OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

1
vote
2answers
523 views

LDIF: Modify attr if exists; Add if not exists

Is there a way to do one of the following in an LDIF file? Ignore error (attr not found) when trying to delete an attribute Or: If attribute exists, modify it If it doesn't exist, add it
2
votes
1answer
366 views

Why cannot make test when installing OpenLDAP?

I've tried to install OpenLDAP with some steps I did before in other installation under the same conditions in Ubuntu 12.04 I've followed the manual that OpenLDAP has on line... But when I try to ...
3
votes
2answers
11k views

“no global superior knowledge” while adding a country

I must add an organizationalunit like this into a freshly installed OpenLDAP (on Ubuntu 12.04) : dn: ou=MYREGION, ou=MYAPP, ou=GROUPS, o=myorganization, c=fr ou: MYREGION objectClass: top ...
0
votes
1answer
2k views

Modifying OpenLDAP ldif file throwing an error, but successfully configure?

I was configuring OpenLDAP on my Fedora 17. When doing this slaptest, I got this output: 50f16531 hdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (2). Expect poor ...
2
votes
1answer
2k views

ldap_bind: Invalid credentials (49) using openLDAP

I understand this error has been asked quite a few times on Server Fault and I have done some extensive googling, however, I can not, for the life of me, figure out exactly why I am unable to ...
2
votes
0answers
54 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
0
votes
3answers
10k views

How to change expired LDAP user password under linux?

can somebody give an advice how to change the LDAP password already expired? I have an LDAP user and the password for this user is expired: # su user You are required to change your password ...
3
votes
1answer
2k views

Why ldapsearch is not working with anonymous bind after upgrading OpenLDAP to v2.4?

I have a setup of OpenLDAP v2.3 which I am using for last few years. Following are the lines in slapd.conf for access control. access to dn.one="o=abc, c=IN" by * read access to ...
1
vote
2answers
341 views

Looking for advice on LDAP objectClasses for syncing with Google Apps

I am setting up an OpenLDAP server on Ubuntu so that this will be the authoritative user database for authentication. I'm going to be using Atlassian Crowd with it so that Google Apps can then use SSO ...
10
votes
2answers
6k views

Configure OpenLDAP with TLS=required

Nowadays, OpenLDAP needs to be configured with ldapmodify cn=config, as describe here. But nowhere I can find how you configure it to only accept TLS traffic. I just confirmed that our server accepts ...
1
vote
1answer
1k views

Postfix: LDAP not working (warning: dict_ldap_lookup: Search base not found: 32: No such object)

I set up LDAP access with postfix. ldapsearch -D "cn=postfix,ou=users,ou=system,[domain]" -w postfix -b "ou=users,ou=people,[domain]" -s sub "(&(objectclass=inetOrgPerson)(mail=[mailaddr]))" ...
0
votes
1answer
62 views

objectClass in openldap.

I am working on openldap in my linux box (centos) as testing.I create a base file to discuss with you about objectClass functionality & its impact if we not write.I write objectClass two times i.e ...
1
vote
1answer
5k views

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 ...
1
vote
4answers
3k views

How to add new attribute to an existing LDAP user objects

I want to add mail attribute to the existing ldap users. I think, its possible with using ldapmodify but not sure how. I have done that using phpldapadmin web GUI manually, but I have like more than ...
4
votes
2answers
2k views

OpenLdap TLS authentication setup

I am trying to setup openldap on ubuntu 12.04 by following this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html When I tried to enable TLS on the server by creating a self signed ...
3
votes
1answer
2k views

How to add admin users in 389 LDAP, fedora directory server

I want to create couple of Admin users who have access to create/delete users on a particular group/Organization Unit. For example, User: uid=testadmin, ou=people, dc=my,dc=net Should have access ...
1
vote
2answers
2k views

OpenLDAP mirror mode replication failing with TLS behind a load balancer

I have two OpenLDAP servers that are both running TLS. They are: ldap1.mydomain.com ldap2.mydomain.com I also have a load balancer cluster with a dns name of it's own: ldap.mydomain.com The SSL ...
1
vote
1answer
678 views

mod_authnz_ldap not finding objects but can't figure out why?

from the console I run: ldapsearch -D cn=admin,dc=psikon,dc=net -LLL -W and I get an entry: dn: cn=megatron,ou=Executive,dc=psikon,dc=net sn: megatron objectClass: inetOrgPerson objectClass: top ...
2
votes
1answer
5k views

LDAP object class violation: attribute ou not allowed in suffix?

I am about to set up a LDAP directory. It is used as a tool to communicate user permissions from a web application to WebDav file system access, e.g. adding a user to the web platform shall allow ...
1
vote
1answer
329 views

arch openldap authentication failure

I setup the openldap, all look fine but i cant setup authentication, #getent shadow | grep user user:*::::::: tuser:*::::::: tuser2:*::::::: #getent passwd | grep user ...
2
votes
1answer
14k views

ldap_modify: Insufficient access (50)

I am running an OpenLDAP 2.4 server that uses the SSL service for communication. It works for lookups. I am trying to add mirror mode replication. So this is the command that I'm executing: ...
1
vote
0answers
208 views

openSuse and openldap:ldap only login

I 've managed to setup ldap server and i can search it succefully from the server machine. i ve added to the database all info except from the fstab file and automount info. I migrated succefully the ...
2
votes
2answers
1k views

LDAP 389: Auto user creation at the client machines

I have setup an 389 directory server on Centos 6. User authentication works fine, however, I have to create individual users on each client machine after creating the user at the directory server. ...
2
votes
1answer
2k views

OpenLDAP Authentication UID vs CN issues

I'm having trouble authenticating services using uid for authentication, which I thought was the standard method for authentication on the user. So basically, my users are added in ldap like this: # ...
1
vote
0answers
286 views

Ubuntu - Installing OpenLDAP with meta?

I am trying to host an LDAP service that can help proxy between multiple LDAP servers. An example found here: http://blog.sejo.be/2010/01/8/openldap-en-3-ad-servers/ I thought I would give OpenLDAP a ...
1
vote
0answers
889 views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
2
votes
0answers
388 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
3
votes
1answer
8k views

How to add a new attribute to an existing LDAP objectclass?

I created a custom LDAP objectClass, but forgot a couple attributes before I added it to my OpenLDAP server. I followed the instructions on this Ubuntu doc page: ...
0
votes
1answer
725 views

Configuring openLDAP in CentOS 6.3

I have followed the instructions found in this question until the part that I have to do an ldapadd using "cn=Manager,dc=syco,dc=net" as DN. However, I am getting the error Invalid Credentials (49) ...
1
vote
0answers
200 views

LDAP not showing secondary groups

Currently, I have a LDAP server (running ClearOS if that makes any difference) containing a database of users. So, I went and setup LDAP on a couple of my debian VMs, using libpam-ldapd and I ...
3
votes
3answers
2k views

How do I renew an expired Ubuntu OpenLDAP SSL Certificate

We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd. Here are the commands we used: openssl verify ...
0
votes
1answer
132 views

Need help for adding userss and groups in Openldap server

I am using Centos 5.3 to configure my openldap server. Everything is going ok. The problem which I am facing is how to add users and groups in my ldap server. My slapd.conf is # vi ...
1
vote
2answers
2k views

Openldap startup problems after upgrade

I am trying to syncrhonize a ldap slave and master server. The master server is using openldap 2.3.43-12 and the slave server is using openldap 2.4.23. I copied over the files in /var/lib/ldap, ...
0
votes
1answer
2k views

Samba with remote LDAP authentication doesn`t see users properly

I'm trying to setup a samba server authenticated by a remote LDAP server, and I'm having some problems that I can't figure how to solve. I was able to make an getent passwd at samba server and I ...
1
vote
0answers
470 views

How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package

I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package. I have used the following command to ...
1
vote
0answers
42 views

having trouble with bog standard openldap server db

I am having trouble getting an "out of the box" openldap server working. The examples on the openldap site still refer to the slapd.conf file, but the install does not make that. if I start the ...
1
vote
2answers
1k views

How to enable catch-all email in iRedMail Open Source edition?

How to create catch-all email alias for domain in iRedMail Open Source edition? I know that's possible via LDAP and found the following instructions: ...
0
votes
2answers
204 views

how do you set the admin password on openldap 2.4

I am getting started with openLdap 2.4 and am having a bit of trouble, all the examples I see seem to refer to previous versions which used the text config file slapd.conf but from what I see on ...
2
votes
4answers
9k views

CentOS openLDAP cert trust issues

# LDAPTLS_CACERTDIR=/etc/ssl/certs/ ldapwhoami -x -ZZ -H ldaps://ldap.domain.tld ldap_start_tls: Can't contact LDAP server (-1) additional info: TLS error -8172:Peer's certificate issuer has ...
2
votes
1answer
3k views

LDAP userPassword encryption?

When I use ldapsearch command, I see my password (is 'abc123') is encrypted in openldap: userPassword:: e1NTSEF9THk4YmtNTUxHV09sOEYvdUdKRE1McFR6eTU2OWNQRVo= I tried to encode my password on ...
-1
votes
1answer
76 views

openLDAP restrict user

Hi I'm newbie on LDAP but I was able to follow ubuntu's installation guide, add few user using posixgroup then successfully accessed the ssh using the created account. Now, lets say I have user1, and ...
0
votes
2answers
703 views

Kerberos with LDAP backend still using db2

I've installed and configured LDAP, installed and configured kerberos to use LDAP as the backend, as follows: [dbdefaults] ldap_kerberos_container_dn = dc=voltage,dc=com [dbmodules] ...
2
votes
1answer
4k views

ldap export and import

Is it possible to export all the data inside openldap for example using ldapsearch or some other tool to a (ldif?) file and then import everything on another server and put this in a script that would ...
2
votes
1answer
955 views

How to get openldap to honor pwdReset=TRUE

We have a custom application that's using openldap (2.4.32) as a user database. Per customer requirement, I'm modifying it to use openldap's ppolicy overlay. The requirement is to force the user to ...
12
votes
2answers
433 views

SSH only works after intentionally failed password

So, I'm having a rather weird problem. I have a server, that when I try to SSH into, immediately closes the connection if I type in the correct password on the first attempt. However, if I ...
3
votes
0answers
2k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
0
votes
1answer
46 views

openLDAP TLS using only IP addresses

Basically the problem is this: I am setting up an openLDAP server on a CentOS 6.3 and an openLDAP client on Ubuntu 11.04. The problem is, I don't know how to set-up a nameservice for the openLDAP ...
1
vote
0answers
4k views

How to configure OpenLDAP 2.4.23 for SSL on CentOS 6.3?

I have installed openldap 2.4.23 on CentOS 6.3 using the yum package 'openldap-servers'. When I follow instructions to configure openldap for SSL (such as ...
2
votes
3answers
260 views

ldap does not respond to ldapsearch with -ZZ parameter

I have followed the instructions found here up to the point where ldapsearch is executed with -ZZ. The problem is after executing ldapsearch with -ZZ, there is no more response. Is there any step ...
0
votes
1answer
2k views

Testlink stop working when configuring it to use LDAP

I have a TestLink webservice running on a server, and OpenLDAP running on other server. There are no firewall problems between them (I managed to configure Redmine, on the same server as TestLink, to ...