OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

2
votes
1answer
2k views

How do I use Openfire with OpenLDAP and ldap.clientSideSorting?

The system log on my Openfire + OpenLDAP installation is getting flooded with this message: slap_global_control: unrecognized control: 1.2.840.113556.1.4.473 This means that Openfire wants OpenLDAP ...
0
votes
1answer
16 views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
0
votes
1answer
29 views

How to enable DIGEST-MD5 SASL mechanism in Open Directory?

We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 But it doesn't support DIGEST-MD5: $ ldapsearch ...
0
votes
1answer
14 views

Unable to connect to server via LDAPS

I'm running OpenLDAP on an up-to-date Debian box. I'm trying to run a simple command: ldapsearch -x -h <<IP>>:636 -D cn=<<BASE DN>> -d1 and I get this output: ldap_create ...
1
vote
1answer
16 views

command line alternative to dpkg-reconfigure slapd

Is there a way to reconfigure slapd, providing all configuration options as command-line parameters/arguments? My goal is to be find an alternative to the interactive UI. Thank you
0
votes
1answer
1k views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
2
votes
0answers
13 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
0
votes
0answers
21 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
0
votes
2answers
185 views

how do you set the admin password on openldap 2.4

I am getting started with openLdap 2.4 and am having a bit of trouble, all the examples I see seem to refer to previous versions which used the text config file slapd.conf but from what I see on ...
0
votes
3answers
880 views

LDAP sync with Outlook

I have a task to research the possibilities of LDAP as a centralized Address Book. I have setup a openLDAP on Debian 5.07. I managed to search the LDAP contacts from MS Outlook 2007 (with some ...
2
votes
1answer
18 views

Red Hat 6.6, OpenLDAP, ldaps not responding

I'm having a hard time migrating our openldap installation from Debian to RedHat. Two instances of openldap are running, they have the same configuration, except that one handles ldap: requests, and ...
2
votes
1answer
27 views

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all ...
0
votes
0answers
8 views

Custom schema for OpenLDAP 2.4

I am new to OpenLDAP administration. My aim is to learn how to create custom schemas, and customize "my" directory server this way. I tried to add one optional attribute - ipPhone. Made a schema ...
1
vote
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
0
votes
0answers
14 views

ApacheDS create new ldap base domain

I want to create and manage multiple ldap base domains(domain.com, example.net..) on a single Ubuntu server 14.04. I created my second domain(dc=example,dc=com) through olc method by ldapadd -Y ...
1
vote
2answers
871 views

Can't query AD using Kerberos from Linux host

ldapsearch -H <URL> -b <BASE> -s sub -D <USER> -x -w <PW> works fine kinit <USER>@<REALM> ldapsearch -H <URL> -b <BASE> -s sub fails with: text: ...
1
vote
1answer
53 views

Are there any ldap proxy servers that can supplement the results from the main ldap server? [closed]

We have a central ldap server that authenticates and provides authorization information about users in our institution. I am looking for a LDAP Proxy that supplement the central LDAP server to support ...
0
votes
1answer
1k views

what is the simple Command to check password expiry time of an openldap user account

I am running openldap 2.3.43.el5 on RHEL 5.3 I am trying to find a simple command that will tell you when the password for an ldap user will expire, any help would be greatly appreciated.This would ...
0
votes
1answer
58 views

What is SSHA-512? How can OpenLDAP support it?

I have two OpenLDAP directory servers. One is a standard Zimbra OpenLDAP server. Accounts are with passwords that are using SSHA-512 hash method. When I copy these accounts to a standard OpenLDAP ...
1
vote
1answer
1k views

Automounting home directories using LDAP in ArchLinux

I have managed to set up an OpenLDAP server that runs ArchLinux. I can now log in from the client (also ArchLinux) using the LDAP users. Now i want to mount the home directories over the network... I ...
0
votes
1answer
86 views

ldapsearch returns result, but getent does not

I am setting up a fresh CentOS 7 server to and need to setup LDAP authentication i.e. there already exists a server that authenticates users, which we use for other GNU/Linux servers. For instance, ...
1
vote
1answer
891 views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
0
votes
0answers
16 views

Apache HTTP Server LDAP authentication with netgroups

Is it possible to do a group authentication in Apache HTTP Server ("Require ldap-group") but instead of a normal (posix) ldap group to use a netgroup?
1
vote
1answer
2k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
4
votes
3answers
1k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
1
vote
2answers
193 views

openldap timeout causes server to slow down

Running into an issue with openldap I've never had much success to tackle. We run openldap on another machine on its own vlan. Now if that ldap server dies anything that accesses uid or gid seems to ...
3
votes
1answer
29 views

Chasing referrals in Ldap

I'm currently improving a program featuring an ldap integration. This ldap integration is currently not able to handle ldap referrals. I do understand, that i will gen entries back that will hold the ...
0
votes
1answer
30 views

LDAP passthrough authentication. testsaslauthd fails only with ldaps

I am trying to set up an OpenLDAP passthrough authentication to another server. When I do testsaslauthd with simple ldap:// the test works fine. When I try with ldaps:// it fails. ...
0
votes
1answer
1k views

phpldapadmin: login as “root” admin user with UID

I have recently installed phpldapadmin on Ubuntu 12.04 LTS Srv. In the the config.php I've modified the following parameter in order to enable simple user login: ...
3
votes
1answer
2k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
0
votes
2answers
936 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
0
votes
1answer
64 views

SSH access to hosts groups based on user groups using LDAP

This is my entire test ldap database for now: # extended LDIF # # LDAPv3 # base <dc=ldap,dc=example,dc=com> (default) with scope subtree # filter: (objectclass=*) # requesting: ALL # # ...
1
vote
1answer
1k views

OpenLDAP Authentication UID vs CN issues

I'm having trouble authenticating services using uid for authentication, which I thought was the standard method for authentication on the user. So basically, my users are added in ldap like this: # ...
1
vote
1answer
29 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
0
votes
0answers
19 views

adding VLV support to OpenLDAP 2.4.31

Apologize in advance - I am not an admin, so the question being asked might be trivial. Still, I am stuck. Any assistance would be greatly appreciated. I am trying to add Virtual List View support to ...
0
votes
0answers
36 views

moving openldap server from centos to ubuntu

I am trying to setup ldap server on my ubuntu 14.04. I had previous ldap server setup installed on CentOS 6 which uses flat-file configuration i.e slapd.conf method for ldap. I did take backup for my ...
4
votes
1answer
2k views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
0
votes
1answer
44 views

can't get “memberof” to work in my OpenLDAP config

I'm trying to set up OpenLDAP on a Debian 7.7 server. While basic auth seems to work, I can't get the "memberof" overlay to work. Being new to LDAP, all that memberof config seems overly complex to ...
0
votes
0answers
14 views

Openldap Master Slave configuration

I have a configuration with a Master and Slave 4. Provider and Consumer are identical CentOS release 6.5 rpm -qa | grep ldap openldap-clients-2.4.23-34.el6_5.1.x86_64 ...
0
votes
0answers
25 views

OpenLDAP 2.4 pass-through SASL configuration

I am having a hard time configuring pass-through on LDAP 2.4, mainly because most of the information in the internet is written for the older LDAP versions... I am looking to configure SASL but when ...
3
votes
2answers
90 views

openldap allop overlay configuration

I'm having trouble getting the allop overlay to work. I suspect I'm missing some vital configuration option or that I've done something incorrectly. Any help is greatly appreciated. I need to use ...
0
votes
0answers
34 views

I am not able to configure LDAP on Debian 7.7

I have a Debian 7.7 box and have installed openldap-2.4.31 from repos, but I can't manage to configure it. I run the install commands and it goes well, I am following this how to, then when I try to ...
0
votes
1answer
27 views

Send email on ldap creation

I have an LDAP server setup on a server running Debian 7 and I wanted to make it send out an email whenever a new user was created on that LDAP. I thought a cronjob would be best, but I have no idea ...
0
votes
1answer
87 views

libnss-ldap getent passwd - AD replies correctly but output shows local /etc/passwd

I am trying to configure libnss-ldap to provide AD authentication to my Linux Debian servers. This is working fine if user exists locally, I want to make it work for Domain users. Here is my ...
0
votes
0answers
16 views

Need informatio​n on alock file in data directory of OpenLDAP 2.4.39

I have taken the OpenLDAP 2.4.39 and able to work properly but when I do slapcat it hangs and always complains on alock,But if I delete alock file and restart it works fine. I have 4.6.21 version of ...
0
votes
1answer
17 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: ...
-1
votes
1answer
49 views

cannot do an ldapdelete: Strong(er) authentication required (8)

I'm fairly new to ldap and i'm trying to delete a ldap object. (i haven't set up SSL yet.) i use the command ldapdelete -x 'dc=example,dc=com' 'cn=AnUser' it gives me the error ldap_delete: ...
1
vote
0answers
47 views

How cache OpenLDAP Meta database (for use with Websphere Application Server)?

I have configured Meta database directory on OpenLDAP server for two different Active Diretories and it's work. But now I'd like set cache for this OpenLDAP, but I don't know how. From my slapd.conf ...
1
vote
1answer
445 views

OpenLDAP 2.4 Chain Overlay Minimal LDIF Configuration

There's almost no information about how Chain overlays are configured in OpenLDAP LDIF backend. What's the minimal configuration required?
0
votes
1answer
19 views

How to enable OpenLDAP log on CentOS 6.4

I have installed OpenLDAP 2.4.23 on CentOS 6.4. Default install. OpenLDAP does not seem to create any log information. At times it is convient to have some information on what OpenLDAP is doing. How ...