OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
212 views

Insufficient access to edit OpenLDAP cn=config with external SASL authentication

I want to add a schema to an OpenLDAP database that I've inherited. ldapadd -vY EXTERNAL -H ldapi:/// -f schema.ldif SASL/EXTERNAL authentication started SASL username: ...
0
votes
1answer
61 views

openldap SSL/TLS Cert: Get a 'real' one or use Self Signed?

I'm setting up SSL/TLS on OpenLDAP and wondering why the Debian Handbook has the user create a self-signed cert? Wouldn't one signed by a 'real' CA be more secure?
3
votes
1answer
122 views

OpenLDAP advanced ACL configuration

I have a multiple DITs in my OpenLDAP server. I made user cn=config the root so that cn=config has root access to all DITs (each DIT). In addition, there is a per-DIT administrator IDed as ...
1
vote
0answers
30 views

OpenVPN and oLDAP configuration

I have a Linux VM setup with OpenVPN on Debian 7.8. I copied the client files over to my MacBook and iPhone and I'm successfully able to create a VPN connection without any issues. However, I'd like ...
0
votes
1answer
34 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
0
votes
1answer
2k views

How to properly insert a set of olcAccess attributes to the configuration of an OpenLDAP database?

I need to add a bunch of ACLs for my database but am having hard time writing proper LDIF for it. Unfortunately, ldapmodify is not very helpful with its useless error message: modifying entry ...
0
votes
1answer
167 views

Cannot load compiled ltb-password-check module on Debian

I'm trying to compile and load LDAP Tool Box Project's password checker module to improve the capabilities of password policy overlay on the Debian 7.8. Here's what I've done so far: I've installed ...
1
vote
1answer
713 views

OpenLDAP & Asterisk - no global superior knowledge

I'm struggling to setup OpenLDAP to allow Asterisk to store information about users. I've tried to follow several howto's, but unfortunately I'm not able to set it up correctly. It seems like most ...
-1
votes
1answer
132 views

Gitlab with OpenLDAP secured with TLS

I have a working, secure OpenLDAP server running at: auth.<company name>.com I also have a reader account that Gitlab can use: cn=Reader Reader,ou=users,dc=auth,dc=<Company ...
0
votes
1answer
170 views

Working LDIF configuration example for openLDAP SQL backend

I need to provide access to a postgres database through LDAP and I am looking for a working configuration sample using LDIF files. All the examples I can find are using the old slapd.conf file for ...
1
vote
0answers
368 views

SAMBA/LDAP authentication failed in FreeNAS

I got a FreeNAS server and I am trying to share folders using SAMBA. My users are in an OpenLDAP server. The OpenLDAP has the samba.schema loaded. I checked the sambaSID in my FreeNAS and it is the ...
1
vote
0answers
48 views

vlock/pam_ldap based authentications fails when adding TLS/SSL

I have working centralized authentication configuration setup on Debian Wheezy based servers, utilizing OpenLDAP (2.4.31), pam_ldap (184-8), and libnss-ldap (264-2). I have successfully configured ...
-2
votes
1answer
133 views

Are the UID of users from a domain maintained locally in a machine?

This could be total nonsense but as I am new and am trying to learn. I came across this question. I have seen many of my office linux machines connected to some domain. I am wondering as if a ...
1
vote
1answer
216 views

sssd one ldap server for authentication and one for automounting, is this possible?

Says it all in the title really :) I am looking into SSSD but have a requirement that it must use ldap-1 for user authentication and then get the home directory automount information from ldap-2. ...
1
vote
1answer
976 views

Auth fail on Samba server with LDAP backend‏

I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc. The samba schema is present in the LDAP, and in the users profile. ...
0
votes
1answer
162 views

DIT write access for cn=config or LDAPI

I have an OpenLDAP 2.4 setup with multiple DITs. Each DIT database has a RootDN with manage rights, as it should. I need to give manage rights [or at least write] to either cn=config, or LDAPI so that ...
0
votes
0answers
354 views

Multiple DN suffixes in openLDAP

I'm trying to create multiple dn suffixes with openLDAP, but it doesn't seem to work. I want have this: ou=Jamaika,dc=gov,dc=com ou=Jamaiks-shadow,dc=gov-shadow,dc=com-shadow Should look like ...
0
votes
1answer
113 views

OS X server Open Directory fail over successfully but not the user home directories

We setup the OS X server Open Directory(OD) master and replica. Users are created on master and their home directories are on the master server. When the master OD server is down, the OD client (MAC) ...
0
votes
1answer
234 views

Cannot enforce password change in OpenLDAP with Password Policy Overlay

I've implemented Password Policy Overlay on OpenLDAP on Debian Stable. The server side and the policies are working as expected. However, after expiration I cannot force users to change their ...
0
votes
1answer
88 views

Deployed IPA-server, created replica, then fed production data only to replica. How to fix?

At some point, I deployed ipa-server on a CentOS 6 machine. Being asked to better move it into a VM, I used ipa-replica-prepare / ipa-replica-install . This resulted as wanted, and I got a working ...
1
vote
1answer
266 views

How to change an attribute value for all entries of ldap directory using ldapmodify command?

LDAP: How to modify an attribute value for all entries of directory using ldapmodify command? Looking for some syntax like below in modification input file for ldapmodify command dn: ...
0
votes
1answer
511 views

ldap_add: Constraint violation (19) additional info: some attributes not unique

Well I have already gone through ldap_add: Constraint violation (19) but couldn't solve my problem! Problem I'm facing is that, when I'm trying to add users from bckup.ldif file by issuing following ...
0
votes
1answer
352 views

Error while installing slapd

I need some help for solving this problem when I try to install slapd package on Debian from testing repositories. Leyendo lista de paquetes... Hecho Creando árbol de dependencias Leyendo ...
0
votes
1answer
226 views

Solutions for bridging Solaris/AIX to Active Directory?

I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully ...
1
vote
0answers
89 views

ACL for openldap a group to move one specific DN b/w different organizational units (OU)

I can't seem to get this right. I have a bunch of users in a group, cn=noc,ou=groups,dc=company,dc=com, who should be able to move a list between ou=internalLists,ou=mail,ou=service,dc=company,dc=com ...
0
votes
1answer
243 views

Getting error when integrating cloudera hue with ldap server?

I have configured ldap server on centos machine.I am able to execute ldapadd and ldapsearch sucessfully. But while integrating ldap with cloudera hue getting following error RuntimeError: Failed ...
0
votes
1answer
85 views

LDAP communication between two local server

I want to make my LDAP Port accessible inside my private network. Is it possible? Operating System : Ubuntu 14.04 x64 My LDPA Server configuration: eth1 Link encap:Ethernet HWaddr ...
1
vote
1answer
136 views

CentOS 6.6 LDAP configuration failed

I'm trying to config OpenLDAP on CentOS 6.6 with this db.ldif config: dn: olcDatabase={0}config,cn=config changetype: modify replace: olcRootPW olcRootPW: {SSHA}UCCQrNoadIFC2lN0Y6YxzCfu9hT/jZni - ...
1
vote
0answers
396 views

Ubuntu OpenLDAP TLS negotiation failure

I've been following the Ubuntu Server Guide for OpenLDAP, and have run into an issue with what I suspect is replication. If I run the following command on the client with access to the server: ...
0
votes
1answer
107 views

tracking down root cause for openldap account locking

This has happened to me in the past, and I've been able to find an email client or something random like that which was over zealously trying to login with the wrong password, but for the life of me, ...
1
vote
0answers
2k views

LDAP client can connect to LDAP host but can't see LDAP users

I'm configuring LDAP on a cluster of Ubuntu 14.04 machines. I successfully set up the LDAP host using these instructions. Now I'm trying to get an LDAP client to work using these instructions. ...
1
vote
0answers
434 views

How can I set up Samba with LDAP auth for server in workgroup only?

http://serverfault.com/questions/ask?title=samba%20ldap%20workgroup%20only We have quite a few linux machines running SAMBA as standalone servers and are currently just replicating a smbpasswd file ...
0
votes
0answers
781 views

OpenLDAP client certificate giving “Unable to find the certificate or key necessary for authentication”

Initial setup of system I have an OpenLDAP server running on SLC6.5 and a client running Fedora 20. The server and client are both running OpenLDAP 2.4.39 which is built with Mozilla NSS as its SSL ...
1
vote
1answer
359 views

How to override a user's UID coming from an LDAP directory?

I am trying to setup Linux logins for users in an LDAP directory. The directory contains users which have a UID under 1000 and I believe this is causing problems with logins to those accounts as UID ...
0
votes
1answer
71 views

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories?

Is ObjectSID a feature of Active Directory or is it a standard feature of all directories? Is there an Object Class that provides ObjectSID which can be used in other directory services such as ...
0
votes
1answer
28 views

Why does OpenLDAP not auto add inheritied objectclasses

I'm running into an issue, I'm attempting to add users with the following ldif; dn: mail=jsmith,ou=customers,dc=mydeqcust,dc=org cn: John Smith sn: Smith uid: jsmith mail: jsmith@dev.local ...
0
votes
0answers
205 views

Problems with OpenLDAP-Replication

we just set up a Ubuntu Server with OpenLDAP running. We also have a second server, running Ubuntu as well. Now i tried to set up the replication using this guide: ...
0
votes
1answer
259 views

OpenLDAP server not working through ldap:// protocol

I have a vanilla Scientific Linux 6.6 install (essentially RHEL 6.6) which I am trying to set up as an LDAP server. I have installed openldap-servers and started slapd with service slapd start. This ...
1
vote
3answers
1k views

Caching OpenLDAP credentials for offline use on laptops

Our clients (Ubuntu 14.04) can login with there LDAP login. As soon as they have no network they cannot login with LDAP. Is there a way to cache those passwords and usernames, so that the laptops ...
0
votes
0answers
14 views

all ldap users are created on ubuntu client

We configured our LDAP on our Ubuntu 14.04 desktop's. When we login with the ldap user we can see all other users which are in LDAP... This was not what we needed. How can we disable this. Kr, ...
0
votes
0answers
978 views

LDAP with TLS: connect error(-11)

I configured OpenLDAP and today I've configured the TLS for more security following these guide lines: Configure OpenLDAP with TLS=required Modifying the cn=config.ldif with config file: dn: ...
0
votes
0answers
50 views

Connect OpenLDAP to Samba in read mode?

We have Samba 3 based domain controller. The password backend for the domain is pdb/*nix users, this means that we do not have LDAP service running with Samba (I may be wrong on this one, but I do not ...
0
votes
1answer
225 views

Migration of LDAP and GOsa-config to new server

I have a running LDAP-server (using Ubuntu 12.04) with GOsa installed on it. Is there a way to migrate the whole database including the GOsa-config to a new server (Ubuntu 14.04)? I tried exporting ...
0
votes
0answers
52 views

OpenLDAP Multiple Directory Manager Accounts / Groups

So the documentation sucks and the interwebs hasn't produced the answers I am looking for. Hopefully somebody here has some wisdom to unleash... I recently built an OpenLDAP server for Linux ...
-2
votes
1answer
421 views

How to disable anonymous read on OpenLDAP using cn=config [duplicate]

I am a newbie with openldap 2.4 and I need to restrict read access to anonymous. Actually, if someone write ldapsearch -x -H ldap://myipaddrr he can see all entries of my HDB database. How can I ...
0
votes
2answers
1k views

ldapsearch result: Can't contact LDAP server (-1)

Anyone knows which the problem? I installed LDAP: yum -y install openldap-servers and then checked is the installation work well starting slapd service and doing ldapsearch like this: ldapsearch ...
1
vote
0answers
318 views

500 Internal Server Error: Which is the issue? [closed]

I've configured openldap in my server and also installed and configured mod_ldap but the server throws me a 500 Internal Server Error if I introduce right or bad user. I don't know if it's a bad ...
0
votes
1answer
388 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
1
vote
2answers
144 views

Bugzilla LDAP authentication broke after admin pw change - CentOS

Hey everyone I'm having an issue trying to get bugzilla authentication working again. I have looked all over and cant seem to find this anywhere. I am running bugzilla on a centOS server and over the ...
0
votes
1answer
606 views

LDAP: getent passwd don't show my recent user addition

I don't know why getent don't show my recently LDAP user addition. ldif file: dn: uid=user1,ou=People,dc=example,dc=com uid: user1 cn: user1 objectClass: account objectClass: posixAccount ...