OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

learn more… | top users | synonyms

39
votes
12answers
1k views

You're an open source shop.. how do you do shared calendaring?

I run an open source collaboration suite, I'm happy with it, my userbase are happy with it too... all except for calendaring. It's a serious sore point, and I'm scrambling to find a solution. I've ...
24
votes
2answers
57k views

How do I configure LDAP on Centos 6 for user authentication in the most secure and correct way?

During the last couple of days I have been using a lot of F-words, while browsing Internet for good documentation about how to setup an LDAP-server. So far I have found none, but plenty that are less ...
14
votes
6answers
13k views

Active Directory vs OpenLDAP

This is for a small company (12 developers) who haven't implemented any centralized user database - they've grown organically and just created accounts on computers as they needed. From a management ...
13
votes
1answer
8k views

LDAP Structure: dc=example,dc=com vs o=Example

I am relatively new to LDAP, and have seen two types of examples of how to set up your structure. One method is to have the base being: dc=example,dc=com while other examples have the base being ...
13
votes
5answers
25k views

Setting up RADIUS + LDAP for WPA2 on Ubuntu

I'm setting up a wireless network for ~150 users. In short, I'm looking for a guide to set RADIUS server to authenticate WPA2 against a LDAP. On Ubuntu. I got a working LDAP, but as it is not in ...
12
votes
2answers
226 views

SSH only works after intentionally failed password

So, I'm having a rather weird problem. I have a server, that when I try to SSH into, immediately closes the connection if I type in the correct password on the first attempt. However, if I ...
10
votes
4answers
9k views

Does Nginx support LDAP authentication?

Hey Does nginx support ldap authentication? I have just migrated from apache and would like to move all of my authentications which are based on openldap and mod_auth_ldap to nginx. Let me know if ...
10
votes
2answers
17k views

How do I configure Reverse Group Membership Maintenance on an openldap server? (memberOf)

I am currently working on integrating LDAP authentication into a system and I would like to restrict access based on LDAP group. The only way to do this is via a search filter and therefore I believe ...
9
votes
3answers
4k views

Hosted LDAP Services

Are there any enterprise-grade services for externally hosted LDAP used for authenticating users in our company? Internally, we have many development and test servers that have system users locally ...
8
votes
5answers
23k views

CentOS 6 + LDAP + NFS. File ownership is stuck on “nobody”

I've been trying to get LDAP authentication and NFS exported home directories on CentOS 6 working for a few days now. I've gotten to the point that I can now login to the client machine using the ...
8
votes
1answer
377 views

Starting openLDAP

I work as a sysadmin in a company and i am required to Deploy openLDAP. I have read a lot of materials but i really can't figure out where to start. First about the company: Services: Email: every ...
7
votes
2answers
3k views

Configure OpenLDAP with TLS=required

Nowadays, OpenLDAP needs to be configured with ldapmodify cn=config, as describe here. But nowhere I can find how you configure it to only accept TLS traffic. I just confirmed that our server accepts ...
6
votes
2answers
608 views

Is OpenLDAP a viable alternative to Windows LDAP?

Just a simple question; this question is not meant to attack Windows or start a flame war in anyway. I want a viable solution to the way authentication is done in Windows DC environment (LDAP) on ...
6
votes
5answers
3k views

Small, simple LDAP server as an alternative to OpenLDAP [closed]

I have taken a look at the installation and configuration instructions for the newer OpenLDAP releases and decided that it's too much work to set up for my small userbase. Basically, I only use LDAP ...
6
votes
5answers
55k views

How to set ulimits in Solaris 10

I normally use pam_limits.so and /etc/security/limits.conf to set ulimits on file size, CPU time, etc. for the regular users logging in to my server running Ubuntu. What is the best way of doing ...
6
votes
1answer
1k views

Why does this ldapadd command quit with an “Invalid syntax” error?

I'm very new to openldap but extremely well versed in the linux/unix environment. I'm trying to setup my very first test openldap environment using the guide here. I've also read most of the admin ...
6
votes
2answers
442 views

samba+openldap vs ad for medium size network

We are going to have an organized network with an NT user authentication and proxy server. In choosing between Active Directory and Samba Server, I wanted to choose Samba server (I do love Open Source ...
6
votes
2answers
4k views

What's the best OpenLDAP VMWare appliance (VM) that you USED?

What's the best OpenLDAP VMWare appliance (VM) that you USED?
6
votes
2answers
2k views

How do I update the memberOf attributes of existing objects after adding the OpenLDAP Reverse Group Membership Maintenance overlay?

This is a follow-up to this question: I added the memberof overlay to an existing OpenLDAP 2.4 server. Now I want to update the existing user objects. For new group memberships, the memberOf ...
5
votes
2answers
720 views

Is it generally acceptable to expose LDAP in read only mode to the Internet?

I need to support Mac clients who need to access a LDAP server to locate SMIME keys. Since the keys are already in AD, and it's easy for me to create a RODC or read only forest where I push the ...
5
votes
5answers
7k views

Web interface for LDAP management

We are going to implement LDAP for centralized authentication in our organization. Which is the best simple LDAP management tool available ?
5
votes
3answers
323 views

When setting up OpenLDAP for the first time, what are some things to keep in mind?

I'm in the process of reading up on documentation and setting up OpenLDAP to handle authentication throughout my network, for email, web services, user accounts, any anything else that I could throw ...
5
votes
3answers
3k views

OpenLdap synchronize home directory between client and server

I have recently setup Ubuntu ldap client authentication on karmic and lucid desktop clients and the ldap server is running on an 10.04 LTS server and this is the link I followed for client setup and ...
5
votes
2answers
2k views

FreeRADIUS2 and LDAP Authentication

I am currently running a CentOS 5.5 box with FreeRADIUS2 on it. I have the simple authentication turned on right now (username and pass is set via /etc/raddb/users). I want to have FreeRADIUS ...
5
votes
3answers
2k views

Retrieve operational attributes from OpenLDAP

I've been having trouble trying to find some good documentation on how to retrieve operational attributes from OpenLDAP. I would like to retrieve the base distinguished name of an LDAP server by ...
5
votes
2answers
571 views

Access control to 100's of LAMP box via LDAP

This is every SysAdmin's nightmare of things to do. Basically we want to control who has access to which hosts. As simple it may sound, the problem is to find a scalable and low maintenance(mgmt. ...
5
votes
2answers
6k views

How to handle nested groups in LDAP

I am total LDAP newbie and I am just researching if I can use it for my next project or better stay away from it. The project will depend heavily on the concept of nested groups and I frequently need ...
5
votes
3answers
3k views

How come all LDAP users are shown with getent passwd?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When I type "getent ...
4
votes
3answers
2k views

Linux console is unusable when LDAP server is down

When our OpenLDAP server lost power the CentOS machines' console became nearly unusable. We were trying to login with a local account, but each command would take minutes to return. Even simple ...
4
votes
2answers
4k views

OpenLDAP - where is my slapd.conf?

I have installed OpenLDAP on Unbuntu 10.04. I wanted to configure my ldap but I can't find slapd.conf in /etc/ldap/ In this directory there is a ldap.conf but seems not to be the same. How can I ...
4
votes
2answers
6k views

How do I get openldap on Centos 6 to write anything to it's log files

I don't get any information in my log file for openldap on my Centos 6 server. This is how i configured it. SELinux is disabled at the moment. First created a folder where I'd like to store the log ...
4
votes
2answers
558 views

Move Windows accounts and settings to OpenLDAP

I need to transfer my machine-based accounts to a directory service, namingly OpenLDAP, run behind a Mac OS X server. The idea is that I have to make sure that the settings, the programs installed and ...
4
votes
1answer
1k views

Replication from OSX OpenDirectory to OpenLDAP

I have an OpenDirectory server running on an OSX Server machine, and I'd like to increase the reliability of the service by having a slave server. The problem is, I only have 1 OSX Server but I have ...
4
votes
1answer
2k views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ...
4
votes
2answers
1k views

Multiple LDAP servers with mod_authn_alias: failover not working when the first LDAP is down?

I've been trying to setup redundant LDAP servers with Apache 2.2.3. /etc/httpd/conf.d/authn_alias.conf <AuthnProviderAlias ldap master> AuthLDAPURL ...
4
votes
1answer
634 views

Slappasswd output randomized

I was expecting slappasswd to produce a fixed hash but it appears that the output is randomized as I never get the same output for the same input password: $ slappasswd -s secret ...
4
votes
1answer
129 views

systemPossSuperiors - why does AD have it, but not openldap

Having used openldap and now getting to know MS active directory (AD), I realize that in AD there is an attribute called "systemPossSuperiors", which defines which objects are allowed as parent ...
4
votes
3answers
7k views

Active Directory and OpenLDAP synchronization

I have been digging holes on google to find out the best way to synchronize the user database between AD and OpenLDAP. What i want to achieve is, have user database in AD and then propagate these ...
4
votes
2answers
2k views

Keep AD Group Synced in OpenLDAP with POSIX Account Augmentation

What's the most obvious way of achieving the following: The site has an working AD infrastructure and certain parts of the infrastructure are tightly coupled GNU/Linux machines where people from the ...
4
votes
1answer
8k views

ldap_add error (80) <olcModuleLoad> handler exited with 1

I'm trying to follow this tutorial to setup a basic LDAD server (OpenLDAP) for cleint authentication, but I am stuck on the step where I add the back-end configuration. I've created my backend.ldif ...
4
votes
3answers
7k views

How do I install a new schema for OpenLDAP on Debian 5 with dynamic config=cn backend?

I'm importing an openldap database from another server and while importing, I got some errors with some users, the problem is that the mozillaAbPersonAlpha is not a valid objectClass. #!ERROR [LDAP ...
4
votes
2answers
9k views

How Do I Configure OpenLDAP to use MySQL (Ubuntu 9.04)?

My intention is to make a MySQL table of Customer Contact Information available to Outlook/Thunderbird clients as an Address Book (via LDAP). I'm aware that OpenLDAP has a MySQL backend option, but I ...
4
votes
1answer
401 views

What are best practices to store delegated permissions in OpenLDAP?

My network's core user database is managed by OpenLDAP. Recently we need to introduce a possibility for one user to act on second user's behalf. As all application-related rights and permissions are ...
4
votes
1answer
429 views

Trying to authenticate to a Dell PowerConnect 5324 switch using FreeRADIUS and OpenLDAP

So here's the situation. I want to be able to use my LDAP credentials to log into this switch. Since there is no support for LDAP on the switch itself, I figured that FreeRADIUS has an LDAP module, ...
4
votes
1answer
378 views

openldaps wildcard certificate not accepted

my wildcard certificate doesn't get accepted with ldap 2.4.23. when i try to connect i get the following error: TLS certificate verification: subject: ...
4
votes
3answers
1k views

LDAP change user pass on client

I am trying to allow ldap users to change their password on client machines. I have tried pam every which way I can think of /etc/ldap.conf & /etc/pam_ldap.conf, as well. At this point I'm stuck. ...
3
votes
2answers
4k views

Calculate Days Since 1/1/1970

How can you calculate the number of days since 1/1/1970? This is for updating the shadowLastChange attribute on OpenLDAP. Is there a way to do this using the linux date command?
3
votes
3answers
3k views

Disallow global anonymous bind with cn=config

With slapd.conf you could globally disable anonymous binding and require authentication with the following static directives: disallow bind_anon require authc How can I achieve the same global ...
3
votes
4answers
1k views

Can I manage Windows 7 machines with an open source server?

Can I manage a small office of Windows machines with an open source solution? (~15 users) (XP Pro, but will be moving to Windows 7 Pro as we get new computers over the next few months... as budget ...
3
votes
1answer
4k views

CentOS 6.2 there is no slapd.conf after installating openldap

I have just installed fresh Centos 6.2 with openldap and samba with yum command. I'm having a bit of issue with finding the slapd.conf file. There is a folder for slap.d/ but no conf file in it by ...