OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
38 views

How to make a role with all permissions on Ldap?

I'm working with Open Ldap and want to make a role which has all permissions. I mean if I make a new permission on the future, the role should automatically has that permission and no need to add the ...
1
vote
0answers
30 views

bind-sdb does not query for wildcard entry

I have successfully set up Bild with LDAP on a Fedora VM. The Problem is, bind-sdb simply does not query wildcard entries. When I do: nslookup doesnotexist.example.com. 127.0.0.1 The LDAP server ...
-1
votes
1answer
2k views

Ubuntu 14.04, OpenLDAP TLS problems

So i have set up an openldap server using this guide here. It worked fine. But as i want to use sssd i also need TLS to be working for ldap. So i looked into and followed the TLS part of the guide. ...
0
votes
5answers
496 views

OpenLDAP and Samba, can't log onto Samba share from Windows

The former jackass IT-guy that I'm taking over for had a Samba share setup on a Fedora server that uses our OpenLDAP server to authenticate users who want to log in from Windows. We recently added a ...
1
vote
1answer
231 views

Using LDAP/Active Directory with PIN based authentication

We'd like to integrate our service with LDAP, but because of hardware constraints, we're only allow 4 digit user ids and passwords. What would be the best practice for performing such an ...
0
votes
3answers
269 views

OpenLDAP ACLs are not working

First things first, I'm currently working with an OpenLDAP: slapd 2.4.36 on a Fedora release 19 (Schrödinger’s Cat). I've just install the openldap with yum and my configuration is the following one: ...
1
vote
2answers
105 views

How to disable password change for openldap user?

Considering possible solutions for some improvements I run into this theoretical question and I couldn't find a satisfying answer. Some of you may have first-hand experience with this in practice, so ...
9
votes
1answer
5k views

Why does this ldapadd command quit with an “Invalid syntax” error?

I'm very new to openldap but extremely well versed in the linux/unix environment. I'm trying to setup my very first test openldap environment using the guide here. I've also read most of the admin ...
0
votes
2answers
142 views

view all possible attributes of an objectClass for LDAP

I'm scripting some ldap automation and have reached a slight hangup. Basically, I want to check if an attribute being added to an entry actually exists within a given objectClass before I try to add ...
3
votes
4answers
4k views

OpenLDAP Password Expiration with pwdReset=TRUE?

I have configured the ppolicy overlay for OpenLDAP to enable password policies. These things work: Password lockouts on too many failed attempts Password Change required once pwdReset=TRUE added to ...
1
vote
1answer
3k views

Persuading openldap to work with SSL on Ubuntu with cn=config

I simply cannot get this (TLS connection to openldap) to work and would appreciate some assistance. I have a working openldap server on ubuntu 10.04 LTS, it is configured to use cn=config and most of ...
0
votes
1answer
162 views

Replicate From OpenDJ to OpenLDAP?

I am considering retiring some of our older OpenDJ LDAP servers and replacing with OpenLDAP. (seems to be more widely supported) I am wondering if it's possible to replicate directly from OpenDJ to ...
2
votes
1answer
612 views

Not able to add memberOf overlay openldap 2.3.9

I am currently working on integrating LDAP authentication into a system and I would like to restrict access based on LDAP group. The only way to do this is via a search filter and therefore I believe ...
0
votes
1answer
1k views

ubuntu 12.10 openldap issue Invalid DN syntax (34)"

I'm following: https://help.ubuntu.com/12.10/serverguide/openldap-server.html and when I get to the part that says ldapsearch -x -LLL -H ldap:/// -b dc=example,dc=com dn I get: Invalid DN ...
1
vote
1answer
104 views

ldap ppolicy implementation for brute force prevention

I have an openldap server (with user passwords) open worldwide which I'm trying to secure. Step 1 was to limit access to data to authenticated users via ACLs. Step 2, to prevent brute force attacks, ...
1
vote
1answer
670 views

Refresh ldap client configuration Centos

Recently we change the ip address (and add some groups) of our LDAP server (running in Suse Enterprise) so should change also the ldap authenthication configurations for all the servers that we have. ...
0
votes
1answer
84 views

Sudo Command Alias option equivalent in OpenLDAP

I have an OpenLDAP installation that manages Sudo as well. Everytime I create a sudoers role, I have to list the commands that that sudoers role can run. This leads to a lot of repetition. Is there ...
1
vote
0answers
413 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
1answer
40 views

OpenLDAP and range attributes

I am trying to query the "member" attribute of a groupOfNames object, and in AD, I can be sure to retrieve all of them, should they exceed the maximum of 1000 entries, by using ranged attribute ...
0
votes
2answers
5k views

LDAP ACLs with ldapmodify & .ldif file grand user access only

I want to change the settings my new LDAP server let only users of the server read entries and not anonymous. Currently my olcAccess looks like this: olcAccess: {0} to ...
0
votes
2answers
125 views

custom ldap conf for apache 2.2

System: Apache 2.2.12 on Suse linux 11 patchset 2, with PHP and Perl. I want to create a custom ldap.conf file for use by Apache for user authentication to a remote system. I can't put my config ...
0
votes
1answer
431 views

LDAP Login fails, but su to ldap users works

I have a new ldap setup and I am trying to login, either directory to the machine or remotely over SSH. When I try to actually login, my authentication fails. If I login with a local user, (root), ...
1
vote
1answer
581 views

Write hash password to LDAP when creating a new user

I am working on a project with a central user database system. One of the requirements of the system is that there should be only one set of users for all the application. FreeRADIUS and Samba are two ...
1
vote
0answers
98 views

Centos 6.2 Openwebmail change password issue

Recently build environment to test, install openldap, openwebmail and PAM authentication module After experiencing the current account login webmail change password will be "password is wrong, change ...
0
votes
1answer
609 views

OpenLDAP cannot add new schema

I'm trying to add new schema to my OpenLDAP server. The version of slapd is 2.4.23. I'm using Debian 6. If I understood it well, slapd 2.4+ uses OLC configuration with (cn=config) by default for this ...
0
votes
0answers
107 views

OpenLDAP+pam_ldap+ppolicy does not notify user that they are blocked

We have an OpenLDAP server configured to use the password policy overlay in order to lock users when they reach a certain number of failed password attempts. This is working perfectly but when a ...
1
vote
0answers
38 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
1
vote
1answer
31 views

OpenLDAP user group membership integrity

In OpenLDAP a user has membership in a group. Suppose one deletes the user. In the member attribute of the group the user remains. Is this considered an integrity violation? Is there a means to ...
0
votes
1answer
1k views

OpenLDAP fails to stop ,but starts Ok but then status shows as slapd stopped

We are running openldap 2.3.43 on RHel 5.3.,Our LDAP server has been behaving erratically lately 1.It fails to stop when you issue command service ldap restart but it "seems" to starts OK ...
2
votes
1answer
268 views

wrong attributeType while updating sambaPwdLastSet

I'm trying to reset the password expiry for a user (really set up a semi-automatic process for doing so) and it's making me cry: server is openldap slapd: 2.4.28-1.1ubuntu4.2 $ ldapsearch -x -b ...
2
votes
1answer
228 views

Alternative methods to handle OpenLDAP's new config syntax slapd.d/cn=config?

I for one feel that configuring OpenLDAP with LDIFs instead of basic configuration files is a major step in the wrong direction. Does anyone have some tools/techniques to more easily manage OpenLDAP ...
2
votes
1answer
557 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
1
vote
1answer
71 views

Copy Active Directory User to OpenLDAP

I have Active directory installed on my Windows SErver. I want to copy some of Active directory User to OpenLDAP. on my Active directory User cn=admin,ou=resources,dc=mydomain,dc=com I want to copy ...
3
votes
1answer
447 views

smbk5pwd overlay on OpenLDAP 2.4

I have an OpenLDAP server and I want to configure the smbk5pwd overlay to make OpenLDAP update the sambaNTPassword and sambaLMPassword attributes automatically when a change occurs on userPassword. ...
1
vote
1answer
2k views

How do you set password-hash for OpenLDAP?

I have the following version on Ubuntu 12.04: OpenLDAP: slapd (Sep 19 2013 22:49:31) $ buildd@batsu:/build/buildd/openldap-2.4.28/debian/build/servers/slapd OpenLDAP now offers SSHA as the default ...
0
votes
2answers
3k views

Can't add local user on system using ldap auth for samba [closed]

Trying to add a local user to a CentOS 6.3 system that is using ldap for Samba authentication, but being stymied by the user's existing entry in ldap. [root@samba ~]# adduser wchandy adduser: user ...
4
votes
2answers
751 views

Is it generally acceptable to expose LDAP in read only mode to the Internet?

I need to support Mac clients who need to access a LDAP server to locate SMIME keys. Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
1
vote
1answer
130 views

Can Active Directory issue a LDAP redirect to another LDAP server

I have several independent LDAP servers, controlled by different entities that allow anonymous access. I would like AD to tell an LDAP query to use a different server... like recursive DNS. Is ...
0
votes
2answers
259 views

Liferay and export LDAP account

I have this problem: I have enabled Liferay to import and export users from/to OpenLDAP server. When I create a user in Liferay I obtain this page: So, I have create a new user and Liferay has ...
10
votes
4answers
12k views

Does Nginx support LDAP authentication?

Hey Does nginx support ldap authentication? I have just migrated from apache and would like to move all of my authentications which are based on openldap and mod_auth_ldap to nginx. Let me know if ...
1
vote
1answer
914 views

“wrong attributetype” when using ldapadd

When attempting to load the following configuration dn: olcDatabase={1}hdb,cn=config changetype: modify add: olcMirrorMode olcMirrorMode: TRUE I get the following error: root@box:~# ldapadd -Y ...
0
votes
0answers
191 views

ejabberd + ldap_filter (uidNumber greater than) is not working

I have configuration ejabberd + ldap users which works fine, unless I try to filter only users with uid greater than 1000. =INFO REPORT==== 2014-02-26 09:52:22 === D(<0.268.0>:eldap:697) : ...
2
votes
1answer
93 views

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the ...
0
votes
1answer
67 views

Selective subnet access permission on AWS VPC

I have multiple private subnets on AWS VPC (Virtual Private Cloud). E.g. 10.0.128.0/20, 10.0.192.0/20, 10.0.224.0/20 etc. I have an OpenVPN gateway on the VPC which allows users to connect to these ...
1
vote
1answer
518 views

ldap fail after ubuntu upgrade to 12.04

I have upgraded ubuntu from 10.4 to 12.04. After it's done, ldap service is stopped and failed to start again! Now none of other services function! :( I checked error logs and found this: Feb 22 ...
1
vote
0answers
244 views

VSFTP and openLDAP based virtual users home directory

I have a VSFTPD server based on CentOS 6, configured to authenticate virtual users against an openLDAP server. I can login to the FTP server, however, authenticated users are not redirected to their ...
0
votes
1answer
79 views

What could make OpenLDAP ignore access restrictions?

I'm trying to configure a new installation of OpenLDAP (2.6.39) on Arch Linux. I've used the default core packages to install and configure it, however I cannot get it to obey any access control ...
2
votes
0answers
193 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
0
votes
0answers
110 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
154 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...