client authentication.
Thanks,
Gayathri
0
votes
0answers
56 views
OpenLDAP SSH Authenticaton
I have installed OpenLDAP Server 2.4.31 on CentOS for SSH Authentication, when I sop the OpenLDAP service I'm not able to login via SSH locally which proves that OpenLDAP and SSH are working together ...
1
vote
1answer
257 views
Can't configure PAM + LDAP on Debian Lenny - Getting error=49 on server logs
I've been migrating some servers and desktops using Ubuntu 10.04 from getting the users from an old OpenLDAP implementation to a newer Centos Active Directory. I haven't had any problems so far, until ...
