OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

3
votes
3answers
12k views

Configuring OpenLDAP as a Active Directory Proxy

We try to set up an Active Directory server for company-wide authentication. Some of the servers that should authenticate against the AD are placed in a DMZ, so we thought of using a LDAP-server as ...
3
votes
3answers
1k views

How to allow a group to change user passwords?

I have the following openldap server configuration: access to attrs=userPassword by self write by anonymous auth by set="[cn=users,ou=Group,dc=my-company,dc=de]/memberUid & user/uid" ...
3
votes
2answers
288 views

Apache/PHP ldap stops working. Requires restart of apache

I currently have a setup where users log in to a website using LDAP credentials. It's all internal so I don't really care a ton about certificates. So, in my /etc/openldap/ldap.conf file I have ...
3
votes
1answer
779 views

smbk5pwd overlay on OpenLDAP 2.4

I have an OpenLDAP server and I want to configure the smbk5pwd overlay to make OpenLDAP update the sambaNTPassword and sambaLMPassword attributes automatically when a change occurs on userPassword. ...
3
votes
2answers
3k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
3
votes
1answer
2k views

How to add admin users in 389 LDAP, fedora directory server

I want to create couple of Admin users who have access to create/delete users on a particular group/Organization Unit. For example, User: uid=testadmin, ou=people, dc=my,dc=net Should have access ...
3
votes
1answer
746 views

Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory

Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
3
votes
2answers
5k views

Unable to modify schema in OpenLDAP using run-time configuration cn=config

I'm having trouble modifying the schema of an OpenLDAP installation using the run-time configuration (cn=config). What I'm trying to do is modify existing attributes and add new ones to a custom ...
2
votes
8answers
4k views

Find users currently logged in using ldap?

We have Openldap configured here and users are able to use ldap for login to client machines. But any way to check the users currently logged into machines using LDAP ? I would like to find which ...
2
votes
4answers
5k views

LDAP: attribute 'givenName' is not allowed

OK, so I am learning and configuring openLDAP for the first time based partly on this tutorial: http://www.rjsystems.nl/en/2100-d6-openldap-provider.php I am trying to add a sample user, but I think ...
2
votes
2answers
3k views

Using Linux & Open LDAP for a Mac Network

I'm looking for resources/suggestions/experience on administering a medium sized network of Macs (300ish) using Open LDAP on Linux rather than using Open or Active Directory. Would like the following ...
2
votes
1answer
5k views

ldap export and import

Is it possible to export all the data inside openldap for example using ldapsearch or some other tool to a (ldif?) file and then import everything on another server and put this in a script that would ...
2
votes
1answer
1k views

Is openldap fit for large production deployments?

For about 1 year we've been using openldap on ubuntu server 10.04LTS for authenticating about 20 IT users and everything has been running fine (the operations on the LDAP server were basically limited ...
2
votes
2answers
3k views

How to read a Berkeley DB log file for slapd?

I am running OpenLDAP's slapd on Fedora 14, and I see that in the directory for the database, there is a log.0000000001 file. I would like to be able to read this file, as I am interested in recent ...
2
votes
1answer
17k views

ldap_modify: Insufficient access (50)

I am running an OpenLDAP 2.4 server that uses the SSL service for communication. It works for lookups. I am trying to add mirror mode replication. So this is the command that I'm executing: ...
2
votes
1answer
117 views

ldap schema in development should it match production?

I been using LDAP for many years now and most of the firms I worked for used a development LDAP schema that was identical to the production and QA (staging) schemas. An example suffix would be: ...
2
votes
1answer
3k views

Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap

I start with a fresh installation of openldap 2.4.28 on debian. They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library. It's hard to understand ...
2
votes
2answers
7k views

How to configure OpenLDAP 2.4 with bdb backend?

It seems like OpenLDAP will prefer to using slapd-config(5) instead of slapd.conf(5). But I don't know how to start with slapd-config(5) because I don't know how to set a root password for it. So ...
2
votes
2answers
9k views

How to disable an LDAP account?

The LDAP uses the posixAccount schema and related attributes and I wonder if there's a standardized way to disable an account. Re-enabling the account should obviously re-enable the former password. ...
2
votes
2answers
327 views

Is there way to detect and track the changes made to OpenLDAP

I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc. I'm wondering is there a way to track changes made to LDAP ...
2
votes
3answers
4k views

389 Directory Server Administrative Limit Exceeded error?

I am trying to use 389 ds with large amounts of data as children of entries. I have tried doing a search on these entries using ldapsearch but I keep getting the following error: result: 11 ...
2
votes
1answer
196 views

Running Multiple LDAP trees OpenLDAP

Is it possible to have multiple seperate LDAP trees on a single LDAP server?
2
votes
1answer
5k views

ldapsearch against Active Directory fails authentication + search params wrong

I am using ldapsearch from OpenLDAP tools to search our corporate Active Directory for my email and phone number. This query is a test to ensure that I can authenticate against the domain so I can ...
2
votes
2answers
335 views

Account management in a dual directory (Active Directory + LDAP) environment

We currently have AD and OpenLDAP deployed at our organization. I was wondering if anyone has worked in a similar setup and would like to share some of the steps taken to keep the sysadmins sane. ...
2
votes
1answer
724 views

Is the sql backend right choice for LDAP?

I have felt some troubles with LDAP dif database after unexpected system reboots. This databse was only read so it is confused why database have had errors. So im searching for replacement of this ...
2
votes
1answer
4k views

Adding inetOrgPerson to account/posixAccount LDAP entries

I have a LDAP database we have been using for managing user accounts on our hosts, these entries have account and posixAccount as objectClass. Now we'd like to extend this to also use it as an adress ...
2
votes
2answers
2k views

OpenLDAP Invalid Credentials

I'm setting up an OpenLDAP server to authenticate users in a domain on Ubuntu 9.04. What's interesting/strange is that in the newest version of openldap for Ubuntu, the default is not to use the ...
2
votes
1answer
73 views

LDAP authentication - avoid duplicate uidNumber

I have just successfully configured OpenLDAP Users authentication in a single CentOS6 box, based on SSSD. Took some time and many trials, but it's working. Now, I want to start adding users. I'm ...
2
votes
1answer
485 views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
2
votes
1answer
367 views

wrong attributeType while updating sambaPwdLastSet

I'm trying to reset the password expiry for a user (really set up a semi-automatic process for doing so) and it's making me cry: server is openldap slapd: 2.4.28-1.1ubuntu4.2 $ ldapsearch -x -b ...
2
votes
1answer
7k views

LDAP: backup with slapcat vs ldapsearch

Used: openldap-servers-2.4.23-34.el6_5.1.x86_64 Task: create script for crontab to create scheduled database full backup. 1) slapcat - create file in in the default format, Berkeley DB. 2) slapcat ...
2
votes
1answer
4k views

How do you set password-hash for OpenLDAP?

I have the following version on Ubuntu 12.04: OpenLDAP: slapd (Sep 19 2013 22:49:31) $ buildd@batsu:/build/buildd/openldap-2.4.28/debian/build/servers/slapd OpenLDAP now offers SSHA as the default ...
2
votes
1answer
7k views

Unknown LDAP cn=config admin password

When I installed OpenLDAP I was asked to create a password for an admin user but now I realize there's another admin user for cn=config whose password I don't know. Does anyone know how should I ...
2
votes
1answer
1k views

Configure selinux to allow openldap on CentOS 6.4

I'm trying to run an OpenLDAP server on CentOS 6.4 with selinux enabled, but slapd is dieing as soon as it's started via /etc/init.d/slapd start. (init script reports OK; everything works fine after ...
2
votes
1answer
2k views

Switching OpenLDAP from cn=config to slapd.conf

In a fresh OpenLDAP Install on Debian 6 (or ubuntu 12.04) I would like to switch from modern cn=config style of configuration to traditional slapd.conf configuration. I have heard that it is possible, ...
2
votes
2answers
1k views

LDAP 389: Auto user creation at the client machines

I have setup an 389 directory server on Centos 6. User authentication works fine, however, I have to create individual users on each client machine after creating the user at the directory server. ...
2
votes
1answer
3k views

OpenLDAP 2.4.23 - Debian 6.0 - Import schema - Insufficient access (50)

Good day to everybody. I'm trying to add a new schema inside OpenLDAP. But getting an error: ldap_add: Insufficient access (50) root@ldap:/# ldapadd -c -x -D cn=admin,dc=domain,dc=com -W -f ...
2
votes
1answer
610 views

Adding custom attribute to openldap

I am attempting to setup ConTagged - The LDAP Address Book but I am having a few issues with some of the attributes. The problem is that some of them are undefined and they do not seem to be in the ...
2
votes
2answers
778 views

Problems Installing slapd On Ubuntu Server 11.10

I know that there's a Ubuntu-specific StackExchange website, but I thought that I'd ask here because it's a server-specific question. If I'm wrong in my logic... Well, you people are better at this ...
2
votes
1answer
678 views

How to make local /etc/group take priority over LDAP when names collide?

We have a working LDAP set up. However we hit a problem recently due to some user names and group names existing both in the local files and in LDAP. Specifically the apache user and group existed ...
2
votes
2answers
10k views

ldapadd/ldapmodify: clarifications needed about these comamnds

The ldapmodify man page states that: The default for ldapmodify is to modify existing entries Yet when I try to import an LDIF file with ldapmodify I get the below error: ldapmodify: modify ...
2
votes
1answer
3k views

Configuring OpenLDAP and SSL

I am having trouble trying to connect to a secure OpenLDAP server which I have set up. On running my LDAP client code java -Djavax.net.debug=ssl LDAPConnector I get the following exception trace ...
2
votes
3answers
3k views

No Root DSE returned from OpenLDAP

I'm trying to set up an OpenLDAP server on ubuntu 9.10, which uses slapd version 2.4.18. After initializing and populating a new hdb database, everything seems OK, but I can not get the server to ...
2
votes
1answer
39 views

How update passwords of user's already existing in ldap? [closed]

I want to update passwords [user's already existing in ldap] of the user by importing data from /etc/passwd and /etc/shadow. How to achieve this? I will give the overview of my setup. Nodes user ...
2
votes
1answer
551 views

Alternative methods to handle OpenLDAP's new config syntax slapd.d/cn=config?

I for one feel that configuring OpenLDAP with LDIFs instead of basic configuration files is a major step in the wrong direction. Does anyone have some tools/techniques to more easily manage OpenLDAP ...
2
votes
1answer
652 views

Automatic LDAP login to Gitlab

I've Apache 2.2 and Gitlab 6 running. After installing OpenLDAP on Debian Wheezy and setting up Gitlab I can login to Gitlab with LDAP credentials. But I wonder if there is a way to provide LDAP login ...
2
votes
1answer
668 views

How do you enable the storing of GPG / PGP keys in OpenLDAP

I've searched high and low trying to find a method that allows me to store GPG keys for existing users in an OpenLDAP server. The only relevant how-to I've found is this. However, I'm unable to get ...
2
votes
1answer
263 views

OpenLDAP ACL's using sets

So, I am attempting to write some LDAP rules that will allow certain people the ability to write some subtrees. Let's say we have this user: dn: uid=minion1,o=mycompany,ou=cust,dc=some,dc=domain ...
2
votes
1answer
424 views

Why cannot make test when installing OpenLDAP?

I've tried to install OpenLDAP with some steps I did before in other installation under the same conditions in Ubuntu 12.04 I've followed the manual that OpenLDAP has on line... But when I try to ...
2
votes
1answer
4k views

LDAP userPassword encryption?

When I use ldapsearch command, I see my password (is 'abc123') is encrypted in openldap: userPassword:: e1NTSEF9THk4YmtNTUxHV09sOEYvdUdKRE1McFR6eTU2OWNQRVo= I tried to encode my password on ...