OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
271 views

“getent passwd” enumerates users, “su <username>” fails

I have an LDAP server with two BDB backends. The user accounts are split between the two backends. Backend A has a referral object to Backend B. I have tried to setup LDAP client authentication on ...
0
votes
1answer
50 views

Users seeing all other LDAP users on RHEL default behavior?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent ...
2
votes
1answer
55 views

OpenLDAP ACL's using sets

So, I am attempting to write some LDAP rules that will allow certain people the ability to write some subtrees. Let's say we have this user: dn: uid=minion1,o=mycompany,ou=cust,dc=some,dc=domain ...
1
vote
1answer
143 views

Sync between two Mail Servers

I have 2 mail servers of the same configuration which is as follows: OpenLDAP (for authntication of users) Postfix Cyrus-imapd SOGo(groupware) One of them (Let's say X) is in production and is the ...
4
votes
1answer
129 views

systemPossSuperiors - why does AD have it, but not openldap

Having used openldap and now getting to know MS active directory (AD), I realize that in AD there is an attribute called "systemPossSuperiors", which defines which objects are allowed as parent ...
0
votes
1answer
59 views

OpenLDAP Windows and sssd with multiple groups Suse

I have a OpenLDAP server (windows version) installed with user and groups correctly configured. Most of the users belongs to differents groups. I have a problem with the sssd configuration to access ...
0
votes
0answers
45 views

Bind Linux to Open Directory

So I am trying to bind a linux machine to Open Directory. It works fine if I don't automate it. [root@app-setup-testbox1 ~]# kadmin -p admin -w PASSWORD -q "addprinc -randkey host/$HOSTNAME" ...
0
votes
0answers
180 views

Storing GPG keys in LDAP with TLS using gpgme

I'm trying to send my GPG public key to our LDAP server, but I'm hitting a wall. My LDAP server only allows LDAP with Start_TLS over port 389, or LDAPS on port 636. I've got the following lines in my ...
0
votes
1answer
72 views

Finding out my current LDAP server type

How can i find out if my current LDAP sever type is Standalone, Master or Replica (slave)? I am using OpenLDAP on SLES 11.
1
vote
0answers
90 views

Refresh ldap client configuration Centos

Recently we change the ip address (and add some groups) of our LDAP server (running in Suse Enterprise) so should change also the ldap authenthication configurations for all the servers that we have. ...
0
votes
1answer
19 views

Cannot access certain MS Server 2003 Active Directory users with Mountain Lion Server's Server App

The "magic triangle" is working perfectly for some users. Other users are invisible to the Mountain Lion OD master's Server App. Workgroup Manager can access all the users while Server App can't. ...
3
votes
1answer
170 views

ldapquery an Active Directory server for users that belongs to a group named X

When I do this at the bash prompt on a CentOS 6.4 ldapsearch -LLL -H ldap://adserver.example.com -x -D someuser@example.com -w somepass -b 'OU=Users,DC=example,DC=com' ...
0
votes
0answers
259 views

How to configure openLdap push based replication on Openldap 2.4.x?

I have machine installed OpenLdap which should replicated to another as slave. In this case, next time slave is on internet and use dynamic Ip Address which automatically change periodically. I've ...
-2
votes
0answers
28 views

How to configure openLdap push based replication on Openldap 2.4.x? [closed]

I have machine installed OpenLdap which should replicated to another as slave. In this case, slave on internet and can't acces master ldap. I've read that there are method for overcome this with ...
5
votes
3answers
2k views

How come all LDAP users are shown with getent passwd?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When I type "getent ...
0
votes
2answers
636 views

Can't add local user on system using ldap auth for samba [closed]

Trying to add a local user to a CentOS 6.3 system that is using ldap for Samba authentication, but being stymied by the user's existing entry in ldap. [root@samba ~]# adduser wchandy adduser: user ...
3
votes
2answers
65 views

Usefulness absolute filter on an LDAP query?

I was perusing the source for OpenLDAP and I saw where the root DSE supports something called absolute filters. It looks like it's specified in RFC4526 It looks like the author that originally drafted ...
0
votes
0answers
23 views

how to configure sasl authentication using multiple realms for openldap? [duplicate]

I have got cyrus-sasl and openldap2.4,and I want to define two or more SASL realms which can make identical user with different passwords in different subtrees of directory pass to SASL ...
2
votes
2answers
150 views

<suffix> invalid DN 21 (Invalid syntax) on Converting slapd.conf OpenLdap

Actually i want to configure ldap as master-slave replication using syncrepl method, On any reference which i found,I'm running on Centos 6 machine and openldap v2.4.23. I following step by step on ...
1
vote
1answer
125 views

OpenLDAP - Changing user password both locally and in LDAP

We have just implemented an LDAP solution for our lab. All of the LDAP client machines still have files ldap (or files sss) in their nsswitch.conf for the time being (so local authentication first), ...
0
votes
2answers
60 views

Set up JDBC DataSource in LDAP

How do I create a JDBC DataSource in an OpenLDAP server? The problem is that jdbc/something is not a valid DN or RDN. But that is the format of the name that you are supposed to use for JDBC ...
1
vote
1answer
52 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
0
votes
0answers
98 views

OpenLDAP replication trouble

I still unable to setup replication between LDAP nodes %(, followed instructions from : http://www.secure-computing.net/wiki/index.php/OpenLDAP/replication Server, lapd.conf TLS_CACERTDIR ...
1
vote
1answer
293 views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by ...
0
votes
1answer
33 views

Using autobind without LDAPI

I am trying to automate the installation of my OpenLDAP servers. Currently packages get installed (openldap-clients, openldap-servers) and started with their default configurations. I have a LDIF ...
0
votes
1answer
50 views

Split authentication and NSS lookups for users and groups to different servers

I've asked this question previously: Multiple Bind and base DNs in ldap.conf Since that previous question was answered in the negative, I'm looking for other options such as splitting authentication ...
2
votes
1answer
305 views

Configure selinux to allow openldap on CentOS 6.4

I'm trying to run an OpenLDAP server on CentOS 6.4 with selinux enabled, but slapd is dieing as soon as it's started via /etc/init.d/slapd start. (init script reports OK; everything works fine after ...
1
vote
0answers
150 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
0
votes
1answer
227 views

Configuring OpenLDAP init script on CentOS 6.4

If I just run slapd with no arguments (as root) it starts and works fine. When I try to start it using /etc/init.d/slapd start however, it dies immediately. I see from looking at the init script that ...
1
vote
1answer
328 views

could not stat config file “slapd.conf” to add entries to LDAP

I got a problem when I adding some entries in LDAP slapadd -l /etc/openldap/root.ldif -f slapd.conf -d 10 slapadd -l /etc/openldap/people.ldif -f slapd.conf -d 10 slapadd -l ...
0
votes
0answers
53 views

Openldap password policy password history not working

After a frustrating google, I finally got password policy overlay in openldap load into system. Account-locking tested and it seems work. But when testing about password history, I can get pwdHistory ...
2
votes
1answer
508 views

Configuring openldap multimaster replication using cn=config

We currently have a single OpenLDAP server using the cn=config backend. We'd like to add a second OpenLDAP server and configure them for multimaster replication. What do we need to do to enable ...
0
votes
0answers
187 views

Samba username doesn't work once I join a Windows XP machine to my domain

I have set up a PDC using Samba, LDAP and Postgresql. I have successfully added all the necessari entries to my database and can also see all the necessary entreis in LDAP. I can also successfully ...
0
votes
0answers
92 views

samba server with authentication users from ldap without samba schema

How can i organize my environment with samba server when samba server auth clients from localnetwork in openldap catalog without any samba schema. For example i have users and groups such as: # ...
0
votes
1answer
60 views

OpenLDAP Change core schema

Is it possible to change core schema (cn={0}core,cn=schema,cn=config)? In lpadmodify im getting Insufficient access (50) though i'm using olcRootDn from olcDatabase={0}config. Apache DS just went ...
0
votes
0answers
41 views

Unable to install OpenLDAP in debian based elementary OS

Hi while installing openldap when i enter the command: apt-get install slapd I get the following output Reading package lists... Done Building dependency tree Reading state information... ...
1
vote
1answer
187 views

OpenLDAP 2.4 Chain Overlay Minimal LDIF Configuration

There's almost no information about how Chain overlays are configured in OpenLDAP LDIF backend. What's the minimal configuration required?
1
vote
1answer
60 views

OpenLDAP Chain not found

When trying to add a Chain overlay to OpenLDAP 2.4.31 on Ubuntu or Debian, I get a 'overlay "chain" not found' in the syslog. Furthermore, the schemas required to configure the Chain overlay don't ...
1
vote
1answer
114 views

Working with OpenLDAP 2.4 LDIF config backend

In OpenLDAP 2.4, the configuration has been moved into an LDIF backend called cn=config. The OpenLDAP documentation says "you should never edit any of the LDIF files directly. Configuration changes ...
0
votes
1answer
70 views

How do the slapd logging levels work?

I can't seem to find an example of how each of the log levels in slapd work. I want slapd to log the users who are logging in, and the server that they are trying to log into, as well as any ...
1
vote
0answers
71 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
0
votes
1answer
596 views

Getting CentOS 6 to trust a certificate from AD

I'm trying to get my CentOS server to trust a certificate I've installed from an active directory server (I converted the .cer to .pem earlier.) When I try to connect, the debug information is: ...
0
votes
0answers
105 views

NFS + LDAP Setup. Nobody:nobody files ownership

I'm trying to setup an Ubuntu 12.04 NFS client and with users authenticating with an LDAP server via PAM. The users' home dirs are located in the NFS share (named /usrhome/, ie each user gets ...
0
votes
1answer
193 views

OpenLdap 2.4 on centos 6 doesn't listen on port 636

I have an openldap 2.4 server on centos 6 whose confg I copied from those I have running under openldap 2.3 servers on centos 5 machines. On openldap 2.3, specifying TLSCACertificateFile, ...
1
vote
0answers
48 views

OpenLDAP pwdPolicySubentry for organizationalUnit

Can you set a pwdPolicySubentry for an organizationalUnit, so that all entries contained in that organizationalUnit follow that password policy?
0
votes
0answers
43 views

OpenLDAP pwdChecker Library for Amazon Linux EC2 instance

After installing the package openldap-devel, the instance is still missing the portable.h and slap.h files which are needed for the pwdChecker Library. So I was wondering has anyone been able to ...
1
vote
0answers
54 views

Is there an OpenLDAP web frontend that allows users to edit custom fields? [closed]

We are currently using a custom perl based frontend for our OpenLDAP user portal, and it's proving tricky to port over to a new server. I've setup phpLDAPadmin on the new server, but it doesn't appear ...
1
vote
0answers
134 views

Scientific linux 6.4 SSHD UseLPK Bad configuration file

i try setup openldap and openssh that last take keys from openldap base. I installed openldap-server-5.3p1 and configured him. Also I install openss-ldap-5.3p1. Added scheme openssh-lpk to cn=config ...
0
votes
1answer
66 views

Disable OpenLDAP replication

I set up openldap replication so that if my primary LDAP server were to die, I would have another LDAP server ready to use just in case. I used the directions on Ubuntu's site to set up the ...
0
votes
0answers
68 views

Enforce Size limit for jpegPhoto attribute in LDAP schema

I am wondering if it is possible to enforce a file size limit on the jpegPhoto attribute in OpenLDAP via the schema definition in the inetorgperson schema file? I have only heard of it being possible, ...