OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

2
votes
2answers
917 views

Does anyone have a valid and working example of OpenLDAP meta backend?

I have been Google'ing my fingers off and simply can not find a working example of how to merge/proxy a OpenLDAP server and windows AD server. Have anyone worked with this before? Any suggestions ...
2
votes
3answers
15k views

Installing OpenLDAP on Fedora 12: ldap_bind: Invalid credentials (49)

I've been trying to set up the OpenLDAP installed by default on Fedora 12, very unsuccessfully. My ultimate goal is to use LDAP authentication for user login and Apache, using the OpenLDAP server ...
2
votes
1answer
37 views

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all ...
2
votes
1answer
2k views

Configuring openldap multimaster replication using cn=config

We currently have a single OpenLDAP server using the cn=config backend. We'd like to add a second OpenLDAP server and configure them for multimaster replication. What do we need to do to enable ...
2
votes
1answer
5k views

LDAP object class violation: attribute ou not allowed in suffix?

I am about to set up a LDAP directory. It is used as a tool to communicate user permissions from a web application to WebDav file system access, e.g. adding a user to the web platform shall allow ...
2
votes
1answer
2k views

OpenLDAP Authentication UID vs CN issues

I'm having trouble authenticating services using uid for authentication, which I thought was the standard method for authentication on the user. So basically, my users are added in ldap like this: # ...
2
votes
1answer
964 views

How to get openldap to honor pwdReset=TRUE

We have a custom application that's using openldap (2.4.32) as a user database. Per customer requirement, I'm modifying it to use openldap's ppolicy overlay. The requirement is to force the user to ...
2
votes
1answer
480 views

OpenLDAP memberOf overlay - changing memberOf attribute name

I set up the memberOf overlay for OpenLDAP - how do I change the memberOf attribute name? I want to change it to "isMemberOf". I tried changing this attribute in the configuration ...
2
votes
1answer
605 views

Samba+LDAP: Minimal permissions for sambaLMPassword/sambaNTPassword?

What are the minimum permissions for the attributes sambaLMPassword/sambaNTPassword for the the LDAP administrator account so that Samba is just enabled to use it for authentication for ldapsam ...
2
votes
2answers
272 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
2
votes
2answers
378 views

Active Directory and OpenLDAP user database integration

I need some guidance with AD and OpenLDAP user database integration/synchronization. Here is what I am trying to do. We have Full Linux database (Ubuntu 10.4) with users on OpenLDAP and using only ...
2
votes
2answers
2k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
2
votes
3answers
4k views

LDAP Migration to new LDAP Server

I need to move my ldap server to a newer one. It is currently running on Ubuntu 7.04 server. Is there a way of backing up this server, installing a fresh openldap server on a newer Ubuntu 11.04 ...
2
votes
1answer
778 views

Computer not showing up in network (Samba and LDAP configuration)

For some reason I have not been able to pinpoint yet, going to Network on my Windows 7 computer, the Samba server does not show up. I have configured Samba with LDAP and managed to successfully ...
2
votes
1answer
1k views

Using OpenLDAP to proxy to an Novell eDirectory LDAP Server

I'm currently trying to use OpenLDAP as a proxy to a Novell LDAP server and running in to a few problems. It seems that only certain objects are coming through and there's almost no hierarchy. (I can ...
2
votes
1answer
2k views

Ubuntu 10.04 (Lucid) OpenLDAP invalid credentials issue

This won't be a question, but a solution to an infuriating problem on Ubuntu 10.04. If you tried to deploy an LDAP server using this distro following the tutorials below, you'll be on serious trouble. ...
2
votes
2answers
720 views

Snow Leopard Hangs when Using OpenLDAP on Linux for Authentication

We have a new iMac on Snow Leopard authenticating against an OpenLDAP directory. Homes are on (automounted) NFSv3 (Linux, kernel-server). NFS seems to work pretty well (if a bit slow, but we don't ...
2
votes
1answer
2k views

How do I use Openfire with OpenLDAP and ldap.clientSideSorting?

The system log on my Openfire + OpenLDAP installation is getting flooded with this message: slap_global_control: unrecognized control: 1.2.840.113556.1.4.473 This means that Openfire wants OpenLDAP ...
2
votes
2answers
3k views

OpenLDAP SSL error

I did setup an OpenLDAP server with PAM authentication against it. In clear text, it works very well but when I try to add SSL it always faill. I'm following that guide to get it working : ...
2
votes
0answers
58 views

Single Sign On Solution

I'm trying to come up with a single sign on solution for a small team. I've got four applications: dokuwiki redmine svn owncloud All of these I was told by folks support LDAP, and that it was ...
2
votes
0answers
86 views

OpenLDAP TLS - test results in Bad file descriptor

I have set up an openldap server including tls on ubuntu 14.04 following this guide. While testing the connection, I get results that I can not find an explanation for. ldapsearch -xLLL -Z -W -D ...
2
votes
0answers
20 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
2
votes
1answer
136 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
2
votes
0answers
321 views

OpenLDAP with MySQL works but need schema advice

So, I have downloaded the latest source of OpenLDAP, compiled with —-enable-sql, messed around with the slapd.conf, configured the odbc files, added the tables to my current DB, spend a week debugging ...
2
votes
1answer
778 views

Not able to add memberOf overlay openldap 2.3.9

I am currently working on integrating LDAP authentication into a system and I would like to restrict access based on LDAP group. The only way to do this is via a search filter and therefore I believe ...
2
votes
1answer
1k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
2
votes
3answers
1k views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
2
votes
1answer
114 views

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the ...
2
votes
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
2
votes
2answers
450 views

<suffix> invalid DN 21 (Invalid syntax) on Converting slapd.conf OpenLdap

Actually i want to configure ldap as master-slave replication using syncrepl method, On any reference which i found,I'm running on Centos 6 machine and openldap v2.4.23. I following step by step on ...
2
votes
0answers
276 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
2
votes
0answers
121 views

Is there an OpenLDAP web frontend that allows users to edit custom fields? [closed]

We are currently using a custom perl based frontend for our OpenLDAP user portal, and it's proving tricky to port over to a new server. I've setup phpLDAPadmin on the new server, but it doesn't appear ...
2
votes
1answer
1k views

Configuring Amazon Linux authenticate to LDAP server

I was wondering if anyone had success in configuring Amazon Linux to authenticate to an LDAP server? EDIT: For more information on what I have done: I disabled anonymous access on my OpenLDAP ...
2
votes
0answers
468 views

Openldap Mirror Mode replication failover

We have currently one master ldap server and around 400 slave servers which are partially replicated through that master.All openldap versions are same and 2.4.31 What we want is actually if master ...
2
votes
1answer
618 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
2
votes
1answer
2k views

ldap_bind: Invalid credentials (49) using openLDAP

I understand this error has been asked quite a few times on Server Fault and I have done some extensive googling, however, I can not, for the life of me, figure out exactly why I am unable to ...
2
votes
0answers
54 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
2
votes
0answers
391 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
271 views

Auto set Active Directory attributes upon new User creation

I have successfully created an OpenLDAP (CentOS 6.2) to Active Directory (Windows Server 2008 R2) connection. I can login to my CentOS using an AD user. Problem is, the AD user has to have these ...
2
votes
0answers
161 views

added apple.schema to slapd.conf but Workgroup Manager still doesn't work

I've included apple.schema, apple_auxillary.schema, and samba.schema in the slapd.conf file. Rebooted the slapd service with no errors. When I try to connect to the OpenLDAP server with Workgroup ...
2
votes
0answers
889 views

LDAP groups not always mapping, Ubuntu server 12.04

Ubuntu 12.04 server, AMD64, authentication via LDAP. I'm having trouble getting the LDAP groups to map to my user account when logging in, even though 'getent group' shows the correct set of groups ...
2
votes
0answers
717 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
2
votes
1answer
122 views

openldap search acl

I'm trying to write an access control for OpenLDAP to allow a user to search with a certain base dn, but only get results back from certain sub dn's. I've played with lots of different rules but cant ...
2
votes
2answers
354 views

OpenLdap Password policy overlays

I implemented the password policy overlay in OpenLDAP 2.4.23. I am also using check_password.so for the passwordCheckModule. Its working fine for the single user but the thing is that ...
2
votes
0answers
928 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
2
votes
0answers
119 views

samba Ldap password restriction

I'm trying to change the password for Ldap users using Samba. i'm using smbldap-tools-0.9.6 . I use the command smbldap-passwd in terminal. I can able to change the password. But i want to password ...
2
votes
1answer
167 views

OpenLdap configuration

Simple enough question; is there a way you can configuare your ldap server so it only accepts kerberos authentication and rejects any other type. I'm almost 100% certain this can be done, i just do ...
2
votes
2answers
151 views

OpenLDAP IP socket backend?

I see that OpenLDAP has a backend for Unix sockets, but can it be used with IP sockets? or does an IP-socket backend exists?
1
vote
3answers
644 views

Which LDAP on Linux

There are some packages and a lot of people use OpenLDAP but I also read that there are a lot of problems with it so I'm a bit confused. I have red hat and I was wondering what the best solution for ...
1
vote
4answers
4k views

How do I modify the value of an attribute with OpenLDAP?

We have installed a mail server which comes with an OpenLDAP schema and some additional attributes. One of the attributes controls which users have administration rights on the calendar and public ...