OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

2
votes
0answers
1k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
2
votes
0answers
117 views

added apple.schema to slapd.conf but Workgroup Manager still doesn't work

I've included apple.schema, apple_auxillary.schema, and samba.schema in the slapd.conf file. Rebooted the slapd service with no errors. When I try to connect to the OpenLDAP server with Workgroup ...
2
votes
1answer
1k views

Configure Freeradius to check a connecting user against multiple LDAP groups

I'm setting up a Cisco ASA as a client vpn server. The appliance is relying on freeradius to authenticate the users. Freeradius has in turn been configured to query OpenLDAP. The modules/ldap file ...
2
votes
1answer
204 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
2
votes
1answer
96 views

openldap search acl

I'm trying to write an access control for OpenLDAP to allow a user to search with a certain base dn, but only get results back from certain sub dn's. I've played with lots of different rules but cant ...
2
votes
2answers
277 views

OpenLdap Password policy overlays

I implemented the password policy overlay in OpenLDAP 2.4.23. I am also using check_password.so for the passwordCheckModule. Its working fine for the single user but the thing is that ...
2
votes
0answers
687 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
2
votes
0answers
110 views

samba Ldap password restriction

I'm trying to change the password for Ldap users using Samba. i'm using smbldap-tools-0.9.6 . I use the command smbldap-passwd in terminal. I can able to change the password. But i want to password ...
2
votes
1answer
151 views

OpenLdap configuration

Simple enough question; is there a way you can configuare your ldap server so it only accepts kerberos authentication and rejects any other type. I'm almost 100% certain this can be done, i just do ...
2
votes
1answer
1k views

How do I use Openfire with OpenLDAP and ldap.clientSideSorting?

The system log on my Openfire + OpenLDAP installation is getting flooded with this message: slap_global_control: unrecognized control: 1.2.840.113556.1.4.473 This means that Openfire wants OpenLDAP ...
2
votes
2answers
137 views

OpenLDAP IP socket backend?

I see that OpenLDAP has a backend for Unix sockets, but can it be used with IP sockets? or does an IP-socket backend exists?
1
vote
3answers
615 views

Which LDAP on Linux

There are some packages and a lot of people use OpenLDAP but I also read that there are a lot of problems with it so I'm a bit confused. I have red hat and I was wondering what the best solution for ...
1
vote
4answers
3k views

How do I modify the value of an attribute with OpenLDAP?

We have installed a mail server which comes with an OpenLDAP schema and some additional attributes. One of the attributes controls which users have administration rights on the calendar and public ...
1
vote
4answers
3k views

LDAP: attribute 'givenName' is not allowed

OK, so I am learning and configuring openLDAP for the first time based partly on this tutorial: http://www.rjsystems.nl/en/2100-d6-openldap-provider.php I am trying to add a sample user, but I think ...
1
vote
1answer
2k views

OpenLDAP ACL to allow users to change their password

What ACL should be added slapd.conf to allow users to change their password. We are now having the default ACL allowing only rootdn the rights to modify while allowing reading by everyone including ...
1
vote
2answers
320 views

Is there any advantage to creating a subdomain for my LDAP server?

Having just started using OpenLDAP to authenticate users across web apps, I'm intrigued by a pattern I'm seeing in the documentation: Most install/config guides seem to (implicitly) recommend running ...
1
vote
2answers
1k views

ls -l freezes terminal locally and remotely

I've been reading other SF threads regarding ls not returning results or freezing and stalling terminal sessions and it appears they usually the fault of network problems. My problem however, occurs ...
1
vote
3answers
935 views

Multiple login names for a single user in linux using LDAP server authentication

There are some 30 systems (standalone PCs) in my lab and nearly 200 students who will be using it. Each system has an account called USER whose password is 123456 which is known to those 200 people. ...
1
vote
1answer
5k views

ldap_modify: Insufficient access (50)

I am running an OpenLDAP 2.4 server that uses the SSL service for communication. It works for lookups. I am trying to add mirror mode replication. So this is the command that I'm executing: ...
1
vote
3answers
929 views

Cannot add custom attributes in OpenLDAP

I'd like to add custom attributes in OpenLDAP but I maybe do not understand the concept. What I've done was: I created the custom.schema attributetype ( 1.3.6.1.4.1.4203.666.100.122 NAME ( ...
1
vote
2answers
319 views

OpenLDAP won't start and won't log why

Recently needed to restart OpenLDAP on one of our servers. When I restart the service, the command prompt just sits there waiting for something. I never get the [ OK ]. If I CTRL+C out of it, it says ...
1
vote
2answers
121 views

Commonly used OID for Linux Servers

I want to extend the schema for my ApacheDS (OpenLDAP) server to track Virtual Machine info (Operating System, Memory, Disk Space, Processor Peak, etc.) but I don't know what OID to use, if there even ...
1
vote
3answers
6k views

OpenLDAP with ldaps support on Debian Lenny

somehow I am unable to configure slapd to enable ldaps support on Debian Lenny. It looks like OpenLDAP is compiled with GnuTLS instead of OpenSSL which could be part of the problem. I've added the ...
1
vote
1answer
871 views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ...
1
vote
2answers
2k views

How to read a Berkeley DB log file for slapd?

I am running OpenLDAP's slapd on Fedora 14, and I see that in the directory for the database, there is a log.0000000001 file. I would like to be able to read this file, as I am interested in recent ...
1
vote
3answers
508 views

Adding/modifying users to OPENLDAP?

Is it recommended to add users/modify properties of users to OpenLDAP after stopping the service ? I have been facing issues on adding users when the OpenLDAP server is running. I am using scripts ...
1
vote
3answers
334 views

LDAP users as OU

i'm facing a strange LDAP configuration. Some admin, just created users as OU in OpenLDAP. To do it, the admin, changed some attributes in the OU like posixAccount, inetOrgPerson, organizationalPerson ...
1
vote
2answers
5k views

Open LDAP Authentication - How to verify userPassword without bind?

What I am doing... Trying to implement single-sign-on for our organization’s all machines, blogs, wiki’s, CRM, HRM, project management tools, SVN, etc, etc... We have OpenLDAP installed and ...
1
vote
1answer
24 views

Can Active Directory issue a LDAP redirect to another LDAP server

I have several independent LDAP servers, controlled by different entities that allow anonymous access. I would like AD to tell an LDAP query to use a different server... like recursive DNS. Is ...
1
vote
1answer
167 views

How do you set password-hash for OpenLDAP?

I have the following version on Ubuntu 12.04: OpenLDAP: slapd (Sep 19 2013 22:49:31) $ buildd@batsu:/build/buildd/openldap-2.4.28/debian/build/servers/slapd OpenLDAP now offers SSHA as the default ...
1
vote
1answer
530 views

When Tried to Do ldapadd got this error ldap_add: No such object (32)

I have Following Entries in my slapd.conf ####################################################################### # ldbm and/or bdb database definitions ...
1
vote
2answers
117 views

Is there way to detect and track the changes made to OpenLDAP

I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc. I'm wondering is there a way to track changes made to LDAP ...
1
vote
4answers
541 views

How to add new attribute to an existing LDAP user objects

I want to add mail attribute to the existing ldap users. I think, its possible with using ldapmodify but not sure how. I have done that using phpldapadmin web GUI manually, but I have like more than ...
1
vote
1answer
650 views

nagios - Web interface: authentication through kerberos OK, what about authorization on cgi.cfg?

I have successfully installed nagios, and it provides authentication through apache2 which contacts a kerberos authentication server to authenticate users. Now, users are authenticated, but they ...
1
vote
3answers
747 views

centralized authenticaion with OpenLDAP for Red Hat Linux with slapd.conf configuration

I am currenty working on to setup a centralized authenticaion with OpenLDAP for Red Hat Linux . Objective - Setup a Centralized OpenLDAP authentication for Red Hat Linux Servers where client can ...
1
vote
2answers
263 views

SLES 11 - slapd is spamming the syslog

How do I get slapd to quiet down? Every second it's writing the same five lines to the /var/log/messages file. May 24 13:16:09 servername slapd[21299]: conn=5866 op=15204 SRCH base="" scope=0 deref=2 ...
1
vote
1answer
978 views

Account lockout using Openldap

What is the best way to implement account lockout in openldap? I have an openldap server with Ubuntu desktop client connecting to it for authentication. I want he accounts to locked out after say 5 ...
1
vote
2answers
527 views

slapd with STARTTLS only doesn't work

I'm using slapd under Debian/Squeeze and trying to configure the system to only allow TLS-encrypted connections using STARTTLS on port 389. So I've configured my /etc/default/slapd to listen on port ...
1
vote
1answer
2k views

ldapsearch against Active Directory fails authentication + search params wrong

I am using ldapsearch from OpenLDAP tools to search our corporate Active Directory for my email and phone number. This query is a test to ensure that I can authenticate against the domain so I can ...
1
vote
1answer
417 views

Can two users share a sambaSID?

I'm doing some sanity checking on an LDAP database in preparation for a version upgrade on our LDAP server, and I came upon a very few users sharing the same sambaSID attribute. I wonder if I should ...
1
vote
2answers
990 views

How to copy a LDAP entry and all the subtree on a Linux/openldap server?

I want to duplicate an LDAP subtree : my software uses ou=software,o=company,c=fr and I want to have version 2 of the software to use ou=software_v2,o=company,c=fr I tried JXplore to copy ...
1
vote
1answer
3k views

LDAP + Zimbra authentication

I'm trying to configure external LDAP authentication from my LDAP box through Zimbra. Both servers are running on CentOS. The Zimbra wiki has documentation but it's still leaving me puzzled. ...
1
vote
2answers
960 views

Unable to verify SSL certificate issuer for LDAP server

I have just setup SSL on my LDAP server by following this guide - http://www.linux.com/archive/feature/114087 I have made a self signed certificate using openSSL and set it up. When something tries ...
1
vote
1answer
3k views

Adding inetOrgPerson to account/posixAccount LDAP entries

I have a LDAP database we have been using for managing user accounts on our hosts, these entries have account and posixAccount as objectClass. Now we'd like to extend this to also use it as an adress ...
1
vote
2answers
3k views

Finding closest Domain Controller through LDAP

I am on a Unix host and am looking for a programatic way to determine the closest DC. Microsoft has an excellent article explaining how to perform the DNS lookup, and I am able to find the list of ...
1
vote
2answers
670 views

Integrate LDAP into NIS

I have the task to implement a LDAP service for the typical use cases: User authentication, storing more information on users, storing information on machines, etc. Currently, we have a working NIS ...
1
vote
2answers
2k views

LDAP pass-through authentication

I have the following situation: I have a web site that needs to authenticate users, some of these will be internal users that are stored in an active directory domain, but there will be other users ...
1
vote
2answers
68 views

Getting the LDAP password from the LDAP Directory

First up, I know this question's got the potential to be downvoted and closed, nonetheless I think I will go ahead and ask it all the same because our issue is genuine enough. We have a mail server ...
1
vote
1answer
187 views

OpenLDAP 2.4 Chain Overlay Minimal LDIF Configuration

There's almost no information about how Chain overlays are configured in OpenLDAP LDIF backend. What's the minimal configuration required?
1
vote
1answer
113 views

Working with OpenLDAP 2.4 LDIF config backend

In OpenLDAP 2.4, the configuration has been moved into an LDIF backend called cn=config. The OpenLDAP documentation says "you should never edit any of the LDIF files directly. Configuration changes ...