Questions tagged [ldif]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
11 views

AccessControlEntry (ACL/ACE) in Active Directory with LDIF

Can I add AccessControlEntry (ACL/ACE) in Active Directory with LDIF Files and ldapadd? With OpenLDAP / Oracle Directory it seems to be possible. I've tried: ## delegate Control / add ACI dn: OU=...
0
votes
1answer
45 views

When running ldifde, I'm missing the objectSid values. How do I get those to be returned?

I'm able to generate an LDIF export of my active directory like this ldifde -f test-data.ldif ldifde -f test-data2.ldif -d "CN=Configuration,DC=domain,DC=com" I then combine these two files together ...
0
votes
1answer
689 views

How to add ACL on OpenLDAP

I want to add an ACL for a sub organization on my OpenLDAP. This is their ACL documentation: https://www.openldap.org/doc/admin24/access-control.html I am using ldapmodify to update the ldap db on a ...
0
votes
0answers
170 views

module pw-sha2.la appears to be missing from /usr/lib64/openldap how can I add this back to my installation?

The issue I'm having with openldap 2.4.40 is on an ec2 instance of amazon linux ami release 2018.03 -- I want to load the pw-sha2.la module to increase password hash complexity. The way I had ...
0
votes
0answers
26 views

OpenLDAP - Access rights by group

How do I grant full access (add, modify, delete) on the children of ou=Something,ou=People,dc=example,dc=com to the members of group cn=Managers,ou=Group,dc=example,dc=com ?
0
votes
1answer
250 views

How to parse an ldif export for attribute values

I have an ldif export where I want to build an outputfile with one line per ldif entry; the one line contains various attribute-values in a specific order. So the commands should parse each ldif ...
0
votes
1answer
152 views

Importing a extended attribute in schema in AD , does it need mAPIID put into LDIF file?

What exactly is mAPIId and should it be put into the ldif file when the schema is imported into a AD forest?
0
votes
1answer
1k views

openldap add acl's for group

It's my first day on ldap I've read these howto's and posts and could not point it out! https://superuser.com/questions/1122329/ldapadd-gives-syntax-errors-with-openldap https://serverfault.com/...
2
votes
2answers
6k views

openLDAP ldap_modify: Server is unwilling to perform (53) when trying to delete custom schema

I have created this custom and very basic schema: objectclass ( 2.25.2.2.1 NAME 'myObjectClass' DESC 'myObjectClass objectclass' STRUCTURAL MUST ( cn ) ) I have added it without ...
0
votes
1answer
417 views

Implement apple.ldif in an openldap

I'm currently running an openldap server on a debian machine Distributor ID: Debian Description: Debian GNU/Linux 8.7 (jessie) Release: 8.7 Codename: jessie Slapd version @(#) $OpenLDAP: ...
3
votes
1answer
2k views

OpenLDAP: Convert AD-Schema from *.ldif to *.schema

I'm running an OpenLDAP 2.4.44 with the module back_ldap as LDAP Proxy for MS-AD-Servers (see for details: openLDAP as proxy to Active Directory). Now I need to add the schemata from AD-Server to the ...
0
votes
1answer
527 views

LDIF - Delete Attribute IF Exists

We are using the following LDIF to remove POSIX Attributes from our LDAP Directory. This works fine, except in the case where an attribute does not exist. For e.g. it will fail if the homedirectory ...
0
votes
2answers
3k views

openLDAP Replication Error “invalid format entry: olcDatabase={1}mdb,cn=config”

I'm trying to set up an LDAP Replication server by following this (https://www.server-world.info/en/note?os=Ubuntu_16.04&p=openldap&f=5) tutorial. At Step "[3] Configure LDAP Consumer" I've ...
1
vote
1answer
324 views

Load LDIF beginning with “cn=Subschema”

I have to create a development server to mirror a customer LDAP installation. The customer gave me a db.ldif file beginning with cn: cn=Subschema ldapSyntaxes: ( 1.3.6.1.1.16.1 DESC 'UUID' ) ...
0
votes
1answer
3k views

Reset Passwords of LDAP-Users at the first login

I have an LDAP Installation running on an Centos7 system. I want to create a big number of users. Those users will get a default password, so I want them to change the password at the (only)first ...
0
votes
1answer
303 views

How to add Organisations to LDAP via LDIF?

I want to initially add a couple of organisations. So I created an organisations.ldif in order to add them via ldapadd -Q -Y EXTERNAL -H ldapi:/// -W -f organisations.ldif My file looks like this ...
0
votes
1answer
616 views

Discrepancy in exporting LDIF OpenLDAP vs Apache Directory Studio

very new to the world of LDAP. I find that when I export an LDIF file in my OpenLDAP instance on Linux, running the slapcat command as such: ./slapcat -f /somewhere/slapd.conf -l backup.ldif it does ...
0
votes
1answer
263 views

how to create two dits in rts openldap server

I have created a base database with like this olcDatabase={0}config.ldif # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. # CRC32 5ebe5cbf dn: olcDatabase={0}config objectClass: ...
3
votes
1answer
8k views

what does the ldapadd error: "additional info: objectClass: value #3 invalid per syntax mean?

I have the ldif dn: olcOverlay=ppolicy,olcDatabase={1}hdb,cn=config objectClass: top objectClass: olcConfig objectClass: olcOverlayConfig objectClass: olcPPolicyConfig olcOverlay: ppolicy ...
2
votes
1answer
3k views

LDAP authentication - avoid duplicate uidNumber

I have just successfully configured OpenLDAP Users authentication in a single CentOS6 box, based on SSSD. Took some time and many trials, but it's working. Now, I want to start adding users. I'm ...
3
votes
1answer
324 views

OpenLDAP advanced ACL configuration

I have a multiple DITs in my OpenLDAP server. I made user cn=config the root so that cn=config has root access to all DITs (each DIT). In addition, there is a per-DIT administrator IDed as cn=admin,$...
1
vote
1answer
3k views

OpenLDAP & Asterisk - no global superior knowledge

I'm struggling to setup OpenLDAP to allow Asterisk to store information about users. I've tried to follow several howto's, but unfortunately I'm not able to set it up correctly. It seems like most ...
0
votes
1answer
494 views

Custom schema for OpenLDAP 2.4

I am new to OpenLDAP administration. My aim is to learn how to create custom schemas, and customize "my" directory server this way. I tried to add one optional attribute - ipPhone. Made a schema (...
1
vote
1answer
5k views

How do I import into ADAM / AD LDS - The specified instance type is invalid

I'm having a hard time importing an LDIF file into ADAM/ AD LDS, and the error is below (instance type is invalid). I've tested and recovered from errors that relate to The import file is ASCII, ...
3
votes
0answers
1k views

SecErr: DSID-031A1190, 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to change the password of the currently logged in user via ldifde using this command: ldifde -i -f pwd.ldif -t 636 My AD server is running in SSL mode with a self signed certificate. The ...
2
votes
1answer
2k views

wrong attributeType while updating sambaPwdLastSet

I'm trying to reset the password expiry for a user (really set up a semi-automatic process for doing so) and it's making me cry: server is openldap slapd: 2.4.28-1.1ubuntu4.2 $ ldapsearch -x -b dc=...
1
vote
1answer
1k views

LDAP export attributes based on a different schema or import only valid attributes

I'm trying to export LDAP data from a Zimbra schema into a basic OpenLDAP schema. Obviously the Zimbra schema has much more attributes than the basic OpenLDAP. My question is if there is a way of: ...
2
votes
2answers
5k views

LDIF: Modify attr if exists; Add if not exists

Is there a way to do one of the following in an LDIF file? Ignore error (attr not found) when trying to delete an attribute Or: If attribute exists, modify it If it doesn't exist, add it
3
votes
2answers
10k views

How do I solve LDIFDE errors on “last token starts with 'C'” and “change-modify entry is missing the terminator '-'” when..?

How do I solve LDIFDE errors on "last token starts with 'C'" and "change-modify entry is missing the terminator '-'" when trying to pair existing users to exiting security groups (domain migration)? ...
4
votes
2answers
6k views

How to add admin users in 389 LDAP, fedora directory server

I want to create couple of Admin users who have access to create/delete users on a particular group/Organization Unit. For example, User: uid=testadmin, ou=people, dc=my,dc=net Should have access ...
1
vote
1answer
151 views

Multimaster LDAP replication on Ubuntu 11.04

I'm attempting to setup a multimaster pair on Ubuntu 11.04. I currently have a working single server which I've cloned to a 2nd server. The installed version of OpenLDAP is the default from the Ubuntu ...
0
votes
1answer
792 views

Sanitizing dates using sed or awk on an ldapsearch query

I'd like to pipe the output of an ldapsearch to sanitize the dates returned - I presume sed and/or awk can help with this but would appreciate a bit of help. The fixed length date format in the LDIF ...
2
votes
1answer
1k views

Error importing sudoers ldif schema to Active Directory

As per this question, we are on the process of migrating our sudoers file to Active Directory. As per the documentation, this requires importing the schema.ActiveDirectory LDIF which comes with the ...
4
votes
3answers
5k views

Restoring openldap configuration from ldif file?

I am trying to restore my OpenLDAP server from an ldif file I made before it went horribly wrong. All of the websites I found talk about using slapadd but when I run slapadd -v -l ~ns01/...
1
vote
2answers
920 views

Change passwordPolicy objectClass in LDAP

I have the ff LDIF file for adding an attributeType passwordNonRootMayResetUserpwd. The attributeType is already existing. dn: cn=schema changetype: modify delete: objectClasses objectClasses: ( 1.3....
7
votes
3answers
28k views

ldapadd/ldapmodify: clarifications needed about these comamnds

The ldapmodify man page states that: The default for ldapmodify is to modify existing entries Yet when I try to import an LDIF file with ldapmodify I get the below error: ldapmodify: modify ...
5
votes
4answers
23k views

ldap_add: Constraint violation (19)

I'm having issues importing users with ldapadd and ldif files. The error I'm getting is: ldap_add: Constraint violation (19) additional info: structuralObjectClass: no user modification allowed The ...
11
votes
1answer
39k views

LDAP: How to add a person to an existing group?

Using command-line (Linux) or LDIF, I could find many examples of creating a new group and defining its members, but no examples of this: How to add a user to an existing group? Let's say the person ...
0
votes
1answer
266 views

LDAP layout question

I am very new to LDAP & just trying to learn. I am using openldap on debian. Can someone clarify this - or alternately point me to some link which will clarify these basic concepts? Let's say I ...
1
vote
2answers
302 views

referral object in openldap that points to a DN containing spaces

I am trying to add a referral object in openldap that points to a DN in the remote server that has a space in one of the container names, something like this ref: ldap://ldap3.example.com/ou=test ou,...
1
vote
2answers
506 views

How to update ldap with ldif backups?

I have an openldap ldif backup file daily that I want to replicate in other server. I add the data with slapadd -v -l file.ldif but can I update the changes that have occurred in my other ldap ...
1
vote
1answer
2k views

Record must end with an empty line - missing changetype (LDIF)

I tried putting the following LDIF file in Apache Directory Studio, but it complained that the record must end with an empty line. Do you know why? dn: CN=serialNumber,CN=Schema,CN=Configuration,DC=...
0
votes
2answers
504 views

ldap ldif how to add

Having this initialization ldif dn: dc=localhost,dc=localdomain changetype: add objectclass: dcObject objectclass: organization o: My Example dc: localhost dn: cn=Manager,dc=localhost,dc=localdomain ...
0
votes
2answers
262 views

Modify AD Attribue for a specified list of users

How would you modify a set of AD attributes for a specified list of users? In particular, I would like to set the following for individual users since the exchange general tab under user properties ...