OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

6
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
0
votes
0answers
8 views

Allow LDAP Authentication (or connection)

I'm trying to make a webapp that authenticate throw a LDAP Server. But i get this error: ldap_bind(): Unable to bind to server: Can't contact LDAP server And when i try this command: ldapwhoami ...
-1
votes
0answers
8 views

Openldap enable sudoers in centos 6.6

Can someone please suggest me how to enable sudo for ldap user I have tied adding the following schema in /etc/openldap/slapd.d/cn=config/cn=schema , but ldap server is not starting dn: cn=schema ...
0
votes
0answers
9 views

Openldap ActiveDirectory Proxy using Slapd.d

I am currently attempting to setup an OpenLDAP proxy that will proxy proxy between 2 Active Director Domains, and will be used to talk to work with Shibboleth IDP3. I've never worked with openLDAP ...
0
votes
1answer
15 views

ldap-overlay with fixed default attributes

i'm having a largish user-base (>>1000) which should be able to collectively use some sharing service. the user base is slowly but constantly changing. esp. we are not interested in privilege ...
0
votes
2answers
9 views

openldap TLS error -8179:Peer's Certificate issuer is not recognized

tl;dr Does this error mean that I need to find my company's ldap server's public certificate and install it, or that my company's ldap server needs to install my public cert? If the former, how can I ...
0
votes
0answers
12 views

Allow or disallow some users login in Dovecot based in their network

I have a server running dovecot with IMAP and LDAP authentification. All works as expected, however I would want to let some users to access the mail server from outside and other to access from the ...
1
vote
3answers
11k views

ldap_add: Constraint violation (19)

I'm having issues importing users with ldapadd and ldif files. The error I'm getting is: ldap_add: Constraint violation (19) additional info: structuralObjectClass: no user modification allowed The ...
3
votes
2answers
4k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
1
vote
0answers
12 views

Ldap on Centos7: why my RootDN doesn't work?

On a fresh centos7 ldap server I use a ldif like this replace: olcRootDN olcRootDN: dc=Manager,dc=mydomo,dc=mydom - replace: olcAccess olcAccess: {0}to * by ...
0
votes
1answer
1k views

LDAP installed, running, but can't connect remotely [Ubuntu 10.10]

I installed LDAP on my ubuntu 10.10 system, using the tutorial found here: https://help.ubuntu.com/10.10/serverguide/C/openldap-server.html Everything seems to be working well, when logged into the ...
0
votes
1answer
26 views

Modifying OpenLDAP Schema - Adding 'host' attribute to 'person' objectclass

We have a legacy custom webapp that authenticates users against an OpenLDAP server. We are trying to set up another, separate OpenLDAP server to replace the older one, but we need to make the new ...
0
votes
3answers
5k views

How to disable anonymous access on LDAP

I need to secure my LDAP server and am not quite sure the best way to go about it. I am running Debian "Lenny", and using OpenLDAP (slapd). I notice that if I run: ldapsearch -x -W -b ...
0
votes
0answers
15 views

How to set initial user password in openldap?

I am new in setting up LDAP server. I have configured Openldap server and able to add test users from LDIF file. The LDIF file has username and password for each user. Now for the real part, I have ...
3
votes
1answer
2k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
0
votes
2answers
931 views

ldapsearch result: Can't contact LDAP server (-1)

Anyone knows which the problem? I installed LDAP: yum -y install openldap-servers and then checked is the installation work well starting slapd service and doing ldapsearch like this: ldapsearch ...
1
vote
1answer
1k views

Removing/modifying LDAP objectclasses/attributes using olc

I'm having trouble using openldap's olc to modify a schema without shutting down the server. To test some things out, I made the following schema: objectIdentifier tests orgUlyssisOID:4 ...
0
votes
1answer
23 views

how to configure proper credentials in OpenLDAP

I don't understand how to configure users and passwords on the OpenLDAP server. What I describe in this question is based on a clean install of OpenLDAP 2.4 on Centos 7 (via yum). After starting ...
0
votes
1answer
1k views

How to add ACI's to OpenLDAP properly

So I'm trying to get some ACI's added to my OpenLDAP system (hosting on CentOS 6). I've read how others put their ACI's in bdb like so... olcAccess: to attrs=userPassword,shadowLastChange by ...
1
vote
2answers
630 views

OpenLDAP TLS Authentification

I am trying to implement TLS as per https://help.ubuntu.com/lts/serverguide/openldap-server.html When I try to modify cn=config database with this ldif file: dn: cn=config add: ...
0
votes
1answer
15 views

OpenLDAP/SSSD Automatically Add User to Local Group

I've got a host of servers running various flavors of Linux all setup as OpenLDAP clients via SSSD. I added an LDAP group (sysadmins). I also added a sysadmins group on all of my servers. The members ...
0
votes
2answers
26 views

pam_groupdn doesn't work at all. always all users allowed to log in

i have tried to install pam, ldap on fedora23. i have configured pam.d/system-auth as follows: #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time ...
0
votes
1answer
2k views

ldap change schema and config password

I installed openldap server to fedora 20, and try use it for manage bugzilla accounts. So I first configure it for my domain, plus set password: dn: olcDatabase={0}config,cn=config changetype: modify ...
1
vote
1answer
25 views

Add several new entries to LDAP fails

I can't add more than one record to LDAP. I have blank line before a new DN entry but it seems it doesn't work for some season. ldapadd -x -D cn=Manager,dc=hadoop,dc=local -w -f ldap.ldif ...
1
vote
1answer
1k views

Sometime ProFTPD session closed immediately after Login successful

The version that I'm using: ProFTPD Version: 1.3.3c (maint) Scoreboard Version: 01040003 Built: Wed Dec 1 2010 16:41:40 ICT Loaded modules: mod_cap/1.0 mod_ldap/2.8.22 mod_auth_pam/1.1 ...
3
votes
2answers
11k views

VsFTPd - LDAP - PAM

I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both LDAP and PAM, I have some difficulties. VsFTPd runs ...
0
votes
1answer
31 views

Install openLDAP server on pfsense

I have a pfsense router with 25 clients ( linux and windows ). I want to filter the internet traffic for some of the clients using squid guard. I have researched the options and I would like to use ...
1
vote
0answers
32 views

How to search based on custom attribute?

I have some special custom attributes with my ldap setup. I have a custom attribute called GroupCode. I have bunch of entries with this special attribute that I was able to write to the ldap database. ...
2
votes
2answers
2k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
2
votes
1answer
22k views

ldap_modify: Insufficient access (50)

I am running an OpenLDAP 2.4 server that uses the SSL service for communication. It works for lookups. I am trying to add mirror mode replication. So this is the command that I'm executing: ...
1
vote
1answer
3k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
0
votes
1answer
27 views

OpenLDAP Filtering Users that are part of Groups of Groups

LDAP Configuration: MemberOf Overlay is enabled Users are part of an organizationalUnit called People. Each user is a "memberOf" a role. For example, a user in their role at a company is a ...
0
votes
1answer
3k views

LDAP+SAMBA login issues

I'm on a clean Ubuntu 13.10 install and I've just installed and configured openldap+samba. While I'm trying to configure a domain controller plus user shares. In order to ease LDAP management I've ...
1
vote
1answer
7k views

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 ...
1
vote
1answer
37 views

ldap ssl v2 v3 can't read server hallo A

I need to connect ApacheDS database using startTLS with OpenLDAP client. My ldaprc file contains: URI ldap://127.0.0.1:7323 ldaps://127.0.0.1:7423 SSL start_tls SASL_MECH plain TLSCipherSuite ...
0
votes
1answer
23 views

Enable anonymous bind in openldap

I have setup ldap server successfully on centos 7, It works fine. However, i cannot access the server with 'anonymous' bind, which according to every google search it should be. When I execute; ...
1
vote
2answers
3k views

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is ...
0
votes
0answers
226 views

OpenLDAP replication trouble

I still unable to setup replication between LDAP nodes %(, followed instructions from : http://www.secure-computing.net/wiki/index.php/OpenLDAP/replication Server, slapd.conf TLS_CACERTDIR ...
5
votes
3answers
156 views

How to get SASL authentication to work with DIGEST-MD5 for OpenLDAP?

I'm setting up OpenLDAP slapd on Ubuntu 14.04 Trusty Tahr. I want certain instances (replication etc.) that aren't users to be able to login via SASL using DIGEST-MD5 mechanism. Unlike users, they ...
0
votes
1answer
24 views

ldapmodify error - Server is unwilling to perform (53) additional info: no global superior knowledge

Ok guys, I've been beating my head against the wall over this one all day, and I'm getting nowhere. I'm trying to run ldapmodify against OpenLDAP in a script to update a couple of attributes for a ...
1
vote
0answers
18 views

LDAP ACL for restricting applications with same user dn

Currently we need to configure Group based LDAP login for our custom applications. We have applications named app1, app2 etc. For restricting users to login for a particular application for eg app1 ...
3
votes
3answers
49 views

Kerberos with OpenLDAP backend: Password Sync HowTo

The basic setup is an OpenLDAP server. The users are provisioned and the passwords are set. Now we decided to add an MIT KDC for being able to use Kerberos. We configured the MIT KDC to utilize the ...
5
votes
3answers
351 views

When setting up OpenLDAP for the first time, what are some things to keep in mind?

I'm in the process of reading up on documentation and setting up OpenLDAP to handle authentication throughout my network, for email, web services, user accounts, any anything else that I could throw ...
4
votes
2answers
75 views

AWS Simple AD: “KDC has no support for encryption type” for users created with adtool, but not with MS Management Console

Background I am trying to log in (via SSH, to an Amazon Linux EC2 instance running sssd) as users that I've created in my AWS Directory Services Simple AD. I am authenticating with kerberos and ...
1
vote
1answer
138 views

sssd one ldap server for authentication and one for automounting, is this possible?

Says it all in the title really :) I am looking into SSSD but have a requirement that it must use ldap-1 for user authentication and then get the home directory automount information from ldap-2. ...
1
vote
1answer
2k views

Openldap ppolicy, how to unlock account?

I have enabled OpenLDAP password policy overlay and account lockout is now working fine. On 5 authentication failures the account is getting locked out. On resetting the password the account becomes ...
0
votes
0answers
23 views

OpenLDAP proxy gone for good

I recently had to troubleshoot a Windows AD issue. Users suddenly lost access to shared folders and network drives. After some research I discovered that there was a Linux CentOS machine that crashed ...
0
votes
0answers
69 views

Freeradius/Openldap/802.1X: PEAP-MSCHAPv2 XOR certificates

For WPA2 Enterprise I would like to have user authentication which is supported out-of-the-box by as many clients as possible (i.e., PEAP-MSCHAPv2). Furthermore, for laptops, workstations etc. I ...
3
votes
1answer
54 views

Rabbitmq Won't Talk to Active Directory

I have a rabbitmq server that I need to hook up to AD. Configuration is set using puppet rabbitmq module, with some minor manual changes (log level): % This file managed by Puppet % Template Path: ...
0
votes
1answer
159 views

Insufficient access to edit OpenLDAP cn=config with external SASL authentication

I want to add a schema to an OpenLDAP database that I've inherited. ldapadd -vY EXTERNAL -H ldapi:/// -f schema.ldif SASL/EXTERNAL authentication started SASL username: ...