OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

0
votes
1answer
38 views

Solutions for bridging Solaris/AIX to Active Directory?

I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully ...
0
votes
0answers
9 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
0
votes
0answers
7 views

connect server via ssh using ldap account anywhere

I'm new in using openldap I'm using centOS7 to be my openldap server my question is, can I login server via ssh using ldap account without any client settings? something like when I done setting ...
0
votes
1answer
25 views

openldap SSL/TLS Cert: Get a 'real' one or use Self Signed?

I'm setting up SSL/TLS on OpenLDAP and wondering why the Debian Handbook has the user create a self-signed cert? Wouldn't one signed by a 'real' CA be more secure?
0
votes
1answer
2k views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
2
votes
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
1
vote
1answer
93 views

CentOS 6.6 LDAP configuration failed

I'm trying to config OpenLDAP on CentOS 6.6 with this db.ldif config: dn: olcDatabase={0}config,cn=config changetype: modify replace: olcRootPW olcRootPW: {SSHA}UCCQrNoadIFC2lN0Y6YxzCfu9hT/jZni - ...
1
vote
3answers
953 views

LDAP sync with Outlook

I have a task to research the possibilities of LDAP as a centralized Address Book. I have setup a openLDAP on Debian 5.07. I managed to search the LDAP contacts from MS Outlook 2007 (with some ...
-1
votes
0answers
4 views

Export LDAP mailing list to Sympa [closed]

I have a task to integrate our LDAP mailing lists into Sympa. Currently I'm stuck with import of existing mailing lists from LDAP. Does anyone have experience with this?
-2
votes
1answer
25 views

Ldap user authentication on samba share [closed]

I have scenario ldap server and samba server both on different server. I want to give access to all ldap user on samba share. I have referred below link. But this link is for both ldap and samba ...
3
votes
1answer
43 views

OpenLDAP advanced ACL configuration

I have a multiple DITs in my OpenLDAP server. I made user cn=config the root so that cn=config has root access to all DITs (each DIT). In addition, there is a per-DIT administrator IDed as ...
0
votes
0answers
8 views

OpenVPN and oLDAP configuration

I have a Linux VM setup with OpenVPN on Debian 7.8. I copied the client files over to my MacBook and iPhone and I'm successfully able to create a VPN connection without any issues. However, I'd like ...
-2
votes
1answer
36 views

Are the UID of users from a domain maintained locally in a machine?

This could be total nonsense but as I am new and am trying to learn. I came across this question. I have seen many of my office linux machines connected to some domain. I am wondering as if a ...
2
votes
1answer
1k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
0
votes
1answer
38 views

How to properly insert a set of olcAccess attributes to the configuration of an OpenLDAP database?

I need to add a bunch of ACLs for my database but am having hard time writing proper LDIF for it. Unfortunately, ldapmodify is not very helpful with its useless error message: modifying entry ...
0
votes
1answer
25 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
0
votes
4answers
1k views

Allowing LDAP users to change password

How to allow LDAP users to change password from client machines ?
0
votes
1answer
13 views

Cannot load compiled ltb-password-check module on Debian

I'm trying to compile and load LDAP Tool Box Project's password checker module to improve the capabilities of password policy overlay on the Debian 7.8. Here's what I've done so far: I've installed ...
4
votes
2answers
1k views

Slappasswd output randomized

I was expecting slappasswd to produce a fixed hash but it appears that the output is randomized as I never get the same output for the same input password: $ slappasswd -s secret ...
0
votes
1answer
30 views

DIT write access for cn=config or LDAPI

I have an OpenLDAP 2.4 setup with multiple DITs. Each DIT database has a RootDN with manage rights, as it should. I need to give manage rights [or at least write] to either cn=config, or LDAPI so that ...
3
votes
3answers
5k views

Disallow global anonymous bind with cn=config

With slapd.conf you could globally disable anonymous binding and require authentication with the following static directives: disallow bind_anon require authc How can I achieve the same global ...
-1
votes
0answers
29 views

How to backup and restore users for openldap replication setup (syncrepl)

I am not able to restore the users using slapadd in replication setup of two nodes. When i restore it works on the where i restored but another one fails in the replication. We have two ldap nodes ...
1
vote
1answer
37 views

OpenLDAP & Asterisk - no global superior knowledge

I'm struggling to setup OpenLDAP to allow Asterisk to store information about users. I've tried to follow several howto's, but unfortunately I'm not able to set it up correctly. It seems like most ...
0
votes
2answers
1k views

Installation OpenLDAP on CentOS 7

I'm following this OpenLDAP step by step tutorial: http://www.server-world.info/en/note?os=CentOS_7&p=openldap&f=1 Important: I'm working on CentOS 7 But when in the first part I try to start ...
1
vote
1answer
2k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
0
votes
0answers
19 views

Setting up LDAP to authenticate users in data center

I'm a newbie to linux and networking. Somehow I'm assigned to research the tasks of setting up the authentication for users to login in from local office to data center. Here's the hypothetical ...
2
votes
3answers
1k views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
9
votes
2answers
15k views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ...
-1
votes
1answer
22 views

Gitlab with OpenLDAP secured with TLS

I have a working, secure OpenLDAP server running at: auth.<company name>.com I also have a reader account that Gitlab can use: cn=Reader Reader,ou=users,dc=auth,dc=<Company ...
4
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
0
votes
0answers
17 views

LDAP ACLs with filters

I am trying to write LDAP ACL filters that would suspend authentication for domains that have a custom attribute set to some value. I created a custom object with an extra NAME attribute domainStatus ...
0
votes
2answers
1k views

Setting up openldap for ldaps with cn=config

I'm trying to enable SSL connections on an OpenLDAP 2.4.23 server, but all the instructions I find only discuss the old slapd.conf configuration. Can anyone point to some instructions for setting it ...
0
votes
0answers
14 views

Can't read PID file on OpenLdap using RedHat 6/ Centos

When I try to execute command "service slapd debug", I receive this message [root@elara ~]# service slapd debug slapd: [INFO] Using /etc/default/slapd for configuration slapd: [INFO] Halting ...
0
votes
0answers
26 views

Working LDIF configuration example for openLDAP SQL backend

I need to provide access to a postgres database through LDAP and I am looking for a working configuration sample using LDIF files. All the examples I can find are using the old slapd.conf file for ...
-1
votes
0answers
45 views

Kerberos Active Directory Domain Failure (uBuntu)

I try to join Active Directory and Samba 4 in Ubuntu 12.04.05. When I run host -t SRV _kerberos._udp.test.sg I get the error: Host _kerberos._udp.test.sg not found: 3(NXDOMAIN) meanwhile $# host ...
3
votes
1answer
3k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
1
vote
0answers
14 views

vlock/pam_ldap based authentications fails when adding TLS/SSL

I have working centralized authentication configuration setup on Debian Wheezy based servers, utilizing OpenLDAP (2.4.31), pam_ldap (184-8), and libnss-ldap (264-2). I have successfully configured ...
0
votes
0answers
50 views

SAMBA/LDAP authentication failed in FreeNAS

I got a FreeNAS server and I am trying to share folders using SAMBA. My users are in an OpenLDAP server. The OpenLDAP has the samba.schema loaded. I checked the sambaSID in my FreeNAS and it is the ...
2
votes
1answer
2k views

How do I use Openfire with OpenLDAP and ldap.clientSideSorting?

The system log on my Openfire + OpenLDAP installation is getting flooded with this message: slap_global_control: unrecognized control: 1.2.840.113556.1.4.473 This means that Openfire wants OpenLDAP ...
1
vote
1answer
42 views

sssd one ldap server for authentication and one for automounting, is this possible?

Says it all in the title really :) I am looking into SSSD but have a requirement that it must use ldap-1 for user authentication and then get the home directory automount information from ldap-2. ...
0
votes
1answer
58 views

Auth fail on Samba server with LDAP backend‏

I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc. The samba schema is present in the LDAP, and in the users profile. ...
4
votes
1answer
3k views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
0
votes
0answers
38 views

Multiple DN suffixes in openLDAP

I'm trying to create multiple dn suffixes with openLDAP, but it doesn't seem to work. I want have this: ou=Jamaika,dc=gov,dc=com ou=Jamaiks-shadow,dc=gov-shadow,dc=com-shadow Should look like ...
2
votes
2answers
271 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
0
votes
0answers
19 views

OpenLDAP with GOSA² Host-Authentication (accessTo attribute of User)

i'm having a problem with rebuilding our LDAP in combination with GOSA². We are hosting several linux machines and not all users may have access to all of them. In the past we realized this as a ...
0
votes
0answers
17 views

Error while integrating OpenLDAP and Kerberos

I am trying to set up Kerberos with OpenLDAP backend. I followed this doc http://web.mit.edu/Kerberos/www/krb5-1.12/doc/admin/conf_ldap.html and this ...
0
votes
1answer
45 views

Cannot enforce password change in OpenLDAP with Password Policy Overlay

I've implemented Password Policy Overlay on OpenLDAP on Debian Stable. The server side and the policies are working as expected. However, after expiration I cannot force users to change their ...
0
votes
0answers
52 views

Samba AD DC Authentication Problems

I'm trying to setup an AD PDC using Samba4 on Ubuntu 14.04. My endgame here is to have an AD domain with users created by LDAP that can login to the domain and use roaming profiles, so that any users ...
0
votes
0answers
16 views

OS X server Open Directory fail over successfully but not the user home directories

We setup the OS X server Open Directory(OD) master and replica. Users are created on master and their home directories are on the master server. When the master OD server is down, the OD client (MAC) ...
0
votes
0answers
21 views

LDAP-based GnuPG keyserver for use with BES5?

Like the title already gives away: Can the LDAP-based Keyserver be used with an Exchange+BES5 setup? Some background: We need a keyserver for BES5, and the commonly used product for this is ...