OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
2answers
298 views

Issues with LDAP backend in OpenLDAP

Good Morning; After working on setting up an LDAP proxy server to replicate LDAP data, I keep getting the following message: 52a0b5ca send_ldap_result: conn=-1 op=0 p=3 52a0b5ca ...
0
votes
2answers
260 views

starting Standalone LDAP Daemon, slapd

I am following THIS guide to install an ldap server. At step 9 i use: /usr/local/libexec/slapd instead of: su root -c /usr/local/libexec/slapd since i dont have access to su I get this ...
2
votes
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
0
votes
1answer
45 views

DNS Portability with regards to LDAP/Kerberos

How portable is a DNS server when it comes to LDAP, especially Kerberos which I am using for authentication? Meaning, how much do I have to change to use the same LDAP server with 2 different DNS ...
0
votes
0answers
158 views

OpenLdap- make test fails

I am trying to configure and install an ldap server following this guide. I am stuck on step 6, make test. it fails on the first test with the following message: cd tests; make test make[1]: Entering ...
1
vote
2answers
391 views

openldap cacerts directory symbolic link to /etc/pki/tls/certs - Yes/No? Why?

Every single article/how-to/blog on openldap talks about putting the ldap cert for ldaps in the /etc/openldap/cacerts directory. I am wondering why not just put the cert(s) in /etc/pki/tls/certs and ...
1
vote
1answer
4k views

Unknown LDAP cn=config admin password

when I installed openldap I was asked to create a password for an admin user but now i realize there's another admin user for cn=config whose password i don't know. Does anyone know how should i ...
1
vote
0answers
41 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
0
votes
1answer
2k views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
0
votes
1answer
2k views

How to use iRedMail's LDAP database for user authentication?

I have a few servers set up and I'd like to centralize access for users using LDAP. I have my primary server that is hosting email using iRedMail, and there already happens to be an LDAP database that ...
3
votes
2answers
602 views

OpenDirectory/LDAP Query Syntax to find all users in a Group for GADS

I would like to construct an LDAP query to find all users that are part of the "Google Apps Users" group (short name: googleappsusers) on my OS X 10.9 Server. When I run the following query in Google ...
0
votes
1answer
1k views

OpenLdap: Why slapd tell me there's no DB_CONFIG when there is one

When I run slapcat or restart slapd on Debian 6, OpenLdap 2.4.23-7.32.4.23-7.3, I see this warning: hdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (14). Expect poor ...
2
votes
1answer
587 views

Automatic LDAP login to Gitlab

I've Apache 2.2 and Gitlab 6 running. After installing OpenLDAP on Debian Wheezy and setting up Gitlab I can login to Gitlab with LDAP credentials. But I wonder if there is a way to provide LDAP login ...
0
votes
1answer
35 views

OpenLDAP recover data without config file

We are using OpenLDAP as an LDAP server to test our software with LDAP search support. Due to an accident our slapd.conf file was deleted. The person who configured the LDAP server left the ...
1
vote
1answer
557 views

rsyslog forward all except ldap

I have Centos 6 servers running openLDAP. In the rsyslog.conf, I forward the logs to my central server with this line: *.* @10.10.10.10:514 openldap seems incredibly chatty. I have 3 servers in ...
0
votes
2answers
519 views

OSX 10.7 Directory Utility - Editing OpenLDAP

I am attempting to get Macs, running os 10.7.5 Lion, to authenticate using OpenLDAP running on Ubuntu 12.0.4 LTS. One of the things that I would love to be able to do is to use Apple's lovely ...
1
vote
1answer
729 views

Write hash password to LDAP when creating a new user

I am working on a project with a central user database system. One of the requirements of the system is that there should be only one set of users for all the application. FreeRADIUS and Samba are two ...
4
votes
1answer
314 views

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 ...
0
votes
1answer
101 views

Change hashing password algorith in Jasig CAS

I configurated my Jasig CAS to authenticate user from LDAP. Now, I would to change my hashing password algorith. Where, in CAS configuration, have I to configure it? I use Jasig CAS 3.5.2 and ...
0
votes
1answer
285 views

disable plaintext password in ldap

I have a openldap server v3 that is storing passwords in plain text, is there anyway by which we can change the password to be stored in SSHA format by default. I use Apache DS to login to the ...
0
votes
1answer
50 views

Import TLS certificate tu use LDAPS on client machine

I installed OpenLDAP server and I configurated TLS on the same machine (CentosOS 5) . Now I would to use LDAPS from an other machine: How can I import the generated certificate? I used this to enable ...
0
votes
2answers
280 views

Liferay and export LDAP account

I have this problem: I have enabled Liferay to import and export users from/to OpenLDAP server. When I create a user in Liferay I obtain this page: So, I have create a new user and Liferay has ...
1
vote
0answers
136 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
1answer
4k views

When Tried to Do ldapadd got this error ldap_add: No such object (32)

I have Following Entries in my slapd.conf ####################################################################### # ldbm and/or bdb database definitions ...
1
vote
1answer
528 views

How do you enable the storing of GPG / PGP keys in OpenLDAP

I've searched high and low trying to find a method that allows me to store GPG keys for existing users in an OpenLDAP server. The only relevant how-to I've found is this. However, I'm unable to get ...
1
vote
2answers
1k views

Can't query AD using Kerberos from Linux host

ldapsearch -H <URL> -b <BASE> -s sub -D <USER> -x -w <PW> works fine kinit <USER>@<REALM> ldapsearch -H <URL> -b <BASE> -s sub fails with: text: ...
0
votes
1answer
366 views

OpenLDAP: recommended way to add a new server to a replicated multi-master setup

I have previously set up two servers with multi-master replication, using the cn=config configuration format (I think I've seen it referred to as 'OLC'?). It was a process similar to this (although ...
0
votes
0answers
69 views

How to enable TLS on OpenLDAP

I use CentosOS 5. I have a problem to enable TLS (or ssl) on OpenLDAP server. I followed this tutorial... so: I generate the cerificates; I setted the path in sladp.conf TLSCertificateFile ...
0
votes
1answer
4k views

How can I get FreeNAS to work with LDAP authentication?

I'm trying to set up a FreeNAS 9.1.1 server with CIFS shares with LDAP authentication. I've set up an OpenLDAP server, populated it with smbldap-populate, added a user account for myself and ...
0
votes
1answer
428 views

OpenLdap ACL Admin Group rights

Hi I have been trying to achieve Admin and operator level ACL to no avail. So far I've got access to attrs=userPassword,shadowLastChange by self write by anonymous auth by ...
5
votes
1answer
5k views

How to correctly ldapmodify replace olcAccess lines?

This is a part from olcDatabase={1}hdb.ldif olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=somesite,dc=com" write by * none olcAccess: ...
3
votes
1answer
3k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
0
votes
1answer
459 views

PAM: auth: pam_unix(dovecot:auth): authentication failure;

We have opnldap setup on our ubuntu server, and were getting this message for a user: auth: pam_unix(dovecot:account): account has expired (account expired) Sep 3 19:05:03 auth: ...
1
vote
2answers
186 views

Managing user and their credentials in kerberos and openldap system

I am learning to use openldap as backend database for kerberos credentials. It is good that all the programs are working with single sign on. The problem is - I can manage user from kadmin command ...
-1
votes
1answer
307 views

What are the dependencies of sssd/nscd to function?

What are the dependencies of sssd to function as an LDAP-client? What are the dependencies of nscd to function as an LDAP-client? Does sssd need openldap to function as an LDAP-client? Does nscd?
1
vote
0answers
157 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
3
votes
1answer
509 views

Rename base DN in OpenLDAP

I currently have an LDAP directory (OpenLDAP), which does authentication for a bunch of services running across a number of servers. Let's say the base DN is dc=oldcompany,dc=com. I'd now like to ...
0
votes
1answer
199 views

TOLVEN installation: Test Database and LDAP Connections After ConfigPhase1

I am trying to install tolven, and following the manual http://wiki.tolven.org/index.php/Installation_Guide My linux system info is as follows: root@localhost:/> cat /etc/issue **CentOS release ...
3
votes
1answer
263 views

inotify in bash script doesn't work with ldapadd command

I have written a bash script which detects if a .ldif file has been written into a directory and if written, executes an ldapadd command and then deletes that file. The scripts is as follows: ...
10
votes
1answer
6k views

Why does this ldapadd command quit with an “Invalid syntax” error?

I'm very new to openldap but extremely well versed in the linux/unix environment. I'm trying to setup my very first test openldap environment using the guide here. I've also read most of the admin ...
1
vote
2answers
97 views

Getting the LDAP password from the LDAP Directory

First up, I know this question's got the potential to be downvoted and closed, nonetheless I think I will go ahead and ask it all the same because our issue is genuine enough. We have a mail server ...
1
vote
0answers
89 views

OpenLDAP 2.4 and Mac OS X Local Directory

OS: Centos 6.4 OpenLDAP: 2.4 Mac: 10.8.3 through 10.8.4 I have an OpenLDAP server and I'm able to have users authenticate, however, for some reason even though I've changed the Mappings of ...
0
votes
1answer
640 views

LDAP userPassword only works with plaintext

I have setup openLDAP server on an ubuntu machine. I am trying to test user authentication, but am running into a problem. If, in ldap, the userPassword contains a plaintext password, authentication ...
0
votes
2answers
552 views

Who should I run slapindex as? Both root and openldap users seem unadvisable

I am following these instructions to install OpenLDAP on Debian 6.0. The instructions tell me to run slapindex as root, but it sounds like Debian does not like the idea: WARNING! Runnig as root! ...
0
votes
1answer
837 views

“getent passwd” enumerates users, “su <username>” fails

I have an LDAP server with two BDB backends. The user accounts are split between the two backends. Backend A has a referral object to Backend B. I have tried to setup LDAP client authentication on ...
0
votes
1answer
84 views

Users seeing all other LDAP users on RHEL default behavior?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent ...
2
votes
1answer
195 views

OpenLDAP ACL's using sets

So, I am attempting to write some LDAP rules that will allow certain people the ability to write some subtrees. Let's say we have this user: dn: uid=minion1,o=mycompany,ou=cust,dc=some,dc=domain ...
1
vote
1answer
459 views

Sync between two Mail Servers

I have 2 mail servers of the same configuration which is as follows: OpenLDAP (for authntication of users) Postfix Cyrus-imapd SOGo(groupware) One of them (Let's say X) is in production and is the ...
4
votes
1answer
140 views

systemPossSuperiors - why does AD have it, but not openldap

Having used openldap and now getting to know MS active directory (AD), I realize that in AD there is an attribute called "systemPossSuperiors", which defines which objects are allowed as parent ...
0
votes
1answer
90 views

OpenLDAP Windows and sssd with multiple groups Suse

I have a OpenLDAP server (windows version) installed with user and groups correctly configured. Most of the users belongs to differents groups. I have a problem with the sssd configuration to access ...