OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

5
votes
2answers
2k views

FreeRADIUS2 and LDAP Authentication

I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
0
votes
1answer
263 views

Change Root DSE in OpenLDAP

To start, I am an OpenLDAP newbie. I hope my terminology is correct, but there's no guarantee. I am trying to migrate our OpenLDAP server to a new box and, in the process, update our LDAP tree to ...
1
vote
1answer
1k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
8
votes
5answers
24k views

CentOS 6 + LDAP + NFS. File ownership is stuck on “nobody”

I've been trying to get LDAP authentication and NFS exported home directories on CentOS 6 working for a few days now. I've gotten to the point that I can now login to the client machine using the ...
0
votes
1answer
288 views

OpenLDAP MySQL Integration - Database Location for OpenLDAP back-sql metadata mapping tables

I am trying to configure and OpenLDAP server on Ubuntu 10.04 to use a mysql database as its datasource. I am following the guides about the back-sql and realize that in order to map mysql schema with ...
3
votes
1answer
1k views

Setting up a Linux client for OpenLDAP over SSL

I'm trying to set up SSL with a server running OpenLDAP (and using OpenSSL, not GnuTLS). The server seems to be working fine: I can authenticate using ldap:// and can also use ldaps:// from Apache ...
2
votes
2answers
2k views

389 Directory Server Administrative Limit Exceeded error?

I am trying to use 389 ds with large amounts of data as children of entries. I have tried doing a search on these entries using ldapsearch but I keep getting the following error: result: 11 ...
4
votes
1answer
8k views

ldap_add error (80) <olcModuleLoad> handler exited with 1

I'm trying to follow this tutorial to setup a basic LDAD server (OpenLDAP) for cleint authentication, but I am stuck on the step where I add the back-end configuration. I've created my backend.ldif ...
2
votes
2answers
307 views

OpenLdap Password policy overlays

I implemented the password policy overlay in OpenLDAP 2.4.23. I am also using check_password.so for the passwordCheckModule. Its working fine for the single user but the thing is that ...
0
votes
2answers
152 views

OpenLdap Password

I am using OpenLDAP 2.4.23 on Ubuntu 11.04. Every thing is working fine. I am using other server to authenticate via LDAP and that is working well. At the connecting server I am using a configuration ...
3
votes
1answer
619 views

Pidgin, OpenLDAP, Users changing own passwords

My issue I think boils down to OpenLDAP. I want my users to be able to change their passwords using the Pidgin chat client. At the moment, I have to set their passwords, and it's a pain. OpenLDAP ...
1
vote
0answers
41 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
1answer
170 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
0
votes
1answer
117 views

problem_ldap_bind

contents of file.ldif (le file.ldif) dn: dc=ircoms,dc=com changetype: add objectclass: top objectclass: dcObject objectclass: organization o: ircoms dc: ircoms dn: ou=People,dc=ircoms,dc=com ...
4
votes
2answers
4k views

OpenLDAP - where is my slapd.conf?

I have installed OpenLDAP on Unbuntu 10.04. I wanted to configure my ldap but I can't find slapd.conf in /etc/ldap/ In this directory there is a ldap.conf but seems not to be the same. How can I ...
1
vote
1answer
2k views

Openldap/Sasl/GSSAPI on Debian: Key table entry not found

The goal: to make an OpenLDAP server to authenticate using Kerberos V via GSSAPI Setup: several virtual machines running on freshly installed/updated Debian Squeeze A master KDC server ...
1
vote
1answer
697 views

Sometime ProFTPD session closed immediately after Login successful

The version that I'm using: ProFTPD Version: 1.3.3c (maint) Scoreboard Version: 01040003 Built: Wed Dec 1 2010 16:41:40 ICT Loaded modules: mod_cap/1.0 mod_ldap/2.8.22 mod_auth_pam/1.1 ...
0
votes
1answer
109 views

How to Change maxPasswdAge parameter in OpenLDAP in Linux

I am trying to find how to change some password policy settings in openLDAP (on a system-wide level - not on a per user level) such that ALL LDAP account users (ie existing and new users) have their ...
3
votes
1answer
4k views

Unable to modify schema in OpenLDAP using run-time configuration cn=config

I'm having trouble modifying the schema of an OpenLDAP installation using the run-time configuration (cn=config). What I'm trying to do is modify existing attributes and add new ones to a custom ...
1
vote
0answers
276 views

Can ApacheDS LDAP change root user name?

ApacheDS 1.5 has the following account by default. Bind dn or user: uid=admin,ou=system Bind password: secret i would like to change it to the following to avoid making changes in my code Bind dn ...
0
votes
1answer
205 views

Unable to install OpenLDAP on Red Hat Enterpise Linux

I'm trying to install PythonLDAP on my remote server, and in order to do this I have to install OpenLDAP as a prerequisite. I downloaded OpenLDAP, transferred it to my server, extracted it, ran the ...
0
votes
1answer
2k views

ldapsearch reads cert and lies about it, won't connect as a result

I'm pulling my hair out over ldap playing well with SSL/TLS. I can confirm that the server is listening AND responding on port 636 to SSL request. openssl s_client -connect freia.fqdn:636 -showcerts ...
5
votes
3answers
326 views

When setting up OpenLDAP for the first time, what are some things to keep in mind?

I'm in the process of reading up on documentation and setting up OpenLDAP to handle authentication throughout my network, for email, web services, user accounts, any anything else that I could throw ...
2
votes
1answer
2k views

Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap

I start with a fresh installation of openldap 2.4.28 on debian. They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library. It's hard to understand ...
1
vote
2answers
1k views

Changing user passwords under Kerberos/LDAP

I've set up Kerberos/LDAP on Ubuntu 11.04 Server according to this guide. My client machines are auto-mounting NFS volumes from the server using krb5. All is good: Users can log in to any of the ...
0
votes
1answer
238 views

Learning OpenLDAP cn=config: comments and reverting incorrect attempts

I'd like to learn how to configure OpenLDAP (2.4), with the objective to deploy it on an Ubuntu 10.04 LTS system. Since slapd.conf usage is deprecated, I'm trying to understand better how to use the ...
3
votes
1answer
173 views

When updating the schema in OpenLDAP, should we reload the master or the slave first?

We currently have one master server that is replicated to two read-only slaves. We are adding to the schema. Is it recommended to reload the master first or the slaves?
4
votes
1answer
440 views

Trying to authenticate to a Dell PowerConnect 5324 switch using FreeRADIUS and OpenLDAP

So here's the situation. I want to be able to use my LDAP credentials to log into this switch. Since there is no support for LDAP on the switch itself, I figured that FreeRADIUS has an LDAP module, ...
-2
votes
1answer
2k views

How to install LDAP server and add a user?

I need to test that our application can connect to more than one LDAP servers. We have one working one (running on OSX server). I need to setup another one. We tried to set LDAP server on SuSE using ...
0
votes
1answer
521 views

How to set Maximum Password Expiry in OpenLDAP Linux

I am trying to find how to change some password policy settings in OpenLDAP (on a system-wide level, not on a per user level) such that all LDAP account users (i.e., existing and new users) have their ...
1
vote
1answer
695 views

ldapadd with automatic support for replace if entry already exists

I've been doing some testing with ldapadd and ldapmodify and what I noticed is: -ldapadd will fail if the entry already exists: => hdb_tool_entry_put: txn_aborted! DB_KEYEXIST: Key/data pair ...
1
vote
0answers
777 views

Password expires 45 days even though 'Password Must Change' is set to 'never' (Samba+LDAP)

Since a few months ago Samba ask each of our users to change password at log on every 45 days (the default) and I have not been able to disable it. This setup had been running for 2 years before then ...
0
votes
2answers
1k views

Issue enabling accesslog overlay with Openldap 2.4.21

I'm running openldap 2.4.21 on ubuntu server 10.04 and trying to enable the accesslog overlay using the cn=config configuration style (so not slapd.conf). My main database is olcDatabase={1}hdb so I ...
1
vote
1answer
752 views

Openldap ppolicy, how to unlock account?

I have enabled OpenLDAP password policy overlay and account lockout is now working fine. On 5 authentication failures the account is getting locked out. On resetting the password the account becomes ...
0
votes
1answer
1k views

LDAP: error code 49 - Invalid Credentials when connecting jira to Mac OS X Lion Server LDAP

I have the following setup: - LDAP Server from Mac OS X running with default configuration - JIRA Standlone installation I want to: Use LDAP for user authentication for jura username: ...
0
votes
1answer
389 views

Visio: OpenLDAP, import LDIF?

I would like create Visio diagrams of an OpenLDAP directory. Is there a way to import an LDIF, or connect Visio to the LDAP Server? Thanks!
1
vote
1answer
1k views

Account lockout using Openldap

What is the best way to implement account lockout in openldap? I have an openldap server with Ubuntu desktop client connecting to it for authentication. I want he accounts to locked out after say 5 ...
6
votes
2answers
619 views

Is OpenLDAP a viable alternative to Windows LDAP?

Just a simple question; this question is not meant to attack Windows or start a flame war in anyway. I want a viable solution to the way authentication is done in Windows DC environment (LDAP) on ...
6
votes
5answers
3k views

Small, simple LDAP server as an alternative to OpenLDAP [closed]

I have taken a look at the installation and configuration instructions for the newer OpenLDAP releases and decided that it's too much work to set up for my small userbase. Basically, I only use LDAP ...
1
vote
1answer
429 views

Openldap with ppolicy

We have working installation of OpenLDAP version 2.4 which is using shadowAccount attributes. I want to enable ppolicy overlays. I have gone through the steps provided at OpenLDAP and ppolicy howto. ...
0
votes
2answers
4k views

How does LDAP handle supplementary/secondary user groups?

I've seen similar questions related to configuring Apache to authenticate via LDAP, but this basic question still has me confused. In my setup, I created users who all have the same primary GID, then ...
2
votes
1answer
1k views

Is openldap fit for large production deployments?

For about 1 year we've been using openldap on ubuntu server 10.04LTS for authenticating about 20 IT users and everything has been running fine (the operations on the LDAP server were basically limited ...
0
votes
1answer
665 views

How to deactivate LDAP anonymous bind?

I am very new to LDAP configuration. So I hope somebody can help me. I just installed an OpenLDAP server on an Ubuntu 10.4 system. My LDAP installation does not use/have any ldap.conf or slapd.conf ...
6
votes
2answers
2k views

How do I update the memberOf attributes of existing objects after adding the OpenLDAP Reverse Group Membership Maintenance overlay?

This is a follow-up to this question: I added the memberof overlay to an existing OpenLDAP 2.4 server. Now I want to update the existing user objects. For new group memberships, the memberOf ...
0
votes
1answer
251 views

Configuring LDAP configuration on RHEL-based OS with configurable DN container

I am trying to configure LDAP configuration the same way we configure it for our web applications: The server binds using the administrator account provided The server searches for uid=$login where ...
0
votes
1answer
62 views

Copy Mac Server LDAP contents to OpenLDAP

Is it possible to copy all content from a Mac LDAP server (which is proprietary modified OpenLDAP). Doesn't matter if I have to do it by replication (which I think is even harder) or copying the ...
0
votes
2answers
2k views

LDAP: “Unacceptable log file” after db recovery

My openldap-2.4.21 server died I so checked the syslog messages and found logs reporting a corrupt db which I tried to fix by issuing: $ /usr/bin/db4.8_recover -v -h /var/lib/ldap/ Finding last valid ...
1
vote
2answers
621 views

slapd with STARTTLS only doesn't work

I'm using slapd under Debian/Squeeze and trying to configure the system to only allow TLS-encrypted connections using STARTTLS on port 389. So I've configured my /etc/default/slapd to listen on port ...
2
votes
1answer
176 views

Running Multiple LDAP trees OpenLDAP

Is it possible to have multiple seperate LDAP trees on a single LDAP server?
3
votes
4answers
311 views

How to tag former employees in LDAP structure?

I have ou=People and there I have stored our employees. I have to somehow divide them to our current employees and former employees. What I was thinking about was to create 2 groups, ...