The tag has no usage guidance.

learn more… | top users | synonyms

4
votes
2answers
4k views

Basic openldap setup using slapd.d configuration

I'm trying to set up a test openldap server, having not worked with openldap before. I'm using the standard openldap-servers package on a redhat based machine (using Oracle Linux). I've installed the ...
3
votes
1answer
8k views

LDAP: backup with slapcat vs ldapsearch

Used: openldap-servers-2.4.23-34.el6_5.1.x86_64 Task: create script for crontab to create scheduled database full backup. 1) slapcat - create file in in the default format, Berkeley DB. 2) slapcat ...
3
votes
3answers
2k views

How do I renew an expired Ubuntu OpenLDAP SSL Certificate

We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd. Here are the commands we used: openssl verify ...
2
votes
1answer
530 views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
2
votes
1answer
1k views

Configure selinux to allow openldap on CentOS 6.4

I'm trying to run an OpenLDAP server on CentOS 6.4 with selinux enabled, but slapd is dieing as soon as it's started via /etc/init.d/slapd start. (init script reports OK; everything works fine after ...
2
votes
1answer
4k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
2
votes
1answer
974 views

Is This Normal LDAP Behaviour In CentOS Linux?

Hello fine people! As a novice in the Linux world, I have managed to learn enough to put into production a ClearOS 5.2 server running the CentOS Linux Distro. This box serves as my Primary Domain ...
1
vote
2answers
533 views

SLES 11 - slapd is spamming the syslog

How do I get slapd to quiet down? Every second it's writing the same five lines to the /var/log/messages file. May 24 13:16:09 servername slapd[21299]: conn=5866 op=15204 SRCH base="" scope=0 deref=2 ...
1
vote
2answers
2k views

Can't contact LDAP server remotely from Mac

I'm trying to configure a LDAP server with some basic security parameters, including TLS and required authenticated binding. I have started the server, and can access it from localhost with the ...
1
vote
1answer
109 views

command line alternative to dpkg-reconfigure slapd

Is there a way to reconfigure slapd, providing all configuration options as command-line parameters/arguments? My goal is to be find an alternative to the interactive UI. Thank you
1
vote
1answer
886 views

ldap fail after ubuntu upgrade to 12.04

I have upgraded ubuntu from 10.4 to 12.04. After it's done, ldap service is stopped and failed to start again! Now none of other services function! :( I checked error logs and found this: Feb 22 ...
1
vote
1answer
270 views

slapd 2.4.23 hangs on ldaps connections

New install of CentOS 6.3, openldap-servers-2.4.23. Generated a new certificate request, signed the cert, started slapd. ldapsearch responds on ldapi:/// and ldap:///. However, as soon as a request is ...
1
vote
1answer
337 views

Configure Jenkins with LDAP : parameter 'Root DN'

I am installing an LDAP server and configuring Jenkins in order to accept LDAP for authentication. In Jenkins parameters, I have a weird behavior with the parameter Root DN. Documentation says : ...
1
vote
1answer
171 views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
1
vote
1answer
232 views

Dovecot + OpenLDAP

I am trying to get dovecot 2.0.19 authenticate users via LDAP (OpenLDAP 2.4.28) and using Wireshark to debug the process. It looks like the basic configuration of dovecot is fine, but it doesn't pull ...
1
vote
0answers
211 views

How to create LDAP bind account in Centos/RedHat that allows me to search by ldapbind@server.com

I am creating an LDAP directory and searching by the full DN shows the proper results. $ ldapsearch -x -D "cn=ldapbind,dc=server,dc=com" -w bind I want / need to be able to search using the email ...
1
vote
1answer
506 views

Configuring OpenLDAP init script on CentOS 6.4

If I just run slapd with no arguments (as root) it starts and works fine. When I try to start it using /etc/init.d/slapd start however, it dies immediately. I see from looking at the init script that ...
1
vote
1answer
337 views

How to relocate the database directory for Red Hat Directory Server 9.0

I am running RHDS in a VM, but would like to store the data and logs on a separate volume, that is on a SAN. The partition is ext4fs on /sdb1 and is mounted as /data. I tried many variations of the ...
1
vote
1answer
195 views

slapd not launching on Mac OS X 10.6

I have a slight problem with the openldap server installed with Mac OS X 10.6.8 (regular, not server). When I launch slapd in a terminal, it stops itself after 1 or 2 seconds... I just have the time ...
0
votes
2answers
758 views

Who should I run slapindex as? Both root and openldap users seem unadvisable

I am following these instructions to install OpenLDAP on Debian 6.0. The instructions tell me to run slapindex as root, but it sounds like Debian does not like the idea: WARNING! Runnig as root! ...
0
votes
1answer
41 views

OpenLDAP will not start - Starting OpenLDAP: slapdrm: cannot remove `/var/lib/ldap/alock'

Hope someone can help me out here. I forgot the OpenLDAP admin password on a debian server and in the process, I specified the password in the slapd config file as follows: olcRootPW: ...
0
votes
1answer
28 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
0
votes
2answers
38 views

Apply changes to PAM changes

Does the server or a specific service needs to be restarted to let changes to pam files (/etc/pam.d/system-auth) take effect? longer version - I'm working on configuring SSSD to connect with LDAP for ...
0
votes
1answer
101 views

OpenLDAP default configuration file is `/etc/ldap/slapd.d` rather than `/etc/ldap/slapd.conf`

My openldap (version 2.4.31) makes directory /etc/ldap/slapd.d as its default configuration files rather than /etc/ldap/slapd.conf as the old version does. I found it becomes more complicated to ...
0
votes
1answer
34 views

Best / Safest way to stop and start slapd

Im running OpenLDAP: slapd 2.4.25. What is the best way to stop and start it ? I want to copy the LDAP database and have read I need to stop slapd first. Distro used is Ubuntu 11.04.
0
votes
2answers
387 views

Issues with LDAP backend in OpenLDAP

Good Morning; After working on setting up an LDAP proxy server to replicate LDAP data, I keep getting the following message: 52a0b5ca send_ldap_result: conn=-1 op=0 p=3 52a0b5ca ...
0
votes
1answer
288 views

How do the slapd logging levels work?

I can't seem to find an example of how each of the log levels in slapd work. I want slapd to log the users who are logging in, and the server that they are trying to log into, as well as any ...
0
votes
0answers
62 views

LDAP ACLs with filters

I am trying to write LDAP ACL filters that would suspend authentication for domains that have a custom attribute set to some value. I created a custom object with an extra NAME attribute domainStatus ...
0
votes
1answer
94 views

Active Directory users authentication on Ubuntu server

I need the simplest way to authenticate Active Directory users on Ubuntu Server (at login). I am trying with libnss-ldap, but it only works with plain LDAP server (like SLAPD) but now Active ...
0
votes
0answers
148 views

Cannot show openldap config using ldapsearch

im trying to get my Openldap settings in cn=config, and load a new schema in it, but i'm not able to get my cn=config with ldapsearch tool. root@ip-10-0-2-4:/tmp# ldapsearch -Y EXTERNAL -H ldapi:/// ...
0
votes
0answers
38 views

How to debug single object syncrepl failure

I have a particular object in my LDAP database that is failing to replicate (using syncrepl between two slapd's running 2.4.31-1+nmu2 on Debian Wheezy), despite other objects succeeding to replicate. ...
0
votes
0answers
90 views

OpenLDAP & SASL (DIGEST MD5) on Ubuntu 14.4

I have an existing ldap implementation that I would like to start enabling SASL. I don't really have a lot of experience with openldap/slapd and I'd like to be able to configure it using the current ...
0
votes
0answers
47 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
1answer
857 views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
0
votes
0answers
876 views

openLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04

I have installed an ldap server in Ubuntu 12.04 using the tutorial https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-server-installation. First time everything went fine but had ...
0
votes
0answers
118 views

adding VLV support to OpenLDAP 2.4.31

Apologize in advance - I am not an admin, so the question being asked might be trivial. Still, I am stuck. Any assistance would be greatly appreciated. I am trying to add Virtual List View support to ...
0
votes
0answers
178 views

OpenLDAP Invalid credentials on CentOS 7

Afternoon all I'm using Puppet to provision some OpenLDAP servers. The module I'm using is: datacentred-ldap, and the manifest I'm using looks like: ldap-class This process works fine on CentOS 6 ...
0
votes
1answer
251 views

Restore LDAP data from copied files

My server has broken and I had to urgently put it up again. I needed to reinstall the system and, since I was time constrained, I lazily just copied the directories I considered necessary (/etc, /opt, ...
0
votes
1answer
444 views

Why all LDAP user passwords are incorrectly imported? And can't be modified?

First of all I am new to OpenLDAP setup. I have followed instructions coming from: HowToForge.com linux openldap setup #root dn: dc=localhost,dc=com dc: localhost objectClass: dcObject objectClass: ...