Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

Can openldap ignore the -z (size limit) parameter in ldapsearch

I have an issue with a client application performing an ldap search against my Ubuntu 22.04 openldap server. As you can see in the wireshark trace, the client is specifying a sizelimit=1 for the ...
DoubleYou's user avatar
0 votes
0 answers
6 views

Bad configuration directory when moving from slapd.conf to olc

I've set up openldap through macports on my Mac. I've modified my slapd.conf and inserted database config rootdn "cn=admin,cn=config" rootpw secret Now, when I use slaptest -f ./slapd.conf -...
James Korden's user avatar
0 votes
0 answers
23 views

openldap show all operational attributes

Is there a way to deliver all operational attributes (e.g. memberOf) of a ldapsearch? I know if i add a '+' to ldapsearch i will get all attributes (incl. operational ones). In the acl there is an ...
fterm's user avatar
  • 1
0 votes
1 answer
19 views

How to rewrite LDAP attributes in slapd when used as a proxy?

I'm currently setting up slapd as a proxy and facing a challenge with rewriting LDAP attributes. I'm aware of the rewrite module (rwm) capability for DNs, but I need to apply similar functionality to ...
Ralequi's user avatar
  • 142
0 votes
1 answer
16 views

No rootDN in DIT after setting up OpenLDAP in Ubuntu 22.04

I am new to LDAP and Directory Services in general (My goal is to import ldif files containing certificates from a Public Key Directory (pkddownloadsg.icao.int/download)). But I am already failing at ...
tzippy's user avatar
  • 113
0 votes
0 answers
31 views

Getting bitnami openLDAP working with memberOf and ldif user config

i'm trying to configure the bitnami ldap server (docker) with the memberOf functionality. I have mounted the schemas dir (with the overlay ldif) and ldif dir for users and groups. Here is my overlay: #...
fterm's user avatar
  • 1
1 vote
0 answers
24 views

FreeRadius not loading clients from LDAP

I am trying to store and use my Radius clients in LDAP. They are defined and present in the LDAP: $ ldapsearch -x -H ldap://ldap.example.com -D "cn=admin,dc=example,dc=com" -w admin -b "...
Bnr's user avatar
  • 11
0 votes
0 answers
14 views

Openldap and ruby dont work with ruby command

Hi iam new in openldap and i have a problem know for 5 days iam searching for the fails but i cant find anything. Command is this here ruby publish.rb dev app100 password app101-x-requests its ...
cagi89's user avatar
  • 1
0 votes
2 answers
93 views

OpenLDAP authentication troubleshooting

I am running an OpenLDAP service using the slapd.d/ configuration style. I am testing creating users and authenticating as user. Here's my test script, which ends with a fail: ldap_bind: Invalid ...
XGDragon's user avatar
0 votes
1 answer
33 views

Openldap "ldapmodify" command fails to run

I'm attempting to update a config parameter within my openldap server by using ldapmodify, but I'm getting the following error: # ldapmodify -Y EXTERNAL -H ldapi:/// -f tls.ldif SASL/EXTERNAL ...
rjrumfelt's user avatar
2 votes
0 answers
192 views

Why I can't activate SSL on my Ubuntu Server (20.04) with ldap auth? (ldaps)

I have to activate SSL for secure comunications with ldap, I count with Letsencrypt .pem files (chain, fullchain, cert & privkey). I followed the steps of some pages but it didn't had any effect ...
Harry02's user avatar
  • 21
2 votes
1 answer
187 views

Insufficient Acces (50) LDAP

I am trying to execute a custom .ldif file at the beggining of the startup of OpenLDAP server and have succeded using the following command: ldapadd -x -D cn=admin,dc=vlad,dc=lan -w admin -H ldap:// -...
VladC's user avatar
  • 23
0 votes
2 answers
151 views

Freeradius filter ldap by group

I would like freeradius to check for group membership and allow access based on group membership: My current config: ldap { identity = 'cn=radius,ou=bindings,dc=company,dc=com' ...
Kristof Rado's user avatar
0 votes
0 answers
31 views

Can I Ldap Sync replication to a different backend?

My current OpenLDAP backend is BDB can I replicate (syncrepl) this to another server using a MDB backend? Probably a no but thought I'd ask. Thanks, Andy
Andy Fenney's user avatar
1 vote
1 answer
148 views

Combining OpenLDAP and Active Directory via OpenLDAP meta backend

We have an application that used to authenticate via our Atlassian Crowd instance, but after a major rewrite that authentication source is not available anymore. Now I need a solution to authenticate ...
Gerald Schneider's user avatar
0 votes
1 answer
58 views

OpenLDAP use of ObjectSid from Windows AD

I am creating a docker OpenLDAP to make a test that is simpler than Active Directory. To do this I have extracted a part of User account in a LDIF. I need the ObjectSid attribute because one of the ...
Jeremy's user avatar
  • 11
0 votes
1 answer
53 views

OpenLDAP failing to add new attributes

I want to create some user accounts with attributes like "gender", meaning I need to create custom attributes. I have created the following LDIF file: dn: cn=schema changetype: modify add: ...
Seal_bebbe's user avatar
0 votes
0 answers
150 views

OpenLDAP won't look at CA certificate

I have set up an LDAP server that I would like to connect to from a client machine. Ubuntu is OS of both server and client, TLS is active and since this is a practice project, all my certificates are ...
Seal_bebbe's user avatar
0 votes
1 answer
49 views

Active Directory for linux servers

I have 7 ubuntu servers and a Storage server on freebsd. I am considering deploying OpenLDAP on one of these 7 servers so that these servers can have a centralized user database and authentication ...
AAB's user avatar
  • 13
0 votes
0 answers
57 views

OpenLDAP peername.ip ACL not working for subnets

I have the following ACL stored in my /etc/openldap/slapd.conf file: access to dn.regex="^([^,]+,)?ou=(groups|addressbook),dc=ldap$" by dn.exact="cn=directory,ou=users,dc=ldap&...
Matthew Knill's user avatar
0 votes
1 answer
83 views

Creating ppolicy Overlay in OpenLDAP has no effect

I read +++ forums and docs. My OpenLDAP instance is configured in a Bitnami Container as follows: dn: cn=module,cn=config cn: module objectClass: olcModuleList olcModuleLoad: ppolicy.so olcModulePath: ...
Peedy2495's user avatar
0 votes
0 answers
23 views

What OpenLDAP ACL is necessary for Webmin?

I struggle in the arcane science of OpenLDAP ACL configuration. I would like to store user login data in OpenLDAP and provide it to multiple services, so the users can use the same username and ...
8bc3 457f's user avatar
  • 103
1 vote
1 answer
174 views

openLDAP works for v2.4 but v2.6 returns: Invalid syntax (21) additional info: objectClass: value #0 invalid per syntax

I have been facing this problem for a few days by now, and I would like to preface this by stating that this is the first time I have ever used ldap. So after debugging a bit around the error I have ...
omarelkady22's user avatar
0 votes
0 answers
46 views

pgina not able to authorize as per rules

I have the following settings img 1 and these are the authorization rules I have added img 2 Yet pgina is unable to correctly identify and follow the rules. Here is the output of simulation. bwayne is ...
none's user avatar
  • 1
0 votes
1 answer
56 views

Dovecot saves incoming mail from LMTP in wrong home directory despite being correctly overwritten

I have setup Postfix 3.8.1, Dovecot 2.3.20 and OpenLDAP on Ubuntu 23.10. Postfix transfers mails for local delivery via LMTP to Dovecot. In some cases, the mail address as seen from the outside world (...
user2690527's user avatar
0 votes
0 answers
64 views

OpenLDAP: Is is possible to create an LDAP DB with empty suffx?

Is it possible to create an OpenLDAP database with empty suffix? If yes, how? I was able to create the olcDatabaseConfig below cn=config, but when I try to add my first entry to the DB I get the error ...
user2690527's user avatar
2 votes
1 answer
48 views

OpenLDAP Access Levels: What is "search" without "read" good for? What does "manage" provide which "write" doesn't?

I try to understand the different access level which OpenLDAP provides, see OpenLDAP 2.6 Guide: Access Control - The access to grant. While access levels like write are clear just by their name, IMHO, ...
user2690527's user avatar
0 votes
1 answer
219 views

How to define the password protection scheme (e.g. hash function) used by ldappasswd?

I am using OpenLDAP 2.6. When I set an object's password via ldappasswd -x -D <dn of root user> -W -S <dn of object whose pwd shall be set> then some hash of the password end up in the ...
user2690527's user avatar
0 votes
1 answer
115 views

Where do I find the LDAP scheme for Postifx or which alternative should I use?

The howto https://www.postfix.org/LDAP_README.html describes LDAP object with object classes virtualaccount ldapgroup ldapuser attributes mail memberdn memberaddr maildrop Where do I find the ...
user2690527's user avatar
1 vote
1 answer
295 views

openldap - adding image to 'photo' attribute gives me 'no validator for syntax'

New to openLDAP - i'm trying to simply add a base64 encoded binary (16Kb) image to the photo attribute to the person objectClass but whatever i try i simply get this error 'no validator for syntax 1.3....
Mannie's user avatar
  • 113
0 votes
0 answers
271 views

"LDAP bind dn value missing" error when setting up Kerberos and OpenLDAP on Ubuntu 22.04

I have been following [these][1] instructions for setting up Kerberos to use an existing OpenLDAP server as its backend. I have run into a problem in the very last step. I am trying to add an existing ...
Andrew Vickers's user avatar
0 votes
0 answers
103 views

openLDAP olcAccess settings

i have installed openLdap server on a Rokye Linux: [root@localhost etc]# cat rocky-release Rocky Linux release 8.8 (Green Obsidian) I created the manager account following this guide on how to forge. ...
CiaoCiao's user avatar
0 votes
1 answer
251 views

Cannot passwd for root with nslcd and openldap on Debian 12

Fresh Debian 12 for lab (VM). I installed: slapd, phpldapadmin, nslcd, nscd and dependencies. I have two local accounts: root and user1. Also I have only user1 POSIX-account on local LDAP server. I ...
Karol's user avatar
  • 21
0 votes
0 answers
94 views

Windows AD to OpenLDAP synchronisation with password cache

We're looking for an "LDAP proxy" solution that can synchronize a Windows Active Directory with an OpenLDAP server inclusive passwords. The openLDAP server will act as primary and failover ...
John DX's user avatar
1 vote
1 answer
458 views

SSSD, openLDAP and nested groups

I am trying to figure out how to structure my ldap and/or configure sssd to read membership of nested groups. Something like this works for normal group membership: DN: cn=server-admins,ou=Groups,dc=...
fussedAs's user avatar
0 votes
0 answers
414 views

Cannot connect to LDAP server ERRNO=0

I have a php application (apache,redhat with selinux disabled) and I am struggling with ldap configuration. I am trying to connect to a ldap server and I am getting this error in apache logs: ...
el sparrow's user avatar
0 votes
0 answers
61 views

OpenLDAP + GSSAPI/Kerberos SASL

I have OpenLDAP 2.5 configured with GSSAPI and Kerberos set up and working. By working I mean I can bind and search when I have a ticket. My question is can I do a bind when I don't have a ticket? Can ...
Dave Barstis's user avatar
0 votes
0 answers
360 views

How to synchronize OpenLDAP and Samba4?

I have a samba 4 domain with internal LDAP. Now the need arose to copy OpenLDAP users and passwords to this domain. This copy must be made synchronously every time there is a change in OpenLDAP. ...
campos's user avatar
  • 115
0 votes
0 answers
132 views

SSSD LDAP CONFIGURATION

I am trying to configure ldap on port 636 on a redhat server. Right now, when I try the following command : netstat -antup | grep -i 636 I get tcp 0 132 IP_ADDRESS_1:40670 XX.XX.XX.XX:...
el sparrow's user avatar
0 votes
0 answers
2k views

Unable to login via SSH to a Linux machine with my LDAP credentials

I am trying to setup LDAP for users to login to Linux machines. I can change the users to any given users in the LDAP list of users using the su command. A new directory is created as well. So I'm ...
mikey1996's user avatar
1 vote
1 answer
170 views

OpenLDAP ppolicy working with passwd, but not ldappasswd

I've been working on this for about a week, and can't seem to figure out why this is happening. I've got passwd working, letting users change their own ldap password from a client machine, and it ...
zmehall's user avatar
  • 115
0 votes
1 answer
419 views

shared mail address with postfix and dovecot

I'm trying to set up some shared mailboxes like contact or support. I have made it possible for me to share an IMAP folder between users in Dovecot by doing this in 15-mailboxes.conf namespace { ...
Kiwimarc's user avatar
0 votes
0 answers
159 views

Windows application 'LDAP Admin' fails to connect to OpenLDAP on port 636

I run an OpenLDAP server on (2.6.3_2) FreeBSD. I works fine with FreeBSD/Linux clients like PAM/NSS/NextCloud over LDAPS port 636.(With a Let's Encrypt certificate) I can't get it to work together ...
DanishConnection's user avatar
2 votes
1 answer
475 views

Possible to parse ldapsearch output?

I have an ldapsearch query to pull some data of an email system, I am trying to parse the data into something I can analyze in a table/flat file, and generate reports on the accounts. Sample of the ...
dj423's user avatar
  • 23
0 votes
1 answer
299 views

Apache 2.4 LDAP "password mismatch" but password is correct

I run apache2.4 on debian and LDAP-Auth tells me "password mismatch" but I am very sure I use correct passwords (tested multiple users). I also asked chat-gpt and it told me maybe my ...
tux's user avatar
  • 1
0 votes
0 answers
165 views

OpenLDAP client config, cannot log in to the server

I'm trying to set up OpenLDAP on a Ubuntu 22.04 to authenticate against a central server running Ubuntu Server 20.04, however, i have found some issues i cannot solve on my own. The server itself is ...
Brayan Castro's user avatar
0 votes
0 answers
48 views

adding vlv(virtual list view) extension to openLDAP (LDAP) Server

Im currently working with LDAPRecord library in a Laravel project. I want to use a pagination function but it's required having virtual list view (vlv) extension to my ldap server , I dont quite know ...
ahmed rabah's user avatar
0 votes
0 answers
44 views

Project specific LDAP authorization for SVN

I am using Apache 2.4 on Ubuntu 14.04 and SVN 1.8.8. I have installed SVN server and created a number of repositories (one per client). For each team working for each client, I added configurations ...
Hussain Akbar's user avatar
0 votes
0 answers
27 views

I've got an error while adding an olcOverlay

here is my ldif file : dn: olcOverlay={0}syncprov,olcDatabase={2}hdb,cn=config objectClass: olcSyncProvConfig olcOverlay: syncpro then I enter ldapadd -Y EXTERNAL -H ldapi:// -f overlay.ldif and here ...
Arsham ghafari's user avatar
0 votes
0 answers
116 views

Is it possible to add memberUid as bind DN

Can we use memberUid for bind dn string. Here is my sample ldif file dn: cn=posixgroup,dc=memtesting,dc=com objectClass: top objectClass: posixGroup gidNumber: 1001 cn: posixgroup memberUid: posixuser ...
ram ajay's user avatar

1
2 3 4 5
30