OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

2
votes
1answer
734 views

Configure selinux to allow openldap on CentOS 6.4

I'm trying to run an OpenLDAP server on CentOS 6.4 with selinux enabled, but slapd is dieing as soon as it's started via /etc/init.d/slapd start. (init script reports OK; everything works fine after ...
2
votes
0answers
245 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
0
votes
1answer
393 views

Configuring OpenLDAP init script on CentOS 6.4

If I just run slapd with no arguments (as root) it starts and works fine. When I try to start it using /etc/init.d/slapd start however, it dies immediately. I see from looking at the init script that ...
1
vote
1answer
1k views

could not stat config file “slapd.conf” to add entries to LDAP

I got a problem when I adding some entries in LDAP slapadd -l /etc/openldap/root.ldif -f slapd.conf -d 10 slapadd -l /etc/openldap/people.ldif -f slapd.conf -d 10 slapadd -l ...
2
votes
1answer
2k views

Configuring openldap multimaster replication using cn=config

We currently have a single OpenLDAP server using the cn=config backend. We'd like to add a second OpenLDAP server and configure them for multimaster replication. What do we need to do to enable ...
0
votes
0answers
291 views

Samba username doesn't work once I join a Windows XP machine to my domain

I have set up a PDC using Samba, LDAP and Postgresql. I have successfully added all the necessari entries to my database and can also see all the necessary entreis in LDAP. I can also successfully ...
0
votes
1answer
113 views

OpenLDAP Change core schema

Is it possible to change core schema (cn={0}core,cn=schema,cn=config)? In lpadmodify im getting Insufficient access (50) though i'm using olcRootDn from olcDatabase={0}config. Apache DS just went ...
1
vote
1answer
447 views

OpenLDAP 2.4 Chain Overlay Minimal LDIF Configuration

There's almost no information about how Chain overlays are configured in OpenLDAP LDIF backend. What's the minimal configuration required?
1
vote
1answer
132 views

OpenLDAP Chain not found

When trying to add a Chain overlay to OpenLDAP 2.4.31 on Ubuntu or Debian, I get a 'overlay "chain" not found' in the syslog. Furthermore, the schemas required to configure the Chain overlay don't ...
1
vote
1answer
376 views

Working with OpenLDAP 2.4 LDIF config backend

In OpenLDAP 2.4, the configuration has been moved into an LDIF backend called cn=config. The OpenLDAP documentation says "you should never edit any of the LDIF files directly. Configuration changes ...
0
votes
1answer
199 views

How do the slapd logging levels work?

I can't seem to find an example of how each of the log levels in slapd work. I want slapd to log the users who are logging in, and the server that they are trying to log into, as well as any ...
1
vote
0answers
106 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
0
votes
1answer
2k views

Getting CentOS 6 to trust a certificate from AD

I'm trying to get my CentOS server to trust a certificate I've installed from an active directory server (I converted the .cer to .pem earlier.) When I try to connect, the debug information is: ...
0
votes
1answer
583 views

OpenLdap 2.4 on centos 6 doesn't listen on port 636

I have an openldap 2.4 server on centos 6 whose confg I copied from those I have running under openldap 2.3 servers on centos 5 machines. On openldap 2.3, specifying TLSCACertificateFile, ...
1
vote
0answers
123 views

OpenLDAP pwdPolicySubentry for organizationalUnit

Can you set a pwdPolicySubentry for an organizationalUnit, so that all entries contained in that organizationalUnit follow that password policy?
2
votes
0answers
101 views

Is there an OpenLDAP web frontend that allows users to edit custom fields? [closed]

We are currently using a custom perl based frontend for our OpenLDAP user portal, and it's proving tricky to port over to a new server. I've setup phpLDAPadmin on the new server, but it doesn't appear ...
1
vote
0answers
198 views

Scientific linux 6.4 SSHD UseLPK Bad configuration file

i try setup openldap and openssh that last take keys from openldap base. I installed openldap-server-5.3p1 and configured him. Also I install openss-ldap-5.3p1. Added scheme openssh-lpk to cn=config ...
0
votes
1answer
126 views

Disable OpenLDAP replication

I set up openldap replication so that if my primary LDAP server were to die, I would have another LDAP server ready to use just in case. I used the directions on Ubuntu's site to set up the ...
1
vote
1answer
2k views

how to configure pGina LDAP plugin

I have a project in which I have to authentificate clients from differents computers using an LDAP server. Do simulate that I have installed virtualbox in my PC and run two virtual machines, one with ...
1
vote
1answer
170 views

One-Way ActiveDirectory to Open LDAP push sync

I know that syncing AD and OpenLDAP is a common problem but after a few hours of googling and reading posts like this and that I am still unsure if there is a good (in a sense of convinient and safe) ...
0
votes
2answers
1k views

openLDAP Client Config for CentOS 6

I have been trying to get the users on the LDAP server to get authenticated over centOS 6 clients, but, the client will not accept the passwords of the LDAP users. I have Ubuntu Systems which ...
2
votes
2answers
225 views

Is there way to detect and track the changes made to OpenLDAP

I'm testing some solution with OpenLDAP. I running test box with openldap server and checking functionalities, testing solution etc. I'm wondering is there a way to track changes made to LDAP ...
0
votes
1answer
133 views

LDAP showing too many users and groups on Linux clients

We are hosting LDAP on a Solaris server and using 150 Solaris clients and 50 Linux clients. Users and groups have a list of netgroups (server hostnames) that they are able to access. This means that a ...
7
votes
2answers
8k views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ...
1
vote
1answer
419 views

Error while setting up ldap replication

I'm trying to set up LDAP replication according to the directions on Ubuntu's site. I went through all the directions for setting up the provider without any trouble. But when I try to set up the ...
0
votes
1answer
492 views

VLAN and Active Directory: complementary or substitute? [closed]

I recently encountered a network design that heavily implements VLANs but does not make use of a dedicated identity and access management system such as Active Directory or OpenLDAP. And yet another ...
0
votes
3answers
534 views

Setting up OpenAM to use OpenLDAP as DataStore

I am at the moment trying to configure an OpenAM installation to use an OpenLDAP as DataStore; is it possible to do it? I have seen some tips about configuring OpenLDAP (as in this tutorial) but this ...
0
votes
1answer
31 views

Output an Entire OpenLDAP Directory

How can I retrieve the entire output of an OpenLDAP directory to which I have administrative privileges? Specifically, I need dn, objectClass, and (if exists for the object) uidNumber or gidNumber.
0
votes
1answer
1k views

phpldapadmin: login as “root” admin user with UID

I have recently installed phpldapadmin on Ubuntu 12.04 LTS Srv. In the the config.php I've modified the following parameter in order to enable simple user login: ...
2
votes
1answer
867 views

Configuring Amazon Linux authenticate to LDAP server

I was wondering if anyone had success in configuring Amazon Linux to authenticate to an LDAP server? EDIT: For more information on what I have done: I disabled anonymous access on my OpenLDAP ...
0
votes
1answer
56 views

OpenLDAP and Existing Local Users

I am configuring OpenLDAP on my Linux server, with the intention of using it with the SOGo groupware package, among other things. In general, I assume it is inadvisable to have an LDAP user with the ...
0
votes
1answer
333 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
2
votes
0answers
356 views

Openldap Mirror Mode replication failover

We have currently one master ldap server and around 400 slave servers which are partially replicated through that master.All openldap versions are same and 2.4.31 What we want is actually if master ...
2
votes
0answers
179 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
0
votes
0answers
95 views

How can I get Openindiana built in samba to use an OpenLDAP server?

I built an OpenIndiana / NAPP-IT server to use for samba home shares. Up to now I had planned to use a KVM virtual machine to run the samba/ldap stack, then connect the vm to the ZFS volume thru ...
1
vote
1answer
79 views

Unable to login applications using LDAP alias

We have several applications and we are able to integrate LDAP successfully. In application we have given base dn as ou=People,dc=geo,dc=com and the user dn: uid=geo_pc,ou=People,dc=geo,dc=com can ...
1
vote
2answers
504 views

CentOS 5.8 - NSCD can't caching the password

I try to configure NSCD to connect ldap users to my PC. I like, that users could login offline in this PCs (online ldap users works fine). Actually, i can use the user, but when i try to introduce ...
1
vote
0answers
53 views

Restrict users to certain applications only

We are using many applications like zabbix, phabricator, AC etc. We need to integrate LDAP in all these applications. These application support LDAP but not group based authentication. Please let us ...
0
votes
0answers
179 views

Using openldap for ssh authentication

I am looking at setting up an openldap server to work as a central ssh gateway. Am I right in thinking that i need to install an openldap server, and then configure the client server to authenticate ...
1
vote
1answer
648 views

Bind DN entry missing in stash file - while initializing database for realm

I'm trying to run kerberos with ldap back-end on Centos 6.3 After creating Realm with: kdb5_ldap_util -D "cn=admin,dc=example,dc=com" create -sscope sub -sf ...
0
votes
1answer
52 views

How to configure ubuntu server with LDAP group based authentication

By installing libnss-ldap we are able to integrate an Ubuntu server with ldap (openldap). But we are unable to configure ldap group based authentication. We need to configure in such a way that user ...
0
votes
2answers
160 views

OpenLDAP: How to hide config directory from tools like JXplorer, etc

I'm trying to set up an OpenLDAP server for test and demonstration purposes - my team need to be add LDAP connectivity to our product, so we want to have an LDAP server we can authenticate against. ...
0
votes
1answer
515 views

ldapadd works, but ldapsearch doesn't (openldap)

I use just installed Debian 6 with openldap 2.4. I have CentOS box too with openldap 2.3. I make .ldif file from centOS (working configuration) box and successfully add all entries from ldif to ...
0
votes
1answer
791 views

Difference between openldap 2.3 and 2.4

There is a difference between openldap 2.3 and 2.4 - specifically with ldapmodify... If no "changetype:" line is present, the default is "add" if the -a flag is set (or if the program was invoked as ...
1
vote
2answers
3k views

Is there any bad thing happens if I change /etc/ldap/slapd.d/cn=config.ldif manually?

Since 2.3, OpenLDAP uses a configuration engine called slapd-config. They said that use it make all LDAP configuration can be changed on fly. This is the header of /etc/ldap/slapd.d/cn=config.ldif: ...
0
votes
1answer
280 views

Why all LDAP user passwords are incorrectly imported? And can't be modified?

First of all I am new to OpenLDAP setup. I have followed instructions coming from: HowToForge.com linux openldap setup #root dn: dc=localhost,dc=com dc: localhost objectClass: dcObject objectClass: ...
0
votes
2answers
306 views

chroot SFTP to another users subdirectory

I've successfully set up SFTP to chroot a user to their home directory. However, I have a case that I haven't been able to find any examples on, and the odd permissions needed for chroot make me ...
0
votes
1answer
2k views

Slaptest for slapd.conf fails due to an invalid path

I have just installed Openldap on Xubuntu. The slapd daemon is working and I can easily stop and start it. Nevertheless when I run a test for the configuration file slapd.conf as follows: slapdtest ...
0
votes
1answer
55 views

Openldap. How to add and then re-read new attribute

I have custom schema in my ldap customContact.schema with 5 attributes Now I need to add one more attribute: # localID attributetype ( 2.16.840.1.113730.3.1.36 NAME 'localID' DESC 'Local ...
0
votes
1answer
87 views

openldap authentication against a slave

I have an openldap master/slave configuration, setup as per the Ubuntu guide, on Ubuntu 12.04, running slapd 2.4.28-1.1ubuntu4.2. I have pam_ldap configured for ssh authentication, everything works ...