OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
14 views

restore parts of an LDAP Database

Let's say I have a replicated LDAP setup and someone comes along and deletes an account by accident. Naturally this deletion then gets replicated to all the slaves. How would one go about restoring ...
0
votes
2answers
176 views

Unable to get OpenLDAP with TLS working

I have an OpenLDAP 2.4.39 server running on a Centos 7 host which is populated with a minimal set of data. It work as expected when TLS is not used. I use this for authentication with dokuwiki today. ...
1
vote
1answer
48 views

OpenLDAP using ipv6 link-local address “Can't contact LDAP Server (-1)”

I'm trying to use IPV6 to connect to my LDAP server. Everything works if I use ipv4 but I'm not ipv6 link-local address. I used the following command on my server using its own ipv6 address. Any clue ...
0
votes
0answers
57 views

Requesting parent OU doesn't seem to work right with Meta-Backend OU as child

I got a huge problem here. I’ve been trying to merge users from a local LDAP (ou=local-users,ou=accounts,dc=domain: which authenticates against a remote active directory (which is not ...
0
votes
1answer
23 views

Want to integrate SVN with the apacheds user's

Currently i have SVN installed in the centos server with which currently authenticating with ssh user's from the same server. I have installed ApacheDS in centos intending to authenticate with ...
1
vote
1answer
1k views

How to migrate LDAP (database,schema,configuration) to other machine

I'm using openldap 2.4.40, and i need to migrate my existing ldap database, configuration, and schema (basically everything ldap server related) to a new machine. the problem is, I use cn=config ...
0
votes
1answer
46 views

Must the name of an ldap group be unique?

As we are setting up an openldap with multiple locations. Must the names of the groups be unique? For example the vpn , adm, sudo group will be in NL but also in BE. What is best practice? Could the ...
0
votes
1answer
540 views

Openldap - ldap user can't add entry: Insufficient access (no write access to parent)

I'ld like to make an addressbook in LDAP (for mailing clients, in first step for my RoundCube). Server is Debian 7.9, slapd 2.4.31 (OpenLDAP). After the successfully installation, I've created a ...
0
votes
1answer
154 views

Allowing OpenLDAP users to change their own password

I seem to be missing something, I have logged in successfully via LDAP as user cent, however I am not able to change the user "cent" (me) password: [cent@elasticmaster2 ~]$ ldappasswd -H ...
0
votes
0answers
91 views

CentOS7 ldap client not authenticating with ldap server

I am using ApacheDS which was a breeze to setup thanks to the apacheds mailing list. I am able to retrieve ldapsearch results, however, I am not able to get anything by doing a:"getent passwd ". ...
2
votes
0answers
31 views

Modules memberof.la and syncprov.la missing

I´ve install a openLDAP on a debian box. To use back-sql I need to compile it from scratch. I also enable modules memberof and syncprov. ./configure --enable-sql --enable-memberof --enable-memberof ...
0
votes
1answer
95 views

How can I use an objectCategory attribute on slapd?

I am a bloody LDAP newbie. I have managed to set up slapd (which is part of OpenLDAP) with LAM as a frontend and have successfully configured several services to connect to it for user/group ...
0
votes
1answer
64 views

Openldap Acl update error

I was trying to modify the current ACL rule in openldap by removing the current rule and updating it with a new one via new acl.ldif file using the below command. ldapmodify -xWD cn=admin,cn=config ...
0
votes
2answers
413 views

Importing database in LDAP creates error

I have exported my database using the following function slapcat > ldif While I am importing database in other LDAP server it creates error. I am using the following function slapadd -l ldif. ...
0
votes
1answer
79 views

openldap, crypt passwords do not work for sasl

I've been working on migrating an existing server cluster to using openldap for user/password management. I've run into a problem though - I do not have access to plain text passwords and all SASL ...
0
votes
1answer
126 views

what does it mean ? openldap: TLS: no unlocked certificate for certificate '<some certificate subject>'

just spent a lot of time with centos 6.7 and openldap. it was configured with simple certificates and a root-ca in nice little pem files, but after an upgrade from centos 6.4, connecting to the slapd ...
0
votes
1answer
81 views

How do I add an openLDAP contrib module with cn=config layout to Ubuntu?

I'm trying to get the pw-radius module loaded into my Ubuntu 12.04 slapd server but not sure how to go about it. Going off the README file in the passwd module directory, I've built the pw-radius ...
1
vote
1answer
168 views

MIT Kerberos with OpenLDAP backend - TLS ok when KDC started interactively but init script fails

In DNS domain domain.local. there are two machines host.domain.local. = 192.168.1.1 srv1.domain.local. = 192.168.1.2 host.domain.local. is KDC for Kerberos realm DOMAIN.LOCAL, srv1.domain.local. ...
0
votes
0answers
73 views

Windows Server 2008 R2 + Active Directory + Extended Schema Custom Attribute for RDN

I am migrating my ldap schema from OpenLDAP to Microsoft AD. I have added my schema changed to AD schema. I am using a custom attribute called "UniqueID" to store rdn of each entry in the Ldap Server ...
0
votes
1answer
85 views

OpenLDAP: Why would you ever use refreshOnly for replication?

I'm reading about OpenLDAP replication and I don't understand why you would use refreshOnly mode vs. refreshAndPersist mode. I've tried to do some searching online, but wasn't able to find any ...
1
vote
2answers
44 views

OpenLDAP Server nested Group search string

i got a small problem here regarding OpenLDAP. The problem is to search for the member of nested groups. Lets say i have this construct: dn=domain,dn=local ou=people cn=marvyn (inetOrgPerson) ...
0
votes
0answers
32 views

Yast authentication server configuration: Global settings empty

I try to enable TLS/SSL for my LDAP-Server on a SLES12. So I enabled LDAP over SSL (ldaps) in Yast > Authentication Server Configuration > Startup Configuration. Fine so far. But when it comes ...
0
votes
1answer
352 views

phpldapadmin can not connect to openldap

I have a freshly installed openldap server, version 2.4.39. phpldapadmin is also installed on the same server, version 1.2.3 Openldap is working . I can connect to it using other ldap brower tools. ...
1
vote
1answer
200 views

How can I configure openLDAP to lookup userPassword via FreeRadius?

I am running Ubuntu 12.04 and OpenLDAP 2.4.28-1.1ubuntu4.5. I have users populated in LDAP with userPassword attribute being an {SHA1} hash. Users are able to login over SSH and authenticate to web ...
0
votes
1answer
50 views

Store OpenLDAP connection on a php session with cookies [closed]

Só I have a ldap server that should be managed via php, I can modify anything in Apache,OpenLDAP or php. But as this site already covered I can't store a LDAP connection in a _SESSION variable on ...
0
votes
1answer
311 views

Slaptest, bad configuration file

I have been struggling to start LDAP server and I am failing miserably at it, from journalctl -xn I it clearly say bad configuration files!, but there are three configuration files, but what is ...
-2
votes
2answers
261 views

Bad hdb.ldif, need help to configure it

contents of /etc/openldap/slapd.d/cn=config/olcDatabase={2}hdb.ldif 1 # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. 2 # CRC32 2e34b404 3 dn: olcDatabase={2}hdb 4 objectClass: ...
0
votes
1answer
124 views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ...
0
votes
1answer
100 views

LDAP+KERBEROS server configuration

I am following this guide to setup up kerberos server. the system configuration for kerberos server is below, can someone help me to resolve the issue, any help will be appreciated. Here is the ...
0
votes
0answers
97 views

olcRequires: difference between authz and bind (with olcDisallows: bind_anon)?

With OpenLDAP, what is the difference between: olcDisallows: bind_anon oldRequires: bind and: olcRequires: authc It seems to me that both configurations would require the client to authenticate ...
0
votes
1answer
22 views

How to add Organisations to LDAP via LDIF?

I want to initially add a couple of organisations. So I created an organisations.ldif in order to add them via ldapadd -Q -Y EXTERNAL -H ldapi:/// -W -f organisations.ldif My file looks like this ...
0
votes
0answers
10 views

RETCODE OpenLDAP overlay configuration

I am looking for various ways to disable Simple Paged Search results on OpenLDAP. Somehow, my attempts to disable paged searches by disabling it in contiguration using olcSizeLimit or olcLimits ...
1
vote
0answers
252 views

Open Directory Password Change Issues on OS X Server 10.10

I'm having a problem with 50+ workstations (10.9 and 10.10) when a user changes their OD password (either at the OS X login screen or the System Preferences). The password change updates on the ...
0
votes
0answers
58 views

OpenLDAP & Posix Groups/Account configuration

with following configuration I am not able to add POSIX users/groups to the LDAP server. If some can educate me about significance of dc in this case, is it FQDN that I mentioned when I created ...
0
votes
0answers
40 views

disable simple paged results control support

Trying to make my client, originally developed for OpenLDAP, also compatible with Oracle DSEE. Oracle DSEE is missing support for simple paged results, which the client code uses. Yet, ODSEE supports ...
0
votes
1answer
239 views

(Zimbra)OpenLDAP SSHA512

So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology. So my boss wanted me to create an OpenLDAP Database, and ...
2
votes
1answer
27 views

OpenLDAP - Make required attribute of superclass optional in objectclass

My OpenLDAP schema defines an objectclass which is a subclass of person. Let's call it myPerson for the sake of simplicity. Since person must have a cn, myPerson should also have one. I would like to ...
0
votes
1answer
381 views

Setup a openldap proxy to another LDAP server on centos 6

I'm trying to get a local server to authenticate to its own openldap-server and then proxy to corporate LDAP if user is not found locally. Local users work Auth to local LDAP server works Auth to ...
0
votes
1answer
129 views

SASL Auth against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
1
vote
1answer
103 views

Can connect to my OpenLDAP server locally but not externally

I have a problem with my OpenLDAP server. I can't connect to it externally from client, it only works locally. My OpenLDAP server is running on a Raspberry Pi with Rasbian as the OS. When I run this ...
0
votes
1answer
93 views

Discrepancy in exporting LDIF OpenLDAP vs Apache Directory Studio

very new to the world of LDAP. I find that when I export an LDIF file in my OpenLDAP instance on Linux, running the slapcat command as such: ./slapcat -f /somewhere/slapd.conf -l backup.ldif it ...
3
votes
1answer
246 views

Integrating postfix with LDAP to eMail Users with Access to A Specific Host

I have a working openLDAP v3 installation under Ubuntu 14.04 (slapd 2.4.31-1) with phpldapadmin, sudo-ldap and other packages installed. I'm trying to integrate postfix with LDAP so I can send emails ...
0
votes
1answer
30 views

Audit logging for OpenLDAP changes

How can I produce and examine an audit trail of changes made to an OpenLDAP database, such as which user was created when, by whom, when was it edited, what was edited etc?
1
vote
1answer
177 views

Configuring HP iLO for OpenLDAP

I have been working with some new HP DL360 Gen9 server. I'm attempting to configure these for LDAP authentication against our OpenLDAP directory and not having much luck. First, all of our ...
2
votes
1answer
79 views

different ldapsearches , no output

when I use ldapsearch -LLLZZ -H ldap://centos7s.domen.lan -x I get everything out: dn: dc=domen,dc=lan objectClass: domain dc: domen o: domen.lan organization description: The Domen Company dn: ...
1
vote
1answer
302 views

A way to update the plain text password to ssha in Open ldap for 400K Users

Is there any command/extension available to update the "userPassword" attribute from a user object in LDAP server to SSHA hashed passsword from plain text? we found that users in LADP are stored in ...
0
votes
0answers
71 views

LDAP Kerberos authentication on linux

I have configured my RHEL linux machine to be authenticated against active directory without being joining it to domain, using nss-pam-ldapd pam_ldap samba-winbind openldap-devel krb5-devel. I am able ...
1
vote
1answer
120 views

What does Samba need from LDAP for a valid account?

I have inherited an OpenLDAP system, coupled to a FreeNAS and it is quite a headache to create users all the time. I just want to create a user that can access its own homes share. I have a working ...
1
vote
1answer
116 views

Adding more than one DIT

I have posted this question in dba.stackexchange.com but it is considered off-topic and people suggest that I should post it here so I am posting it here. I have an openldap server up and running on ...
0
votes
1answer
165 views

LDAP group access controls

I'm trying to set up our LDAP server so that members of the pwmadmins group can change people's passwords for them. To be more specific, we have PWM for Tomcat set up and are trying to let pwmadmins ...