OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

3
votes
0answers
2k views

Saslauth with ldapdb on debian

I'm trying to get saslauthd working with openldap. ldapsearch and every service connected to openldap works fine. sasldblistusers2 doesn't work - and ldapwhoami does not work either. getent passwd ...
2
votes
0answers
14 views

LDAP fixed length string attribute

I'm building a LDAP schema for OpenLDAP in which one of the attributes is a numeric identifier that has a constant length (e.g. 10). I am using for it the numericString syntax ...
2
votes
0answers
190 views

OpenLDAP with MySQL works but need schema advice

So, I have downloaded the latest source of OpenLDAP, compiled with —-enable-sql, messed around with the slapd.conf, configured the odbc files, added the tables to my current DB, spend a week debugging ...
2
votes
0answers
245 views

Change DN in OpenLDAP “on the fly”

I'm a newbie in LDAP and I have the following issue: I use OpenLDAP as a caching proxy for remote Active Directory. And the full DN of a user is like "cn=Doe\, ...
2
votes
0answers
362 views

Openldap Mirror Mode replication failover

We have currently one master ldap server and around 400 slave servers which are partially replicated through that master.All openldap versions are same and 2.4.31 What we want is actually if master ...
2
votes
0answers
184 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
2
votes
0answers
54 views

How do i map group to set of groups, and then filter by one of them?

I love idea of LDAP, however i find it hard to use (at least as long as i'm a newbie in it). This is the reason why i kindly ask for your help, dear fellows. I'm on phase of designing my directory, ...
2
votes
0answers
344 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
152 views

added apple.schema to slapd.conf but Workgroup Manager still doesn't work

I've included apple.schema, apple_auxillary.schema, and samba.schema in the slapd.conf file. Rebooted the slapd service with no errors. When I try to connect to the OpenLDAP server with Workgroup ...
2
votes
0answers
683 views

Dynamically translate posixGroup to groupOfNames in slapd (Apple Open Directory)

I'm setting up an application to authenticate to Open Directory using LDAP. Open Directory stores groups in RFC 2307 posixGroups format, like this: cn: mygroup objectClass: top objectClass: ...
2
votes
0answers
856 views

Dynamic VLANs with FreeRadius, OpenLDAP & Cisco WLC

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users ...
2
votes
0answers
116 views

samba Ldap password restriction

I'm trying to change the password for Ldap users using Samba. i'm using smbldap-tools-0.9.6 . I use the command smbldap-passwd in terminal. I can able to change the password. But i want to password ...
1
vote
0answers
47 views

How cache OpenLDAP Meta database (for use with Websphere Application Server)?

I have configured Meta database directory on OpenLDAP server for two different Active Diretories and it's work. But now I'd like set cache for this OpenLDAP, but I don't know how. From my slapd.conf ...
1
vote
0answers
110 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
1
vote
0answers
26 views

bind-sdb does not query for wildcard entry

I have successfully set up Bild with LDAP on a Fedora VM. The Problem is, bind-sdb simply does not query wildcard entries. When I do: nslookup doesnotexist.example.com. 127.0.0.1 The LDAP server ...
1
vote
0answers
403 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
0answers
96 views

Centos 6.2 Openwebmail change password issue

Recently build environment to test, install openldap, openwebmail and PAM authentication module After experiencing the current account login webmail change password will be "password is wrong, change ...
1
vote
0answers
214 views

VSFTP and openLDAP based virtual users home directory

I have a VSFTPD server based on CentOS 6, configured to authenticate virtual users against an openLDAP server. I can login to the FTP server, however, authenticated users are not redirected to their ...
1
vote
0answers
187 views

OpenLDAP on ArchLinux users cannot change passwd

I started an office and i NEED centralized login and home directories to work. Since all workstations are going to run Arch and problems with different LDAP versions I finally concluded the LDAP ...
1
vote
0answers
38 views

Automatically create LDAP groups for each new system user according to its username

is there any way to set and create a default group for each newly created system user so he belongs to its own user group? I mean, when a create a user foo i would like to create automatically a ...
1
vote
0answers
125 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
0answers
131 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
1
vote
0answers
84 views

OpenLDAP 2.4 and Mac OS X Local Directory

OS: Centos 6.4 OpenLDAP: 2.4 Mac: 10.8.3 through 10.8.4 I have an OpenLDAP server and I'm able to have users authenticate, however, for some reason even though I've changed the Mappings of ...
1
vote
0answers
106 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
1
vote
0answers
125 views

OpenLDAP pwdPolicySubentry for organizationalUnit

Can you set a pwdPolicySubentry for an organizationalUnit, so that all entries contained in that organizationalUnit follow that password policy?
1
vote
0answers
200 views

Scientific linux 6.4 SSHD UseLPK Bad configuration file

i try setup openldap and openssh that last take keys from openldap base. I installed openldap-server-5.3p1 and configured him. Also I install openss-ldap-5.3p1. Added scheme openssh-lpk to cn=config ...
1
vote
0answers
53 views

Restrict users to certain applications only

We are using many applications like zabbix, phabricator, AC etc. We need to integrate LDAP in all these applications. These application support LDAP but not group based authentication. Please let us ...
1
vote
0answers
205 views

CVS authentication with openldap

I have migrated the CVS from Windows to Linux and imported the repo's as needed. Now I have to setup ldap authentication ( Remote Server/Linux/Open LDAP ) for CVS. As per other blogs, it says we have ...
1
vote
0answers
345 views

LDAP secondary group working for only some users

On an Ubuntu box, I'm having issues with LDAP secondary groups for one user, sabnzbd. The user should be a part of the media group. daniel@server:~$ id sabnzbd uid=4996(sabnzbd) gid=4996(sabnzbd) ...
1
vote
0answers
190 views

openSuse and openldap:ldap only login

I 've managed to setup ldap server and i can search it succefully from the server machine. i ve added to the database all info except from the fstab file and automount info. I migrated succefully the ...
1
vote
0answers
259 views

Ubuntu - Installing OpenLDAP with meta?

I am trying to host an LDAP service that can help proxy between multiple LDAP servers. An example found here: http://blog.sejo.be/2010/01/8/openldap-en-3-ad-servers/ I thought I would give OpenLDAP a ...
1
vote
0answers
774 views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
1
vote
0answers
193 views

LDAP not showing secondary groups

Currently, I have a LDAP server (running ClearOS if that makes any difference) containing a database of users. So, I went and setup LDAP on a couple of my debian VMs, using libpam-ldapd and I ...
1
vote
0answers
403 views

How to Update OpenLDAP version from 2.3.x to 2.4.11 or later based on RPM(RHEL 5) package

I Using RHEL 5 Operating System, I want updating OpenLDAP version from 2.3.x to 2.4.11 or higher, I installed OpenLDAP(v 2.3.x) based on installation package. I have used the following command to ...
1
vote
0answers
42 views

having trouble with bog standard openldap server db

I am having trouble getting an "out of the box" openldap server working. The examples on the openldap site still refer to the slapd.conf file, but the install does not make that. if I start the ...
1
vote
0answers
4k views

How to configure OpenLDAP 2.4.23 for SSL on CentOS 6.3?

I have installed openldap 2.4.23 on CentOS 6.3 using the yum package 'openldap-servers'. When I follow instructions to configure openldap for SSL (such as ...
1
vote
0answers
240 views

Auto set Active Directory attributes upon new User creation

I have successfully created an OpenLDAP (CentOS 6.2) to Active Directory (Windows Server 2008 R2) connection. I can login to my CentOS using an AD user. Problem is, the AD user has to have these ...
1
vote
0answers
628 views

LDAP Berkeley DB

I'm trying to configure slapd on my machine and I keep getting this error. I can recover at times using db7.7_recover but not always. I see this problem if the slapd deamon is killed for any reason. ...
1
vote
0answers
803 views

LDAP groups not always mapping, Ubuntu server 12.04

Ubuntu 12.04 server, AMD64, authentication via LDAP. I'm having trouble getting the LDAP groups to map to my user account when logging in, even though 'getent group' shows the correct set of groups ...
1
vote
0answers
327 views

openldap + active directory + nested groups + nss

I'm using nss and openldap on linux to get a list of passwd entries from active directory. I'm getting all the users from a nested group by doing nss_base_passwd ...
1
vote
0answers
42 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
0answers
307 views

Can ApacheDS LDAP change root user name?

ApacheDS 1.5 has the following account by default. Bind dn or user: uid=admin,ou=system Bind password: secret i would like to change it to the following to avoid making changes in my code Bind dn ...
1
vote
0answers
899 views

Password expires 45 days even though 'Password Must Change' is set to 'never' (Samba+LDAP)

Since a few months ago Samba ask each of our users to change password at log on every 45 days (the default) and I have not been able to disable it. This setup had been running for 2 years before then ...
1
vote
0answers
412 views

nss_ldap failover with partially dead server

I've implemented a pair of openldap proxies running a few meta databases to merge and filter an AD DC cluster. I'm having a few issues around the clients failing over between boxes when one service is ...
1
vote
0answers
391 views

Connect to OpenLDAP with Mac OS X Workgroup Manager?

I would like to be able to manage my openldap server using the mac os x workgroup manager. How do I authenticate as it asks for a username and password as opposed to DN? I believe it has something ...
1
vote
0answers
676 views

Using automount on RHEL5, why are variables in the auto.master never expanded?

I'm migrating from NISPLUS to LDAP (openldap) and from RHEL4 to RHEL5. The LDAP server is running on RHEL5u4 as are the clients. On RHEL5 variable expansion in auto.master never works, whether in ...
1
vote
0answers
568 views

How to configure Centos 5.3 using OpenLDAP to store and serve SSH public keys?

I want to be able to manage all my users logins via OpenLDAP. I am using Centos 5.3, OpenSSH 4.3p2-42 and OpenLDAP 2.3.43. I have installed GOsa2. Is there a GOsa plugin to manage the SSH keys in ...
0
votes
0answers
19 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
0answers
25 views

Error 19 (0x13) replicating OpenLDAP using Syncrepl

I'm trying to get an OpenLDAP master to perform push-only replication to remote OpenLDAP consumers using the LDAP backend as a proxy. The master will be able to reach the slaves, but the slaves can't ...
0
votes
0answers
8 views

Custom schema for OpenLDAP 2.4

I am new to OpenLDAP administration. My aim is to learn how to create custom schemas, and customize "my" directory server this way. I tried to add one optional attribute - ipPhone. Made a schema ...