OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

2
votes
1answer
305 views

Configure selinux to allow openldap on CentOS 6.4

I'm trying to run an OpenLDAP server on CentOS 6.4 with selinux enabled, but slapd is dieing as soon as it's started via /etc/init.d/slapd start. (init script reports OK; everything works fine after ...
2
votes
2answers
563 views

LDAP 389: Auto user creation at the client machines

I have setup an 389 directory server on Centos 6. User authentication works fine, however, I have to create individual users on each client machine after creating the user at the directory server. ...
2
votes
3answers
1k views

How do I renew an expired Ubuntu OpenLDAP SSL Certificate

We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd. Here are the commands we used: openssl verify ...
2
votes
1answer
275 views

Adding custom attribute to openldap

I am attempting to setup ConTagged - The LDAP Address Book but I am having a few issues with some of the attributes. The problem is that some of them are undefined and they do not seem to be in the ...
2
votes
2answers
480 views

Problems Installing slapd On Ubuntu Server 11.10

I know that there's a Ubuntu-specific StackExchange website, but I thought that I'd ask here because it's a server-specific question. If I'm wrong in my logic... Well, you people are better at this ...
2
votes
1answer
1k views

Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap

I start with a fresh installation of openldap 2.4.28 on debian. They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library. It's hard to understand ...
2
votes
2answers
1k views

Restoring openldap configuration from ldif file?

I am trying to restore my OpenLDAP server from an ldif file I made before it went horribly wrong. All of the websites I found talk about using slapadd but when I run slapadd -v -l ...
2
votes
1answer
419 views

How to make local /etc/group take priority over LDAP when names collide?

We have a working LDAP set up. However we hit a problem recently due to some user names and group names existing both in the local files and in LDAP. Specifically the apache user and group existed ...
2
votes
1answer
2k views

Configuring OpenLDAP and SSL

I am having trouble trying to connect to a secure OpenLDAP server which I have set up. On running my LDAP client code java -Djavax.net.debug=ssl LDAPConnector I get the following exception trace ...
2
votes
1answer
2k views

how to configure open ldap to work on localhost

From the documentation: Use your favorite editor to edit the provided slapd.conf(5) example (usually installed as /usr/local/etc/openldap/slapd.conf) to contain a BDB database definition ...
2
votes
1answer
184 views

Automatic LDAP login to Gitlab

I've Apache 2.2 and Gitlab 6 running. After installing OpenLDAP on Debian Wheezy and setting up Gitlab I can login to Gitlab with LDAP credentials. But I wonder if there is a way to provide LDAP login ...
2
votes
1answer
55 views

OpenLDAP ACL's using sets

So, I am attempting to write some LDAP rules that will allow certain people the ability to write some subtrees. Let's say we have this user: dn: uid=minion1,o=mycompany,ou=cust,dc=some,dc=domain ...
2
votes
1answer
189 views

Why cannot make test when installing OpenLDAP?

I've tried to install OpenLDAP with some steps I did before in other installation under the same conditions in Ubuntu 12.04 I've followed the manual that OpenLDAP has on line... But when I try to ...
2
votes
1answer
1k views

LDAP userPassword encryption?

When I use ldapsearch command, I see my password (is 'abc123') is encrypted in openldap: userPassword:: e1NTSEF9THk4YmtNTUxHV09sOEYvdUdKRE1McFR6eTU2OWNQRVo= I tried to encode my password on ...
2
votes
3answers
189 views

ldap does not respond to ldapsearch with -ZZ parameter

I have followed the instructions found here up to the point where ldapsearch is executed with -ZZ. The problem is after executing ldapsearch with -ZZ, there is no more response. Is there any step ...
2
votes
2answers
758 views

Active Directory Authentication with LDAP proxy

We have a services in a isolated network. These services need to authenticate users against the Active Directory server. However the Active Directory server is not directly available so I have to ...
2
votes
2answers
1k views

Ubuntu OpenLDAP: TLS init def ctx failed: -1

I had a working OpenLDAP but broke it while trying to configure SSL using the instructions here: https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html. Now I'm getting the following error ...
2
votes
1answer
234 views

Purging database when slapd is purged

While configuring the slapd package in Debian 5, I found one of the questions intriguing: Do you want the database to be removed when slapd is purged? What does it mean to purge the slapd ...
2
votes
3answers
2k views

Using SSL on slapd

I am setting up slapd to use SSL on Fedora 14. I have the following in my /etc/openldap/slapd.d/cn=config.ldif: olcTLSCACertificateFile: /etc/pki/tls/certs/SSL_CA_Bundle.pem olcTLSCertificateFile: ...
2
votes
1answer
245 views

Migrating to LDAP

I've started a new job at a house where they've got an amazingly unruly patchwork of Linux, xBSD, and OpenSolaris boxes. Every box has its own user auth using local /etc/passwd, etc. Users/Groups have ...
2
votes
1answer
225 views

OpenLDAP schema and attribute for account type

We have different account types: Personal - For employees Sponsored - For users that are affiliated with the organization but not official employees E-mail only - Only for e-mail usage (campaigns, ...
2
votes
2answers
819 views

Does anyone have a valid and working example of OpenLDAP meta backend?

I have been Google'ing my fingers off and simply can not find a working example of how to merge/proxy a OpenLDAP server and windows AD server. Have anyone worked with this before? Any suggestions ...
2
votes
3answers
14k views

Installing OpenLDAP on Fedora 12: ldap_bind: Invalid credentials (49)

I've been trying to set up the OpenLDAP installed by default on Fedora 12, very unsuccessfully. My ultimate goal is to use LDAP authentication for user login and Apache, using the OpenLDAP server ...
2
votes
3answers
2k views

No Root DSE returned from OpenLDAP

I'm trying to set up an OpenLDAP server on ubuntu 9.10, which uses slapd version 2.4.18. After initializing and populating a new hdb database, everything seems OK, but I can not get the server to ...
2
votes
1answer
2k views

OpenLDAP client configuration headache in FreeBSD

I am using FreeBSD 7.2 as an NFS server, and as a client to an OpenLDAP server (which runs Debian etch). When users access their files on the NFS server, the users' UIDs are looked up in the ldap ...
2
votes
1answer
508 views

Configuring openldap multimaster replication using cn=config

We currently have a single OpenLDAP server using the cn=config backend. We'd like to add a second OpenLDAP server and configure them for multimaster replication. What do we need to do to enable ...
2
votes
1answer
399 views

Why ldapsearch is not working with anonymous bind after upgrading OpenLDAP to v2.4?

I have a setup of OpenLDAP v2.3 which I am using for last few years. Following are the lines in slapd.conf for access control. access to dn.one="o=abc, c=IN" by * read access to ...
2
votes
1answer
2k views

LDAP object class violation: attribute ou not allowed in suffix?

I am about to set up a LDAP directory. It is used as a tool to communicate user permissions from a web application to WebDav file system access, e.g. adding a user to the web platform shall allow ...
2
votes
1answer
402 views

How to get openldap to honor pwdReset=TRUE

We have a custom application that's using openldap (2.4.32) as a user database. Per customer requirement, I'm modifying it to use openldap's ppolicy overlay. The requirement is to force the user to ...
2
votes
1answer
346 views

OpenLDAP memberOf overlay - changing memberOf attribute name

I set up the memberOf overlay for OpenLDAP - how do I change the memberOf attribute name? I want to change it to "isMemberOf". I tried changing this attribute in the configuration ...
2
votes
1answer
1k views

Setting up a Linux client for OpenLDAP over SSL

I'm trying to set up SSL with a server running OpenLDAP (and using OpenSSL, not GnuTLS). The server seems to be working fine: I can authenticate using ldap:// and can also use ldaps:// from Apache ...
2
votes
2answers
1k views

How do I add olcAuditLogConfig to openldap on Centos 6

Regarding to 'man slapo-auditlog' I should just need to add the following. dn: olcOverlay=auditlog,olcDatabase={1}hdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: ...
2
votes
2answers
335 views

Active Directory and OpenLDAP user database integration

I need some guidance with AD and OpenLDAP user database integration/synchronization. Here is what I am trying to do. We have Full Linux database (Ubuntu 10.4) with users on OpenLDAP and using only ...
2
votes
1answer
1k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
2
votes
3answers
3k views

LDAP Migration to new LDAP Server

I need to move my ldap server to a newer one. It is currently running on Ubuntu 7.04 server. Is there a way of backing up this server, installing a fresh openldap server on a newer Ubuntu 11.04 ...
2
votes
1answer
727 views

Computer not showing up in network (Samba and LDAP configuration)

For some reason I have not been able to pinpoint yet, going to Network on my Windows 7 computer, the Samba server does not show up. I have configured Samba with LDAP and managed to successfully ...
2
votes
1answer
845 views

Using OpenLDAP to proxy to an Novell eDirectory LDAP Server

I'm currently trying to use OpenLDAP as a proxy to a Novell LDAP server and running in to a few problems. It seems that only certain objects are coming through and there's almost no hierarchy. (I can ...
2
votes
1answer
2k views

Ubuntu 10.04 (Lucid) OpenLDAP invalid credentials issue

This won't be a question, but a solution to an infuriating problem on Ubuntu 10.04. If you tried to deploy an LDAP server using this distro following the tutorials below, you'll be on serious trouble. ...
2
votes
2answers
711 views

Snow Leopard Hangs when Using OpenLDAP on Linux for Authentication

We have a new iMac on Snow Leopard authenticating against an OpenLDAP directory. Homes are on (automounted) NFSv3 (Linux, kernel-server). NFS seems to work pretty well (if a bit slow, but we don't ...
2
votes
2answers
2k views

OpenLDAP SSL error

I did setup an OpenLDAP server with PAM authentication against it. In clear text, it works very well but when I try to add SSL it always faill. I'm following that guide to get it working : ...
2
votes
1answer
39 views

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the ...
2
votes
1answer
668 views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
2
votes
2answers
150 views

<suffix> invalid DN 21 (Invalid syntax) on Converting slapd.conf OpenLdap

Actually i want to configure ldap as master-slave replication using syncrepl method, On any reference which i found,I'm running on Centos 6 machine and openldap v2.4.23. I following step by step on ...
2
votes
1answer
186 views

Configuring Amazon Linux authenticate to LDAP server

I was wondering if anyone had success in configuring Amazon Linux to authenticate to an LDAP server? EDIT: For more information on what I have done: I disabled anonymous access on my OpenLDAP ...
2
votes
0answers
143 views

Openldap Mirror Mode replication failover

We have currently one master ldap server and around 400 slave servers which are partially replicated through that master.All openldap versions are same and 2.4.31 What we want is actually if master ...
2
votes
0answers
102 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
2
votes
1answer
344 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
2
votes
0answers
52 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
2
votes
2answers
604 views

OpenLdap TLS authentication setup

I am trying to setup openldap on ubuntu 12.04 by following this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html When I tried to enable TLS on the server by creating a self signed ...
2
votes
0answers
235 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...