Questions tagged [slapd]
slapd (Standalone LDAP Daemon) is an LDAP server implementation, part of the OpenLDAP open source project.
100
questions
0
votes
0
answers
6
views
Bad configuration directory when moving from slapd.conf to olc
I've set up openldap through macports on my Mac.
I've modified my slapd.conf and inserted
database config
rootdn "cn=admin,cn=config"
rootpw secret
Now, when I use slaptest -f ./slapd.conf -...
- 155
0
votes
1
answer
19
views
How to rewrite LDAP attributes in slapd when used as a proxy?
I'm currently setting up slapd as a proxy and facing a challenge with rewriting LDAP attributes. I'm aware of the rewrite module (rwm) capability for DNs, but I need to apply similar functionality to ...
- 142
0
votes
0
answers
25
views
slapd version not upgraded
I have just upgraded my openldap to 2.4.59.
But when I execute slapd -V, it still shows my previous version : 2.4.44?
root@VLDAP ~]# ldapsearch -V
ldapsearch: @(#) $OpenLDAP: ldapsearch 2.4.59 (Mar 13 ...
0
votes
1
answer
258
views
LDAP server migration from Debian to Ubuntu Error
We are trying to migrate ldap from an outdated Debian server to a Ubuntu server. All attempts at using slapcat, modifying the config manually, and other tricks have failed. I believe the old database ...
- 11
0
votes
1
answer
140
views
What are all the certificates mandatory to be provide while setting TLSVerifyClient option to demand
In my case, I had set TLSVerifyClient to demand. I couldn't be able to establish a connection While providing TLSCACertificateFile alone.
While setting the TLSVerifyClient option demand is it ...
- 7
0
votes
1
answer
318
views
LDAP configuration for slapd-sock / slapo-sock / back-sock
Current system: CentOS 7.9, OpenLDAP 2.4
I would like to implement a "hook" into my LDAP operations so that when an ldapadd or ldapmodify operation takes place, a script is run in addition ...
0
votes
0
answers
333
views
OpenLDAP slapd.d configuration directory not updated
I have 'inherited' an openldap (CentOS 7) server which configuration is handled dynamically (using a slapd.d directory and a tree of ldif files).
I used ldapmodify to add an attribute (olcDbCheckpoint)...
- 163
0
votes
0
answers
274
views
CentOS Stream 9 OpenLDAP failing to start slapd service
I'm trying to set up an OpenLDAP server on CentOS Stream 9, currently the server is only used to host a Wiki.JS wiki.
I've installed the OpenLDAP server and client packages through yum without any ...
- 1
0
votes
1
answer
120
views
OpenLdap slapd how to query multiple DIT with a single ldapsearch
I have an open ldap server, slapd, serving two DITs
first is a completely local tree, ou=People,dc=local,dc=company,dc=org because we have some external users in our department
second is a ...
- 1
1
vote
0
answers
305
views
LDAP: Why does slapcat truncate my slapd.log file?
I have an OpenLDAP 2.4 server running on Ubuntu 18.04 LTS. Everytime I run
# slapcat -l test.ldif
my slapd.log file gets truncated (i. e. previous log messages are deleted and new ones are written at ...
- 11
0
votes
1
answer
838
views
Migrating OpenLDAP data from 2.4 to 2.5
I have gone through documentation online and on some forums but I am stuck on importing data from ldap 2.4 to 2.5 (Migrating to a new server as well). Here are the steps I did and the error I am ...
- 1
0
votes
1
answer
2k
views
openldap / slapd return the error : "daemon: listen(ldap://my.server1.org, 5) failed errno=98 (Address already in use)"
I am trying to set up a master master replication between two openldap servers. To do so, the first steps make me configure theses two files :
/etc/hosts, need to contain the DNS of the baseDN of the ...
- 21
1
vote
1
answer
34
views
Questions about Debian OpenDLAP configuration
I have the slapd/stable,now 2.4.57+dfsg-3 amd64 Debian 11 package. I read the official OpenLDAP documentation and Debian article.
But I cannot understand the difference between the multiple ...
user942938
0
votes
1
answer
179
views
Does packages security patches are backported to older version?
I see on cve.mitre.org that OpenLDAP (slapd) package have plenty of vulnerabilities prior to 2.4.57.
If I want to install OpenLDAP from official repositories on my Debian 10, which version is slapd/...
user942938
0
votes
1
answer
2k
views
How to check ldap password storage policy
How do I check how passwords are stored in a local running OpenLDAP server? I would prefer some sort of query that will state the used configuration. Alternatively, accessing the stored passwords to ...
- 417
-1
votes
1
answer
320
views
OPEN LDAP Sync Test
Could someone experienced in open ldap give me answers for these questions please ?
I'm looking into a pre configured two open ldap servers that are in mirror sync. What is the best way to identify ...
- 9
1
vote
0
answers
539
views
OpenLDAP migration from old Debian 4 to current Debian 11
I want completely migrate whole database with conf, schema, ( everything ) from very old Debian 4 ( etch ) instance to new Debian 11 ( bullseye ).
Source system is running slapd 2.3.30 and destination ...
- 271
2
votes
0
answers
304
views
OpenLDAP Meta backend to return one result
I have configured OpenLDAP to act as a proxy server via meta backend to do remote queries to two different companies' Active Directory servers. Everything works correctly in terms of pulling ...
- 21
0
votes
1
answer
50
views
What are the numbers for in these LDAP commands ? ldap(3), slapd(8), slapd.conf(5), slurpd(8)
What do the numbers between parentheses stand for in the above commands, found within the LDAP galaxy?
I really cannot find anything out there, neither on the documentation, nor could I find any ...
- 133
1
vote
0
answers
263
views
OpenLDAP authentication stopped working. Where to look for clues if ldapsearch works fine?
Authentication against an LDAP Server stopped on several different web and workstation clients, for which i assume the host is at fault.
However ldapsearch -x uid=user -LLL -H ldap://ldap.host.de -b ...
0
votes
1
answer
566
views
Learning OpenLDAP, following an "older" tutorial-- hdb vs. mdb update needed, adjusting a step to move forward
http://www.rjsystems.nl/en/2100-d6-kerberos-openldap-provider.php
This 2017 tutorial uses the hdb olcDatabase-- modern installations default to mdb.
The step I am on is: http://www.rjsystems.nl/en/...
2
votes
0
answers
195
views
Can OpenLDAP deliver operational attributes by default?
I have configured OpenLDAP with the memberOf overlay and everything works as expected for me. I can see the group memberships in the operational attributes of an object.
Now i am running into the ...
- 21
1
vote
1
answer
288
views
Debian 10, OpenLDAP, LetsEncrypt, Error 80 trying to add
...I have never had so much trouble enabling secure communications.
I believe this to be a valid CA cert chain for Let's Encrypt
The contents of /etc/ssl/le/ca-chain.pem
-----BEGIN CERTIFICATE-----
...
0
votes
0
answers
253
views
Can't run slapd inside an ubuntu docker container
I am trying to create two docker containers, one to act as an ldap server and the other an ldap client. I started by creating the server. I am running on ubuntu 18.04 and using ubuntu image for my ...
2
votes
0
answers
667
views
Last login a user in OpenLdap
I am running openldap 2.4.45. Is there anyway I can get the last login time of a user using authtimestamp or any other attribute?
1
vote
2
answers
3k
views
Use bcrypt password hashing with OpenLDAP (slapd)
I have an OpenLDAP LDAP server on Debian 9 (through the slapd package, v2.4.44). We use crypt for password authentication. Currently the scheme is SHA512: $5$....
The setup is pretty much as described ...
- 193
0
votes
1
answer
700
views
OpenLDAP cn=config database access blocked
I use OpenLDAP 2.4.54 with Alpine. Here is my ldap configuration
$ sudo slapcat -n0
dn: olcDatabase={-1}frontend,cn=config
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: {-...
- 195
0
votes
1
answer
1k
views
ldapmodify failing implementing TLS certs
I'm probably overlooking a typo, but i cant find it.
~$ /usr/bin/ldapmodify -H ldapi:// -Y EXTERNAL -f /tmp/certs.ldif
SASL/EXTERNAL authentication started
SASL username:
gidNumber=0+uidNumber=0,cn=...
0
votes
1
answer
1k
views
LDAP slapd server not starting -> Modify ldap when server is offline
so im trying to get a LDAP server with ssl certificate running. I need to change the config by changing cn=config with ldapmodify and therefore cannot use a slapd.conf. It was quite hard finding ...
0
votes
1
answer
707
views
slapd.conf ACL: ldap_modify: Insufficient access (50)
I am trying to limit write access to users own userPassword attribute. But failing miserably for hours now. Here is what I've done so far:
Installed OpenLDAP 2.4 on Arch linux
Configured a base DN (...
- 113
0
votes
1
answer
259
views
Specify Keytab Location for Slapd
I need help. How can I set up the ldap keytab location path in order that slapd uses it instead of the system /etc/krb5.keytab?
I can't find the configuration in documentation.
Thank you so much.
- 35
1
vote
1
answer
4k
views
openldap migration - slapd wont start "olcDbDirectory: value #0: invalid path: Permission denied"
I have migrated my old slapd DB to a new server, these are the steps I took:
On old server run:
slapcat -n 0 -l config.ldif
slapcat -n 2 -l data.ldif
I had to run slapcat -n 2 because with -n 1 I ...
- 111
0
votes
1
answer
2k
views
ldapscripts ldapaddgroup fails with "No such object (32)" and "Error adding group ${groupname} to LDAP"
I had some issues and fixed them, but there is no post on stackexchange about it, so I'll post a question and answer too.
(EDIT: apparently there is a very related post...which I couldn't find any ...
- 2,816
0
votes
1
answer
2k
views
Bind to slapd ldap server using uid instead of cn
I'm trying to connect to an LDAP server running slapd, using the net_ldap ruby gem. I'm able to perform the bind action using the cn of the user, but I need to use the uid.
The LDAP server was ...
- 101
2
votes
2
answers
729
views
Creating POSIX group without members in LDAP
I am running OpenLDAP database with activated rfc2307bis schema. I'm trying now to load new groups in my testing instance (Debian) and everything works fine. With the old rfc2307 (NIS) schema, it was ...
- 39
1
vote
1
answer
385
views
slapd receives unexpected shutdown after CentOS 7.7 upgrade
After upgrading from CentOS 7.6 to 7.7 the slapd process receives a shutdown request a few seconds after its start. Where do I have to enable logging to get more information?
I'm using OpenLdap on ...
- 11
2
votes
2
answers
3k
views
recover ldap database without log files
A colleague of mine accidentally deleted ldap transaction log files (from /var/lib/ldap) on our ldap 2.4 server running on centos. Now the slapd deamon won't start, when running it with debug flag ...
- 141
0
votes
1
answer
57
views
OpenLDAP CentOS apply LDIF takes ages
When I apply LDIF scripts through ldap_modify it takes ages on a running multi-master setup before they are applied. I don't see any lead in the logfiles what could cause this issue.
I think it has ...
- 821
1
vote
1
answer
1k
views
How to migrate users between two different versions of OpenLDAP?
I need to export and import users between Two different versions of OpenLDAP, Old openldap version is 2.42 and new one has version 2.44. Both the openldap servers are setup on Ubuntu.
In this answer ...
- 215
3
votes
1
answer
7k
views
How to increase size of OpenLDAP MDB database? (MDB_MAP_FULL Error Code)
I'm getting this error related to slapd service (OpenLDAP server) in syslog
mdb_idl_insert_keys: c_put id failed: MDB_MAP_FULL: Environment
mapsize limit reached (-30792)
This error comes when ...
- 215
1
vote
0
answers
643
views
OpenLDAP with LDAPS and N-Way Multi-master replication
We have the following setup:
Two OpenLDAP servers - openldap1, openldap2
They are to be set up as N-Way multi-master
Certificates are all set up correctly with alternate names etc and trust each ...
- 11
0
votes
2
answers
10k
views
Creating an OpenLdap administrator group on LDAP server
I am trying to create a simple administrator group on my OpenLdap server that is running slapd. There is currently no slapd file, and I have been working with the cn=config format.
OS: CentOS Linux ...
3
votes
1
answer
7k
views
slapd : attribute type undefined
I'm trying to put a config of slapd on the new server.
I did it the same way, but it was probably two years ago and in slightly different environnement (I'm on the Debian actually and it was on CentOS ...
- 141
0
votes
1
answer
5k
views
How to enable OpenLDAP server trust a self-signed certificate from a client?
I am using JNDI to connect to a remote OpenLDAP server via ldaps by the following code:
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap....
- 153
3
votes
3
answers
5k
views
slapd.d missing after installation
I am following the instructions on https://www.openldap.org/doc/admin24/quickstart.html to install OpenLDAP on RedHat. Everything goes fine until step 9:
Import the configuration database
You are now ...
- 153
0
votes
2
answers
6k
views
Enable SSL/LDAPS in openLDAP 2.4 on Ubuntu 16.04.5 LTS - ldap_result: Can't contact LDAP server (-1)
I have the following Problem and googled for weeks now. Because I´ve really no clue where the problem is I´m asking my question here with the hope to find some ldap or ssl genius :)
I have a working ...
- 21
0
votes
1
answer
703
views
OpenLDAP slapd as transparent proxy, bind always fails
I have a linux (4.1.12-61.1.34.el6uek.x86_64) box with a slapd service (slapd 2.4.40). What I'm trying to achieve is to transparently proxy all client ldap related traffic through this slapd instance ...
- 101
2
votes
1
answer
2k
views
openldap with macOS Clients
I try to configure the mac clients to use a LDAP to connect to their session (using openLDAP).
I have created PosixAccounts with PosixGroups, and tried on ubuntu systems : I can log-in with my users.
...
- 133
0
votes
1
answer
2k
views
LDAP on Ubuntu 16 won't connect
I've installed LDAP on an Ubuntu 16.04 machine, using this command:
sudo apt install slapd ldap-utils
This is my config file /etc/ldap/ldap.conf
#
# LDAP Defaults
#
# See ldap.conf(5) for details
#...
- 35
1
vote
1
answer
1k
views
OpenLDAP limit max sessions per user
I have a slapd LDAP server and need to limit the number of active sessions per user. Is there a configuration parameter I can change to achieve this?
- 113