OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

2
votes
8answers
3k views

Find users currently logged in using ldap?

We have Openldap configured here and users are able to use ldap for login to client machines. But any way to check the users currently logged into machines using LDAP ? I would like to find which ...
2
votes
4answers
4k views

LDAP: attribute 'givenName' is not allowed

OK, so I am learning and configuring openLDAP for the first time based partly on this tutorial: http://www.rjsystems.nl/en/2100-d6-openldap-provider.php I am trying to add a sample user, but I think ...
2
votes
1answer
1k views

Is openldap fit for large production deployments?

For about 1 year we've been using openldap on ubuntu server 10.04LTS for authenticating about 20 IT users and everything has been running fine (the operations on the LDAP server were basically limited ...
2
votes
2answers
2k views

Using Linux & Open LDAP for a Mac Network

I'm looking for resources/suggestions/experience on administering a medium sized network of Macs (300ish) using Open LDAP on Linux rather than using Open or Active Directory. Would like the following ...
2
votes
1answer
101 views

ldap schema in development should it match production?

I been using LDAP for many years now and most of the firms I worked for used a development LDAP schema that was identical to the production and QA (staging) schemas. An example suffix would be: ...
2
votes
2answers
6k views

How to configure OpenLDAP 2.4 with bdb backend?

It seems like OpenLDAP will prefer to using slapd-config(5) instead of slapd.conf(5). But I don't know how to start with slapd-config(5) because I don't know how to set a root password for it. So ...
2
votes
2answers
7k views

How to disable an LDAP account?

The LDAP uses the posixAccount schema and related attributes and I wonder if there's a standardized way to disable an account. Re-enabling the account should obviously re-enable the former password. ...
2
votes
2answers
225 views

Is there way to detect and track the changes made to OpenLDAP

I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc. I'm wondering is there a way to track changes made to LDAP ...
2
votes
1answer
2k views

ldap export and import

Is it possible to export all the data inside openldap for example using ldapsearch or some other tool to a (ldif?) file and then import everything on another server and put this in a script that would ...
2
votes
3answers
3k views

389 Directory Server Administrative Limit Exceeded error?

I am trying to use 389 ds with large amounts of data as children of entries. I have tried doing a search on these entries using ldapsearch but I keep getting the following error: result: 11 ...
2
votes
1answer
2k views

Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap

I start with a fresh installation of openldap 2.4.28 on debian. They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library. It's hard to understand ...
2
votes
1answer
183 views

Running Multiple LDAP trees OpenLDAP

Is it possible to have multiple seperate LDAP trees on a single LDAP server?
2
votes
2answers
327 views

Account management in a dual directory (Active Directory + LDAP) environment

We currently have AD and OpenLDAP deployed at our organization. I was wondering if anyone has worked in a similar setup and would like to share some of the steps taken to keep the sysadmins sane. ...
2
votes
1answer
663 views

Is the sql backend right choice for LDAP?

I have felt some troubles with LDAP dif database after unexpected system reboots. This databse was only read so it is confused why database have had errors. So im searching for replacement of this ...
2
votes
2answers
2k views

OpenLDAP Invalid Credentials

I'm setting up an OpenLDAP server to authenticate users in a domain on Ubuntu 9.04. What's interesting/strange is that in the newest version of openldap for Ubuntu, the default is not to use the ...
2
votes
1answer
145 views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
2
votes
1answer
234 views

wrong attributeType while updating sambaPwdLastSet

I'm trying to reset the password expiry for a user (really set up a semi-automatic process for doing so) and it's making me cry: server is openldap slapd: 2.4.28-1.1ubuntu4.2 $ ldapsearch -x -b ...
2
votes
1answer
730 views

Configure selinux to allow openldap on CentOS 6.4

I'm trying to run an OpenLDAP server on CentOS 6.4 with selinux enabled, but slapd is dieing as soon as it's started via /etc/init.d/slapd start. (init script reports OK; everything works fine after ...
2
votes
2answers
955 views

LDAP 389: Auto user creation at the client machines

I have setup an 389 directory server on Centos 6. User authentication works fine, however, I have to create individual users on each client machine after creating the user at the directory server. ...
2
votes
3answers
2k views

How do I renew an expired Ubuntu OpenLDAP SSL Certificate

We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd. Here are the commands we used: openssl verify ...
2
votes
1answer
3k views

OpenLDAP 2.4.23 - Debian 6.0 - Import schema - Insufficient access (50)

Good day to everybody. I'm trying to add a new schema inside OpenLDAP. But getting an error: ldap_add: Insufficient access (50) root@ldap:/# ldapadd -c -x -D cn=admin,dc=domain,dc=com -W -f ...
2
votes
1answer
429 views

Adding custom attribute to openldap

I am attempting to setup ConTagged - The LDAP Address Book but I am having a few issues with some of the attributes. The problem is that some of them are undefined and they do not seem to be in the ...
2
votes
2answers
648 views

Problems Installing slapd On Ubuntu Server 11.10

I know that there's a Ubuntu-specific StackExchange website, but I thought that I'd ask here because it's a server-specific question. If I'm wrong in my logic... Well, you people are better at this ...
2
votes
1answer
549 views

How to make local /etc/group take priority over LDAP when names collide?

We have a working LDAP set up. However we hit a problem recently due to some user names and group names existing both in the local files and in LDAP. Specifically the apache user and group existed ...
2
votes
1answer
2k views

Configuring OpenLDAP and SSL

I am having trouble trying to connect to a secure OpenLDAP server which I have set up. On running my LDAP client code java -Djavax.net.debug=ssl LDAPConnector I get the following exception trace ...
2
votes
1answer
162 views

Alternative methods to handle OpenLDAP's new config syntax slapd.d/cn=config?

I for one feel that configuring OpenLDAP with LDIFs instead of basic configuration files is a major step in the wrong direction. Does anyone have some tools/techniques to more easily manage OpenLDAP ...
2
votes
1answer
489 views

Automatic LDAP login to Gitlab

I've Apache 2.2 and Gitlab 6 running. After installing OpenLDAP on Debian Wheezy and setting up Gitlab I can login to Gitlab with LDAP credentials. But I wonder if there is a way to provide LDAP login ...
2
votes
1answer
138 views

OpenLDAP ACL's using sets

So, I am attempting to write some LDAP rules that will allow certain people the ability to write some subtrees. Let's say we have this user: dn: uid=minion1,o=mycompany,ou=cust,dc=some,dc=domain ...
2
votes
1answer
305 views

Why cannot make test when installing OpenLDAP?

I've tried to install OpenLDAP with some steps I did before in other installation under the same conditions in Ubuntu 12.04 I've followed the manual that OpenLDAP has on line... But when I try to ...
2
votes
1answer
2k views

LDAP userPassword encryption?

When I use ldapsearch command, I see my password (is 'abc123') is encrypted in openldap: userPassword:: e1NTSEF9THk4YmtNTUxHV09sOEYvdUdKRE1McFR6eTU2OWNQRVo= I tried to encode my password on ...
2
votes
3answers
236 views

ldap does not respond to ldapsearch with -ZZ parameter

I have followed the instructions found here up to the point where ldapsearch is executed with -ZZ. The problem is after executing ldapsearch with -ZZ, there is no more response. Is there any step ...
2
votes
2answers
2k views

Active Directory Authentication with LDAP proxy

We have a services in a isolated network. These services need to authenticate users against the Active Directory server. However the Active Directory server is not directly available so I have to ...
2
votes
2answers
2k views

How do I add olcAuditLogConfig to openldap on Centos 6

Regarding to 'man slapo-auditlog' I should just need to add the following. dn: olcOverlay=auditlog,olcDatabase={1}hdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: ...
2
votes
2answers
1k views

Ubuntu OpenLDAP: TLS init def ctx failed: -1

I had a working OpenLDAP but broke it while trying to configure SSL using the instructions here: https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html. Now I'm getting the following error ...
2
votes
1answer
291 views

Purging database when slapd is purged

While configuring the slapd package in Debian 5, I found one of the questions intriguing: Do you want the database to be removed when slapd is purged? What does it mean to purge the slapd ...
2
votes
3answers
2k views

Using SSL on slapd

I am setting up slapd to use SSL on Fedora 14. I have the following in my /etc/openldap/slapd.d/cn=config.ldif: olcTLSCACertificateFile: /etc/pki/tls/certs/SSL_CA_Bundle.pem olcTLSCertificateFile: ...
2
votes
1answer
239 views

OpenLDAP schema and attribute for account type

We have different account types: Personal - For employees Sponsored - For users that are affiliated with the organization but not official employees E-mail only - Only for e-mail usage (campaigns, ...
2
votes
2answers
883 views

Does anyone have a valid and working example of OpenLDAP meta backend?

I have been Google'ing my fingers off and simply can not find a working example of how to merge/proxy a OpenLDAP server and windows AD server. Have anyone worked with this before? Any suggestions ...
2
votes
3answers
14k views

Installing OpenLDAP on Fedora 12: ldap_bind: Invalid credentials (49)

I've been trying to set up the OpenLDAP installed by default on Fedora 12, very unsuccessfully. My ultimate goal is to use LDAP authentication for user login and Apache, using the OpenLDAP server ...
2
votes
3answers
3k views

No Root DSE returned from OpenLDAP

I'm trying to set up an OpenLDAP server on ubuntu 9.10, which uses slapd version 2.4.18. After initializing and populating a new hdb database, everything seems OK, but I can not get the server to ...
2
votes
1answer
27 views

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all ...
2
votes
1answer
2k views

Configuring openldap multimaster replication using cn=config

We currently have a single OpenLDAP server using the cn=config backend. We'd like to add a second OpenLDAP server and configure them for multimaster replication. What do we need to do to enable ...
2
votes
1answer
4k views

LDAP object class violation: attribute ou not allowed in suffix?

I am about to set up a LDAP directory. It is used as a tool to communicate user permissions from a web application to WebDav file system access, e.g. adding a user to the web platform shall allow ...
2
votes
1answer
762 views

How to get openldap to honor pwdReset=TRUE

We have a custom application that's using openldap (2.4.32) as a user database. Per customer requirement, I'm modifying it to use openldap's ppolicy overlay. The requirement is to force the user to ...
2
votes
1answer
438 views

OpenLDAP memberOf overlay - changing memberOf attribute name

I set up the memberOf overlay for OpenLDAP - how do I change the memberOf attribute name? I want to change it to "isMemberOf". I tried changing this attribute in the configuration ...
2
votes
2answers
361 views

Active Directory and OpenLDAP user database integration

I need some guidance with AD and OpenLDAP user database integration/synchronization. Here is what I am trying to do. We have Full Linux database (Ubuntu 10.4) with users on OpenLDAP and using only ...
2
votes
1answer
2k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
2
votes
3answers
3k views

LDAP Migration to new LDAP Server

I need to move my ldap server to a newer one. It is currently running on Ubuntu 7.04 server. Is there a way of backing up this server, installing a fresh openldap server on a newer Ubuntu 11.04 ...
2
votes
1answer
766 views

Computer not showing up in network (Samba and LDAP configuration)

For some reason I have not been able to pinpoint yet, going to Network on my Windows 7 computer, the Samba server does not show up. I have configured Samba with LDAP and managed to successfully ...
2
votes
1answer
1k views

Using OpenLDAP to proxy to an Novell eDirectory LDAP Server

I'm currently trying to use OpenLDAP as a proxy to a Novell LDAP server and running in to a few problems. It seems that only certain objects are coming through and there's almost no hierarchy. (I can ...