The tag has no usage guidance.

learn more… | top users | synonyms

7
votes
2answers
7k views

Basic openldap setup using slapd.d configuration

I'm trying to set up a test openldap server, having not worked with openldap before. I'm using the standard openldap-servers package on a redhat based machine (using Oracle Linux). I've installed the ...
7
votes
2answers
13k views

LDAP: backup with slapcat vs ldapsearch

Used: openldap-servers-2.4.23-34.el6_5.1.x86_64 Task: create script for crontab to create scheduled database full backup. 1) slapcat - create file in in the default format, Berkeley DB. 2) slapcat ...
3
votes
1answer
518 views

ldap_modify: Insufficient access (50) when changing password

I'm trying to modify the LDAP admin password on a fresh OpenLDAP install on CentOS 6.7 (similar to RHEL 6.7). I created a file called change_ldap_password.ldif: # Hash your password: # slappasswd -h ...
3
votes
3answers
3k views

How do I renew an expired Ubuntu OpenLDAP SSL Certificate

We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd. Here are the commands we used: openssl verify ...
2
votes
1answer
1k views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
2
votes
1answer
2k views

Configure selinux to allow openldap on CentOS 6.4

I'm trying to run an OpenLDAP server on CentOS 6.4 with selinux enabled, but slapd is dieing as soon as it's started via /etc/init.d/slapd start. (init script reports OK; everything works fine after ...
2
votes
1answer
6k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
2
votes
1answer
1k views

Is This Normal LDAP Behaviour In CentOS Linux?

Hello fine people! As a novice in the Linux world, I have managed to learn enough to put into production a ClearOS 5.2 server running the CentOS Linux Distro. This box serves as my Primary Domain ...
2
votes
1answer
1k views

Configure Jenkins with LDAP : parameter 'Root DN'

I am installing an LDAP server and configuring Jenkins in order to accept LDAP for authentication. In Jenkins parameters, I have a weird behavior with the parameter Root DN. Documentation says : ...
1
vote
2answers
691 views

SLES 11 - slapd is spamming the syslog

How do I get slapd to quiet down? Every second it's writing the same five lines to the /var/log/messages file. May 24 13:16:09 servername slapd[21299]: conn=5866 op=15204 SRCH base="" scope=0 deref=2 ...
1
vote
2answers
2k views

Can't contact LDAP server remotely from Mac

I'm trying to configure a LDAP server with some basic security parameters, including TLS and required authenticated binding. I have started the server, and can access it from localhost with the ...
1
vote
1answer
289 views

Export LDAP schema without data

For testing purposes, I need a copy of our LDAP server without any personal data. What is the best way, to export this from an existing OpenLDAP server? I tried ldapsearch and Apache Directory ...
1
vote
1answer
238 views

command line alternative to dpkg-reconfigure slapd

Is there a way to reconfigure slapd, providing all configuration options as command-line parameters/arguments? My goal is to be find an alternative to the interactive UI. Thank you
1
vote
1answer
20 views

Will adding a new objectClass in ldap get replicated?

I have a ldap setup with one master and two replicas created using this tutorial https://help.ubuntu.com/lts/serverguide/openldap-server.html#openldap-server-replication . If I add a new/custom ...
1
vote
2answers
357 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
1
vote
1answer
1k views

ldap fail after ubuntu upgrade to 12.04

I have upgraded ubuntu from 10.4 to 12.04. After it's done, ldap service is stopped and failed to start again! Now none of other services function! :( I checked error logs and found this: Feb 22 11:...
1
vote
1answer
350 views

slapd 2.4.23 hangs on ldaps connections

New install of CentOS 6.3, openldap-servers-2.4.23. Generated a new certificate request, signed the cert, started slapd. ldapsearch responds on ldapi:/// and ldap:///. However, as soon as a request is ...
1
vote
2answers
46 views

OpenLDAP Server nested Group search string

i got a small problem here regarding OpenLDAP. The problem is to search for the member of nested groups. Lets say i have this construct: dn=domain,dn=local ou=people cn=marvyn (inetOrgPerson) ...
1
vote
1answer
310 views

Dovecot + OpenLDAP

I am trying to get dovecot 2.0.19 authenticate users via LDAP (OpenLDAP 2.4.28) and using Wireshark to debug the process. It looks like the basic configuration of dovecot is fine, but it doesn't pull ...
1
vote
0answers
269 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
1
vote
1answer
605 views

Configuring OpenLDAP init script on CentOS 6.4

If I just run slapd with no arguments (as root) it starts and works fine. When I try to start it using /etc/init.d/slapd start however, it dies immediately. I see from looking at the init script that ...
1
vote
1answer
498 views

How to relocate the database directory for Red Hat Directory Server 9.0

I am running RHDS in a VM, but would like to store the data and logs on a separate volume, that is on a SAN. The partition is ext4fs on /sdb1 and is mounted as /data. I tried many variations of the ...
1
vote
1answer
215 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
0
votes
1answer
169 views

what does it mean ? openldap: TLS: no unlocked certificate for certificate '<some certificate subject>'

just spent a lot of time with centos 6.7 and openldap. it was configured with simple certificates and a root-ca in nice little pem files, but after an upgrade from centos 6.4, connecting to the slapd ...
0
votes
2answers
189 views

Cannot run SAMBA (DC) and OpenLDAP, (The port is being used)

I installed samba and made it a simple domain controller, and I intend to set it to make the authentication over OpenLDAP. The problem is I can NOT run both slapd and samba processes at the same time. ...
0
votes
2answers
1k views

Who should I run slapindex as? Both root and openldap users seem unadvisable

I am following these instructions to install OpenLDAP on Debian 6.0. The instructions tell me to run slapindex as root, but it sounds like Debian does not like the idea: WARNING! Runnig as root! ...
0
votes
1answer
64 views

OpenLDAP will not start - Starting OpenLDAP: slapdrm: cannot remove `/var/lib/ldap/alock'

Hope someone can help me out here. I forgot the OpenLDAP admin password on a debian server and in the process, I specified the password in the slapd config file as follows: olcRootPW: {SHA}...
0
votes
1answer
34 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
0
votes
2answers
106 views

Apply changes to PAM changes

Does the server or a specific service needs to be restarted to let changes to pam files (/etc/pam.d/system-auth) take effect? longer version - I'm working on configuring SSSD to connect with LDAP for ...
0
votes
1answer
234 views

OpenLDAP default configuration file is `/etc/ldap/slapd.d` rather than `/etc/ldap/slapd.conf`

My openldap (version 2.4.31) makes directory /etc/ldap/slapd.d as its default configuration files rather than /etc/ldap/slapd.conf as the old version does. I found it becomes more complicated to ...
0
votes
1answer
43 views

Best / Safest way to stop and start slapd

Im running OpenLDAP: slapd 2.4.25. What is the best way to stop and start it ? I want to copy the LDAP database and have read I need to stop slapd first. Distro used is Ubuntu 11.04.
0
votes
2answers
574 views

Issues with LDAP backend in OpenLDAP

Good Morning; After working on setting up an LDAP proxy server to replicate LDAP data, I keep getting the following message: 52a0b5ca send_ldap_result: conn=-1 op=0 p=3 52a0b5ca ...
0
votes
1answer
407 views

How do the slapd logging levels work?

I can't seem to find an example of how each of the log levels in slapd work. I want slapd to log the users who are logging in, and the server that they are trying to log into, as well as any ...
0
votes
0answers
18 views

Applying ppolicy.ldif in OpenLdap

I just added the ppolicy.ldif schema to ldap by running the following: ldapadd -T EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif I then try to ldapadd my change.ldif file seen below #...
0
votes
0answers
49 views

slapd: Disable wildcard search on LDAP-Attribute

i run a ldap server on a ubuntu machine (apt-get install ldap ldap-utils). The ldap server provides a kind of a global address-book. Each entry provides basicly the attributes title, givenname, ...
0
votes
0answers
23 views

OpenLdap allop overlay olc

Is there any way to configure operational attributes to be shown for every request? (openldap 2.4) There is the allop overlay, but it seems to be not working with olc only with slapd.conf. I'm able ...
0
votes
0answers
98 views

Centos LDAP server slapd stops responding until rsyslog is restarted

Have a LDAP sever running centos 6 with a fairly low amount of LDAP AUTH requests. Every couple of days the LDAP server will stop responding completely to any requests. LDAPsearch will freeze and ...
0
votes
0answers
74 views

Requesting parent OU doesn't seem to work right with Meta-Backend OU as child

I got a huge problem here. I’ve been trying to merge users from a local LDAP (ou=local-users,ou=accounts,dc=domain: which authenticates against a remote active directory (which is not ldap://remote....
0
votes
1answer
62 views

slapd configuration for back-sql: how to traslate examples from slapd.conf to slapd.d

I'm trying to configure slapd with back-sql (specifically postgresql backend). All documents I found (Postgresq LDAP Howto seems to be more complete) are related to old configuration that use slapd....
0
votes
1answer
182 views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ldap_url_parse_ext(ldap://99.99.99.99)...
0
votes
1answer
228 views

Active Directory users authentication on Ubuntu server

I need the simplest way to authenticate Active Directory users on Ubuntu Server (at login). I am trying with libnss-ldap, but it only works with plain LDAP server (like SLAPD) but now Active ...
0
votes
0answers
55 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
1answer
2k views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
0
votes
0answers
2k views

openLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04

I have installed an ldap server in Ubuntu 12.04 using the tutorial https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-server-installation. First time everything went fine but had ...
0
votes
1answer
364 views

Restore LDAP data from copied files

My server has broken and I had to urgently put it up again. I needed to reinstall the system and, since I was time constrained, I lazily just copied the directories I considered necessary (/etc, /opt, ...
0
votes
1answer
576 views

Why all LDAP user passwords are incorrectly imported? And can't be modified?

First of all I am new to OpenLDAP setup. I have followed instructions coming from: HowToForge.com linux openldap setup #root dn: dc=localhost,dc=com dc: localhost objectClass: dcObject objectClass: ...