OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
0answers
133 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
1answer
4k views

When Tried to Do ldapadd got this error ldap_add: No such object (32)

I have Following Entries in my slapd.conf ####################################################################### # ldbm and/or bdb database definitions ...
1
vote
1answer
468 views

How do you enable the storing of GPG / PGP keys in OpenLDAP

I've searched high and low trying to find a method that allows me to store GPG keys for existing users in an OpenLDAP server. The only relevant how-to I've found is this. However, I'm unable to get ...
1
vote
2answers
1k views

Can't query AD using Kerberos from Linux host

ldapsearch -H <URL> -b <BASE> -s sub -D <USER> -x -w <PW> works fine kinit <USER>@<REALM> ldapsearch -H <URL> -b <BASE> -s sub fails with: text: ...
0
votes
1answer
330 views

OpenLDAP: recommended way to add a new server to a replicated multi-master setup

I have previously set up two servers with multi-master replication, using the cn=config configuration format (I think I've seen it referred to as 'OLC'?). It was a process similar to this (although ...
0
votes
0answers
66 views

How to enable TLS on OpenLDAP

I use CentosOS 5. I have a problem to enable TLS (or ssl) on OpenLDAP server. I followed this tutorial... so: I generate the cerificates; I setted the path in sladp.conf TLSCertificateFile ...
0
votes
1answer
4k views

How can I get FreeNAS to work with LDAP authentication?

I'm trying to set up a FreeNAS 9.1.1 server with CIFS shares with LDAP authentication. I've set up an OpenLDAP server, populated it with smbldap-populate, added a user account for myself and ...
0
votes
1answer
404 views

OpenLdap ACL Admin Group rights

Hi I have been trying to achieve Admin and operator level ACL to no avail. So far I've got access to attrs=userPassword,shadowLastChange by self write by anonymous auth by ...
5
votes
1answer
4k views

How to correctly ldapmodify replace olcAccess lines?

This is a part from olcDatabase={1}hdb.ldif olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=somesite,dc=com" write by * none olcAccess: ...
3
votes
1answer
3k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
0
votes
1answer
434 views

PAM: auth: pam_unix(dovecot:auth): authentication failure;

We have opnldap setup on our ubuntu server, and were getting this message for a user: auth: pam_unix(dovecot:account): account has expired (account expired) Sep 3 19:05:03 auth: ...
1
vote
2answers
181 views

Managing user and their credentials in kerberos and openldap system

I am learning to use openldap as backend database for kerberos credentials. It is good that all the programs are working with single sign on. The problem is - I can manage user from kadmin command ...
-1
votes
1answer
288 views

What are the dependencies of sssd/nscd to function?

What are the dependencies of sssd to function as an LDAP-client? What are the dependencies of nscd to function as an LDAP-client? Does sssd need openldap to function as an LDAP-client? Does nscd?
1
vote
0answers
145 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
3
votes
1answer
490 views

Rename base DN in OpenLDAP

I currently have an LDAP directory (OpenLDAP), which does authentication for a bunch of services running across a number of servers. Let's say the base DN is dc=oldcompany,dc=com. I'd now like to ...
0
votes
1answer
184 views

TOLVEN installation: Test Database and LDAP Connections After ConfigPhase1

I am trying to install tolven, and following the manual http://wiki.tolven.org/index.php/Installation_Guide My linux system info is as follows: root@localhost:/> cat /etc/issue **CentOS release ...
3
votes
1answer
249 views

inotify in bash script doesn't work with ldapadd command

I have written a bash script which detects if a .ldif file has been written into a directory and if written, executes an ldapadd command and then deletes that file. The scripts is as follows: ...
9
votes
1answer
5k views

Why does this ldapadd command quit with an “Invalid syntax” error?

I'm very new to openldap but extremely well versed in the linux/unix environment. I'm trying to setup my very first test openldap environment using the guide here. I've also read most of the admin ...
1
vote
2answers
95 views

Getting the LDAP password from the LDAP Directory

First up, I know this question's got the potential to be downvoted and closed, nonetheless I think I will go ahead and ask it all the same because our issue is genuine enough. We have a mail server ...
1
vote
0answers
88 views

OpenLDAP 2.4 and Mac OS X Local Directory

OS: Centos 6.4 OpenLDAP: 2.4 Mac: 10.8.3 through 10.8.4 I have an OpenLDAP server and I'm able to have users authenticate, however, for some reason even though I've changed the Mappings of ...
0
votes
1answer
602 views

LDAP userPassword only works with plaintext

I have setup openLDAP server on an ubuntu machine. I am trying to test user authentication, but am running into a problem. If, in ldap, the userPassword contains a plaintext password, authentication ...
0
votes
2answers
508 views

Who should I run slapindex as? Both root and openldap users seem unadvisable

I am following these instructions to install OpenLDAP on Debian 6.0. The instructions tell me to run slapindex as root, but it sounds like Debian does not like the idea: WARNING! Runnig as root! ...
0
votes
1answer
790 views

“getent passwd” enumerates users, “su <username>” fails

I have an LDAP server with two BDB backends. The user accounts are split between the two backends. Backend A has a referral object to Backend B. I have tried to setup LDAP client authentication on ...
0
votes
1answer
76 views

Users seeing all other LDAP users on RHEL default behavior?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When we type "getent ...
2
votes
1answer
168 views

OpenLDAP ACL's using sets

So, I am attempting to write some LDAP rules that will allow certain people the ability to write some subtrees. Let's say we have this user: dn: uid=minion1,o=mycompany,ou=cust,dc=some,dc=domain ...
1
vote
1answer
448 views

Sync between two Mail Servers

I have 2 mail servers of the same configuration which is as follows: OpenLDAP (for authntication of users) Postfix Cyrus-imapd SOGo(groupware) One of them (Let's say X) is in production and is the ...
4
votes
1answer
139 views

systemPossSuperiors - why does AD have it, but not openldap

Having used openldap and now getting to know MS active directory (AD), I realize that in AD there is an attribute called "systemPossSuperiors", which defines which objects are allowed as parent ...
0
votes
1answer
87 views

OpenLDAP Windows and sssd with multiple groups Suse

I have a OpenLDAP server (windows version) installed with user and groups correctly configured. Most of the users belongs to differents groups. I have a problem with the sssd configuration to access ...
0
votes
0answers
375 views

Storing GPG keys in LDAP with TLS using gpgme

I'm trying to send my GPG public key to our LDAP server, but I'm hitting a wall. My LDAP server only allows LDAP with Start_TLS over port 389, or LDAPS on port 636. I've got the following lines in my ...
0
votes
1answer
121 views

Finding out my current LDAP server type

How can i find out if my current LDAP sever type is Standalone, Master or Replica (slave)? I am using OpenLDAP on SLES 11.
1
vote
1answer
783 views

Refresh ldap client configuration Centos

Recently we change the ip address (and add some groups) of our LDAP server (running in Suse Enterprise) so should change also the ldap authenthication configurations for all the servers that we have. ...
0
votes
1answer
22 views

Cannot access certain MS Server 2003 Active Directory users with Mountain Lion Server's Server App

The "magic triangle" is working perfectly for some users. Other users are invisible to the Mountain Lion OD master's Server App. Workgroup Manager can access all the users while Server App can't. ...
3
votes
1answer
587 views

ldapquery an Active Directory server for users that belongs to a group named X

When I do this at the bash prompt on a CentOS 6.4 ldapsearch -LLL -H ldap://adserver.example.com -x -D someuser@example.com -w somepass -b 'OU=Users,DC=example,DC=com' ...
6
votes
3answers
6k views

How come all LDAP users are shown with getent passwd?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When I type "getent ...
0
votes
2answers
3k views

Can't add local user on system using ldap auth for samba [closed]

Trying to add a local user to a CentOS 6.3 system that is using ldap for Samba authentication, but being stymied by the user's existing entry in ldap. [root@samba ~]# adduser wchandy adduser: user ...
3
votes
2answers
106 views

Usefulness absolute filter on an LDAP query?

I was perusing the source for OpenLDAP and I saw where the root DSE supports something called absolute filters. It looks like it's specified in RFC4526 It looks like the author that originally drafted ...
0
votes
0answers
27 views

how to configure sasl authentication using multiple realms for openldap? [duplicate]

I have got cyrus-sasl and openldap2.4,and I want to define two or more SASL realms which can make identical user with different passwords in different subtrees of directory pass to SASL ...
2
votes
2answers
399 views

<suffix> invalid DN 21 (Invalid syntax) on Converting slapd.conf OpenLdap

Actually i want to configure ldap as master-slave replication using syncrepl method, On any reference which i found,I'm running on Centos 6 machine and openldap v2.4.23. I following step by step on ...
1
vote
1answer
196 views

OpenLDAP - Changing user password both locally and in LDAP

We have just implemented an LDAP solution for our lab. All of the LDAP client machines still have files ldap (or files sss) in their nsswitch.conf for the time being (so local authentication first), ...
0
votes
2answers
167 views

Set up JDBC DataSource in LDAP

How do I create a JDBC DataSource in an OpenLDAP server? The problem is that jdbc/something is not a valid DN or RDN. But that is the format of the name that you are supposed to use for JDBC ...
1
vote
1answer
69 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
0
votes
0answers
157 views

OpenLDAP replication trouble

I still unable to setup replication between LDAP nodes %(, followed instructions from : http://www.secure-computing.net/wiki/index.php/OpenLDAP/replication Server, lapd.conf TLS_CACERTDIR ...
1
vote
1answer
862 views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by ...
0
votes
1answer
68 views

Using autobind without LDAPI

I am trying to automate the installation of my OpenLDAP servers. Currently packages get installed (openldap-clients, openldap-servers) and started with their default configurations. I have a LDIF ...
0
votes
1answer
105 views

Split authentication and NSS lookups for users and groups to different servers

I've asked this question previously: Multiple Bind and base DNs in ldap.conf Since that previous question was answered in the negative, I'm looking for other options such as splitting authentication ...
2
votes
1answer
851 views

Configure selinux to allow openldap on CentOS 6.4

I'm trying to run an OpenLDAP server on CentOS 6.4 with selinux enabled, but slapd is dieing as soon as it's started via /etc/init.d/slapd start. (init script reports OK; everything works fine after ...
2
votes
0answers
260 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
0
votes
1answer
424 views

Configuring OpenLDAP init script on CentOS 6.4

If I just run slapd with no arguments (as root) it starts and works fine. When I try to start it using /etc/init.d/slapd start however, it dies immediately. I see from looking at the init script that ...
1
vote
1answer
1k views

could not stat config file “slapd.conf” to add entries to LDAP

I got a problem when I adding some entries in LDAP slapadd -l /etc/openldap/root.ldif -f slapd.conf -d 10 slapadd -l /etc/openldap/people.ldif -f slapd.conf -d 10 slapadd -l ...
2
votes
1answer
2k views

Configuring openldap multimaster replication using cn=config

We currently have a single OpenLDAP server using the cn=config backend. We'd like to add a second OpenLDAP server and configure them for multimaster replication. What do we need to do to enable ...