OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
434 views

Setup a openldap proxy to another LDAP server on centos 6

I'm trying to get a local server to authenticate to its own openldap-server and then proxy to corporate LDAP if user is not found locally. Local users work Auth to local LDAP server works Auth to ...
0
votes
1answer
149 views

SASL Auth against LDAP

So I am running into a whirlwind of issues with my cyrus install. I am setting up a multi-domain kolab groupware solution. I am on centos 6.7 I am getting this flooding my error logs when I try to ...
1
vote
1answer
113 views

Can connect to my OpenLDAP server locally but not externally

I have a problem with my OpenLDAP server. I can't connect to it externally from client, it only works locally. My OpenLDAP server is running on a Raspberry Pi with Rasbian as the OS. When I run this ...
0
votes
1answer
112 views

Discrepancy in exporting LDIF OpenLDAP vs Apache Directory Studio

very new to the world of LDAP. I find that when I export an LDIF file in my OpenLDAP instance on Linux, running the slapcat command as such: ./slapcat -f /somewhere/slapd.conf -l backup.ldif it ...
3
votes
1answer
287 views

Integrating postfix with LDAP to eMail Users with Access to A Specific Host

I have a working openLDAP v3 installation under Ubuntu 14.04 (slapd 2.4.31-1) with phpldapadmin, sudo-ldap and other packages installed. I'm trying to integrate postfix with LDAP so I can send emails ...
0
votes
1answer
31 views

Audit logging for OpenLDAP changes

How can I produce and examine an audit trail of changes made to an OpenLDAP database, such as which user was created when, by whom, when was it edited, what was edited etc?
1
vote
1answer
190 views

Configuring HP iLO for OpenLDAP

I have been working with some new HP DL360 Gen9 server. I'm attempting to configure these for LDAP authentication against our OpenLDAP directory and not having much luck. First, all of our ...
2
votes
1answer
82 views

different ldapsearches , no output

when I use ldapsearch -LLLZZ -H ldap://centos7s.domen.lan -x I get everything out: dn: dc=domen,dc=lan objectClass: domain dc: domen o: domen.lan organization description: The Domen Company dn: ...
1
vote
1answer
358 views

A way to update the plain text password to ssha in Open ldap for 400K Users

Is there any command/extension available to update the "userPassword" attribute from a user object in LDAP server to SSHA hashed passsword from plain text? we found that users in LADP are stored in ...
0
votes
0answers
75 views

LDAP Kerberos authentication on linux

I have configured my RHEL linux machine to be authenticated against active directory without being joining it to domain, using nss-pam-ldapd pam_ldap samba-winbind openldap-devel krb5-devel. I am able ...
1
vote
1answer
138 views

What does Samba need from LDAP for a valid account?

I have inherited an OpenLDAP system, coupled to a FreeNAS and it is quite a headache to create users all the time. I just want to create a user that can access its own homes share. I have a working ...
1
vote
1answer
142 views

Adding more than one DIT

I have posted this question in dba.stackexchange.com but it is considered off-topic and people suggest that I should post it here so I am posting it here. I have an openldap server up and running on ...
0
votes
1answer
179 views

LDAP group access controls

I'm trying to set up our LDAP server so that members of the pwmadmins group can change people's passwords for them. To be more specific, we have PWM for Tomcat set up and are trying to let pwmadmins ...
0
votes
0answers
355 views

NT4 domain administrator account - how to specify in smb.conf

I'm a domain administrator for a very old NT4 based network which needs to be taken out back and shot. I had a chat with the colleague who runs the domain, and he wants to move to Samba based NT4 ...
2
votes
1answer
585 views

how can I use openssl to download my ldap cert over port 389 instead of 636 (TLS)?

I've used to use the following command to download my server SSL certs from LDAP in order to add them to tomcat/java keystores: openssl s_client -connect 10.140.136.192:636 Since LDAP SSL (port ...
0
votes
0answers
171 views

TLS for ldap and certificate

I have the httpd conf: LoadModule ldap_module modules/mod_ldap.so LoadModule ssl_module modules/mod_ssl.so LDAPTrustedGlobalCert CA_BASE64 /etc/openldap/certs/domenCA.crt <VirtualHost ...
1
vote
1answer
89 views

What files get modified by the authconfig?

I am trying to identify which files are edited with the following command, but can not find. authconfig --enablemd5 --enableshadow --enablecache --enablelocauthorize --enableldap --enableldapauth ...
0
votes
0answers
64 views

OpenLDAP back-perl “critical control unavailable in context”

I am trying to setup a perl script that is used as backend for specific data processing. The overall code works fine, but, when the LDAP client sends a search request with and additional control ...
0
votes
2answers
87 views

Where are LDAP user's home stored

I have been goolging around LDAP these days. And I'm trying to deploy a central authentication server for quite a few ubuntu servers. After all the research, one question come to my mind. Where are ...
0
votes
1answer
76 views

Authenticating users in OpenLDAP from multiple OUs

I am new to openLDAP and trying to figure out the best way to layout my DIT. The problem I'm running into is many of my applications want to use a specific baseDN in which to look in for ...
1
vote
3answers
1k views

OpenLDAP TLS Authentification

I am trying to implement TLS as per https://help.ubuntu.com/lts/serverguide/openldap-server.html When I try to modify cn=config database with this ldif file: dn: cn=config add: ...
0
votes
2answers
27 views

OpenLDAP - possible to search without specifying base?

I am having some issues with OpenLDAP and Spring security, where the latter does a search with the whole path in dn (filter), and an empty base. OpenLDAP does not like this, and the query fails. The ...
0
votes
2answers
222 views

OpenLDAP proxy : caching credentials in case Active Directory master unreachable

I'm setting up a Debian server in my company where users are managed in an Active Directory. I'd like to authenticate users with AD but I'm thinking it would be better, if feasible, to have a local ...
1
vote
1answer
32 views

kadmind error - krb5_recvauth: start_seq_get is not supported in the HDBGET keytab type

I'm trying to migrate a heimdal KDC with an OpenLDAP backend from a Debian 5.x server (heimdal 1.2.dfsg.1-2.1) to a Ubuntu 14.04 server (heimdal 1.6~git20131207+dfsg-1ubuntu1.1), and am running into ...
0
votes
0answers
32 views

How can I restrict jabberd2 to only those users in an LDAP group?

I've setup openLDAP for use with jabberd2. I have users in multiple OUs and would like to create a group (ou=groups,cn=jabber,dc=my,dc=domain) to allow only those users with membership to login on the ...
1
vote
1answer
452 views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with ...
0
votes
1answer
501 views

How to add a user containing a UID to OpenLDAP that runs on CentOS7?

Add a user user.ldif dn: uid=sampleuser,ou=people,dc=my-domain,dc=com objectClass: top objectClass: inetOrgPerson cn: sample user uid: sampleuser Problem [root@host ~]# ldapadd -x -W -D ...
2
votes
1answer
90 views

How update passwords of user's already existing in ldap? [closed]

I want to update passwords [user's already existing in ldap] of the user by importing data from /etc/passwd and /etc/shadow. How to achieve this? I will give the overview of my setup. Nodes user ...
1
vote
1answer
1k views

LDAP Client Search with SSL - CentOS7

Has anybody got SSL client authentication working with OpenLDAP (on CentOS7 - which is using moznss)? I've search for the last 2 days trying to get this to work, both with a certutil database and ...
0
votes
1answer
236 views

Delete domain using ldapdelete

According to the man page of ldapdelete it should be possible to delete entries [root@controller ~]# man ldapdelete EXAMPLE The following command: ldapdelete "cn=Delete ...
0
votes
2answers
334 views

pam_ldap user password changes using rootbinddn on Debian Jessie

When configuring pam_ldap on Debian Jessie, end user password changes are utilizing the rootbinddn, circumventing OpenLDAP's ppolicy overlay. This is allowing end users to change their passwords ...
0
votes
1answer
18 views

OpenLDAP doesn't return DN

our OpenLDAP installation does not return DN attribute in answers to queries. It is listed (and contains correct value) on the "Internal Attributes" page in phpldapadmin, but doesn't appear when I do ...
0
votes
1answer
77 views

how to create two dits in rts openldap server

I have created a base database with like this olcDatabase={0}config.ldif # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. # CRC32 5ebe5cbf dn: olcDatabase={0}config objectClass: ...
1
vote
1answer
812 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
4
votes
0answers
275 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
0
votes
0answers
285 views

OS X management - binding to OpenLDAP server

As my small company starts to realise the need to manage things more efficiently, I've been working on centralising management of our OS X workstations. Our overall environment consists of Linux and ...
1
vote
1answer
64 views

ACL - Subtree Admin should be able to modify password as well as the users themselves

dn: olcDatabase={1}hdb,cn=config objectclass: olcDatabaseConfig objectclass: olcHdbConfig olcaccess: {0}to dn.subtree="ou=subtree,dc=domain,dc=tld" by self write by dn="cn=subadmin,dc=domain,dc=tld" ...
0
votes
0answers
33 views

Gnome user picture from LDAP

Is there any way to load user pictures/avatars for Gnome (these are displayed on login screen) from OpenLDAP? I'm using Debian 6 and 8 for clients and OpenLDAP server, also using GOsa for account ...
0
votes
1answer
42 views

ACL (openldap2.4) for subtree won't work for specific group

Here's a sample ldif of my implemented ACL: dn: olcDatabase={-1}frontend,cn=config objectclass: olcDatabaseConfig objectclass: olcFrontendConfig olcaccess: {0}to ...
0
votes
1answer
46 views

Weird authentication error from Active Directory Win 2008R2

I am trying to do a ldap query from a OpenBSD client to windows 2008R2 active directory and I am getting this error,"49: Invalid credentials". I don't understand why if I tried the same username and ...
0
votes
1answer
98 views

OpenLdap error: Your attempt to add uidNumber (2276) to <cn …> is NOT allowed. That attribute/value belongs to another entry

I'm using OpenLDAP. The management interface is phpLDAPadmin. Whilst this has made things easy, it also means I've not been exposed to the internals. There is an existing entry using the uidNumber ...
3
votes
0answers
56 views

users in openLDAP Groups on Windows Server not gaining access to share

I have openldap and samba PDC setup. My windows server is a member of the samba Domain. I have a group created with users. I can see the group on the windows 2008 server, however when I add this group ...
0
votes
0answers
185 views

500 Error when trying to access my site with LDAP authentication

SOLVED Well I solved this problem. I configure my apache error log to debug level, and this way I can see that the error was my DN syntax (you can see it on error lines below) Then I go to check the ...
1
vote
1answer
942 views

what does the ldapadd error: "additional info: objectClass: value #3 invalid per syntax mean?

I have the ldif dn: olcOverlay=ppolicy,olcDatabase={1}hdb,cn=config objectClass: top objectClass: olcConfig objectClass: olcOverlayConfig objectClass: olcPPolicyConfig olcOverlay: ppolicy ...
3
votes
1answer
375 views

LDAP authentication fails

I try to set up an LDAP directory that will allow me to authenticate Debian users. Once the configuration of the LDAP server and PAM files is done, the authentication fails. I think the client doesn't ...
2
votes
1answer
341 views

LDAP authentication - avoid duplicate uidNumber

I have just successfully configured OpenLDAP Users authentication in a single CentOS6 box, based on SSSD. Took some time and many trials, but it's working. Now, I want to start adding users. I'm ...
1
vote
2answers
397 views

What might be causing LDAP to refuse connections from some but not all sources? (not firewall)

I'm migrating servers to new infrastructure and have to set up LDAP again. It's not being used to access the server, rather as a repository of users from our website to be accessed by our BI ...
2
votes
1answer
92 views

SSH authentication based on existing OpenVPN tunnel

I have a single CentOS server, and several Windows clients that should connect to it, from remote. I've successfully setup OpenVPN (with Public Keys), with which the clients connect to the server; and ...
1
vote
2answers
256 views

LDAP syncrepl with kerberos authentication

I'm trying to set up a replication server for LDAP using syncrepl. I would like to use Kerberos to authenticate the consumer, because we have it set up, and it seems more secure. The database ...
0
votes
1answer
64 views

OpenLDAP will not start - Starting OpenLDAP: slapdrm: cannot remove `/var/lib/ldap/alock'

Hope someone can help me out here. I forgot the OpenLDAP admin password on a debian server and in the process, I specified the password in the slapd config file as follows: olcRootPW: ...