OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
2k views

ubuntu 12.10 openldap issue Invalid DN syntax (34)"

I'm following: https://help.ubuntu.com/12.10/serverguide/openldap-server.html and when I get to the part that says ldapsearch -x -LLL -H ldap:/// -b dc=example,dc=com dn I get: Invalid DN ...
1
vote
2answers
592 views

ldapsearch -ZZ hanging

I have just setup Openldap using the following instructions http://www.computerglitch.net/bin/texts/CentOS6_LDAP.php The normal connection returns what is expected but the tls test just hangs. Any ...
0
votes
1answer
1k views

OpenLDAP Administrative limit exeeded

I know there are limits in LDAP queries, therefore I setup a user without limits. But even so I'm facing "Administrative Limit exceeded" error. I include below an extract of the database ...
1
vote
1answer
2k views

Can't write to OpenLDAP: “shadow context; no update referral”

I just set up an OpenLDAP server (v2.4.23) and loaded some data. I can browse and edit via Apache Directory Studio, but not deletions all fail. For example, I tried to delete a list of DNs from a ...
0
votes
1answer
2k views

OpenLDAP: pwdChangedTime attribute isn't created after changing the password?

I'm going to integrate the check_mk's Multisite with OpenLDAP. After configuring the LDAP connector, I get the following error when opening the "Users & Contacts" page: Error executing sync hook ...
0
votes
1answer
315 views

How to grant write access to an object to a group defined in an attribute of the object?

I'm trying to get access control for writing to groups as automated as possible, in as much as I would like LDAP to be able to determine who is able to write based on other attributes. I've been able ...
1
vote
1answer
244 views

slapd 2.4.23 hangs on ldaps connections

New install of CentOS 6.3, openldap-servers-2.4.23. Generated a new certificate request, signed the cert, started slapd. ldapsearch responds on ldapi:/// and ldap:///. However, as soon as a request is ...
1
vote
1answer
175 views

LDAP-Google Apps exclusion list

I'm trying to set-up synchronization between my OpenLDAP server and Google Apps. There are some users accounts already created in Google Apps which are not in my OpenLDAP server. That accounts are ...
1
vote
2answers
574 views

LDIF: Modify attr if exists; Add if not exists

Is there a way to do one of the following in an LDIF file? Ignore error (attr not found) when trying to delete an attribute Or: If attribute exists, modify it If it doesn't exist, add it
2
votes
1answer
386 views

Why cannot make test when installing OpenLDAP?

I've tried to install OpenLDAP with some steps I did before in other installation under the same conditions in Ubuntu 12.04 I've followed the manual that OpenLDAP has on line... But when I try to ...
3
votes
2answers
12k views

“no global superior knowledge” while adding a country

I must add an organizationalunit like this into a freshly installed OpenLDAP (on Ubuntu 12.04) : dn: ou=MYREGION, ou=MYAPP, ou=GROUPS, o=myorganization, c=fr ou: MYREGION objectClass: top ...
0
votes
1answer
2k views

Modifying OpenLDAP ldif file throwing an error, but successfully configure?

I was configuring OpenLDAP on my Fedora 17. When doing this slaptest, I got this output: 50f16531 hdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (2). Expect poor ...
2
votes
1answer
3k views

ldap_bind: Invalid credentials (49) using openLDAP

I understand this error has been asked quite a few times on Server Fault and I have done some extensive googling, however, I can not, for the life of me, figure out exactly why I am unable to ...
2
votes
0answers
54 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
0
votes
3answers
10k views

How to change expired LDAP user password under linux?

can somebody give an advice how to change the LDAP password already expired? I have an LDAP user and the password for this user is expired: # su user You are required to change your password ...
3
votes
1answer
2k views

Why ldapsearch is not working with anonymous bind after upgrading OpenLDAP to v2.4?

I have a setup of OpenLDAP v2.3 which I am using for last few years. Following are the lines in slapd.conf for access control. access to dn.one="o=abc, c=IN" by * read access to ...
1
vote
2answers
347 views

Looking for advice on LDAP objectClasses for syncing with Google Apps

I am setting up an OpenLDAP server on Ubuntu so that this will be the authoritative user database for authentication. I'm going to be using Atlassian Crowd with it so that Google Apps can then use SSO ...
11
votes
2answers
7k views

Configure OpenLDAP with TLS=required

Nowadays, OpenLDAP needs to be configured with ldapmodify cn=config, as describe here. But nowhere I can find how you configure it to only accept TLS traffic. I just confirmed that our server accepts ...
1
vote
1answer
1k views

Postfix: LDAP not working (warning: dict_ldap_lookup: Search base not found: 32: No such object)

I set up LDAP access with postfix. ldapsearch -D "cn=postfix,ou=users,ou=system,[domain]" -w postfix -b "ou=users,ou=people,[domain]" -s sub "(&(objectclass=inetOrgPerson)(mail=[mailaddr]))" ...
0
votes
1answer
62 views

objectClass in openldap.

I am working on openldap in my linux box (centos) as testing.I create a base file to discuss with you about objectClass functionality & its impact if we not write.I write objectClass two times i.e ...
1
vote
1answer
6k views

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 ...
1
vote
4answers
4k views

How to add new attribute to an existing LDAP user objects

I want to add mail attribute to the existing ldap users. I think, its possible with using ldapmodify but not sure how. I have done that using phpldapadmin web GUI manually, but I have like more than ...
4
votes
2answers
2k views

OpenLdap TLS authentication setup

I am trying to setup openldap on ubuntu 12.04 by following this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html When I tried to enable TLS on the server by creating a self signed ...
3
votes
1answer
2k views

How to add admin users in 389 LDAP, fedora directory server

I want to create couple of Admin users who have access to create/delete users on a particular group/Organization Unit. For example, User: uid=testadmin, ou=people, dc=my,dc=net Should have access ...
1
vote
2answers
2k views

OpenLDAP mirror mode replication failing with TLS behind a load balancer

I have two OpenLDAP servers that are both running TLS. They are: ldap1.mydomain.com ldap2.mydomain.com I also have a load balancer cluster with a dns name of it's own: ldap.mydomain.com The SSL ...
1
vote
1answer
725 views

mod_authnz_ldap not finding objects but can't figure out why?

from the console I run: ldapsearch -D cn=admin,dc=psikon,dc=net -LLL -W and I get an entry: dn: cn=megatron,ou=Executive,dc=psikon,dc=net sn: megatron objectClass: inetOrgPerson objectClass: top ...
2
votes
1answer
5k views

LDAP object class violation: attribute ou not allowed in suffix?

I am about to set up a LDAP directory. It is used as a tool to communicate user permissions from a web application to WebDav file system access, e.g. adding a user to the web platform shall allow ...
1
vote
1answer
336 views

arch openldap authentication failure

I setup the openldap, all look fine but i cant setup authentication, #getent shadow | grep user user:*::::::: tuser:*::::::: tuser2:*::::::: #getent passwd | grep user ...
2
votes
1answer
15k views

ldap_modify: Insufficient access (50)

I am running an OpenLDAP 2.4 server that uses the SSL service for communication. It works for lookups. I am trying to add mirror mode replication. So this is the command that I'm executing: ...
1
vote
0answers
217 views

openSuse and openldap:ldap only login

I 've managed to setup ldap server and i can search it succefully from the server machine. i ve added to the database all info except from the fstab file and automount info. I migrated succefully the ...
2
votes
2answers
1k views

LDAP 389: Auto user creation at the client machines

I have setup an 389 directory server on Centos 6. User authentication works fine, however, I have to create individual users on each client machine after creating the user at the directory server. ...
2
votes
1answer
2k views

OpenLDAP Authentication UID vs CN issues

I'm having trouble authenticating services using uid for authentication, which I thought was the standard method for authentication on the user. So basically, my users are added in ldap like this: # ...
1
vote
0answers
309 views

Ubuntu - Installing OpenLDAP with meta?

I am trying to host an LDAP service that can help proxy between multiple LDAP servers. An example found here: http://blog.sejo.be/2010/01/8/openldap-en-3-ad-servers/ I thought I would give OpenLDAP a ...
1
vote
0answers
921 views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
2
votes
0answers
408 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
3
votes
1answer
8k views

How to add a new attribute to an existing LDAP objectclass?

I created a custom LDAP objectClass, but forgot a couple attributes before I added it to my OpenLDAP server. I followed the instructions on this Ubuntu doc page: ...
0
votes
1answer
728 views

Configuring openLDAP in CentOS 6.3

I have followed the instructions found in this question until the part that I have to do an ldapadd using "cn=Manager,dc=syco,dc=net" as DN. However, I am getting the error Invalid Credentials (49) ...
1
vote
0answers
203 views

LDAP not showing secondary groups

Currently, I have a LDAP server (running ClearOS if that makes any difference) containing a database of users. So, I went and setup LDAP on a couple of my debian VMs, using libpam-ldapd and I ...
3
votes
3answers
2k views

How do I renew an expired Ubuntu OpenLDAP SSL Certificate

We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd. Here are the commands we used: openssl verify ...
0
votes
1answer
132 views

Need help for adding userss and groups in Openldap server

I am using Centos 5.3 to configure my openldap server. Everything is going ok. The problem which I am facing is how to add users and groups in my ldap server. My slapd.conf is # vi ...
1
vote
2answers
2k views

Openldap startup problems after upgrade

I am trying to syncrhonize a ldap slave and master server. The master server is using openldap 2.3.43-12 and the slave server is using openldap 2.4.23. I copied over the files in /var/lib/ldap, ...
0
votes
1answer
2k views

Samba with remote LDAP authentication doesn`t see users properly

I'm trying to setup a samba server authenticated by a remote LDAP server, and I'm having some problems that I can't figure how to solve. I was able to make an getent passwd at samba server and I ...
1
vote
0answers
486 views

How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package

I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package. I have used the following command to ...
1
vote
0answers
42 views

having trouble with bog standard openldap server db

I am having trouble getting an "out of the box" openldap server working. The examples on the openldap site still refer to the slapd.conf file, but the install does not make that. if I start the ...
1
vote
2answers
1k views

How to enable catch-all email in iRedMail Open Source edition?

How to create catch-all email alias for domain in iRedMail Open Source edition? I know that's possible via LDAP and found the following instructions: ...
0
votes
2answers
212 views

how do you set the admin password on openldap 2.4

I am getting started with openLdap 2.4 and am having a bit of trouble, all the examples I see seem to refer to previous versions which used the text config file slapd.conf but from what I see on ...
3
votes
4answers
10k views

CentOS openLDAP cert trust issues

# LDAPTLS_CACERTDIR=/etc/ssl/certs/ ldapwhoami -x -ZZ -H ldaps://ldap.domain.tld ldap_start_tls: Can't contact LDAP server (-1) additional info: TLS error -8172:Peer's certificate issuer has ...
2
votes
1answer
3k views

LDAP userPassword encryption?

When I use ldapsearch command, I see my password (is 'abc123') is encrypted in openldap: userPassword:: e1NTSEF9THk4YmtNTUxHV09sOEYvdUdKRE1McFR6eTU2OWNQRVo= I tried to encode my password on ...
-1
votes
1answer
76 views

openLDAP restrict user

Hi I'm newbie on LDAP but I was able to follow ubuntu's installation guide, add few user using posixgroup then successfully accessed the ssh using the created account. Now, lets say I have user1, and ...
0
votes
2answers
743 views

Kerberos with LDAP backend still using db2

I've installed and configured LDAP, installed and configured kerberos to use LDAP as the backend, as follows: [dbdefaults] ldap_kerberos_container_dn = dc=voltage,dc=com [dbmodules] ...