OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
1answer
1k views

LDAP (slapd) ACL issue - can add but not modify entries

I have an issue with the ACL configuration of an LDAP server (slapd). The following ACL entry is active as the first rule that applies: {0}to ...
1
vote
2answers
400 views

SLES 11 - slapd is spamming the syslog

How do I get slapd to quiet down? Every second it's writing the same five lines to the /var/log/messages file. May 24 13:16:09 servername slapd[21299]: conn=5866 op=15204 SRCH base="" scope=0 deref=2 ...
2
votes
0answers
680 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
3
votes
1answer
188 views

What are the differences in schemas of main directory servers?

Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
0
votes
4answers
10k views

Kerberos Login Failed: Cannot resolve network address for KDC in requested realm - Kerio and Open Directory

I'm attempting to connect Kerio to an Open Directory instance. I'm using kinit to test the setup, and I get the following: $ kinit -V -S host/server.domain.co.uk@server.domain.co.uk ...
3
votes
1answer
593 views

Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory

Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
0
votes
1answer
331 views

Using OpenLDAP's meta backend to map incoming user to someone else

I am attempting to set up an LDAP "tunnel" to work around an application that requires a configuration slightly different to my environment. I need to be able to bind as USER1 to an LDAP server & ...
0
votes
1answer
298 views

connecting exim4 to openldap on remote server

I have a server running qmail with about 300 user accounts on a ubuntu version 8 server. I would like to migrate qmail to a new mta such as exim4.x. I have a VM setup using redhat enterprise version 6 ...
2
votes
2answers
2k views

Active Directory Authentication with LDAP proxy

We have a services in a isolated network. These services need to authenticate users against the Active Directory server. However the Active Directory server is not directly available so I have to ...
1
vote
0answers
324 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
3
votes
1answer
2k views

Configure Freeradius to check a connecting user against multiple LDAP groups

I'm setting up a Cisco ASA as a client vpn server. The appliance is relying on freeradius to authenticate the users. Freeradius has in turn been configured to query OpenLDAP. The modules/ldap file ...
2
votes
1answer
239 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
1
vote
1answer
607 views

OpenLDAP on CentOS 6.2 (@ localhost)

I'm trying to configure openldap on CentOS 6.2, I'm just testing openldap on my server at home, so I don't have any DNS server and stuff like that. I already installed openldap using the following ...
0
votes
2answers
604 views

getting permission denied while creating rpm through rpm package manager on RHEL 5.3

I am trying to create rpm through rpm package manager. Following is my spec file: **# This is a spec file for openldappkg** %define _topdir /osp/rpmBuildOpenLdap %define name openldap %define ...
0
votes
2answers
105 views

What is the difference between starting slapd through service and slapd command?

What is the difference between running slapd using service slapd start OR slapd ? How can I pass options to the service slapd start command, like slapd -h ldap:// -f salpd.conf? Thanks.
0
votes
4answers
357 views

How to know which berkley db openldap is refering to?

I have two berkeley dbs installed on the RHEL 5.3. Now, I am confused that which one openldap is referring as its backend. Following is the slapd.conf: include ...
0
votes
1answer
928 views

slapd not running

I am new to Red Hat Enterprise Linux 5.3(Tikanga) as well as to open ldap.As openldap comes by default with the red hat.So i have installed berkeley database db-5.3.15.tar.gz Version of already ...
2
votes
1answer
114 views

openldap search acl

I'm trying to write an access control for OpenLDAP to allow a user to search with a certain base dn, but only get results back from certain sub dn's. I've played with lots of different rules but cant ...
2
votes
2answers
635 views

Problems Installing slapd On Ubuntu Server 11.10

I know that there's a Ubuntu-specific StackExchange website, but I thought that I'd ask here because it's a server-specific question. If I'm wrong in my logic... Well, you people are better at this ...
0
votes
1answer
414 views

Credentials caching in OpenLDAP proxy

I am creating LDAP proxy server using OpenLDAP, server will be used for user authentication (using simple bind over SSL/TLS). Is there a way to make OpenLDAP proxy to cache simple bind credentials and ...
0
votes
1answer
7k views

User not found for cn=config in OpenLDAP?

We're running OpenLDAP on Ubuntu 10.04. I'm able to access and use the front end with cn=admin,dc=ourcompany,dc=com and my password. But I'm unable to change the server's configuration (like ...
2
votes
1answer
100 views

ldap schema in development should it match production?

I been using LDAP for many years now and most of the firms I worked for used a development LDAP schema that was identical to the production and QA (staging) schemas. An example suffix would be: ...
0
votes
3answers
203 views

Groups as users in LDAP

I want to group users in project users in LDAP. Lets say there are user1, user2, user3, each with a password and ssh-key. I want to group them in project1, project2. Given that user1 is member of ...
0
votes
1answer
262 views

Authenticate Teamcity against LDAP using StartTLS

I am running a 6.5 version of Teamcity on a Debian Squeeze server and I use OpenLDAP to authenticate users. I know I can use LDAPS to be able to use encrypted password authentication, however this ...
3
votes
1answer
5k views

CentOS 6.2 there is no slapd.conf after installating openldap

I have just installed fresh Centos 6.2 with openldap and samba with yum command. I'm having a bit of issue with finding the slapd.conf file. There is a folder for slap.d/ but no conf file in it by ...
5
votes
2answers
3k views

FreeRADIUS2 and LDAP Authentication

I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
0
votes
1answer
300 views

Change Root DSE in OpenLDAP

To start, I am an OpenLDAP newbie. I hope my terminology is correct, but there's no guarantee. I am trying to migrate our OpenLDAP server to a new box and, in the process, update our LDAP tree to ...
1
vote
1answer
2k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
11
votes
6answers
26k views

CentOS 6 + LDAP + NFS. File ownership is stuck on “nobody”

I've been trying to get LDAP authentication and NFS exported home directories on CentOS 6 working for a few days now. I've gotten to the point that I can now login to the client machine using the ...
0
votes
1answer
328 views

OpenLDAP MySQL Integration - Database Location for OpenLDAP back-sql metadata mapping tables

I am trying to configure and OpenLDAP server on Ubuntu 10.04 to use a mysql database as its datasource. I am following the guides about the back-sql and realize that in order to map mysql schema with ...
3
votes
1answer
2k views

Setting up a Linux client for OpenLDAP over SSL

I'm trying to set up SSL with a server running OpenLDAP (and using OpenSSL, not GnuTLS). The server seems to be working fine: I can authenticate using ldap:// and can also use ldaps:// from Apache ...
2
votes
3answers
3k views

389 Directory Server Administrative Limit Exceeded error?

I am trying to use 389 ds with large amounts of data as children of entries. I have tried doing a search on these entries using ldapsearch but I keep getting the following error: result: 11 ...
5
votes
2answers
9k views

ldap_add error (80) <olcModuleLoad> handler exited with 1

I'm trying to follow this tutorial to setup a basic LDAD server (OpenLDAP) for cleint authentication, but I am stuck on the step where I add the back-end configuration. I've created my backend.ldif ...
2
votes
2answers
325 views

OpenLdap Password policy overlays

I implemented the password policy overlay in OpenLDAP 2.4.23. I am also using check_password.so for the passwordCheckModule. Its working fine for the single user but the thing is that ...
0
votes
2answers
154 views

OpenLdap Password

I am using OpenLDAP 2.4.23 on Ubuntu 11.04. Every thing is working fine. I am using other server to authenticate via LDAP and that is working well. At the connecting server I am using a configuration ...
3
votes
1answer
720 views

Pidgin, OpenLDAP, Users changing own passwords

My issue I think boils down to OpenLDAP. I want my users to be able to change their passwords using the Pidgin chat client. At the moment, I have to set their passwords, and it's a pain. OpenLDAP ...
1
vote
0answers
41 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
1answer
181 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
0
votes
1answer
123 views

problem_ldap_bind

contents of file.ldif (le file.ldif) dn: dc=ircoms,dc=com changetype: add objectclass: top objectclass: dcObject objectclass: organization o: ircoms dc: ircoms dn: ou=People,dc=ircoms,dc=com ...
5
votes
2answers
5k views

OpenLDAP - where is my slapd.conf?

I have installed OpenLDAP on Unbuntu 10.04. I wanted to configure my ldap but I can't find slapd.conf in /etc/ldap/ In this directory there is a ldap.conf but seems not to be the same. How can I ...
1
vote
1answer
2k views

Openldap/Sasl/GSSAPI on Debian: Key table entry not found

The goal: to make an OpenLDAP server to authenticate using Kerberos V via GSSAPI Setup: several virtual machines running on freshly installed/updated Debian Squeeze A master KDC server ...
1
vote
1answer
771 views

Sometime ProFTPD session closed immediately after Login successful

The version that I'm using: ProFTPD Version: 1.3.3c (maint) Scoreboard Version: 01040003 Built: Wed Dec 1 2010 16:41:40 ICT Loaded modules: mod_cap/1.0 mod_ldap/2.8.22 mod_auth_pam/1.1 ...
0
votes
1answer
114 views

How to Change maxPasswdAge parameter in OpenLDAP in Linux

I am trying to find how to change some password policy settings in openLDAP (on a system-wide level - not on a per user level) such that ALL LDAP account users (ie existing and new users) have their ...
3
votes
1answer
4k views

Unable to modify schema in OpenLDAP using run-time configuration cn=config

I'm having trouble modifying the schema of an OpenLDAP installation using the run-time configuration (cn=config). What I'm trying to do is modify existing attributes and add new ones to a custom ...
1
vote
0answers
300 views

Can ApacheDS LDAP change root user name?

ApacheDS 1.5 has the following account by default. Bind dn or user: uid=admin,ou=system Bind password: secret i would like to change it to the following to avoid making changes in my code Bind dn ...
0
votes
1answer
220 views

Unable to install OpenLDAP on Red Hat Enterpise Linux

I'm trying to install PythonLDAP on my remote server, and in order to do this I have to install OpenLDAP as a prerequisite. I downloaded OpenLDAP, transferred it to my server, extracted it, ran the ...
0
votes
1answer
2k views

ldapsearch reads cert and lies about it, won't connect as a result

I'm pulling my hair out over ldap playing well with SSL/TLS. I can confirm that the server is listening AND responding on port 636 to SSL request. openssl s_client -connect freia.fqdn:636 -showcerts ...
5
votes
3answers
329 views

When setting up OpenLDAP for the first time, what are some things to keep in mind?

I'm in the process of reading up on documentation and setting up OpenLDAP to handle authentication throughout my network, for email, web services, user accounts, any anything else that I could throw ...
2
votes
1answer
2k views

Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap

I start with a fresh installation of openldap 2.4.28 on debian. They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library. It's hard to understand ...
1
vote
2answers
1k views

Changing user passwords under Kerberos/LDAP

I've set up Kerberos/LDAP on Ubuntu 11.04 Server according to this guide. My client machines are auto-mounting NFS volumes from the server using krb5. All is good: Users can log in to any of the ...