Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

Filter by
Sorted by
Tagged with
0
votes
1answer
9 views

How can export user with pwdchangedtime in openldap server to another openldap server

I am using openldap 2.4.42 version with policyd. I installed new version openldap server and I want export all user to new openldap. It's export is succussfull but without user password "...
0
votes
1answer
40 views

what is alternative to openldap [closed]

I have a storage and I connected it to a linux redhat server. Now I am trying to map that into several computers on the same network. I used to use openldap but for any reason, I am unable to set user ...
0
votes
0answers
30 views

Configure OpenLDAP Proxy to view entries managed under Active Directory

I am running slapd 2.4.44 on rhel 7.8 and i'd like to configure Open LDAP proxy to be able to view entries that are managed under Active Directory. All of the documentation I've see online says to ...
0
votes
0answers
12 views

(INVALID DN) Webmin User and Group DB, can't bind with openldap

I have some issues with my Webmin when i try to bind it to the User and Group DB to allow LDAP users enter on webmin i have this issue Failed to login to LDAP server as admin : invalid DN So i when ...
0
votes
1answer
30 views

OpenLDAP - add the first entry

This is the second day I try to add the first entry to OpenLDAP 2.4.44. Configuration: # {-1}frontend, config dn: olcDatabase={-1}frontend,cn=config objectClass: olcDatabaseConfig objectClass: ...
0
votes
1answer
36 views

openldap migration - slapd wont start “olcDbDirectory: value #0: invalid path: Permission denied”

i have migrated my old slapd DB to a new server, these are the steps i took: 1) on old server run: slapcat -n 0 -l config.ldif slapcat -n 2 -l config.ldif i had to run slapcat -n 2... because with ...
0
votes
0answers
16 views

How to best store a dead/former name together with the new name in LDAP schema?

Today, in out IT unit, I came across a case where we need to store a new name in all systems linked with OpenLDAP for a person whom requested a name change. By legal reasons the person didn't show ...
0
votes
1answer
24 views

Store changelog in openldap database

I want to store changelog in my OpenLDAP database which contains details like this: This is a sample entry from another system which is using openLDAP I configured audit log but they are storing less ...
1
vote
0answers
28 views

Canon printer does not authenticate user with OpenLDAP [closed]

OpenLDAP is not listed at Canon documentation USRMA-4253-zz-CSL-1640-enUS. When trying to perform the user authentication the printer does not find the user.
0
votes
1answer
19 views

OpenLDAP uidNumber assignation

I am new to LDAP. I am creating items from the posixAccount ObjectClass, which requires uidNumber ( must attribute ). How can/should I assign that number to that item? Is there a guideline about it ...
0
votes
0answers
23 views

Unable to conect OpenLDAP with TLS on CentOS

This is the error log: error log cn=config.ldif I have tried almost every single configuration possible of ldap.conf current config of ldap I tried this : https://www.golinuxcloud.com/configure-...
0
votes
1answer
20 views

Anonymous auth in an ACL on OpenLDAP

I am new-ish to LDAP, and I am studying now the ACLs ( OlcAccess ) So, on the OpenLDAP Official documentation, I found this example: access to attrs=userPassword by self =xw by ...
0
votes
1answer
50 views

Is there a way display cn=changelog in Directory Tree of OpenLDAP when exploring with and directory explorer like phpldapadmin?

I have configured my changelog to get logged using this procedure :This tutorial I followed to set up changelog Now I have a ldif that is logging the changelog. But the requirement is to be able to ...
0
votes
0answers
21 views

Error installing OpenLDAP in WSL2

I'm trying to set up OpenLDAP to act as a non-secure proxy to Secure LDAP to support a legacy app so we can finish our migration to Azure Active Directory. I'm trying to install OpenLDAP on my system ...
0
votes
0answers
44 views

openldap unix/samba user backend add acl to grant admin ldap properties to administrator user

Hi y have openldap on ubuntu 16.04 like unix/samba(NT) user backend and admin ldap user defined like cn=admin,dc=grupo,dc=local acl defined is that olcAccess: {0}to attrs=userPassword,...
0
votes
0answers
25 views

Solaris 11.4 ldapclient with Microsoft AD root certificate

I am admin of a couple of Solaris 11.4 x86 servers and of a group of members of my company's Microsoft AD. I am not admin of the whole Microsoft AD, I am just able of adding and deleting members in ...
1
vote
1answer
24 views

How to disable SimplePagedResult control in OpenLDAP running in docker container

I am trying to reproduce issue when LDAP server does not support SimplePagedResult control. To do so I deployed Open LDAP image into my local Docker. Successfully run it and add users to directory ...
0
votes
0answers
108 views

How to import ldif users into FreeIPA?

Maybe it needs two steps: Add users defined in the ldif file to OpenLDAP(Inside FreeIPA) Migrate those added users from OpenLDAP to IPA Current situation Setup FreeIPA server, initilized an admin ...
0
votes
0answers
41 views

Modify OpenLDAP hashing algorithm [duplicate]

I have a CentOS7 Server running slapd 2.4.44 and I'd like to modify the default hashing algorithm being used. Instead of using SSHA, i'd like to use SHA-256 or SHA-512. I've been having trouble ...
0
votes
2answers
205 views

Permission denied (publickey) - Troubleshooting sshd pulling public keys from LDAP Server

1. Problem Summary: Hi, recently, in our infrastructure production environment, new users are unable to ssh into a debian jump server. The jumpserver' SSH daemon retrieves the SSH public keys from ...
0
votes
0answers
20 views

OpenLdap on Macbook air : ldap_bind() insufficient access (50) (auth fails)

I created a user tom as follow dn: uid=tom,ou=People,dc=example,dc=com objectClass: inetOrgPerson cn: Tom sn: Novembre uid: tom Then add password for this user ldappasswd -s secret -W -D "cn=admin,...
0
votes
0answers
24 views

Is it possible to import group or role data from LDAP(FreeIPA) to Jenkins to use for its roles feature?

Jenkins has many roles features. If want to sync user data from LDAP(FreeIPA), even create group or role data in LDAP side, then can the data be used for Jenkins' roles feature? Are they the same?
0
votes
1answer
234 views

Single sign on using SSSD against OpenLDAP server with Kerberos SASL/GSSAPI

Authentication against Kerberos and authorization against an LDAP directory is working for me. Now I'm looking for the client setup on Debian Buster using sssd. I started with LDAP authentication ...
0
votes
1answer
27 views

How to wrap long lines for olcAccess?

I tried to define the access permissions by adding a space at the beginning of a new line. But I get an syntax error, I do not understand: # ldapmodify -Y EXTERNAL -Q -H ldapi:/// dn: olcDatabase={2}...
0
votes
0answers
6 views

Which objectClass for proxy account? [duplicate]

I need to add a proxy user to an OpenLDAP server. The account is used by Jira to provision users into the LDAP server. I have already accounts of the class inetOrgPerson, which I use for persons. But ...
0
votes
0answers
17 views

OpenLDAP SASL EXTERNAL and TLS

I have a semi-working openldap TLS configuration. Considering the many questions here about this particular thing this seems to be a feat of its own. But this prohibits me to use ldapi:// and the ...
0
votes
1answer
82 views

OpenLdap LDAP admin group ALC

I have the following LDIF file to create ldapadmins. dn: ou=Manager,dc=example,dc=org objectClass: organizationalUnit objectClass: top ou: Manager dn: ou=Customers,dc=example,dc=org objectClass: ...
0
votes
0answers
17 views

How to set Jira and Confluence users to special groups automatically use LDAP server?

Set user directories in Jira Software Data Center, this path: User management > User Directories > Directory Type: LDAP > Configure LDAP User Directory > Directory Type: OpenLDAP > LDAP Permissions > ...
0
votes
0answers
95 views

OpenLDAP new CN admin

I installed openLDAP and currently it looks like this: default However I would like to add more admin users who can manage the LDAP. I tried to clone that, but that isnt worked as cloned admin it ...
0
votes
0answers
118 views

“ldap_modify: Server is unwilling to perform (53) additional info: shadow context; no update referral” ERROR in my ldap server

Iam trying to do multi master replication on my LDAP server on RHEL 7 but I am getting below error while running command: #ldapmodify -Y EXTERNAL -H ldapi:/// -f ldap01.ldif "ldap_modify: Server is ...
1
vote
1answer
148 views

ldaps SRV resolution not working

I have an AD environment and in ldapsearch, I am able to use SRV records in DNS to resolve the LDAP servers in the domain and in a site. This works great on the usual ldap port on 389, with basic ...
0
votes
0answers
40 views

How can I force users to update an expired (ppolicy) password when they log in with SSH keys?

OpenLDAP server is Ubuntu 18.04 running slapd package version 2.4.45+dfsg-1ubuntu1.4 Client is Ubuntu 18.04 using sssd 1.16.1-1ubuntu1.4 with an LDAP backend. I am not using SSH public keys within ...
0
votes
0answers
60 views

Problems setting up AuthLDAPSearchAsUser in Apache 2.4 LDAP configuration

I am attempting to add the AuthLDAPSearchAsUser directive to my Apache config so that users can directly use their credentials to LDAP bind instead of a service account. This is what I previously ...
0
votes
1answer
168 views

Bind to slapd ldap server using uid instead of cn

I'm trying to connect to an LDAP server running slapd, using the net_ldap ruby gem. I'm able to perform the bind action using the cn of the user, but I need to use the uid. The LDAP server was ...
0
votes
0answers
35 views

Ldap user authentication failure with invalid Credentials

I have a ldap server which is configured like this: cn=adminuser,dc=compnay,dc=com Then i have ccreate ou=users. I want to add some users to this ou with the intention of authenticating them from my ...
0
votes
0answers
44 views

Getting ldap_bind Invalid credentials (49) with openldap

I am getting error ldap_bind Invalid credentials (49) with openldap. I only installed and configured openldap on centos7. I changed the password couple of time as well. I Know there are many question ...
0
votes
0answers
25 views

How can I make LDAP bind case-senstive?

We're using Open LDAP for our directory. Apparently it allows case-insensitive bind auth, and this is causing some issues on our systems. I would like for authentication to fail for logins that are ...
3
votes
0answers
46 views

Old administrator password of LDAP still working after it has been changed

I have a LDAP server in an Ubuntu machine which I browse using Apache Directory Studio. I just changed the administrator password by going to cn=admin and changing userPassword. However I noticed that ...
0
votes
1answer
35 views

When I use ldapadd I get a response with possible options. How can I fix this?

sudo ldapadd -x -D cn=Manager, dc=localhost,dc=localdomain -W -f /home/liveuser/basedomain.ldif Is the code that I type into Fedora31 terminal and the response that I get back is jsut all the ...
0
votes
0answers
21 views

Configure openldap on mode multi-master

I am trying to create an openldap replica on mode multi-master with 3 nodes. I currently have the following settings synchronized with the following configuration: dn: olcDatabase={0}config,cn=config ...
0
votes
1answer
57 views

How to set Base DN from FreeIPA to Crowd OpenLDAP directory?

In the Crowd's directory adding item, it can add OpenLDAP and must set Base DN in it. However, how to find or set Base DN on the FreeIPA server? Crowd: FreeIPA: If don't set the right data ...
0
votes
0answers
48 views

OpenLDAP - Deleting TLS Cert Paths

we added TLS support for our Openldap 2.4.47 (cn=config) and it works great. Although, when we try to delete olcTLSCACertificateFile, olcTLSCertificateFile or olcTLSCertificateKeyFile it shows a ...
1
vote
2answers
92 views

SSSD, openLDAP, MIT Kerberos: “id username” doesn't find enty in LDAP, but ldapsearch does

I have installed openLDAP, MIT Kerberos and SSD on Debian 10 Systems based on this tutorial Integrated Kerberos-OpenLDAP provider on Debian squeeze. Each of the three components is on its own Proxmox ...
1
vote
0answers
20 views

Difference between manage and write in Openldap acl

I'm currently studying openldap ACL. In this documentation, at chapter 8.3.3. The access to grant there is a manage keyword that does gives more rights than the write keyword. Do you know what is ...
0
votes
1answer
135 views

OpenLDAP Group: How to create a group object with both member and memberUid attributes?

I've just installed and configured OpenLDAP 2.4 in CentOS 8 and I'm now creating Groups and it's members for future use. One of these future use will be LDAP+PAM integration, which is why I want my ...
0
votes
0answers
147 views

Openldap Master/Slave replication removing cn & gidNumber from group (on slvae) instead of just a member

I have configured a second Openldap server to be a slave of the first: (Overlay was already enabled) dn: olcDatabase={2}bdb,cn=config changetype: modify add:olcSyncrepl olcSyncrepl: {0}rid=001 ...
0
votes
0answers
40 views

LDAP user registration gives “no global superior knowledge” error while DN is defined as per .ldif file

I am using LDAP for user management and I have configured it with Spring Boot Ldap. User login (authentication) is working properly and now, I am trying to register a new user and inserting an entry ...
1
vote
1answer
137 views

Backup & Restore OpenLDAP 2.4 with multi-master replication enabled

We have an openLDAP cluster running with two Master(producers) and one consumer. I read the below guides and got a good enough idea about using slapcat/ldapsearch with slapadd/ldapadd to backup & ...
0
votes
1answer
123 views

OpenLDAP ACL's in SUSE, Kerberos configuration

I'm implementing Kerberos with OpenLDAP manually and according to the MIT Documentation, I've to set manually this ACL: access to dn.base="" by * read access to dn.base="cn=Subschema" by * ...
0
votes
1answer
109 views

How to setup SASL Proxy Authorization with an OpenLDAP server on Debian

For Kerberos Authentication together with SASL/GSSAPI Authorization on client devices I need Proxy Authorization on an OpenLDAP server running on Raspberry Pi with Debian/Raspbian Buster. I tried to ...

1
2 3 4 5
26