OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
405 views

Delegate administration rights to OU in OpenLDAP?

How would I allow a user to administer subordinates of only a single OU in an OpenLDAP directory? The goal here is I want the user to be able to create and update users under a specific OU only. I ...
1
vote
0answers
803 views

LDAP groups not always mapping, Ubuntu server 12.04

Ubuntu 12.04 server, AMD64, authentication via LDAP. I'm having trouble getting the LDAP groups to map to my user account when logging in, even though 'getent group' shows the correct set of groups ...
1
vote
1answer
191 views

How can I add another naming context to my ldap server using the olc method?

I am trying to add another naming context to my ldap server using the olc, but so far I am new to this and haven't found a example explaining this. I guess I could use a tool like apacheDS but I want ...
1
vote
2answers
157 views

Error getting PAM / Linux integrated with Active Directory

I'm trying to add a Linux server to a network which is controlled by AD. The aim is that users of the server will be able to authenticate against the AD domain. I have Kerberos working, but NSS / ...
0
votes
1answer
1k views

OpenLDAP fails to stop ,but starts Ok but then status shows as slapd stopped

We are running openldap 2.3.43 on RHel 5.3.,Our LDAP server has been behaving erratically lately 1.It fails to stop when you issue command service ldap restart but it "seems" to starts OK ...
4
votes
2answers
2k views

Multiple LDAP servers with mod_authn_alias: failover not working when the first LDAP is down?

I've been trying to setup redundant LDAP servers with Apache 2.2.3. /etc/httpd/conf.d/authn_alias.conf <AuthnProviderAlias ldap master> AuthLDAPURL ...
0
votes
2answers
186 views

how to add groupOfEntries object class to openLDAP

I am working on the design of LDAP structure, that basically should hold users and groups. There should be support for nested groups (so I thought on using groupOfNames object class) and for the ...
0
votes
1answer
427 views

OpenLDAP replication fails, “syncrepl_entry: rid=666 be_modify failed (20)”

I've configured a second host to replicate the main LDAP server via syncrepl in the slapd.conf: syncrepl rid=666 provider=ldaps://my-main-server.com type=refreshAndPersist ...
1
vote
1answer
1k views

LDAP (slapd) ACL issue - can add but not modify entries

I have an issue with the ACL configuration of an LDAP server (slapd). The following ACL entry is active as the first rule that applies: {0}to ...
1
vote
2answers
413 views

SLES 11 - slapd is spamming the syslog

How do I get slapd to quiet down? Every second it's writing the same five lines to the /var/log/messages file. May 24 13:16:09 servername slapd[21299]: conn=5866 op=15204 SRCH base="" scope=0 deref=2 ...
2
votes
0answers
683 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
3
votes
1answer
188 views

What are the differences in schemas of main directory servers?

Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished ...
0
votes
4answers
11k views

Kerberos Login Failed: Cannot resolve network address for KDC in requested realm - Kerio and Open Directory

I'm attempting to connect Kerio to an Open Directory instance. I'm using kinit to test the setup, and I get the following: $ kinit -V -S host/server.domain.co.uk@server.domain.co.uk ...
3
votes
1answer
603 views

Add memberOf attribute to all users in OpenLDAP on OS X Lion Server Open Directory

Our school's website has the ability to pull user authentication from a LDAP source. They "support" and LDAP. Unfortunately, to pull group membership you must have a memberOf attribute in each users' ...
0
votes
1answer
335 views

Using OpenLDAP's meta backend to map incoming user to someone else

I am attempting to set up an LDAP "tunnel" to work around an application that requires a configuration slightly different to my environment. I need to be able to bind as USER1 to an LDAP server & ...
0
votes
1answer
316 views

connecting exim4 to openldap on remote server

I have a server running qmail with about 300 user accounts on a ubuntu version 8 server. I would like to migrate qmail to a new mta such as exim4.x. I have a VM setup using redhat enterprise version 6 ...
2
votes
2answers
2k views

Active Directory Authentication with LDAP proxy

We have a services in a isolated network. These services need to authenticate users against the Active Directory server. However the Active Directory server is not directly available so I have to ...
1
vote
0answers
327 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
3
votes
1answer
2k views

Configure Freeradius to check a connecting user against multiple LDAP groups

I'm setting up a Cisco ASA as a client vpn server. The appliance is relying on freeradius to authenticate the users. Freeradius has in turn been configured to query OpenLDAP. The modules/ldap file ...
2
votes
1answer
242 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
1
vote
1answer
622 views

OpenLDAP on CentOS 6.2 (@ localhost)

I'm trying to configure openldap on CentOS 6.2, I'm just testing openldap on my server at home, so I don't have any DNS server and stuff like that. I already installed openldap using the following ...
0
votes
2answers
621 views

getting permission denied while creating rpm through rpm package manager on RHEL 5.3

I am trying to create rpm through rpm package manager. Following is my spec file: **# This is a spec file for openldappkg** %define _topdir /osp/rpmBuildOpenLdap %define name openldap %define ...
0
votes
2answers
106 views

What is the difference between starting slapd through service and slapd command?

What is the difference between running slapd using service slapd start OR slapd ? How can I pass options to the service slapd start command, like slapd -h ldap:// -f salpd.conf? Thanks.
0
votes
4answers
363 views

How to know which berkley db openldap is refering to?

I have two berkeley dbs installed on the RHEL 5.3. Now, I am confused that which one openldap is referring as its backend. Following is the slapd.conf: include ...
0
votes
1answer
963 views

slapd not running

I am new to Red Hat Enterprise Linux 5.3(Tikanga) as well as to open ldap.As openldap comes by default with the red hat.So i have installed berkeley database db-5.3.15.tar.gz Version of already ...
2
votes
1answer
114 views

openldap search acl

I'm trying to write an access control for OpenLDAP to allow a user to search with a certain base dn, but only get results back from certain sub dn's. I've played with lots of different rules but cant ...
2
votes
2answers
652 views

Problems Installing slapd On Ubuntu Server 11.10

I know that there's a Ubuntu-specific StackExchange website, but I thought that I'd ask here because it's a server-specific question. If I'm wrong in my logic... Well, you people are better at this ...
0
votes
1answer
445 views

Credentials caching in OpenLDAP proxy

I am creating LDAP proxy server using OpenLDAP, server will be used for user authentication (using simple bind over SSL/TLS). Is there a way to make OpenLDAP proxy to cache simple bind credentials and ...
0
votes
1answer
7k views

User not found for cn=config in OpenLDAP?

We're running OpenLDAP on Ubuntu 10.04. I'm able to access and use the front end with cn=admin,dc=ourcompany,dc=com and my password. But I'm unable to change the server's configuration (like ...
2
votes
1answer
101 views

ldap schema in development should it match production?

I been using LDAP for many years now and most of the firms I worked for used a development LDAP schema that was identical to the production and QA (staging) schemas. An example suffix would be: ...
0
votes
3answers
205 views

Groups as users in LDAP

I want to group users in project users in LDAP. Lets say there are user1, user2, user3, each with a password and ssh-key. I want to group them in project1, project2. Given that user1 is member of ...
0
votes
1answer
266 views

Authenticate Teamcity against LDAP using StartTLS

I am running a 6.5 version of Teamcity on a Debian Squeeze server and I use OpenLDAP to authenticate users. I know I can use LDAPS to be able to use encrypted password authentication, however this ...
4
votes
1answer
6k views

CentOS 6.2 there is no slapd.conf after installating openldap

I have just installed fresh Centos 6.2 with openldap and samba with yum command. I'm having a bit of issue with finding the slapd.conf file. There is a folder for slap.d/ but no conf file in it by ...
5
votes
2answers
3k views

FreeRADIUS2 and LDAP Authentication

I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
0
votes
1answer
311 views

Change Root DSE in OpenLDAP

To start, I am an OpenLDAP newbie. I hope my terminology is correct, but there's no guarantee. I am trying to migrate our OpenLDAP server to a new box and, in the process, update our LDAP tree to ...
1
vote
1answer
2k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
11
votes
6answers
27k views

CentOS 6 + LDAP + NFS. File ownership is stuck on “nobody”

I've been trying to get LDAP authentication and NFS exported home directories on CentOS 6 working for a few days now. I've gotten to the point that I can now login to the client machine using the ...
0
votes
1answer
336 views

OpenLDAP MySQL Integration - Database Location for OpenLDAP back-sql metadata mapping tables

I am trying to configure and OpenLDAP server on Ubuntu 10.04 to use a mysql database as its datasource. I am following the guides about the back-sql and realize that in order to map mysql schema with ...
3
votes
1answer
2k views

Setting up a Linux client for OpenLDAP over SSL

I'm trying to set up SSL with a server running OpenLDAP (and using OpenSSL, not GnuTLS). The server seems to be working fine: I can authenticate using ldap:// and can also use ldaps:// from Apache ...
2
votes
3answers
3k views

389 Directory Server Administrative Limit Exceeded error?

I am trying to use 389 ds with large amounts of data as children of entries. I have tried doing a search on these entries using ldapsearch but I keep getting the following error: result: 11 ...
5
votes
2answers
10k views

ldap_add error (80) <olcModuleLoad> handler exited with 1

I'm trying to follow this tutorial to setup a basic LDAD server (OpenLDAP) for cleint authentication, but I am stuck on the step where I add the back-end configuration. I've created my backend.ldif ...
2
votes
2answers
329 views

OpenLdap Password policy overlays

I implemented the password policy overlay in OpenLDAP 2.4.23. I am also using check_password.so for the passwordCheckModule. Its working fine for the single user but the thing is that ...
0
votes
2answers
155 views

OpenLdap Password

I am using OpenLDAP 2.4.23 on Ubuntu 11.04. Every thing is working fine. I am using other server to authenticate via LDAP and that is working well. At the connecting server I am using a configuration ...
3
votes
1answer
753 views

Pidgin, OpenLDAP, Users changing own passwords

My issue I think boils down to OpenLDAP. I want my users to be able to change their passwords using the Pidgin chat client. At the moment, I have to set their passwords, and it's a pain. OpenLDAP ...
1
vote
0answers
42 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
1answer
183 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
0
votes
1answer
123 views

problem_ldap_bind

contents of file.ldif (le file.ldif) dn: dc=ircoms,dc=com changetype: add objectclass: top objectclass: dcObject objectclass: organization o: ircoms dc: ircoms dn: ou=People,dc=ircoms,dc=com ...
5
votes
2answers
5k views

OpenLDAP - where is my slapd.conf?

I have installed OpenLDAP on Unbuntu 10.04. I wanted to configure my ldap but I can't find slapd.conf in /etc/ldap/ In this directory there is a ldap.conf but seems not to be the same. How can I ...
1
vote
1answer
2k views

Openldap/Sasl/GSSAPI on Debian: Key table entry not found

The goal: to make an OpenLDAP server to authenticate using Kerberos V via GSSAPI Setup: several virtual machines running on freshly installed/updated Debian Squeeze A master KDC server ...
1
vote
1answer
789 views

Sometime ProFTPD session closed immediately after Login successful

The version that I'm using: ProFTPD Version: 1.3.3c (maint) Scoreboard Version: 01040003 Built: Wed Dec 1 2010 16:41:40 ICT Loaded modules: mod_cap/1.0 mod_ldap/2.8.22 mod_auth_pam/1.1 ...