OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
0answers
41 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
1answer
164 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
0
votes
1answer
115 views

problem_ldap_bind

contents of file.ldif (le file.ldif) dn: dc=ircoms,dc=com changetype: add objectclass: top objectclass: dcObject objectclass: organization o: ircoms dc: ircoms dn: ou=People,dc=ircoms,dc=com ...
4
votes
2answers
4k views

OpenLDAP - where is my slapd.conf?

I have installed OpenLDAP on Unbuntu 10.04. I wanted to configure my ldap but I can't find slapd.conf in /etc/ldap/ In this directory there is a ldap.conf but seems not to be the same. How can I ...
1
vote
1answer
2k views

Openldap/Sasl/GSSAPI on Debian: Key table entry not found

The goal: to make an OpenLDAP server to authenticate using Kerberos V via GSSAPI Setup: several virtual machines running on freshly installed/updated Debian Squeeze A master KDC server ...
1
vote
1answer
662 views

Sometime ProFTPD session closed immediately after Login successful

The version that I'm using: ProFTPD Version: 1.3.3c (maint) Scoreboard Version: 01040003 Built: Wed Dec 1 2010 16:41:40 ICT Loaded modules: mod_cap/1.0 mod_ldap/2.8.22 mod_auth_pam/1.1 ...
0
votes
1answer
109 views

How to Change maxPasswdAge parameter in OpenLDAP in Linux

I am trying to find how to change some password policy settings in openLDAP (on a system-wide level - not on a per user level) such that ALL LDAP account users (ie existing and new users) have their ...
3
votes
1answer
3k views

Unable to modify schema in OpenLDAP using run-time configuration cn=config

I'm having trouble modifying the schema of an OpenLDAP installation using the run-time configuration (cn=config). What I'm trying to do is modify existing attributes and add new ones to a custom ...
1
vote
0answers
263 views

Can ApacheDS LDAP change root user name?

ApacheDS 1.5 has the following account by default. Bind dn or user: uid=admin,ou=system Bind password: secret i would like to change it to the following to avoid making changes in my code Bind dn ...
0
votes
1answer
200 views

Unable to install OpenLDAP on Red Hat Enterpise Linux

I'm trying to install PythonLDAP on my remote server, and in order to do this I have to install OpenLDAP as a prerequisite. I downloaded OpenLDAP, transferred it to my server, extracted it, ran the ...
0
votes
1answer
1k views

ldapsearch reads cert and lies about it, won't connect as a result

I'm pulling my hair out over ldap playing well with SSL/TLS. I can confirm that the server is listening AND responding on port 636 to SSL request. openssl s_client -connect freia.fqdn:636 -showcerts ...
5
votes
3answers
322 views

When setting up OpenLDAP for the first time, what are some things to keep in mind?

I'm in the process of reading up on documentation and setting up OpenLDAP to handle authentication throughout my network, for email, web services, user accounts, any anything else that I could throw ...
2
votes
1answer
2k views

Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap

I start with a fresh installation of openldap 2.4.28 on debian. They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library. It's hard to understand ...
1
vote
2answers
1k views

Changing user passwords under Kerberos/LDAP

I've set up Kerberos/LDAP on Ubuntu 11.04 Server according to this guide. My client machines are auto-mounting NFS volumes from the server using krb5. All is good: Users can log in to any of the ...
0
votes
1answer
234 views

Learning OpenLDAP cn=config: comments and reverting incorrect attempts

I'd like to learn how to configure OpenLDAP (2.4), with the objective to deploy it on an Ubuntu 10.04 LTS system. Since slapd.conf usage is deprecated, I'm trying to understand better how to use the ...
3
votes
1answer
166 views

When updating the schema in OpenLDAP, should we reload the master or the slave first?

We currently have one master server that is replicated to two read-only slaves. We are adding to the schema. Is it recommended to reload the master first or the slaves?
4
votes
1answer
421 views

Trying to authenticate to a Dell PowerConnect 5324 switch using FreeRADIUS and OpenLDAP

So here's the situation. I want to be able to use my LDAP credentials to log into this switch. Since there is no support for LDAP on the switch itself, I figured that FreeRADIUS has an LDAP module, ...
-2
votes
1answer
2k views

How to install LDAP server and add a user?

I need to test that our application can connect to more than one LDAP servers. We have one working one (running on OSX server). I need to setup another one. We tried to set LDAP server on SuSE using ...
0
votes
1answer
463 views

How to set Maximum Password Expiry in OpenLDAP Linux

I am trying to find how to change some password policy settings in OpenLDAP (on a system-wide level, not on a per user level) such that all LDAP account users (i.e., existing and new users) have their ...
1
vote
1answer
640 views

ldapadd with automatic support for replace if entry already exists

I've been doing some testing with ldapadd and ldapmodify and what I noticed is: -ldapadd will fail if the entry already exists: => hdb_tool_entry_put: txn_aborted! DB_KEYEXIST: Key/data pair ...
1
vote
0answers
722 views

Password expires 45 days even though 'Password Must Change' is set to 'never' (Samba+LDAP)

Since a few months ago Samba ask each of our users to change password at log on every 45 days (the default) and I have not been able to disable it. This setup had been running for 2 years before then ...
0
votes
2answers
1k views

Issue enabling accesslog overlay with Openldap 2.4.21

I'm running openldap 2.4.21 on ubuntu server 10.04 and trying to enable the accesslog overlay using the cn=config configuration style (so not slapd.conf). My main database is olcDatabase={1}hdb so I ...
1
vote
1answer
692 views

Openldap ppolicy, how to unlock account?

I have enabled OpenLDAP password policy overlay and account lockout is now working fine. On 5 authentication failures the account is getting locked out. On resetting the password the account becomes ...
0
votes
1answer
1k views

LDAP: error code 49 - Invalid Credentials when connecting jira to Mac OS X Lion Server LDAP

I have the following setup: - LDAP Server from Mac OS X running with default configuration - JIRA Standlone installation I want to: Use LDAP for user authentication for jura username: ...
0
votes
1answer
379 views

Visio: OpenLDAP, import LDIF?

I would like create Visio diagrams of an OpenLDAP directory. Is there a way to import an LDIF, or connect Visio to the LDAP Server? Thanks!
1
vote
1answer
1k views

Account lockout using Openldap

What is the best way to implement account lockout in openldap? I have an openldap server with Ubuntu desktop client connecting to it for authentication. I want he accounts to locked out after say 5 ...
6
votes
2answers
605 views

Is OpenLDAP a viable alternative to Windows LDAP?

Just a simple question; this question is not meant to attack Windows or start a flame war in anyway. I want a viable solution to the way authentication is done in Windows DC environment (LDAP) on ...
6
votes
5answers
3k views

Small, simple LDAP server as an alternative to OpenLDAP [closed]

I have taken a look at the installation and configuration instructions for the newer OpenLDAP releases and decided that it's too much work to set up for my small userbase. Basically, I only use LDAP ...
0
votes
1answer
398 views

Openldap with ppolicy

We have working installation of OpenLDAP version 2.4 which is using shadowAccount attributes. I want to enable ppolicy overlays. I have gone through the steps provided at OpenLDAP and ppolicy howto. ...
0
votes
2answers
4k views

How does LDAP handle supplementary/secondary user groups?

I've seen similar questions related to configuring Apache to authenticate via LDAP, but this basic question still has me confused. In my setup, I created users who all have the same primary GID, then ...
2
votes
1answer
1k views

Is openldap fit for large production deployments?

For about 1 year we've been using openldap on ubuntu server 10.04LTS for authenticating about 20 IT users and everything has been running fine (the operations on the LDAP server were basically limited ...
0
votes
1answer
648 views

How to deactivate LDAP anonymous bind?

I am very new to LDAP configuration. So I hope somebody can help me. I just installed an OpenLDAP server on an Ubuntu 10.4 system. My LDAP installation does not use/have any ldap.conf or slapd.conf ...
6
votes
2answers
2k views

How do I update the memberOf attributes of existing objects after adding the OpenLDAP Reverse Group Membership Maintenance overlay?

This is a follow-up to this question: I added the memberof overlay to an existing OpenLDAP 2.4 server. Now I want to update the existing user objects. For new group memberships, the memberOf ...
0
votes
1answer
249 views

Configuring LDAP configuration on RHEL-based OS with configurable DN container

I am trying to configure LDAP configuration the same way we configure it for our web applications: The server binds using the administrator account provided The server searches for uid=$login where ...
0
votes
1answer
62 views

Copy Mac Server LDAP contents to OpenLDAP

Is it possible to copy all content from a Mac LDAP server (which is proprietary modified OpenLDAP). Doesn't matter if I have to do it by replication (which I think is even harder) or copying the ...
0
votes
1answer
2k views

LDAP: “Unacceptable log file” after db recovery

My openldap-2.4.21 server died I so checked the syslog messages and found logs reporting a corrupt db which I tried to fix by issuing: $ /usr/bin/db4.8_recover -v -h /var/lib/ldap/ Finding last valid ...
1
vote
2answers
582 views

slapd with STARTTLS only doesn't work

I'm using slapd under Debian/Squeeze and trying to configure the system to only allow TLS-encrypted connections using STARTTLS on port 389. So I've configured my /etc/default/slapd to listen on port ...
2
votes
1answer
173 views

Running Multiple LDAP trees OpenLDAP

Is it possible to have multiple seperate LDAP trees on a single LDAP server?
3
votes
4answers
307 views

How to tag former employees in LDAP structure?

I have ou=People and there I have stored our employees. I have to somehow divide them to our current employees and former employees. What I was thinking about was to create 2 groups, ...
1
vote
0answers
270 views

In OpenLDAP, what does the “manage” access level mean?

Edit: I have discovered the cause of the failures, which is a bug in my customized smbk5passwd module. Line 278 has a faulty #ifdef, causing the operation not to be marked as an internal ...
3
votes
3answers
3k views

Disallow global anonymous bind with cn=config

With slapd.conf you could globally disable anonymous binding and require authentication with the following static directives: disallow bind_anon require authc How can I achieve the same global ...
0
votes
0answers
3k views

How do I enable pwdPolicy in openldap on Centos 6?

Shouldn't it be enough to execute the following? Or do I need to do anything special to my users, like adding or having a specific objectClass or something? ldapadd -H ldaps://ldap.syco.net -x -D ...
1
vote
3answers
1k views

Cannot add custom attributes in OpenLDAP

I'd like to add custom attributes in OpenLDAP but I maybe do not understand the concept. What I've done was: I created the custom.schema attributetype ( 1.3.6.1.4.1.4203.666.100.122 NAME ( ...
4
votes
2answers
6k views

How do I get openldap on Centos 6 to write anything to it's log files

I don't get any information in my log file for openldap on my Centos 6 server. This is how i configured it. SELinux is disabled at the moment. First created a folder where I'd like to store the log ...
2
votes
2answers
2k views

How do I add olcAuditLogConfig to openldap on Centos 6

Regarding to 'man slapo-auditlog' I should just need to add the following. dn: olcOverlay=auditlog,olcDatabase={1}hdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: ...
1
vote
1answer
77 views

How is centos packages build?

Where do I find information about how a specific package in centos is build. Ie. what flags has been used on ./configure etc. At the moment I'm trying to figure out how slapd (openldap-servers) are ...
24
votes
2answers
57k views

How do I configure LDAP on Centos 6 for user authentication in the most secure and correct way?

During the last couple of days I have been using a lot of F-words, while browsing Internet for good documentation about how to setup an LDAP-server. So far I have found none, but plenty that are less ...
3
votes
2answers
2k views

Restoring openldap configuration from ldif file?

I am trying to restore my OpenLDAP server from an ldif file I made before it went horribly wrong. All of the websites I found talk about using slapadd but when I run slapadd -v -l ...
5
votes
3answers
3k views

OpenLdap synchronize home directory between client and server

I have recently setup Ubuntu ldap client authentication on karmic and lucid desktop clients and the ldap server is running on an 10.04 LTS server and this is the link I followed for client setup and ...
3
votes
1answer
786 views

Where do I find USEFUL official documentation for LDAP authentication on Centos/RHEL 6?

Does it exist any official installation documentation about how to setup an LDAP server that I can connect my clients to with authconfig. I'm will be Centos 6 and RHEL 6.1. What I can find is this. ...