OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
2answers
2k views

Can't add local user on system using ldap auth for samba [closed]

Trying to add a local user to a CentOS 6.3 system that is using ldap for Samba authentication, but being stymied by the user's existing entry in ldap. [root@samba ~]# adduser wchandy adduser: user ...
5
votes
2answers
745 views

Is it generally acceptable to expose LDAP in read only mode to the Internet?

I need to support Mac clients who need to access a LDAP server to locate SMIME keys. Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
1
vote
1answer
108 views

Can Active Directory issue a LDAP redirect to another LDAP server

I have several independent LDAP servers, controlled by different entities that allow anonymous access. I would like AD to tell an LDAP query to use a different server... like recursive DNS. Is ...
0
votes
2answers
239 views

Liferay and export LDAP account

I have this problem: I have enabled Liferay to import and export users from/to OpenLDAP server. When I create a user in Liferay I obtain this page: So, I have create a new user and Liferay has ...
10
votes
4answers
11k views

Does Nginx support LDAP authentication?

Hey Does nginx support ldap authentication? I have just migrated from apache and would like to move all of my authentications which are based on openldap and mod_auth_ldap to nginx. Let me know if ...
1
vote
1answer
748 views

“wrong attributetype” when using ldapadd

When attempting to load the following configuration dn: olcDatabase={1}hdb,cn=config changetype: modify add: olcMirrorMode olcMirrorMode: TRUE I get the following error: root@box:~# ldapadd -Y ...
0
votes
0answers
163 views

ejabberd + ldap_filter (uidNumber greater than) is not working

I have configuration ejabberd + ldap users which works fine, unless I try to filter only users with uid greater than 1000. =INFO REPORT==== 2014-02-26 09:52:22 === D(<0.268.0>:eldap:697) : ...
2
votes
1answer
83 views

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the ...
0
votes
1answer
63 views

Selective subnet access permission on AWS VPC

I have multiple private subnets on AWS VPC (Virtual Private Cloud). E.g. 10.0.128.0/20, 10.0.192.0/20, 10.0.224.0/20 etc. I have an OpenVPN gateway on the VPC which allows users to connect to these ...
1
vote
1answer
445 views

ldap fail after ubuntu upgrade to 12.04

I have upgraded ubuntu from 10.4 to 12.04. After it's done, ldap service is stopped and failed to start again! Now none of other services function! :( I checked error logs and found this: Feb 22 ...
1
vote
0answers
212 views

VSFTP and openLDAP based virtual users home directory

I have a VSFTPD server based on CentOS 6, configured to authenticate virtual users against an openLDAP server. I can login to the FTP server, however, authenticated users are not redirected to their ...
0
votes
1answer
74 views

What could make OpenLDAP ignore access restrictions?

I'm trying to configure a new installation of OpenLDAP (2.6.39) on Arch Linux. I've used the default core packages to install and configure it, however I cannot get it to obey any access control ...
2
votes
0answers
179 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
0
votes
0answers
102 views

Connection from samba to LDAP server failed

I use samba (3.4) and OpenLDAP (2.4) for file sharing and directory service. Some days ago, I noticed that samba has problem in connection to the LDAP service while beforehand it was working ...
0
votes
0answers
141 views

How to setup an openldap addressbook for thunderbird secure s/mime email ?

I want to setup an ldap server that will hold an addressbook of users their emails their smime certificates. I want to use this ldap server as an addressbook in thunderbird and/or other mail clients ...
-1
votes
1answer
155 views

Forwarding incoming ssh connections to virtual machine based on LDAP group

My Question is as follows: How can I forward all incoming SSH (Port 22) traffic (except one account) to a VM which is running on this server? The Server is based on Proxmox VE 3.1 The VM is Debian 7 ...
1
vote
2answers
287 views

Looking for advice on LDAP objectClasses for syncing with Google Apps

I am setting up an OpenLDAP server on Ubuntu so that this will be the authoritative user database for authentication. I'm going to be using Atlassian Crowd with it so that Google Apps can then use SSO ...
0
votes
1answer
259 views

NFS, Quota and LDAP

I have the following scenario in two servers with Debian: Server #1 OpenLDAP, NFS exporting /home Server #2 PAM with pam_ldap configured to authenticate against Server #1, /home directory mounted ...
0
votes
2answers
390 views

Does openldap support pbkdf2 hash algorithm?

Since pbkdf2 (Password-Based Key Derivation Function 2) is a more secure hash function, so I wonder if current openldap implementation support pbkdf2 (pbkdf2_sha256 for example)? I have found some ...
0
votes
2answers
702 views

Error on LDAP Login - xsessions error - Session lasted less than 10 seconds

I have two machines both running CentOS 5.6 64bit. On the LDAP Machine it has a DHCP, BIND and OpenLDAP Server. LDAP is correctly configured and users can authenticate against it. Using root I ...
0
votes
2answers
587 views

Kerberos with LDAP backend still using db2

I've installed and configured LDAP, installed and configured kerberos to use LDAP as the backend, as follows: [dbdefaults] ldap_kerberos_container_dn = dc=voltage,dc=com [dbmodules] ...
2
votes
2answers
2k views

Active Directory Authentication with LDAP proxy

We have a services in a isolated network. These services need to authenticate users against the Active Directory server. However the Active Directory server is not directly available so I have to ...
1
vote
1answer
130 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
0
votes
0answers
49 views

OpenLDAP SQL backend failing

I'm running OpenLDAP with a SQL (Oracle) backend. This works fine with OpenLDAP 2.3 but after upgrading to 2.4.38 it fails with an error that is not helpful at all: 52d3ec0c ...
1
vote
0answers
182 views

OpenLDAP on ArchLinux users cannot change passwd

I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
0
votes
1answer
636 views

Can't login with KDM and SSSD but works fine from console

I have LDAP authentication set up with SSSD and I can login fine through console and ssh. However when I try to login through KDM it just says authentication failure... More specifically: Jan 9 ...
0
votes
1answer
254 views

OpenLDAP client configuration. Can search but cannot login?

I'm trying to set up LDAP on a Gentoo workstation to authenticate against a central server. However, I encountered some issues and I really hope you guys can help me out here :) First off, the LDAP ...
3
votes
1answer
603 views

Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory

Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
1
vote
1answer
3k views

ldap_modify: Other (e.g., implementation specific) error (80), <olcAccess> handler exited with 1

When modifying the Open-LDAP configuration using: dn: olcDatabase={2}hdb,cn=config changetype: modify replace: olcAccess olcAccess: {0}to * by ...
5
votes
2answers
3k views

FreeRADIUS2 and LDAP Authentication

I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
0
votes
2answers
240 views

Issues with LDAP backend in OpenLDAP

Good Morning; After working on setting up an LDAP proxy server to replicate LDAP data, I keep getting the following message: 52a0b5ca send_ldap_result: conn=-1 op=0 p=3 52a0b5ca ...
0
votes
2answers
416 views

OSX 10.7 Directory Utility - Editing OpenLDAP

I am attempting to get Macs, running os 10.7.5 Lion, to authenticate using OpenLDAP running on Ubuntu 12.0.4 LTS. One of the things that I would love to be able to do is to use Apple's lovely ...
0
votes
2answers
209 views

starting Standalone LDAP Daemon, slapd

I am following THIS guide to install an ldap server. At step 9 i use: /usr/local/libexec/slapd instead of: su root -c /usr/local/libexec/slapd since i dont have access to su I get this ...
1
vote
2answers
302 views

openldap cacerts directory symbolic link to /etc/pki/tls/certs - Yes/No? Why?

Every single article/how-to/blog on openldap talks about putting the ldap cert for ldaps in the /etc/openldap/cacerts directory. I am wondering why not just put the cert(s) in /etc/pki/tls/certs and ...
0
votes
1answer
44 views

DNS Portability with regards to LDAP/Kerberos

How portable is a DNS server when it comes to LDAP, especially Kerberos which I am using for authentication? Meaning, how much do I have to change to use the same LDAP server with 2 different DNS ...
0
votes
0answers
135 views

OpenLdap- make test fails

I am trying to configure and install an ldap server following this guide. I am stuck on step 6, make test. it fails on the first test with the following message: cd tests; make test make[1]: Entering ...
1
vote
3answers
1k views

LDAP Account Expiry Script Help

I need to find a way of automatically notifying LDAP account users as to when their passwords will expire and also force them to change their passwords. I am fairly new to LDAP.I am running openldap ...
0
votes
1answer
2k views

Unknown LDAP cn=config admin password

when I installed openldap I was asked to create a password for an admin user but now i realize there's another admin user for cn=config whose password i don't know. Does anyone know how should i ...
3
votes
2answers
518 views

OpenDirectory/LDAP Query Syntax to find all users in a Group for GADS

I would like to construct an LDAP query to find all users that are part of the "Google Apps Users" group (short name: googleappsusers) on my OS X 10.9 Server. When I run the following query in Google ...
0
votes
4answers
11k views

Kerberos Login Failed: Cannot resolve network address for KDC in requested realm - Kerio and Open Directory

I'm attempting to connect Kerio to an Open Directory instance. I'm using kinit to test the setup, and I get the following: $ kinit -V -S host/server.domain.co.uk@server.domain.co.uk ...
2
votes
8answers
3k views

Find users currently logged in using ldap?

We have Openldap configured here and users are able to use ldap for login to client machines. But any way to check the users currently logged into machines using LDAP ? I would like to find which ...
0
votes
1answer
855 views

OpenLdap: Why slapd tell me there's no DB_CONFIG when there is one

When I run slapcat or restart slapd on Debian 6, OpenLdap 2.4.23-7.32.4.23-7.3, I see this warning: hdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (14). Expect poor ...
2
votes
1answer
488 views

Automatic LDAP login to Gitlab

I've Apache 2.2 and Gitlab 6 running. After installing OpenLDAP on Debian Wheezy and setting up Gitlab I can login to Gitlab with LDAP credentials. But I wonder if there is a way to provide LDAP login ...
0
votes
3answers
531 views

Setting up OpenAM to use OpenLDAP as DataStore

I am at the moment trying to configure an OpenAM installation to use an OpenLDAP as DataStore; is it possible to do it? I have seen some tips about configuring OpenLDAP (as in this tutorial) but this ...
0
votes
1answer
33 views

OpenLDAP recover data without config file

We are using OpenLDAP as an LDAP server to test our software with LDAP search support. Due to an accident our slapd.conf file was deleted. The person who configured the LDAP server left the ...
1
vote
1answer
442 views

rsyslog forward all except ldap

I have Centos 6 servers running openLDAP. In the rsyslog.conf, I forward the logs to my central server with this line: *.* @10.10.10.10:514 openldap seems incredibly chatty. I have 3 servers in ...
1
vote
1answer
66 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
0
votes
1answer
482 views

Failed Administrator login on WSO2 IS with external OpenLDAP

I have an installation of WSO2 Identity Server and I'm trying to make it work with an external OpenLDAP instance I have followed this guide: ...
2
votes
1answer
730 views

Configure selinux to allow openldap on CentOS 6.4

I'm trying to run an OpenLDAP server on CentOS 6.4 with selinux enabled, but slapd is dieing as soon as it's started via /etc/init.d/slapd start. (init script reports OK; everything works fine after ...
3
votes
1answer
237 views

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 ...