OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

3
votes
0answers
2k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
2
votes
0answers
52 views

Single Sign On Solution

I'm trying to come up with a single sign on solution for a small team. I've got four applications: dokuwiki redmine svn owncloud All of these I was told by folks support LDAP, and that it was ...
2
votes
0answers
76 views

OpenLDAP TLS - test results in Bad file descriptor

I have set up an openldap server including tls on ubuntu 14.04 following this guide. While testing the connection, I get results that I can not find an explanation for. ldapsearch -xLLL -Z -W -D ...
2
votes
0answers
19 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
2
votes
0answers
292 views

OpenLDAP with MySQL works but need schema advice

So, I have downloaded the latest source of OpenLDAP, compiled with —-enable-sql, messed around with the slapd.conf, configured the odbc files, added the tables to my current DB, spend a week debugging ...
2
votes
0answers
271 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
2
votes
0answers
443 views

Openldap Mirror Mode replication failover

We have currently one master ldap server and around 400 slave servers which are partially replicated through that master.All openldap versions are same and 2.4.31 What we want is actually if master ...
2
votes
0answers
54 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
2
votes
0answers
382 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
161 views

added apple.schema to slapd.conf but Workgroup Manager still doesn't work

I've included apple.schema, apple_auxillary.schema, and samba.schema in the slapd.conf file. Rebooted the slapd service with no errors. When I try to connect to the OpenLDAP server with Workgroup ...
2
votes
0answers
875 views

LDAP groups not always mapping, Ubuntu server 12.04

Ubuntu 12.04 server, AMD64, authentication via LDAP. I'm having trouble getting the LDAP groups to map to my user account when logging in, even though 'getent group' shows the correct set of groups ...
2
votes
0answers
709 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
2
votes
0answers
909 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
2
votes
0answers
119 views

samba Ldap password restriction

I'm trying to change the password for Ldap users using Samba. i'm using smbldap-tools-0.9.6 . I use the command smbldap-passwd in terminal. I can able to change the password. But i want to password ...
1
vote
0answers
12 views

vlock/pam_ldap based authentications fails when adding TLS/SSL

I have working centralized authentication configuration setup on Debian Wheezy based servers, utilizing OpenLDAP (2.4.31), pam_ldap (184-8), and libnss-ldap (264-2). I have successfully configured ...
1
vote
0answers
20 views

ACL for openldap a group to move one specific DN b/w different organizational units (OU)

I can't seem to get this right. I have a bunch of users in a group, cn=noc,ou=groups,dc=company,dc=com, who should be able to move a list between ou=internalLists,ou=mail,ou=service,dc=company,dc=com ...
1
vote
0answers
71 views

CentOS 6.6 LDAP configuration failed

I'm trying to config OpenLDAP on CentOS 6.6 with this db.ldif config: dn: olcDatabase={0}config,cn=config changetype: modify replace: olcRootPW olcRootPW: {SSHA}UCCQrNoadIFC2lN0Y6YxzCfu9hT/jZni - ...
1
vote
0answers
40 views

Ubuntu OpenLDAP TLS negotiation failure

I've been following the Ubuntu Server Guide for OpenLDAP, and have run into an issue with what I suspect is replication. If I run the following command on the client with access to the server: ...
1
vote
0answers
66 views

How cache OpenLDAP Meta database (for use with Websphere Application Server)?

I have configured Meta database directory on OpenLDAP server for two different Active Diretories and it's work. But now I'd like set cache for this OpenLDAP, but I don't know how. From my slapd.conf ...
1
vote
0answers
34 views

bind-sdb does not query for wildcard entry

I have successfully set up Bild with LDAP on a Fedora VM. The Problem is, bind-sdb simply does not query wildcard entries. When I do: nslookup doesnotexist.example.com. 127.0.0.1 The LDAP server ...
1
vote
0answers
430 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
0answers
109 views

Centos 6.2 Openwebmail change password issue

Recently build environment to test, install openldap, openwebmail and PAM authentication module After experiencing the current account login webmail change password will be "password is wrong, change ...
1
vote
0answers
280 views

VSFTP and openLDAP based virtual users home directory

I have a VSFTPD server based on CentOS 6, configured to authenticate virtual users against an openLDAP server. I can login to the FTP server, however, authenticated users are not redirected to their ...
1
vote
0answers
236 views

OpenLDAP on ArchLinux users cannot change passwd

I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
1
vote
0answers
41 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
1
vote
0answers
136 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
0answers
157 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
1
vote
0answers
89 views

OpenLDAP 2.4 and Mac OS X Local Directory

OS: Centos 6.4 OpenLDAP: 2.4 Mac: 10.8.3 through 10.8.4 I have an OpenLDAP server and I'm able to have users authenticate, however, for some reason even though I've changed the Mappings of ...
1
vote
0answers
221 views

Scientific linux 6.4 SSHD UseLPK Bad configuration file

i try setup openldap and openssh that last take keys from openldap base. I installed openldap-server-5.3p1 and configured him. Also I install openss-ldap-5.3p1. Added scheme openssh-lpk to cn=config ...
1
vote
0answers
57 views

Restrict users to certain applications only

We are using many applications like zabbix, phabricator, AC etc. We need to integrate LDAP in all these applications. These application support LDAP but not group based authentication. Please let us ...
1
vote
0answers
228 views

CVS authentication with openldap

I have migrated the CVS from Windows to Linux and imported the repo's as needed. Now I have to setup ldap authentication ( Remote Server/Linux/Open LDAP ) for CVS. As per other blogs, it says we have ...
1
vote
0answers
375 views

LDAP secondary group working for only some users

On an Ubuntu box, I'm having issues with LDAP secondary groups for one user, sabnzbd. The user should be a part of the media group. daniel@server:~$ id sabnzbd uid=4996(sabnzbd) gid=4996(sabnzbd) ...
1
vote
0answers
208 views

openSuse and openldap:ldap only login

I 've managed to setup ldap server and i can search it succefully from the server machine. i ve added to the database all info except from the fstab file and automount info. I migrated succefully the ...
1
vote
0answers
278 views

Ubuntu - Installing OpenLDAP with meta?

I am trying to host an LDAP service that can help proxy between multiple LDAP servers. An example found here: http://blog.sejo.be/2010/01/8/openldap-en-3-ad-servers/ I thought I would give OpenLDAP a ...
1
vote
0answers
865 views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
1
vote
0answers
200 views

LDAP not showing secondary groups

Currently, I have a LDAP server (running ClearOS if that makes any difference) containing a database of users. So, I went and setup LDAP on a couple of my debian VMs, using libpam-ldapd and I ...
1
vote
0answers
457 views

How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package

I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package. I have used the following command to ...
1
vote
0answers
42 views

having trouble with bog standard openldap server db

I am having trouble getting an "out of the box" openldap server working. The examples on the openldap site still refer to the slapd.conf file, but the install does not make that. if I start the ...
1
vote
0answers
4k views

How to configure OpenLDAP 2.4.23 for SSL on CentOS 6.3?

I have installed openldap 2.4.23 on CentOS 6.3 using the yum package 'openldap-servers'. When I follow instructions to configure openldap for SSL (such as ...
1
vote
0answers
268 views

Auto set Active Directory attributes upon new User creation

I have successfully created an OpenLDAP (CentOS 6.2) to Active Directory (Windows Server 2008 R2) connection. I can login to my CentOS using an AD user. Problem is, the AD user has to have these ...
1
vote
0answers
669 views

LDAP Berkeley DB

I'm trying to configure slapd on my machine and I keep getting this error. I can recover at times using db7.7_recover but not always. I see this problem if the slapd deamon is killed for any reason. ...
1
vote
0answers
347 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
1
vote
0answers
44 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
0answers
329 views

Can ApacheDS LDAP change root user name?

ApacheDS 1.5 has the following account by default. Bind dn or user: uid=admin,ou=system Bind password: secret i would like to change it to the following to avoid making changes in my code Bind dn ...
1
vote
0answers
939 views

Password expires 45 days even though 'Password Must Change' is set to 'never' (Samba+LDAP)

Since a few months ago Samba ask each of our users to change password at log on every 45 days (the default) and I have not been able to disable it. This setup had been running for 2 years before then ...
1
vote
0answers
429 views

nss_ldap failover with partially dead server

I've implemented a pair of openldap proxies running a few meta databases to merge and filter an AD DC cluster. I'm having a few issues around the clients failing over between boxes when one service is ...
1
vote
0answers
404 views

Connect to OpenLDAP with Mac OS X Workgroup Manager?

I would like to be able to manage my openldap server using the mac os x workgroup manager. How do I authenticate as it asks for a username and password as opposed to DN? I believe it has something ...
1
vote
0answers
712 views

Using automount on RHEL5, why are variables in the auto.master never expanded?

I'm migrating from NISPLUS to LDAP (openldap) and from RHEL4 to RHEL5. The LDAP server is running on RHEL5u4 as are the clients. On RHEL5 variable expansion in auto.master never works, whether in ...
1
vote
0answers
583 views

How to configure Centos 5.3 using OpenLDAP to store and serve SSH public keys?

I want to be able to manage all my users logins via OpenLDAP. I am using Centos 5.3, OpenSSH 4.3p2-42 and OpenLDAP 2.3.43. I have installed GOsa2. Is there a GOsa plugin to manage the SSH keys in ...
0
votes
0answers
9 views

Working LDIF configuration example for openLDAP SQL backend

I need to provide access to a postgres database through LDAP and I am looking for a working configuration sample using LDIF files. All the examples I can find are using the old slapd.conf file for ...