OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

2
votes
1answer
13 views

SSH authentication based on existing OpenVPN tunnel

I have a single CentOS server, and several Windows clients that should connect to it, from remote. I've successfully setup OpenVPN (with Public Keys), with which the clients connect to the server; and ...
4
votes
3answers
2k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
3
votes
1answer
3k views

OpenLDAP memberOf attribute is not updated after group update

I have an OpenLDAP setup on Debian 7.1, (OpenLDAP 2.4.31), and I am trying to set up the memberof overlay. My configuration is just like I have read at lots of sites throughout the internet, however, ...
0
votes
0answers
19 views

LDAP syncrepl with kerberos authentication

I'm trying to set up a replication server for LDAP using syncrepl. I would like to use Kerberos to authenticate the consumer, because we have it set up, and it seems more secure. The database ...
0
votes
0answers
17 views

OpenLDAP will not start - Starting OpenLDAP: slapdrm: cannot remove `/var/lib/ldap/alock'

Hope someone can help me out here. I forgot the OpenLDAP admin password on a debian server and in the process, I specified the password in the slapd config file as follows: olcRootPW: ...
0
votes
0answers
8 views

Insufficient access to edit OpenLDAP cn=config with external SASL authentication

I want to add a schema to an OpenLDAP database that I've inherited. ldapadd -vY EXTERNAL -H ldapi:/// -f schema.ldif SASL/EXTERNAL authentication started SASL username: ...
1
vote
2answers
1k views

How to enable catch-all email in iRedMail Open Source edition?

How to create catch-all email alias for domain in iRedMail Open Source edition? I know that's possible via LDAP and found the following instructions: ...
2
votes
2answers
931 views

Does anyone have a valid and working example of OpenLDAP meta backend?

I have been Google'ing my fingers off and simply can not find a working example of how to merge/proxy a OpenLDAP server and windows AD server. Have anyone worked with this before? Any suggestions ...
4
votes
1answer
3k views

ldap_add no such object (32) matched dn dc=domain dc=com

When im trying to import users to LDAP using this command: ldapadd -x -D "cn=Manager,dc=domain,dc=com" -W -f /etc/openldap/root.ldif I have this error: ldap_add no such object (32) ...
3
votes
2answers
114 views

Usefulness of an absolute filter on an LDAP query?

I was perusing the source for OpenLDAP and I saw where the root DSE supports something called absolute filters. It looks like it's specified in RFC4526 It looks like the author that originally drafted ...
3
votes
2answers
5k views

Unable to modify schema in OpenLDAP using run-time configuration cn=config

I'm having trouble modifying the schema of an OpenLDAP installation using the run-time configuration (cn=config). What I'm trying to do is modify existing attributes and add new ones to a custom ...
0
votes
0answers
22 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
0
votes
1answer
42 views

Solutions for bridging Solaris/AIX to Active Directory?

I need to have Solaris and AIX systems obtain authentication and name services to AD. I have had some success with Solaris using OpenLDAP as a proxy for user authentication. I have also successfully ...
0
votes
0answers
10 views

connect server via ssh using ldap account anywhere

I'm new in using openldap I'm using centOS7 to be my openldap server my question is, can I login server via ssh using ldap account without any client settings? something like when I done setting ...
0
votes
1answer
30 views

openldap SSL/TLS Cert: Get a 'real' one or use Self Signed?

I'm setting up SSL/TLS on OpenLDAP and wondering why the Debian Handbook has the user create a self-signed cert? Wouldn't one signed by a 'real' CA be more secure?
0
votes
1answer
2k views

LDAP+SAMBA login issues

i'm on a clean Ubuntu 13.10 install and i've just installed and configured openldap+samba while i'm trying to configure a domain controller plus user shares. In order to ease ldap management i've also ...
2
votes
1answer
1k views

Mac OS X 10.9 Server authentication using OpenLDAP not working

I have a Debian server that is running OpenLDAP version 2.4.31, and now I am trying to connect my Mac OS X 10.9 Server, so that I can authenticate existing LDAP users. I successfully connected them ...
1
vote
1answer
97 views

CentOS 6.6 LDAP configuration failed

I'm trying to config OpenLDAP on CentOS 6.6 with this db.ldif config: dn: olcDatabase={0}config,cn=config changetype: modify replace: olcRootPW olcRootPW: {SSHA}UCCQrNoadIFC2lN0Y6YxzCfu9hT/jZni - ...
1
vote
3answers
958 views

LDAP sync with Outlook

I have a task to research the possibilities of LDAP as a centralized Address Book. I have setup a openLDAP on Debian 5.07. I managed to search the LDAP contacts from MS Outlook 2007 (with some ...
3
votes
1answer
51 views

OpenLDAP advanced ACL configuration

I have a multiple DITs in my OpenLDAP server. I made user cn=config the root so that cn=config has root access to all DITs (each DIT). In addition, there is a per-DIT administrator IDed as ...
1
vote
0answers
15 views

OpenVPN and oLDAP configuration

I have a Linux VM setup with OpenVPN on Debian 7.8. I copied the client files over to my MacBook and iPhone and I'm successfully able to create a VPN connection without any issues. However, I'd like ...
-2
votes
1answer
36 views

Are the UID of users from a domain maintained locally in a machine?

This could be total nonsense but as I am new and am trying to learn. I came across this question. I have seen many of my office linux machines connected to some domain. I am wondering as if a ...
2
votes
1answer
1k views

TLS from Radius for Wifi is rejected by Win7

We do have the following Setup at our company Synology RS812+ hosting LDAP, RADIUS, DNS (Version DSM 5.0-4458 Update 2) 2*Cisco Wifi APs WAP561 (Firmware 1.0.3.4) Cisco Router ISA500 (Firmware ...
0
votes
1answer
50 views

How to properly insert a set of olcAccess attributes to the configuration of an OpenLDAP database?

I need to add a bunch of ACLs for my database but am having hard time writing proper LDIF for it. Unfortunately, ldapmodify is not very helpful with its useless error message: modifying entry ...
0
votes
1answer
27 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
0
votes
4answers
1k views

Allowing LDAP users to change password

How to allow LDAP users to change password from client machines ?
0
votes
1answer
14 views

Cannot load compiled ltb-password-check module on Debian

I'm trying to compile and load LDAP Tool Box Project's password checker module to improve the capabilities of password policy overlay on the Debian 7.8. Here's what I've done so far: I've installed ...
4
votes
2answers
1k views

Slappasswd output randomized

I was expecting slappasswd to produce a fixed hash but it appears that the output is randomized as I never get the same output for the same input password: $ slappasswd -s secret ...
0
votes
1answer
30 views

DIT write access for cn=config or LDAPI

I have an OpenLDAP 2.4 setup with multiple DITs. Each DIT database has a RootDN with manage rights, as it should. I need to give manage rights [or at least write] to either cn=config, or LDAPI so that ...
3
votes
3answers
5k views

Disallow global anonymous bind with cn=config

With slapd.conf you could globally disable anonymous binding and require authentication with the following static directives: disallow bind_anon require authc How can I achieve the same global ...
-1
votes
0answers
30 views

How to backup and restore users for openldap replication setup (syncrepl)

I am not able to restore the users using slapadd in replication setup of two nodes. When i restore it works on the where i restored but another one fails in the replication. We have two ldap nodes ...
1
vote
1answer
49 views

OpenLDAP & Asterisk - no global superior knowledge

I'm struggling to setup OpenLDAP to allow Asterisk to store information about users. I've tried to follow several howto's, but unfortunately I'm not able to set it up correctly. It seems like most ...
0
votes
2answers
1k views

Installation OpenLDAP on CentOS 7

I'm following this OpenLDAP step by step tutorial: http://www.server-world.info/en/note?os=CentOS_7&p=openldap&f=1 Important: I'm working on CentOS 7 But when in the first part I try to start ...
1
vote
1answer
2k views

Can't install new database in OpenLDAP 2.4 with BDB on Debian

I'm trying to install an openldap server (slapd) on a Debian EC2 instance. I have followed all the instructions I can find, and am using the recommended slapd-config approach to configuration. It all ...
0
votes
0answers
24 views

Setting up LDAP to authenticate users in data center

I'm a newbie to linux and networking. Somehow I'm assigned to research the tasks of setting up the authentication for users to login in from local office to data center. Here's the hypothetical ...
2
votes
3answers
1k views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
9
votes
2answers
16k views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ...
-1
votes
1answer
23 views

Gitlab with OpenLDAP secured with TLS

I have a working, secure OpenLDAP server running at: auth.<company name>.com I also have a reader account that Gitlab can use: cn=Reader Reader,ou=users,dc=auth,dc=<Company ...
0
votes
0answers
22 views

LDAP ACLs with filters

I am trying to write LDAP ACL filters that would suspend authentication for domains that have a custom attribute set to some value. I created a custom object with an extra NAME attribute domainStatus ...
0
votes
2answers
2k views

Setting up openldap for ldaps with cn=config

I'm trying to enable SSL connections on an OpenLDAP 2.4.23 server, but all the instructions I find only discuss the old slapd.conf configuration. Can anyone point to some instructions for setting it ...
0
votes
0answers
20 views

Can't read PID file on OpenLdap using RedHat 6/ Centos

When I try to execute command "service slapd debug", I receive this message [root@elara ~]# service slapd debug slapd: [INFO] Using /etc/default/slapd for configuration slapd: [INFO] Halting ...
0
votes
0answers
35 views

Working LDIF configuration example for openLDAP SQL backend

I need to provide access to a postgres database through LDAP and I am looking for a working configuration sample using LDIF files. All the examples I can find are using the old slapd.conf file for ...
-1
votes
0answers
52 views

Kerberos Active Directory Domain Failure (uBuntu)

I try to join Active Directory and Samba 4 in Ubuntu 12.04.05. When I run host -t SRV _kerberos._udp.test.sg I get the error: Host _kerberos._udp.test.sg not found: 3(NXDOMAIN) meanwhile $# host ...
1
vote
0answers
14 views

vlock/pam_ldap based authentications fails when adding TLS/SSL

I have working centralized authentication configuration setup on Debian Wheezy based servers, utilizing OpenLDAP (2.4.31), pam_ldap (184-8), and libnss-ldap (264-2). I have successfully configured ...
0
votes
0answers
65 views

SAMBA/LDAP authentication failed in FreeNAS

I got a FreeNAS server and I am trying to share folders using SAMBA. My users are in an OpenLDAP server. The OpenLDAP has the samba.schema loaded. I checked the sambaSID in my FreeNAS and it is the ...
2
votes
1answer
2k views

How do I use Openfire with OpenLDAP and ldap.clientSideSorting?

The system log on my Openfire + OpenLDAP installation is getting flooded with this message: slap_global_control: unrecognized control: 1.2.840.113556.1.4.473 This means that Openfire wants OpenLDAP ...
1
vote
1answer
46 views

sssd one ldap server for authentication and one for automounting, is this possible?

Says it all in the title really :) I am looking into SSSD but have a requirement that it must use ldap-1 for user authentication and then get the home directory automount information from ldap-2. ...
1
vote
1answer
77 views

Auth fail on Samba server with LDAP backend‏

I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc. The samba schema is present in the LDAP, and in the users profile. ...
0
votes
0answers
42 views

Multiple DN suffixes in openLDAP

I'm trying to create multiple dn suffixes with openLDAP, but it doesn't seem to work. I want have this: ou=Jamaika,dc=gov,dc=com ou=Jamaiks-shadow,dc=gov-shadow,dc=com-shadow Should look like ...
2
votes
2answers
272 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...