OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

2
votes
1answer
768 views

Computer not showing up in network (Samba and LDAP configuration)

For some reason I have not been able to pinpoint yet, going to Network on my Windows 7 computer, the Samba server does not show up. I have configured Samba with LDAP and managed to successfully ...
2
votes
1answer
1k views

Using OpenLDAP to proxy to an Novell eDirectory LDAP Server

I'm currently trying to use OpenLDAP as a proxy to a Novell LDAP server and running in to a few problems. It seems that only certain objects are coming through and there's almost no hierarchy. (I can ...
2
votes
1answer
2k views

Ubuntu 10.04 (Lucid) OpenLDAP invalid credentials issue

This won't be a question, but a solution to an infuriating problem on Ubuntu 10.04. If you tried to deploy an LDAP server using this distro following the tutorials below, you'll be on serious trouble. ...
2
votes
2answers
718 views

Snow Leopard Hangs when Using OpenLDAP on Linux for Authentication

We have a new iMac on Snow Leopard authenticating against an OpenLDAP directory. Homes are on (automounted) NFSv3 (Linux, kernel-server). NFS seems to work pretty well (if a bit slow, but we don't ...
2
votes
2answers
3k views

OpenLDAP SSL error

I did setup an OpenLDAP server with PAM authentication against it. In clear text, it works very well but when I try to add SSL it always faill. I'm following that guide to get it working : ...
2
votes
0answers
32 views

Single Sign On Solution

I'm trying to come up with a single sign on solution for a small team. I've got four applications: dokuwiki redmine svn owncloud All of these I was told by folks support LDAP, and that it was ...
2
votes
0answers
42 views

OpenLDAP TLS - test results in Bad file descriptor

I have set up an openldap server including tls on ubuntu 14.04 following this guide. While testing the connection, I get results that I can not find an explanation for. ldapsearch -xLLL -Z -W -D ...
2
votes
0answers
17 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
2
votes
1answer
47 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
2
votes
0answers
222 views

OpenLDAP with MySQL works but need schema advice

So, I have downloaded the latest source of OpenLDAP, compiled with —-enable-sql, messed around with the slapd.conf, configured the odbc files, added the tables to my current DB, spend a week debugging ...
2
votes
1answer
599 views

Not able to add memberOf overlay openldap 2.3.9

I am currently working on integrating LDAP authentication into a system and I would like to restrict access based on LDAP group. The only way to do this is via a search filter and therefore I believe ...
2
votes
1answer
93 views

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the ...
2
votes
2answers
371 views

<suffix> invalid DN 21 (Invalid syntax) on Converting slapd.conf OpenLdap

Actually i want to configure ldap as master-slave replication using syncrepl method, On any reference which i found,I'm running on Centos 6 machine and openldap v2.4.23. I following step by step on ...
2
votes
0answers
249 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
2
votes
0answers
104 views

Is there an OpenLDAP web frontend that allows users to edit custom fields? [closed]

We are currently using a custom perl based frontend for our OpenLDAP user portal, and it's proving tricky to port over to a new server. I've setup phpLDAPadmin on the new server, but it doesn't appear ...
2
votes
1answer
934 views

Configuring Amazon Linux authenticate to LDAP server

I was wondering if anyone had success in configuring Amazon Linux to authenticate to an LDAP server? EDIT: For more information on what I have done: I disabled anonymous access on my OpenLDAP ...
2
votes
0answers
379 views

Openldap Mirror Mode replication failover

We have currently one master ldap server and around 400 slave servers which are partially replicated through that master.All openldap versions are same and 2.4.31 What we want is actually if master ...
2
votes
0answers
191 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
2
votes
1answer
555 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
2
votes
1answer
2k views

ldap_bind: Invalid credentials (49) using openLDAP

I understand this error has been asked quite a few times on Server Fault and I have done some extensive googling, however, I can not, for the life of me, figure out exactly why I am unable to ...
2
votes
0answers
54 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
2
votes
0answers
364 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
156 views

added apple.schema to slapd.conf but Workgroup Manager still doesn't work

I've included apple.schema, apple_auxillary.schema, and samba.schema in the slapd.conf file. Rebooted the slapd service with no errors. When I try to connect to the OpenLDAP server with Workgroup ...
2
votes
0answers
689 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
2
votes
1answer
247 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
2
votes
1answer
114 views

openldap search acl

I'm trying to write an access control for OpenLDAP to allow a user to search with a certain base dn, but only get results back from certain sub dn's. I've played with lots of different rules but cant ...
2
votes
2answers
333 views

OpenLdap Password policy overlays

I implemented the password policy overlay in OpenLDAP 2.4.23. I am also using check_password.so for the passwordCheckModule. Its working fine for the single user but the thing is that ...
2
votes
0answers
877 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
2
votes
0answers
117 views

samba Ldap password restriction

I'm trying to change the password for Ldap users using Samba. i'm using smbldap-tools-0.9.6 . I use the command smbldap-passwd in terminal. I can able to change the password. But i want to password ...
2
votes
1answer
164 views

OpenLdap configuration

Simple enough question; is there a way you can configuare your ldap server so it only accepts kerberos authentication and rejects any other type. I'm almost 100% certain this can be done, i just do ...
2
votes
1answer
2k views

How do I use Openfire with OpenLDAP and ldap.clientSideSorting?

The system log on my Openfire + OpenLDAP installation is getting flooded with this message: slap_global_control: unrecognized control: 1.2.840.113556.1.4.473 This means that Openfire wants OpenLDAP ...
2
votes
2answers
149 views

OpenLDAP IP socket backend?

I see that OpenLDAP has a backend for Unix sockets, but can it be used with IP sockets? or does an IP-socket backend exists?
1
vote
3answers
637 views

Which LDAP on Linux

There are some packages and a lot of people use OpenLDAP but I also read that there are a lot of problems with it so I'm a bit confused. I have red hat and I was wondering what the best solution for ...
1
vote
4answers
4k views

How do I modify the value of an attribute with OpenLDAP?

We have installed a mail server which comes with an OpenLDAP schema and some additional attributes. One of the attributes controls which users have administration rights on the calendar and public ...
1
vote
2answers
3k views

Is there any bad thing happens if I change /etc/ldap/slapd.d/cn=config.ldif manually?

Since 2.3, OpenLDAP uses a configuration engine called slapd-config. They said that use it make all LDAP configuration can be changed on fly. This is the header of /etc/ldap/slapd.d/cn=config.ldif: ...
1
vote
3answers
2k views

Cannot add custom attributes in OpenLDAP

I'd like to add custom attributes in OpenLDAP but I maybe do not understand the concept. What I've done was: I created the custom.schema attributetype ( 1.3.6.1.4.1.4203.666.100.122 NAME ( ...
1
vote
1answer
3k views

OpenLDAP ACL to allow users to change their password

What ACL should be added slapd.conf to allow users to change their password. We are now having the default ACL allowing only rootdn the rights to modify while allowing reading by everyone including ...
1
vote
3answers
521 views

Adding/modifying users to OPENLDAP?

Is it recommended to add users/modify properties of users to OpenLDAP after stopping the service ? I have been facing issues on adding users when the OpenLDAP server is running. I am using scripts ...
1
vote
2answers
445 views

Is there any advantage to creating a subdomain for my LDAP server?

Having just started using OpenLDAP to authenticate users across web apps, I'm intrigued by a pattern I'm seeing in the documentation: Most install/config guides seem to (implicitly) recommend running ...
1
vote
2answers
1k views

ls -l freezes terminal locally and remotely

I've been reading other SF threads regarding ls not returning results or freezing and stalling terminal sessions and it appears they usually the fault of network problems. My problem however, occurs ...
1
vote
3answers
340 views

LDAP users as OU

i'm facing a strange LDAP configuration. Some admin, just created users as OU in OpenLDAP. To do it, the admin, changed some attributes in the OU like posixAccount, inetOrgPerson, organizationalPerson ...
1
vote
3answers
1k views

Multiple login names for a single user in linux using LDAP server authentication

There are some 30 systems (standalone PCs) in my lab and nearly 200 students who will be using it. Each system has an account called USER whose password is 123456 which is known to those 200 people. ...
1
vote
2answers
4k views

How does LDAP handle supplementary/secondary user groups?

I've seen similar questions related to configuring Apache to authenticate via LDAP, but this basic question still has me confused. In my setup, I created users who all have the same primary GID, then ...
1
vote
2answers
738 views

OpenLDAP won't start and won't log why

Recently needed to restart OpenLDAP on one of our servers. When I restart the service, the command prompt just sits there waiting for something. I never get the [ OK ]. If I CTRL+C out of it, it says ...
1
vote
2answers
125 views

Commonly used OID for Linux Servers

I want to extend the schema for my ApacheDS (OpenLDAP) server to track Virtual Machine info (Operating System, Memory, Disk Space, Processor Peak, etc.) but I don't know what OID to use, if there even ...
1
vote
3answers
6k views

OpenLDAP with ldaps support on Debian Lenny

somehow I am unable to configure slapd to enable ldaps support on Debian Lenny. It looks like OpenLDAP is compiled with GnuTLS instead of OpenSSL which could be part of the problem. I've added the ...
1
vote
3answers
183 views

Is it possible to have non-replicated data on an LDAP consumer?

I've read all the available documentation, the Mastering OpenLDAP book, and like a zillion mail-list posts but I haven't found a way to make such scenario possible. I see several use cases for this ...
1
vote
4answers
2k views

How to add new attribute to an existing LDAP user objects

I want to add mail attribute to the existing ldap users. I think, its possible with using ldapmodify but not sure how. I have done that using phpldapadmin web GUI manually, but I have like more than ...
1
vote
2answers
3k views

How to read a Berkeley DB log file for slapd?

I am running OpenLDAP's slapd on Fedora 14, and I see that in the directory for the database, there is a log.0000000001 file. I would like to be able to read this file, as I am interested in recent ...
1
vote
2answers
6k views

Open LDAP Authentication - How to verify userPassword without bind?

What I am doing... Trying to implement single-sign-on for our organization’s all machines, blogs, wiki’s, CRM, HRM, project management tools, SVN, etc, etc... We have OpenLDAP installed and ...