OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

3
votes
3answers
158 views

Kerberos with OpenLDAP backend: Password Sync HowTo

The basic setup is an OpenLDAP server. The users are provisioned and the passwords are set. Now we decided to add an MIT KDC for being able to use Kerberos. We configured the MIT KDC to utilize the ...
1
vote
2answers
105 views

Support users in openldap catalog with samba specific attributes

2016 is coming. We still use openldap. I have openldap server from ubuntu 12.04 with existing users. It provides the authentication layer in addition to containing the user, group, and machine ...
1
vote
1answer
200 views

Why openldap password policy pwdMinLength doesn't work on Ubuntu 14.04?

I have defined openldap password policy overlay The pwdMinLength: 9 is not working, i'm still able to create user with password less < 9 character, The password Password Policy Overlay on OpenLDAP ...
7
votes
2answers
493 views

SSSD rejects LDAP login with su: incorrect password

I've set up an LDAP server with user accounts. I've successfully configured a Rails application to authenticate against this LDAP server. I'm now trying to configure SSSD to authenticate against LDAP, ...
0
votes
1answer
31 views

OpenLDAP extend ACL properly

I have a fresh installed server with this in it: How should I extend the ACL to give a specific user write access a description property under a specific subtree of items? More specificly I want to ...
0
votes
1answer
38 views

Linux LDAP to Ldapadmin configuration issues

I'm learning how to setup and use OpenLDAP installed on an Ubuntu server. I executed sudo apt-get install slapd ldap-utils -y and set my ldap domain to test.mydomain.com. I can execute ldapadd ...
0
votes
0answers
23 views

OpenLdap allop overlay olc

Is there any way to configure operational attributes to be shown for every request? (openldap 2.4) There is the allop overlay, but it seems to be not working with olc only with slapd.conf. I'm able ...
0
votes
1answer
420 views

ldap_modify: Insufficient access (50) for cn=config as -H ldapi:/// -Y EXTERNAL

I'm setting up a second LDAP server. I've converted a slapd.conf to a slapd.d database using slaptest. I'm trying to apply this LDIF: # cat loglevel.ldif dn: cn=config changetype:modify replace: ...
0
votes
1answer
60 views

i cant canfigure pgina for ldap login

hi this is mi ldap user tree: dc=intranet,dc=internet,dc=com cn=admin cn=user1 cn=bna ou=buo cn=user2 I want to log with anyone user in the tree and assign ...
1
vote
1answer
163 views

How to install a trusted certificate on client machine to enable LDAP authentication?

I downloaded a TurnKey Linux OpenLDAP vm instance. It now runs in a vm. I am using this for user account authentication over a network. The client machine is a stock CentOS 7 machine. Everything on ...
0
votes
1answer
19 views

OpenLDAP ACL stored as hash?

Does anyone know why when I add these 3 ACLs the third is represented in the olcDatabase\={2}hdb.ldif as a random string? ACLs: olcAccess: {0}to attrs=userPassword,shadowLastChange by dn="cn=Manager,...
4
votes
2answers
160 views

OpenLDAP proxy cache not retrieving entries

I need to set up a local LDAP proxy cache which connects to our central Active Directory server. OpenLDAP Proxy Cache looks just like the thing. But following the manpages as closely as possible, I am ...
2
votes
0answers
45 views

OpenLDAP: partial syncrepl-ed cn=config

I would like to be able to syncrepl only a subtree of cn=config, namely cn=schema,cn=config: # {0}config, config dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}...
1
vote
1answer
87 views

OpenLDAP configure LDAPS, restart fails

I am attempting to get ldaps working with openldap. I have a wildcard ssl certificate that was issued for this domain and have used ldapmodify to add the relevant files to cn=config as show here. ...
1
vote
1answer
437 views

ldap_add: Other (e.g., implementation specific) error (80) when adding pw-sha2.la module

I'm getting this error when trying to add a module to OpenLDAP: # ldapadd -H ldapi:/// -Y EXTERNAL -D 'cn=config' -f ./module.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+...
2
votes
1answer
141 views

Passwords not working after migration from /etc/shadow to LDAP

I've migrated RHEL6 user accounts from traditional /etc/passwd, /etc/shadow, and /etc/group files to OpenLDAP. However, trying to log in as the migrated users does not work because of incorrect user ...
2
votes
1answer
538 views

ldap_add: Protocol error (2) additional info: no attributes provided

I'm following this guide to migrate existing users in /etc/passwd and /etc/group on a RHEL6 machine to a new, external OpenLDAP server. I'm trying to apply this file: # cat people_group.ldif dn: ou=...
0
votes
1answer
650 views

ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1) for ldapi:/// on CentOS

(This is a follow-up to ldap_modify: Insufficient access (50) when changing password as we identified a separate issue during diagnostics.) Before modifying the cn=config LDAP database, I'm trying to ...
3
votes
1answer
164 views

Master is Dead - Promote LDAP Slave to Master

I have inherited an undocumented openLdap setup - one Master server with two slaves. The Master died hard last night - disc corruption - the backup was a clone system on the same server and disk - so ...
2
votes
1answer
466 views

ldap_modify: Insufficient access (50) when changing password

I'm trying to modify the LDAP admin password on a fresh OpenLDAP install on CentOS 6.7 (similar to RHEL 6.7). I created a file called change_ldap_password.ldif: # Hash your password: # slappasswd -h ...
0
votes
0answers
27 views

Delete root dse from 389 directory server

I have a mail server with kolab 3 installed, when I was installing the server, for testing purposes, i created a second domain that I'll name test.com, now I want to delete this domain from my ldap ...
0
votes
1answer
171 views

Reset Passwords of LDAP-Users at the first login

I have an LDAP Installation running on an Centos7 system. I want to create a big number of users. Those users will get a default password, so I want them to change the password at the (only)first ...
0
votes
0answers
42 views

Configure ldap.conf host with ipv6

In my ldap.conf is it possible to use HOST to configure an IPv6 address? I know that I can configure an IPv6 address using URI. The linux manual on ldap.conf doesn't state if it only support IPv4 for ...
0
votes
0answers
15 views

restore parts of an LDAP Database

Let's say I have a replicated LDAP setup and someone comes along and deletes an account by accident. Naturally this deletion then gets replicated to all the slaves. How would one go about restoring ...
0
votes
2answers
242 views

Unable to get OpenLDAP with TLS working

I have an OpenLDAP 2.4.39 server running on a Centos 7 host which is populated with a minimal set of data. It work as expected when TLS is not used. I use this for authentication with dokuwiki today. ...
1
vote
1answer
57 views

OpenLDAP using ipv6 link-local address “Can't contact LDAP Server (-1)”

I'm trying to use IPV6 to connect to my LDAP server. Everything works if I use ipv4 but I'm not ipv6 link-local address. I used the following command on my server using its own ipv6 address. Any clue ...
0
votes
0answers
70 views

Requesting parent OU doesn't seem to work right with Meta-Backend OU as child

I got a huge problem here. I’ve been trying to merge users from a local LDAP (ou=local-users,ou=accounts,dc=domain: which authenticates against a remote active directory (which is not ldap://remote....
0
votes
1answer
24 views

Want to integrate SVN with the apacheds user's

Currently i have SVN installed in the centos server with which currently authenticating with ssh user's from the same server. I have installed ApacheDS in centos intending to authenticate with ...
3
votes
1answer
2k views

How to migrate LDAP (database,schema,configuration) to other machine

I'm using openldap 2.4.40, and i need to migrate my existing ldap database, configuration, and schema (basically everything ldap server related) to a new machine. the problem is, I use cn=config ...
0
votes
1answer
59 views

Must the name of an ldap group be unique?

As we are setting up an openldap with multiple locations. Must the names of the groups be unique? For example the vpn , adm, sudo group will be in NL but also in BE. What is best practice? Could the ...
0
votes
1answer
854 views

Openldap - ldap user can't add entry: Insufficient access (no write access to parent)

I'ld like to make an addressbook in LDAP (for mailing clients, in first step for my RoundCube). Server is Debian 7.9, slapd 2.4.31 (OpenLDAP). After the successfully installation, I've created a ...
0
votes
1answer
197 views

Allowing OpenLDAP users to change their own password

I seem to be missing something, I have logged in successfully via LDAP as user cent, however I am not able to change the user "cent" (me) password: [cent@elasticmaster2 ~]$ ldappasswd -H ldap://...
0
votes
0answers
107 views

CentOS7 ldap client not authenticating with ldap server

I am using ApacheDS which was a breeze to setup thanks to the apacheds mailing list. I am able to retrieve ldapsearch results, however, I am not able to get anything by doing a:"getent passwd ". [...
2
votes
0answers
33 views

Modules memberof.la and syncprov.la missing

I´ve install a openLDAP on a debian box. To use back-sql I need to compile it from scratch. I also enable modules memberof and syncprov. ./configure --enable-sql --enable-memberof --enable-memberof ...
0
votes
1answer
117 views

How can I use an objectCategory attribute on slapd?

I am a bloody LDAP newbie. I have managed to set up slapd (which is part of OpenLDAP) with LAM as a frontend and have successfully configured several services to connect to it for user/group ...
0
votes
1answer
86 views

Openldap Acl update error

I was trying to modify the current ACL rule in openldap by removing the current rule and updating it with a new one via new acl.ldif file using the below command. ldapmodify -xWD cn=admin,cn=config -...
0
votes
2answers
687 views

Importing database in LDAP creates error

I have exported my database using the following function slapcat > ldif While I am importing database in other LDAP server it creates error. I am using the following function slapadd -l ldif. ...
0
votes
1answer
84 views

openldap, crypt passwords do not work for sasl

I've been working on migrating an existing server cluster to using openldap for user/password management. I've run into a problem though - I do not have access to plain text passwords and all SASL ...
0
votes
1answer
160 views

what does it mean ? openldap: TLS: no unlocked certificate for certificate '<some certificate subject>'

just spent a lot of time with centos 6.7 and openldap. it was configured with simple certificates and a root-ca in nice little pem files, but after an upgrade from centos 6.4, connecting to the slapd ...
0
votes
1answer
113 views

How do I add an openLDAP contrib module with cn=config layout to Ubuntu?

I'm trying to get the pw-radius module loaded into my Ubuntu 12.04 slapd server but not sure how to go about it. Going off the README file in the passwd module directory, I've built the pw-radius ...
1
vote
1answer
221 views

MIT Kerberos with OpenLDAP backend - TLS ok when KDC started interactively but init script fails

In DNS domain domain.local. there are two machines host.domain.local. = 192.168.1.1 srv1.domain.local. = 192.168.1.2 host.domain.local. is KDC for Kerberos realm DOMAIN.LOCAL, srv1.domain.local. ...
0
votes
0answers
81 views

Windows Server 2008 R2 + Active Directory + Extended Schema Custom Attribute for RDN

I am migrating my ldap schema from OpenLDAP to Microsoft AD. I have added my schema changed to AD schema. I am using a custom attribute called "UniqueID" to store rdn of each entry in the Ldap Server ...
0
votes
1answer
110 views

OpenLDAP: Why would you ever use refreshOnly for replication?

I'm reading about OpenLDAP replication and I don't understand why you would use refreshOnly mode vs. refreshAndPersist mode. I've tried to do some searching online, but wasn't able to find any ...
1
vote
2answers
45 views

OpenLDAP Server nested Group search string

i got a small problem here regarding OpenLDAP. The problem is to search for the member of nested groups. Lets say i have this construct: dn=domain,dn=local ou=people cn=marvyn (inetOrgPerson) ...
0
votes
0answers
34 views

Yast authentication server configuration: Global settings empty

I try to enable TLS/SSL for my LDAP-Server on a SLES12. So I enabled LDAP over SSL (ldaps) in Yast > Authentication Server Configuration > Startup Configuration. Fine so far. But when it comes ...
0
votes
1answer
497 views

phpldapadmin can not connect to openldap

I have a freshly installed openldap server, version 2.4.39. phpldapadmin is also installed on the same server, version 1.2.3 Openldap is working . I can connect to it using other ldap brower tools. [...
1
vote
1answer
253 views

How can I configure openLDAP to lookup userPassword via FreeRadius?

I am running Ubuntu 12.04 and OpenLDAP 2.4.28-1.1ubuntu4.5. I have users populated in LDAP with userPassword attribute being an {SHA1} hash. Users are able to login over SSH and authenticate to web ...
0
votes
1answer
65 views

Store OpenLDAP connection on a php session with cookies [closed]

Só I have a ldap server that should be managed via php, I can modify anything in Apache,OpenLDAP or php. But as this site already covered I can't store a LDAP connection in a _SESSION variable on php.....
0
votes
1answer
406 views

Slaptest, bad configuration file

I have been struggling to start LDAP server and I am failing miserably at it, from journalctl -xn I it clearly say bad configuration files!, but there are three configuration files, but what is ...
-2
votes
2answers
309 views

Bad hdb.ldif, need help to configure it

contents of /etc/openldap/slapd.d/cn=config/olcDatabase={2}hdb.ldif 1 # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. 2 # CRC32 2e34b404 3 dn: olcDatabase={2}hdb 4 objectClass: ...