Tagged Questions

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
2answers
942 views

openLDAP Client Config for CentOS 6

I have been trying to get the users on the LDAP server to get authenticated over centOS 6 clients, but, the client will not accept the passwords of the LDAP users. I have Ubuntu Systems which ...
2
votes
2answers
210 views

Is there way to detect and track the changes made to OpenLDAP

I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc. I'm wondering is there a way to track changes made to LDAP ...
0
votes
1answer
109 views

LDAP showing too many users and groups on Linux clients

We are hosting LDAP on a Solaris server and using 150 Solaris clients and 50 Linux clients. Users and groups have a list of netgroups (server hostnames) that they are able to access. This means that a ...
6
votes
1answer
5k views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ...
1
vote
1answer
377 views

Error while setting up ldap replication

I'm trying to set up LDAP replication according to the directions on Ubuntu's site. I went through all the directions for setting up the provider without any trouble. But when I try to set up the ...
0
votes
1answer
371 views

VLAN and Active Directory: complementary or substitute? [closed]

I recently encountered a network design that heavily implements VLANs but does not make use of a dedicated identity and access management system such as Active Directory or OpenLDAP. And yet another ...
0
votes
3answers
464 views

Setting up OpenAM to use OpenLDAP as DataStore

I am at the moment trying to configure an OpenAM installation to use an OpenLDAP as DataStore; is it possible to do it? I have seen some tips about configuring OpenLDAP (as in this tutorial) but this ...
0
votes
1answer
31 views

Output an Entire OpenLDAP Directory

How can I retrieve the entire output of an OpenLDAP directory to which I have administrative privileges? Specifically, I need dn, objectClass, and (if exists for the object) uidNumber or gidNumber.
0
votes
1answer
896 views

phpldapadmin: login as “root” admin user with UID

I have recently installed phpldapadmin on Ubuntu 12.04 LTS Srv. In the the config.php I've modified the following parameter in order to enable simple user login: ...
2
votes
1answer
730 views

Configuring Amazon Linux authenticate to LDAP server

I was wondering if anyone had success in configuring Amazon Linux to authenticate to an LDAP server? EDIT: For more information on what I have done: I disabled anonymous access on my OpenLDAP ...
0
votes
1answer
55 views

OpenLDAP and Existing Local Users

I am configuring OpenLDAP on my Linux server, with the intention of using it with the SOGo groupware package, among other things. In general, I assume it is inadvisable to have an LDAP user with the ...
0
votes
1answer
275 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
2
votes
0answers
293 views

Openldap Mirror Mode replication failover

We have currently one master ldap server and around 400 slave servers which are partially replicated through that master.All openldap versions are same and 2.4.31 What we want is actually if master ...
2
votes
0answers
168 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
0
votes
0answers
92 views

How can I get Openindiana built in samba to use an OpenLDAP server?

I built an OpenIndiana / NAPP-IT server to use for samba home shares. Up to now I had planned to use a KVM virtual machine to run the samba/ldap stack, then connect the vm to the ZFS volume thru ...
1
vote
1answer
75 views

Unable to login applications using LDAP alias

We have several applications and we are able to integrate LDAP successfully. In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
1
vote
2answers
444 views

CentOS 5.8 - NSCD can't caching the password

I try to configure NSCD to connect ldap users to my PC. I like, that users could login offline in this PCs (online ldap users works fine). Actually, i can use the user, but when i try to introduce ...
1
vote
0answers
52 views

Restrict users to certain applications only

We are using many applications like zabbix, phabricator, AC etc. We need to integrate LDAP in all these applications. These application support LDAP but not group based authentication. Please let us ...
0
votes
0answers
169 views

Using openldap for ssh authentication

I am looking at setting up an openldap server to work as a central ssh gateway. Am I right in thinking that i need to install an openldap server, and then configure the client server to authenticate ...
1
vote
1answer
583 views

Bind DN entry missing in stash file - while initializing database for realm

I'm trying to run kerberos with ldap back-end on Centos 6.3 After creating Realm with: kdb5_ldap_util -D "cn=admin,dc=example,dc=com" create -sscope sub -sf ...
0
votes
1answer
52 views

How to configure ubuntu server with LDAP group based authentication

By installing libnss-ldap we are able to integrate an Ubuntu server with ldap (openldap). But we are unable to configure ldap group based authentication. We need to configure in such a way that user ...
0
votes
2answers
145 views

OpenLDAP: How to hide config directory from tools like JXplorer, etc

I'm trying to set up an OpenLDAP server for test and demonstration purposes - my team need to be add LDAP connectivity to our product, so we want to have an LDAP server we can authenticate against. ...
0
votes
1answer
486 views

ldapadd works, but ldapsearch doesn't (openldap)

I use just installed Debian 6 with openldap 2.4. I have CentOS box too with openldap 2.3. I make .ldif file from centOS (working configuration) box and successfully add all entries from ldif to ...
0
votes
1answer
658 views

Difference between openldap 2.3 and 2.4

There is a difference between openldap 2.3 and 2.4 - specifically with ldapmodify... If no "changetype:" line is present, the default is "add" if the -a flag is set (or if the program was invoked as ...
1
vote
2answers
2k views

Is there any bad thing happens if I change /etc/ldap/slapd.d/cn=config.ldif manually?

Since 2.3, OpenLDAP uses a configuration engine called slapd-config. They said that use it make all LDAP configuration can be changed on fly. This is the header of /etc/ldap/slapd.d/cn=config.ldif: ...
0
votes
1answer
252 views

Why all LDAP user passwords are incorrectly imported? And can't be modified?

First of all I am new to OpenLDAP setup. I have followed instructions coming from: HowToForge.com linux openldap setup #root dn: dc=localhost,dc=com dc: localhost objectClass: dcObject objectClass: ...
0
votes
2answers
283 views

chroot SFTP to another users subdirectory

I've successfully set up SFTP to chroot a user to their home directory. However, I have a case that I haven't been able to find any examples on, and the odd permissions needed for chroot make me ...
0
votes
1answer
1k views

Slaptest for slapd.conf fails due to an invalid path

I have just installed Openldap on Xubuntu. The slapd daemon is working and I can easily stop and start it. Nevertheless when I run a test for the configuration file slapd.conf as follows: slapdtest ...
0
votes
1answer
49 views

Openldap. How to add and then re-read new attribute

I have custom schema in my ldap customContact.schema with 5 attributes Now I need to add one more attribute: # localID attributetype ( 2.16.840.1.113730.3.1.36 NAME 'localID' DESC 'Local ...
0
votes
1answer
81 views

openldap authentication against a slave

I have an openldap master/slave configuration, setup as per the Ubuntu guide, on Ubuntu 12.04, running slapd 2.4.28-1.1ubuntu4.2. I have pam_ldap configured for ssh authentication, everything works ...
1
vote
1answer
2k views

ldap_modify: Other (e.g., implementation specific) error (80), <olcAccess> handler exited with 1

When modifying the Open-LDAP configuration using: dn: olcDatabase={2}hdb,cn=config changetype: modify replace: olcAccess olcAccess: {0}to * by ...
1
vote
1answer
2k views

Why can't I create my first object in my Open-LDAP server?

I'm trying to set up my first LDAP server that will be used to store user accounts (for things such as mail, git server and a few other things). I managed to install the server, but I'm stuck when I ...
1
vote
1answer
3k views

Open LDAP and ActiveDirectory synchronization

I have been searching on google for a while to find out the best way to synchronize the user database between OpenLDAP and an ActiveDirectory, but with not a clear results ! What i want to achieve ...
0
votes
1answer
985 views

Switching OpenLDAP from cn=config to slapd.conf

In a fresh OpenLDAP Install on debian 6 (or ubuntu 12.04) I would like to switch from modern cn=config style of configuration to traditional slapd.conf configuration. I have heard that it is possible, ...
0
votes
0answers
38 views

What does rc -2 mean in OpenLDAP syncrepl?

I am having an issue with syncRepl. I keep getting an rc -2 during syncrepl for replication. What does this mean?
0
votes
0answers
67 views

Combining CA's into a single PEM

I have been wondering if it is possible to combine two CA certificates into a single .pem, then use that pem to allow clients with certs signed by either CA to create TLS connections with an LDAP ...
1
vote
0answers
192 views

CVS authentication with openldap

I have migrated the CVS from Windows to Linux and imported the repo's as needed. Now I have to setup ldap authentication ( Remote Server/Linux/Open LDAP ) for CVS. As per other blogs, it says we have ...
1
vote
1answer
559 views

Restricting LDAP users from authenticating without a valid shell

What I'm trying to accomplish is if I changed the user's attributes in LDAP to have no shell; for example: /etc/noshell, I do not want the user to ssh successfully. I have changed the attribute of one ...
0
votes
1answer
365 views

opensuse 12.2: yast misconfiguration ldap server

i have a very simple question. I used Yast to configure openldap. It worked. Then I had to change the certificates for SSL/TSL support. I did this trough Yast. However, I gave the path towards the ...
0
votes
1answer
387 views

Strange issue with LDAP server

I've LDAP production server running over last 1 years without any issues, I'm suddently getting password fail error while authenticating via pam_ldap.so its show following error message, I'm able to ...
0
votes
1answer
321 views

Group policy and OpenLDAP

Is there any sort of group policy mechanic for OpenLDAP? And just like the GUI tool OpenLDAP is there a version of the GPMC for OpenLDAP's group policy?
1
vote
0answers
328 views

LDAP secondary group working for only some users

On an Ubuntu box, I'm having issues with LDAP secondary groups for one user, sabnzbd. The user should be a part of the media group. daniel@server:~$ id sabnzbd uid=4996(sabnzbd) gid=4996(sabnzbd) ...
0
votes
1answer
2k views

openldap and digest-md5: no secret in database

I'm trying to configure openldap 2.4.33 (built from source on OS X 10.8) to support digest-md5 authentication, and not succeeding. I'm unable to authenticate, getting an error no secret in database, ...
2
votes
1answer
477 views

Mapping User and Group Ownership through LDAP

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of ...
0
votes
1answer
128 views

ubuntu lock screen unlock with old confidential ldap password [closed]

i have ldap server and ubuntu clients ,as they login is working perfectly and no problems at all , but when user change his password he also can login with the new password but he can't login with the ...
0
votes
1answer
1k views

ubuntu 12.10 openldap issue Invalid DN syntax (34)"

I'm following: https://help.ubuntu.com/12.10/serverguide/openldap-server.html and when I get to the part that says ldapsearch -x -LLL -H ldap:/// -b dc=example,dc=com dn I get: Invalid DN ...
1
vote
2answers
430 views

ldapsearch -ZZ hanging

I have just setup Openldap using the following instructions http://www.computerglitch.net/bin/texts/CentOS6_LDAP.php The normal connection returns what is expected but the tls test just hangs. Any ...
0
votes
1answer
1k views

OpenLDAP Administrative limit exeeded

I know there are limits in LDAP queries, therefore I setup a user without limits. But even so I'm facing "Administrative Limit exceeded" error. I include below an extract of the database ...
1
vote
1answer
2k views

Can't write to OpenLDAP: “shadow context; no update referral”

I just set up an OpenLDAP server (v2.4.23) and loaded some data. I can browse and edit via Apache Directory Studio, but not deletions all fail. For example, I tried to delete a list of DNs from a ...
0
votes
1answer
1k views

OpenLDAP: pwdChangedTime attribute isn't created after changing the password?

I'm going to integrate the check_mk's Multisite with OpenLDAP. After configuring the LDAP connector, I get the following error when opening the "Users & Contacts" page: Error executing sync hook ...