Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

Filter by
Sorted by
Tagged with
0 votes
2 answers
50 views

OpenLDAP authentication troubleshooting

I am running an OpenLDAP service using the slapd.d/ configuration style. I am testing creating users and authenticating as user. Here's my test script, which ends with a fail: ldap_bind: Invalid ...
0 votes
1 answer
1k views

Cannot enable OpenLDAP memberOf of Ubuntu 20.04

I've spent the last few days following multiple how to guides to create an LDAP server with memberOf enabled, on a fully updated clean install of Ubuntu Server 20.04.2, purging between each attempt. ...
0 votes
1 answer
28 views

Openldap "ldapmodify" command fails to run

I'm attempting to update a config parameter within my openldap server by using ldapmodify, but I'm getting the following error: # ldapmodify -Y EXTERNAL -H ldapi:/// -f tls.ldif SASL/EXTERNAL ...
2 votes
1 answer
46 views

OpenLDAP Access Levels: What is "search" without "read" good for? What does "manage" provide which "write" doesn't?

I try to understand the different access level which OpenLDAP provides, see OpenLDAP 2.6 Guide: Access Control - The access to grant. While access levels like write are clear just by their name, IMHO, ...
0 votes
1 answer
4k views

ldap_add: Constraint violation (19) additional info: some attributes not unique

Well I have already gone through ldap_add: Constraint violation (19) but couldn't solve my problem! Problem I'm facing is that, when I'm trying to add users from bckup.ldif file by issuing following ...
1 vote
1 answer
13k views

pam_unix(sshd:auth): authentication failure

I have openldap and server Debian 8. I want to set ldap authentication. I have installed ldap-utils libnss-ldapd libpam-ldapd and set these. # getent passwd user.name user.name:x:1537:3174:User Name:/...
3 votes
1 answer
7k views

slapd : attribute type undefined

I'm trying to put a config of slapd on the new server. I did it the same way, but it was probably two years ago and in slightly different environnement (I'm on the Debian actually and it was on CentOS ...
0 votes
1 answer
1k views

openLDAP / Sasl - ldap_sasl_interactive_bind_s: Local error (-2)

I configure openldap with sasl bind. Trying connect: # ldapsearch -v -H ldaps:// -Y PLAIN -U [email protected] But getting error: ldap_sasl_interactive_bind_s: Local error (-2) I create a config ...
2 votes
0 answers
190 views

Why I can't activate SSL on my Ubuntu Server (20.04) with ldap auth? (ldaps)

I have to activate SSL for secure comunications with ldap, I count with Letsencrypt .pem files (chain, fullchain, cert & privkey). I followed the steps of some pages but it didn't had any effect ...
2 votes
2 answers
11k views

Zimbra 8.7.1 : Connect: Unable to determine enabled services from ldap

I'm currently moving my zimbra from Ubuntu 12.04 to Ubuntu 14.04 On both sides it's a zimbra OSE 8.7.1, I already did all these steps : Backuping zimbra with specificities : include all hidden ...
3 votes
2 answers
6k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware 1.2.19)...
1 vote
2 answers
11k views

LDAP user authentication access denied

Currently, I am configuring LDAP client for user authentication on the server. Only SSH key authentication is allowed (Password authentication is not allowed). My SSH configurtion (/etc/ssh/...
3 votes
0 answers
631 views

LDAP not showing secondary groups

Currently, I have a LDAP server (running ClearOS if that makes any difference) containing a database of users. So, I went and setup LDAP on a couple of my debian VMs, using libpam-ldapd and I ...
9 votes
2 answers
9k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
1 vote
1 answer
128 views

Combining OpenLDAP and Active Directory via OpenLDAP meta backend

We have an application that used to authenticate via our Atlassian Crowd instance, but after a major rewrite that authentication source is not available anymore. Now I need a solution to authenticate ...
2 votes
1 answer
146 views

Insufficient Acces (50) LDAP

I am trying to execute a custom .ldif file at the beggining of the startup of OpenLDAP server and have succeded using the following command: ldapadd -x -D cn=admin,dc=vlad,dc=lan -w admin -H ldap:// -...
0 votes
2 answers
104 views

Freeradius filter ldap by group

I would like freeradius to check for group membership and allow access based on group membership: My current config: ldap { identity = 'cn=radius,ou=bindings,dc=company,dc=com' ...
0 votes
1 answer
56 views

OpenLDAP use of ObjectSid from Windows AD

I am creating a docker OpenLDAP to make a test that is simpler than Active Directory. To do this I have extracted a part of User account in a LDIF. I need the ObjectSid attribute because one of the ...
0 votes
0 answers
27 views

Can I Ldap Sync replication to a different backend?

My current OpenLDAP backend is BDB can I replicate (syncrepl) this to another server using a MDB backend? Probably a no but thought I'd ask. Thanks, Andy
0 votes
1 answer
45 views

OpenLDAP failing to add new attributes

I want to create some user accounts with attributes like "gender", meaning I need to create custom attributes. I have created the following LDIF file: dn: cn=schema changetype: modify add: ...
3 votes
3 answers
10k views

How to set Maximum Password Expiry in OpenLDAP Linux

I am trying to find how to change some password policy settings in OpenLDAP (on a system-wide level, not on a per user level) such that all LDAP account users (i.e., existing and new users) have their ...
1 vote
1 answer
6k views

Reset Passwords of LDAP-Users at the first login

I have an LDAP Installation running on an Centos7 system. I want to create a big number of users. Those users will get a default password, so I want them to change the password at the (only)first ...
0 votes
0 answers
121 views

OpenLDAP won't look at CA certificate

I have set up an LDAP server that I would like to connect to from a client machine. Ubuntu is OS of both server and client, TLS is active and since this is a practice project, all my certificates are ...
0 votes
1 answer
49 views

Active Directory for linux servers

I have 7 ubuntu servers and a Storage server on freebsd. I am considering deploying OpenLDAP on one of these 7 servers so that these servers can have a centralized user database and authentication ...
5 votes
2 answers
5k views

Using meta database backend to combine active directory db and openldap local db

I am trying to use the openldap meta back end to accomplish the following in a single query: query the local openldap database for the account. (I control this resource and only a few accounts will ...
1 vote
2 answers
6k views

ldapsearch show member entries without CN

I am using ldapsearch on a debian 9 Linux box to query a MS Active Directory. I would like to query/find all users in my group "mygroupname". The command ldapsearch -o ldif-wrap=no -xWLLL -D "...
3 votes
2 answers
2k views

How to exclude specific attributes when using ldapsearch?

I know how to request specific attributes using ldapsearch (by passing them at the end of the cli invocation): ldapsearch -x -D "..." -b "..." sn cn displayName Now, how can I specify only those ...
0 votes
0 answers
56 views

OpenLDAP peername.ip ACL not working for subnets

I have the following ACL stored in my /etc/openldap/slapd.conf file: access to dn.regex="^([^,]+,)?ou=(groups|addressbook),dc=ldap$" by dn.exact="cn=directory,ou=users,dc=ldap&...
0 votes
1 answer
75 views

Creating ppolicy Overlay in OpenLDAP has no effect

I read +++ forums and docs. My OpenLDAP instance is configured in a Bitnami Container as follows: dn: cn=module,cn=config cn: module objectClass: olcModuleList olcModuleLoad: ppolicy.so olcModulePath: ...
2 votes
1 answer
5k views

Change DN in OpenLDAP "on the fly"

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, John,ou=users,ou=others,dc=company,dc=...
0 votes
1 answer
4k views

DB_NOTFOUND: No matching key/data pair found (-30988)

Could anyone please explain why I get this error. I got this error(on server) while trying to bind any user in ldap server. Also I get "Insufficient access rights" output when I run the program. And I ...
1 vote
3 answers
3k views

openLDAP certificates untrusted or revoked

I've already spent two days on this problem but I can't find any solution. Two openLDAP server run from docker on different hosts in master/master scenario. ldapsearch command or syncrepl process run ...
0 votes
0 answers
22 views

What OpenLDAP ACL is necessary for Webmin?

I struggle in the arcane science of OpenLDAP ACL configuration. I would like to store user login data in OpenLDAP and provide it to multiple services, so the users can use the same username and ...
0 votes
0 answers
2k views

Unable to login via SSH to a Linux machine with my LDAP credentials

I am trying to setup LDAP for users to login to Linux machines. I can change the users to any given users in the LDAP list of users using the su command. A new directory is created as well. So I'm ...
0 votes
0 answers
65 views

Exporting openldap to migrate to new server

I have an install of openldap via Macports. I want to update it and move it to new hardware. I've taken the slapd.conf from the old system, then I am trying to run it to configure the new server ...
1 vote
1 answer
153 views

openLDAP works for v2.4 but v2.6 returns: Invalid syntax (21) additional info: objectClass: value #0 invalid per syntax

I have been facing this problem for a few days by now, and I would like to preface this by stating that this is the first time I have ever used ldap. So after debugging a bit around the error I have ...
0 votes
1 answer
238 views

Cannot passwd for root with nslcd and openldap on Debian 12

Fresh Debian 12 for lab (VM). I installed: slapd, phpldapadmin, nslcd, nscd and dependencies. I have two local accounts: root and user1. Also I have only user1 POSIX-account on local LDAP server. I ...
0 votes
0 answers
46 views

pgina not able to authorize as per rules

I have the following settings img 1 and these are the authorization rules I have added img 2 Yet pgina is unable to correctly identify and follow the rules. Here is the output of simulation. bwayne is ...
0 votes
1 answer
53 views

Dovecot saves incoming mail from LMTP in wrong home directory despite being correctly overwritten

I have setup Postfix 3.8.1, Dovecot 2.3.20 and OpenLDAP on Ubuntu 23.10. Postfix transfers mails for local delivery via LMTP to Dovecot. In some cases, the mail address as seen from the outside world (...
0 votes
0 answers
55 views

OpenLDAP: Is is possible to create an LDAP DB with empty suffx?

Is it possible to create an OpenLDAP database with empty suffix? If yes, how? I was able to create the olcDatabaseConfig below cn=config, but when I try to add my first entry to the DB I get the error ...
0 votes
1 answer
185 views

How to define the password protection scheme (e.g. hash function) used by ldappasswd?

I am using OpenLDAP 2.6. When I set an object's password via ldappasswd -x -D <dn of root user> -W -S <dn of object whose pwd shall be set> then some hash of the password end up in the ...
0 votes
1 answer
106 views

Where do I find the LDAP scheme for Postifx or which alternative should I use?

The howto https://www.postfix.org/LDAP_README.html describes LDAP object with object classes virtualaccount ldapgroup ldapuser attributes mail memberdn memberaddr maildrop Where do I find the ...
1 vote
1 answer
280 views

openldap - adding image to 'photo' attribute gives me 'no validator for syntax'

New to openLDAP - i'm trying to simply add a base64 encoded binary (16Kb) image to the photo attribute to the person objectClass but whatever i try i simply get this error 'no validator for syntax 1.3....
0 votes
0 answers
257 views

"LDAP bind dn value missing" error when setting up Kerberos and OpenLDAP on Ubuntu 22.04

I have been following [these][1] instructions for setting up Kerberos to use an existing OpenLDAP server as its backend. I have run into a problem in the very last step. I am trying to add an existing ...
0 votes
0 answers
99 views

openLDAP olcAccess settings

i have installed openLdap server on a Rokye Linux: [root@localhost etc]# cat rocky-release Rocky Linux release 8.8 (Green Obsidian) I created the manager account following this guide on how to forge. ...
0 votes
0 answers
92 views

Windows AD to OpenLDAP synchronisation with password cache

We're looking for an "LDAP proxy" solution that can synchronize a Windows Active Directory with an OpenLDAP server inclusive passwords. The openLDAP server will act as primary and failover ...
2 votes
1 answer
9k views

phpldapadmin: login as "root" admin user with UID

I have recently installed phpldapadmin on Ubuntu 12.04 LTS Srv. In the the config.php I've modified the following parameter in order to enable simple user login: $servers->('login','bind_pass','...
1 vote
1 answer
411 views

SSSD, openLDAP and nested groups

I am trying to figure out how to structure my ldap and/or configure sssd to read membership of nested groups. Something like this works for normal group membership: DN: cn=server-admins,ou=Groups,dc=...
2 votes
1 answer
3k views

How do the slapd logging levels work?

I can't seem to find an example of how each of the log levels in slapd work. I want slapd to log the users who are logging in, and the server that they are trying to log into, as well as any ...
3 votes
2 answers
5k views

Add several new entries to LDAP fails

I can't add more than one record to LDAP. I have blank line before a new DN entry but it seems it doesn't work for some season. ldapadd -x -D cn=Manager,dc=hadoop,dc=local -w -f ldap.ldif ...

1
2 3 4 5
30