OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
0answers
48 views

OpenLDAP Multiple Directory Manager Accounts / Groups

So the documentation sucks and the interwebs hasn't produced the answers I am looking for. Hopefully somebody here has some wisdom to unleash... I recently built an OpenLDAP server for Linux ...
-2
votes
1answer
293 views

How to disable anonymous read on OpenLDAP using cn=config [duplicate]

I am a newbie with openldap 2.4 and I need to restrict read access to anonymous. Actually, if someone write ldapsearch -x -H ldap://myipaddrr he can see all entries of my HDB database. How can I ...
0
votes
2answers
932 views

ldapsearch result: Can't contact LDAP server (-1)

Anyone knows which the problem? I installed LDAP: yum -y install openldap-servers and then checked is the installation work well starting slapd service and doing ldapsearch like this: ldapsearch ...
1
vote
0answers
283 views

500 Internal Server Error: Which is the issue? [closed]

I've configured openldap in my server and also installed and configured mod_ldap but the server throws me a 500 Internal Server Error if I introduce right or bad user. I don't know if it's a bad ...
0
votes
1answer
339 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
1
vote
2answers
118 views

Bugzilla LDAP authentication broke after admin pw change - CentOS

Hey everyone I'm having an issue trying to get bugzilla authentication working again. I have looked all over and cant seem to find this anywhere. I am running bugzilla on a centOS server and over the ...
0
votes
1answer
343 views

LDAP: getent passwd don't show my recent user addition

I don't know why getent don't show my recently LDAP user addition. ldif file: dn: uid=user1,ou=People,dc=example,dc=com uid: user1 cn: user1 objectClass: account objectClass: posixAccount ...
0
votes
0answers
64 views

How to add a new root suffix entry in openldap?

I try to add new root suffix in openldap following this guide Creating_and_Maintaining_Suffixes, but I got the error : ldap_add: Invalid syntax (21) additional info: objectclass: value #2 invalid ...
1
vote
2answers
3k views

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is ...
2
votes
0answers
146 views

Single Sign On Solution

I'm trying to come up with a single sign on solution for a small team. I've got four applications: dokuwiki redmine svn owncloud All of these I was told by folks support LDAP, and that it was ...
0
votes
1answer
188 views

OpenLDAP default configuration file is `/etc/ldap/slapd.d` rather than `/etc/ldap/slapd.conf`

My openldap (version 2.4.31) makes directory /etc/ldap/slapd.d as its default configuration files rather than /etc/ldap/slapd.conf as the old version does. I found it becomes more complicated to ...
0
votes
1answer
267 views

How to change OpenLDAP core attributes

Specifically, I need to add ORDERING caseIgnoreOrderingMatch to the givenName and surname attributes. I had hoped there was some way to do this using ldapmodify but the following is not working for me ...
0
votes
1answer
1k views

postgresql LDAP authentication

I am trying to give an LDAP authentication to my postgresql database. Here is my pg_hba.conf config file local all all md5 local all postgres md5 host all all 0.0.0.0/0 ldap ...
0
votes
1answer
48 views

Openldap ACLs don't work

I have following structure: dc=th,dc=company,dc=com | |->dmc | |->dmc_customer_company I create a group to manage write access to dmc_customer_company. Groups, divide by ...
0
votes
0answers
971 views

ldapsearch throws me a login fail (invalid credentials (49))

I'm starting with LDAP and trying to configure all in this tutorial step by step: http://wiki.openiam.com/pages/viewpage.action?pageId=7635198 But when I'm in 10th step: ldapsearch -h localhost -D ...
0
votes
1answer
818 views

GitLab & OpenLDAP: Invalid credentials

I have two machines with CentOS 7.0 on each one. The first one is domain controller with OpenLDAP only. I configured OpenLDAP according this tutorial: ...
0
votes
3answers
5k views

Installation OpenLDAP on CentOS 7

I'm following this OpenLDAP step by step tutorial: http://www.server-world.info/en/note?os=CentOS_7&p=openldap&f=1 Important: I'm working on CentOS 7 But when in the first part I try to start ...
2
votes
0answers
210 views

OpenLDAP TLS - test results in Bad file descriptor

I have set up an openldap server including tls on ubuntu 14.04 following this guide. While testing the connection, I get results that I can not find an explanation for. ldapsearch -xLLL -Z -W -D ...
0
votes
1answer
348 views

OpenLDAP check database

favorite I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue: something slapd process doesn't restart for error in database ( about some ...
0
votes
1answer
27 views

OpenLDAP structure mulitple locations

I am new to OpenLDAP and I am a bit stuck with the structure. Everywhere I see examples like this: dc=our,dc=company,dc=com -ou=USERS -ou=GROUPS -ou=ROLES Our company has more geographical ...
0
votes
1answer
395 views

pam_check_host_attr not working properly

Disclaimer: I'm new to ldap, so hopefully I haven't done anything majorly wrong! Aim: To centralise user credentials and restrict client login to certain machines. I have a barebones openLDAP server ...
0
votes
1answer
214 views

Modifying OpenLDAP configuration using cn=config

I am really new to OpenLDAP. I am trying to view all the settings in cn=config and attempt to change the value of olcSizeLimit (http://www.openldap.org/doc/admin24/slapdconf2.html#cn=config) I try ...
0
votes
0answers
123 views

“ldap_start_tls: Can't Contact LDAP server (-1)” on Red Hat Linux 6.4

I have OpenLDAP working on a local development machine that is running Fedora 20. I was able to install it and get it working fine for my own local testing. I'm now trying to install OpenLDAP on a ...
0
votes
0answers
52 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
-1
votes
1answer
318 views

OpenLDAP data purged/whipped on Ubuntu server upgrade 12.04 to 14.04 LTS

I upgraded my Ubuntu server from 12.04 to 14.04 using standard do-release-upgrade. After upgrade I found that my OpenLDAP directory data is purged. This is an unexpected outcome of an upgrade. I ...
0
votes
1answer
1k views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
0
votes
1answer
232 views

Unable to connect to server via LDAPS

I'm running OpenLDAP on an up-to-date Debian box. I'm trying to run a simple command: ldapsearch -x -h <<IP>>:636 -D cn=<<BASE DN>> -d1 and I get this output: ldap_create ...
1
vote
1answer
721 views

How to enable DIGEST-MD5 SASL mechanism in Open Directory?

We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 But it doesn't support DIGEST-MD5: $ ldapsearch ...
1
vote
1answer
160 views

command line alternative to dpkg-reconfigure slapd

Is there a way to reconfigure slapd, providing all configuration options as command-line parameters/arguments? My goal is to be find an alternative to the interactive UI. Thank you
2
votes
0answers
31 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
1
vote
0answers
156 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
2
votes
1answer
383 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
2
votes
1answer
93 views

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all ...
0
votes
1answer
65 views

Custom schema for OpenLDAP 2.4

I am new to OpenLDAP administration. My aim is to learn how to create custom schemas, and customize "my" directory server this way. I tried to add one optional attribute - ipPhone. Made a schema ...
0
votes
2answers
2k views

ldapsearch returns result, but getent does not

I am setting up a fresh CentOS 7 server to and need to setup LDAP authentication i.e. there already exists a server that authenticates users, which we use for other GNU/Linux servers. For instance, ...
0
votes
1answer
1k views

What is SSHA-512? How can OpenLDAP support it?

I have two OpenLDAP directory servers. One is a standard Zimbra OpenLDAP server. Accounts are with passwords that are using SSHA-512 hash method. When I copy these accounts to a standard OpenLDAP ...
0
votes
1answer
187 views

LDAP passthrough authentication. testsaslauthd fails only with ldaps

I am trying to set up an OpenLDAP passthrough authentication to another server. When I do testsaslauthd with simple ldap:// the test works fine. When I try with ldaps:// it fails. ...
3
votes
1answer
268 views

Chasing referrals in Ldap

I'm currently improving a program featuring an ldap integration. This ldap integration is currently not able to handle ldap referrals. I do understand, that i will gen entries back that will hold the ...
1
vote
1answer
529 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
2
votes
1answer
649 views

SSH access to hosts groups based on user groups using LDAP

This is my entire test ldap database for now: # extended LDIF # # LDAPv3 # base <dc=ldap,dc=example,dc=com> (default) with scope subtree # filter: (objectclass=*) # requesting: ALL # # ...
1
vote
1answer
722 views

can't get “memberof” to work in my OpenLDAP config

I'm trying to set up OpenLDAP on a Debian 7.7 server. While basic auth seems to work, I can't get the "memberof" overlay to work. Being new to LDAP, all that memberof config seems overly complex to ...
0
votes
1answer
38 views

Send email on ldap creation

I have an LDAP server setup on a server running Debian 7 and I wanted to make it send out an email whenever a new user was created on that LDAP. I thought a cronjob would be best, but I have no idea ...
0
votes
1answer
38 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: ...
1
vote
1answer
563 views

cannot do an ldapdelete: Strong(er) authentication required (8)

I'm fairly new to ldap and i'm trying to delete a ldap object. (i haven't set up SSL yet.) i use the command ldapdelete -x 'dc=example,dc=com' 'cn=AnUser' it gives me the error ldap_delete: ...
0
votes
1answer
682 views

libnss-ldap getent passwd - AD replies correctly but output shows local /etc/passwd

I am trying to configure libnss-ldap to provide AD authentication to my Linux Debian servers. This is working fine if user exists locally, I want to make it work for Domain users. Here is my ...
1
vote
0answers
149 views

How cache OpenLDAP Meta database (for use with Websphere Application Server)?

I have configured Meta database directory on OpenLDAP server for two different Active Diretories and it's work. But now I'd like set cache for this OpenLDAP, but I don't know how. From my slapd.conf ...
0
votes
1answer
47 views

How to enable OpenLDAP log on CentOS 6.4

I have installed OpenLDAP 2.4.23 on CentOS 6.4. Default install. OpenLDAP does not seem to create any log information. At times it is convient to have some information on what OpenLDAP is doing. How ...
3
votes
2answers
453 views

Apache/PHP ldap stops working. Requires restart of apache

I currently have a setup where users log in to a website using LDAP credentials. It's all internal so I don't really care a ton about certificates. So, in my /etc/openldap/ldap.conf file I have ...
1
vote
1answer
42 views

Is “dc=nomain” a in LDAP ACLs?

I'm trying to set up my first LDAP server. I can't get clients to authenticate using it even though everything seems to be working. i suspect the ACLs might be the problem since i can't see the ACLs ...
0
votes
1answer
125 views

LDAP Schema implemetation in existing LDAP server

I have a user defined schema ,which is to be added into the existing LDAP server. Its ldif format is: dn: cn=userControl,cn=schema,cn=config objectClass: olcSchemaConfig cn: userControl ...