Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

1
vote
0answers
13 views

OpenLDAP Proxy to AD - userPrincipalName as BindDN

I've setup OpenLDAP as AD proxy according to: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
0
votes
0answers
22 views

OpenLDAP userPrincipalName as BindDN

I've setup OpenLDAP as AD proxy according to: https://wiki.samba.org/index.php/OpenLDAP_as_proxy_to_AD Everything's working fine for clients using standard bindDN of full dn: attribute (e.g. cn=jdoe,...
0
votes
1answer
33 views

(Open) LDAP - Authentication not working

I installed OpenLDAP on a CentOS7 machine, I can log on locally on the server, so user exists (in passwd). I also run the following LDAP command: #ldapsearch -h localhost -x cn=ldapuser01 -b "dc=...
0
votes
0answers
13 views

Implementing certificate pinning on openldap client

I am trying to find a way to get openldap (client-side, RedHat 7.6) to only accept one particular TLS server certificate for a particular server, and rejects any other certificate, even if it was ...
0
votes
1answer
31 views

Set already hashed password for user against open ldap

Let me describe the infrastructure I am trying to configure. There is an opne ldap server on centOS (running slapd 2.4.40) as distributed authentication method for a couple of boxes. Is there a way ...
0
votes
1answer
15 views

LDAP connection seems to keep failing

What configuration errors would lead to the situation where ldapsearch works and getent works, but authentication seems to fail sometimes during SSH login? I have two servers that query a third ...
0
votes
0answers
15 views

ldapwhoami returns invalid credentials

my ldap configuration (/etc/openldap/slapd.conf) file is as follows include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/...
3
votes
1answer
77 views

Configuring Sudo using SSSD

Trying to Login to Linux systems using windows AD account. Configured successfully using SSSD. Used LDAP as Identity & Access Providers and Kerberos as the Authentication provider. I have done ...
0
votes
0answers
29 views

ldap pass though authentication

We have a scenario where the local ldap will actually receive all authentication requests and then pass the authentication to SASLauthd module when password is stored as {SASL}username. Thus, the ...
1
vote
1answer
80 views

<olcRootPW> can only be set when rootdn is under suffix

can someone help me to resolve this error? 5c18d91d ldif_read_file: checksum error on "/etc/openldap/slapd.d/cn=config.ldif" 5c18d91d olcRootPW: value #0: <olcRootPW> can only be set when ...
0
votes
0answers
34 views

OpenVPN auth-ldap cannot find user in a group, but ldapsearch can find it

I can search for a user without issue: ldapsearch -h ldap.my.server.name -b "cn=vpnusers,ou=groups,dc=example,dc=com" -x "memberUid=myusername" Results: # extended LDIF # # LDAPv3 # base <cn=...
0
votes
1answer
69 views

How do I fix my ldap olcAccess to allow users to bind to it?

Background I have a super simple openldap server with basically nothing in it except the admin user, a couple OU's, and a user. I can login and auth against it with the admin user cn=admin,dc=...
0
votes
0answers
40 views

Pass through authentication with LDAP and Kerberos

I have a SLES 12 server and installed and configured MIT KDC and openLDAP. I want to use pass through authentication in openLDAP so that the password is only stored in the KDC and I don't have to ...
0
votes
0answers
21 views

Pass through authentication from Openldap to Openldap

I am looking for a method to setup a Pass Through Authentication (PTA) between 2 openldap instances. All what I found is that is is possible to have this feature between an openldap instance to which ...
0
votes
0answers
69 views

slapd with mozillaAbPersonAlpha schema

I am struggling with the mozillaAbPersonAlpha schema on a opensuse tumbleweed openldap configuration (slapd.conf based, not cn=config olc based). The slapd.d directory exists but it is empty $ slapd -...
0
votes
0answers
118 views

LDAP: creating a bind user with limited privileges

I need to bind to an OpenLDAP server to authenticate users, but I don't want this low-privileged or "delegated administrator" to be able to see more attributes than strictly necessary. How do I ...
0
votes
0answers
33 views

OpenLDAP ACL for group not working

I have an install of OpenLDAP which I have recently moved to be configured by olc. I'm setting up the ACL's but am having a trouble with setting admin access. I have the following rules I am using: ...
0
votes
1answer
43 views

LDAP replication?

to improve resilience, we have replicated an OpenLDAP server. There are only reading rights on the client. After some attempts, there are no more error messages. The data part is apparently ...
0
votes
1answer
74 views

Openldap - unrecognized objectClass 'olcOverlayConfig'

I want to configure my overlay ppolicy and when I try to add the following configuration with ldapadd, slapd return objectClass: value #0 invalid per syntax dn: olcOverlay=ppolicy,olcDatabase={2}...
0
votes
1answer
66 views

openldap “invalid credentials” trying to authenticate with Active Directory

We have an AD server running and it works for every windows machine on our domain for authentication across many services. We recently brought a RHEL6 machine online and are trying to configure a ...
0
votes
1answer
72 views

Openldap, “olcOverlay={0}ppolicy,cn=olcDatabase{1}mdb,cn=config” ldap_add: No such object (32)

I try to enable ppolicy in openldap. I have tried it with the following tutorial: https://tobru.ch/openldap-password-policy-overlay/ Steps I have done: Load the ppolicy schema into OLC --> Success ...
0
votes
0answers
16 views

Do I need a samba schema in OpenLDAP just for security=user authentication?

I'd like to setup a samba file server to be accessed by Windows guests. Instead of using local user accounts and passwords, I want to use OpenLDAP for authentication (all my users already exist in ou=...
0
votes
2answers
48 views

openLDAP is not importing ldif to “cn=config”

I'm having issues setting up an admin group for an openLDAP. I have just moved to olcconfig and have set up the following ldif: dn: olcDatabase={1}mdb,cn=config changetype: modify add: olcAccess ...
0
votes
1answer
105 views

OpenLDAP cn=config: No such object (32)?

I'm attempting to follow several tutorials on setting the root LDAP password (our previous sysadmin departed...abruptly), which all say more or less the same thing: http://sysadminnotebook.blogspot....
0
votes
1answer
200 views

How to enable OpenLDAP server trust a self-signed certificate from a client?

I am using JNDI to connect to a remote OpenLDAP server via ldaps by the following code: Hashtable env = new Hashtable(); env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap....
2
votes
1answer
42 views

openldap, ldapsearch without bind from outside

If I look in my openldap logfile, I always find 3-4 times per day the following lines (olcLogLevel: 256; IP replaced): Oct 17 23:44:40 debian slapd[674]: conn=1011 fd=14 ACCEPT from IP=______________ ...
0
votes
1answer
46 views

OpenLdap inetOrgPerson object class attribute missing : “middlename”

I have an openLDAP installed on my server. Please refer image below for the details. My OpenLDAP version My issue is that i can't find middlename attribute under inetOrgPerson object class, which is ...
0
votes
0answers
29 views

ssl3_get_server_certificate from sssd when attempting to log in, using openldap to autheticate

When I attempt to change password on Centos 7 using OpenLDAP, openldap returns passwd: Authentication token manipulation error Watching the syslog when this happens shows the error: sssd[be[...
0
votes
1answer
21 views

Openldap RootDN and other 'admin' user work differently when changing userPassword

Using OpenLDAP (2.4.44) on CENTOS 7 and have configured {SASL} pass-thru to another remote LDAP for some users using the userPassword field. This can change (overwrite) to using the local password {...
0
votes
2answers
105 views

OpenLAP olc (cn=config) and chaining - need assistance

So, after a lot of frustrating google-searches it would seem that my Google-fu isn't up to par - the specifics of chaining are no closer to my grasp. I've gotten part of the way using the answer here,...
1
vote
1answer
236 views

ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)

I am running an LDAP I can connect to, but in wanting to move away from slapd.conf and use ldif's, I am encountering the following problem(s). When I type:ldapsearch -H ldap:// -x -s base -b "" -LLL "...
-1
votes
1answer
73 views

sldap.d missing after installation

I am following the instructions on http://www.openldap.org/doc/admin24/quickstart.html to install OpenLDAP on RedHat. Everything goes fine until step 9: Import the configuration database You are ...
-1
votes
0answers
13 views

Maillist in openldap addressbook

How can i create a mail list contains multiple email address in openldap? I have an open ldap server on centos 7 with interOrg object class for storing email address of the employee. I tried to ...
0
votes
1answer
290 views

TLS trace: SSL_connect:error in SSLv2/v3 read server hello A

I am trying to query AD for users and tried every options available but no success Operating System = CentoS7.5 Packages = Openldap, ldapsearch Microsoft Active Directory my command ldapsearch -x -...
2
votes
1answer
716 views

How can Samba be configured to use LDAP for authentication only?

I'm looking to set up a new Samba file share that uses LDAP for back-end authentication. The LDAP server is already set up, and the machine the Samba server will be on is already set up to allow SSH ...
0
votes
1answer
67 views

Openldap enable ssl on replication

Can you told me how can i modify current configuration for olcSyncRepl? I have following situation: I Configured master ldap server and slave server I Configured replication between these two ...
1
vote
1answer
32 views

How to set an olcAccess attribute so gidNumber=0+uidNumber=0 works like olcRootDN?

I'm upgrading a Ubuntu 14.04 OpenLDAP server to 16.04 and running into a snag. There is an (localhost) import script which uses uses ldapdelete -r -Y EXTERNAL -H ldapi:///... to remove some OUs and ...
0
votes
1answer
38 views

OpenLDAP slapd as transparent proxy, bind always fails

I have a linux (4.1.12-61.1.34.el6uek.x86_64) box with a slapd service (slapd 2.4.40). What I'm trying to achieve is to transparently proxy all client ldap related traffic through this slapd instance ...
0
votes
1answer
22 views

How to configure clients with two ldap servers : master and slave?

I 've successfully managed to set up OPENLDAP replication : ldap1.mydomain.com ldap2.mydomain.com (ldap2 initiates connection every 10min to ldap1.mydomain.com to synchronize) What I want is that ...
0
votes
0answers
99 views

Restrict user login to Linux via group membership querying Active Directory

I need to restrict access to linux servers according to AD group membership. I already have Centos 7 servers joined to AD realm using sssd and have already configured sssd.conf in order to use ...
0
votes
1answer
168 views

Debian 9: Can't contact LDAP server with ldapi protocol

On my client on pam authentication (libnss-ldap and libpam-ldap packages and configuration) there is a configuration which leads me to nss_ldap: failed to bind to LDAP server ldapi://172.16.10.174/: ...
1
vote
1answer
40 views

OPENLDAP 2.4 , allow anonymous access only to get User Publickey

I'm trying to do the following : I have openldap 2.4.45 server (test) which contains users, groups like this : o=Example(dc=example,dc=com) ou=users uid=alice uid=bob PublicKey="...." ...
1
vote
1answer
27 views

How can I proxy multiple LDAP servers with completely different name spaces?

We are developing R/Shiny Applications on Ubuntu Server. Authentication is done via OpenLDAP on Ubuntu Server. The Shiny Server only supports one LDAP directory. Now, we have an external customer ...
0
votes
3answers
35 views

Authenticate users using their firstname

I'm setting up a Postfic and Dovecot with LDAP email server. My users in LDAP is like this: dn: uid=firstname,ou=People,dc=domain,dc=com uid: firstname uidNumber: 4025 gidNumber: 4025 givenName: ...
0
votes
2answers
382 views

SSL for OpenLDAP on Centos 7 not working

I'm currently trying to configure SSL for OpenLDAP on Centos 7 with a self signed certificate. LDAP works without SSL. I made following commands: Generating the certificate / key and changing ...
-3
votes
2answers
205 views

Integrate Active Directory and OpenLDAP [closed]

I am using the Active directory on windows server 2016 and LDAPv3 on Ubuntu 18.04. I have some client that using ubuntu desktop, I want to integrate LDAP with active directory for authentication and ...
0
votes
0answers
116 views

How to add ACL on OpenLDAP

I want to add an ACL for a sub organization on my OpenLDAP. This is their ACL documentation: https://www.openldap.org/doc/admin24/access-control.html I am using ldapmodify to update the ldap db on a ...
0
votes
2answers
270 views

Group policy on Open LDAP [closed]

Active directory on windows can give us many possibilities to manage out network such as Group policy. In my company, we have Linux systems. My question is: Is there any Linux based application or ...
0
votes
1answer
31 views

OpenLDAP - user cannot login after ACL rules change

I'm playing around with OpenLDAP servers with replication, and needed to set appropriate ACLs to give replication user to read everything in source host. After reading this article created this set ...
2
votes
1answer
225 views

openldap with macOS Clients

I try to configure the mac clients to use a LDAP to connect to their session (using openLDAP). I have created PosixAccounts with PosixGroups, and tried on ubuntu systems : I can log-in with my users. ...