Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

Creating an OpenLdap specific administrator group on LDAP

I'am trying to create a simple specific administrator group on my OpenLdap server that is running slapd. There is currently no slapd file, and I have been working with the cn=config format. I want to ...
user avatar
0 votes
0 answers
10 views

Authenticate on other apps with OpenLDAP user still working after user password expired

I'm trying to figure out why is this still possible. For example, we have icinga(web)2 and users are still able to login without promting to change the password. Also, other apps that are not using ...
user avatar
  • 1
0 votes
0 answers
10 views

Migrating SLES OpenLDAP to 389-DS using openldap_to_ds

As SLES15 stopped support of OpenLDAP, suggesting to use 389-DS instead, I tried to migrate my databases following the guide provided with SLES15 SP3. However the command to (test-)convert the ...
user avatar
  • 264
0 votes
0 answers
14 views

what are these OpenLDAP directories used for

I have remove an openldap installation from my centos7 server and discovered that these directories are left /run/openldap /usr/lib64/openldap /usr/libexec/openldap please what are these openldap ...
user avatar
0 votes
0 answers
11 views

Openldap mirror mode not working

I have two openldap servers running v2.4.57 on Solaris. I'm trying to setup replication. The first system, France, is setup and running. I then created Spain and ran ldapmodify on Spain using this ...
user avatar
0 votes
0 answers
13 views

Admin user not show under base dc after setup openldap on debian

After install the openldap (slapd) from Debian package repository (using the version 2.4.57+dfsg-3~bpo10+1), I could not found the admin user (cn=admin,dc=company,dc=com) in the phpldapadmin dashboard....
user avatar
  • 1
0 votes
0 answers
16 views

Export and import ldap user smbantpassword did not work

i have a problem with ldap, so we use the synololgy nas ldap server for some reason for auhtentication with filemaker. The user i am syncing from a debian server with openldap 2.4 with the lsc tool. ...
user avatar
0 votes
1 answer
28 views

OpenLDAP Access handling

I have installed OpenLDAP on Ubuntu Server 20.04. It works fine so far. Now I want to restrict access to the server, as by now anyone can read all entries e.g. in Thunderbird. Therefore I created a ...
user avatar
0 votes
0 answers
26 views

OpenLDAP ppolicy load error

I'm going to try run of openldap. I created master-slave server and everything is ok. However when I load the ppolicy module I get an error like below SASL/EXTERNAL authentication started SASL ...
user avatar
0 votes
0 answers
65 views

Active Directory/LDAP replication Windows/Ubuntu

I am trying to setup replication between a Windows AD and OpenLDAP on Ubuntu. Access to the Windows AD server seems to work OK, the OpenLDAP on Ubuntu also seems to work, however I am getting stuck on ...
user avatar
  • 1
0 votes
1 answer
26 views

How to increase OpenLDAP DN max length?

The maximum length of an OpenLDAP DN seems to be 255 characters. How can this value can be increased?
user avatar
  • 145
0 votes
1 answer
85 views

KDC has no support for encryption type while authentication to OpenLDAP

I'm running a Kerberos / LDAP authentication server for many years. Kerberos data is stored inside LDAP. Now, I have a second site and want to mirror the server to the new site. This basically works, ...
user avatar
0 votes
1 answer
62 views

Enforce TLS1.2 in sssd client

In one of our environments Linux servers are set up with sssd / OpenLDAP for OS login. To support older servers our OpenLDAP server has to support TLSv1.0 and TLSv1.1 still. RedHat 8 does no longer ...
user avatar
  • 352
1 vote
1 answer
77 views

LDAP finds user, but "permission denied" when logging in

I am setting up an LDAP client in Red Hat 8. After setting up the config files I did an LDAP user test and it came back successfully: # id myusername uid=666(myusername) gid=510(active_users) groups=...
user avatar
  • 111
0 votes
1 answer
83 views

openldap master/slave replication configuration return TLS error from slave

I am trying to add a TLS secured replication between a master and a slave ldap server. The replication without TLS work well. I encounter this error from the slave : slapd_client_connect: URI=ldap://...
user avatar
0 votes
1 answer
65 views

freeradius and openldap : vlan attribution working with radtest but not with wpa_supplicant

Both of my services freeradius and openldap are on the same server. The schema Freeradius is loaded into openldap. I configured the radiusProfileDN of a user to link to a group. In this group, I have ...
user avatar
0 votes
0 answers
76 views

syncrepl_message_to_entry: rid=002 mods check (objectClass: value #1 invalid per syntax)

I have a problem with my master master config database replication (i will add the data replication after this one). I am running on each master, openldap and freeradius. To have freeradius working ...
user avatar
0 votes
0 answers
8 views

Rekerberize fails with: Could not retrieve auth record

We use Apple Open Directory (which is openLDAP actually), and we are experiencing a problem that for some users, user authentication fails with ldap_bind: Insufficient access (50). Attempting to ...
user avatar
  • 163
1 vote
2 answers
183 views

Cannot build a working docker image for an openldap service

I'm new to docker and I'm doing a little bit of experimenting with it. I was trying to create a docker image for an openldap service. I tried creating the image starting from debian:latest image ...
user avatar
2 votes
1 answer
429 views

libpam-ldapd - LDAP authentication on Debian 11 not working

I saw several other questions here regarding a similar issue - but I haven't found something that actually worked for me. My goal is to authenticate (mainly for SSH) all Debian maschines against an ...
user avatar
0 votes
1 answer
53 views

OpenLDAP push replication via proxy - Guide to setup syncrepl

I have some basic experience interacting with & troubleshooting OpenLDAP as well as 389-ds, but I don't have a whole lot of experience setting them up or configuring an OpenLDAP server. My goal is ...
user avatar
  • 3,395
1 vote
0 answers
11 views

OpenLDAP: interpreting username@domainname as uid=username,ou=domainname

Is that possible to tweak some settings that would make OpenLDAP always interpreting uid=username@domainname as uid=username,ou=domainname in authentication queries? Of course, making the clients to ...
user avatar
0 votes
1 answer
106 views

Apple client unable to login with LDAP backend and GSSAPI or PLAIN

I have a OpenLDAP server with Kerberos5 for authentication and on Linux/Unix/Windows environments I am able to login without a problem. The LDAP server is configured to use GSSAPI or PLAIN that passes ...
user avatar
0 votes
1 answer
39 views

Allow any user with specific uid to manager an entire OU

I have a domain (let's call it dc=example,dc=org) The domain has a branch (ou=users,ou=ftp,ou=services,dc=k9999,dc=z9999,dc=infra,dc=example,dc=org). There's a simpleSecurityObject in this domain (uid=...
user avatar
0 votes
1 answer
47 views

OpenLDAP: a custom base DN for a user

Is that possible to make OpenLDAP provide with different base DNs for different users? Let me explain what exactly I want to acheive. I have a domain (let's say, dc=example,dc=org). I also have a ...
user avatar
0 votes
0 answers
11 views

OpenLDAP syncrepl with plaintext authentication

I'm trying to set up a syncrepl relationship between two openldap servers. The data they serve is not secret and they are used only in an enclosed network, so I'd like to avoid the hassle of setting ...
user avatar
  • 3,741
0 votes
2 answers
413 views

every LDAP user gives "permission denied" with LDAP and sssd (Centos7)

I am trying to limit LDAP logins to the "admin" group. This is my /etc/sssd/sssd.conf file: [domain/default] autofs_provider = ldap ldap_tls_reqcert = allow auth_provider = ldap ...
user avatar
  • 3
0 votes
0 answers
36 views

openldap searchIng memberOf group ( overlay groupOfUniqueNames )

Struggling with retrieving all memberOf a group, even though memberOf shows up when querying the user(s) and also shows when displaying the group. (1) When searching the user it shows memberOf of the ...
user avatar
  • 1
0 votes
1 answer
90 views

Migrating OpenLDAP data from 2.4 to 2.5

I have gone through documentation online and on some forums but I am stuck on importing data from ldap 2.4 to 2.5 (Migrating to a new server as well). Here are the steps I did and the error I am ...
user avatar
  • 1
0 votes
1 answer
132 views

openldap / slapd return the error : "daemon: listen(ldap://my.server1.org, 5) failed errno=98 (Address already in use)"

I am trying to set up a master master replication between two openldap servers. To do so, the first steps make me configure theses two files : /etc/hosts, need to contain the DNS of the baseDN of the ...
user avatar
0 votes
0 answers
62 views

OpenLDAP/ds-389 Secure Hardening Guide

I am in the process of setting up an Open Ldap Server (ds-389) however, I cannot find many good resources which define a security or hardening guide which can be applied to the configuration or schema ...
user avatar
0 votes
0 answers
105 views

Is "-s loglevel" option ignored when olcLogLevel is set while "-d" overwrites

The number of debug-level of '-d' command line option and syslog-level of '-s' command line option in slapd have the same meaning as we can confirm by: $ slapd -d '?' $ slapd -s '?' The only ...
user avatar
0 votes
0 answers
232 views

slapd service is not starting on centos 7

Hi while I was trying to install open-ldap in my centos 7 server, I think I runned yum remove ldap command(I am not sure exactly) and now slap service is not working at all [root@kwephispra28828 etc]# ...
user avatar
  • 101
1 vote
1 answer
19 views

Questions about Debian OpenDLAP configuration

I have the slapd/stable,now 2.4.57+dfsg-3 amd64 Debian 11 package. I read the official OpenLDAP documentation and Debian article. But I cannot understand the difference between the multiple ...
user avatar
0 votes
0 answers
40 views

Does the BaseDN need to be different than the olcServerID in openldap/slapd?

I am trying to configure a master master replication between two ldap servers. After configuring the olcServerID of slapd I get the following error : daemon: listen(ldap://my.server1.org, 5) failed ...
user avatar
0 votes
1 answer
193 views

Dovecot can't connect to ldap server via ldaps

I have an LDAP server that accepts request through ldaps on port 636. I already use it for many of my applications and I want to have my dovecot server use that for authentication as well. dovecot ...
user avatar
0 votes
1 answer
39 views

Does packages security patches are backported to older version?

I see on cve.mitre.org that OpenLDAP (slapd) package have plenty of vulnerabilities prior to 2.4.57. If I want to install OpenLDAP from official repositories on my Debian 10, which version is slapd/...
user avatar
0 votes
1 answer
44 views

Remote deployment of a script on linux

We are creating a lab and wanted to setup like 10-15 hosts with ldap. We need to install on each computer some packages that are necessary to run ldap, so my question is - can I somehow run 1 bash ...
user avatar
  • 1
1 vote
0 answers
44 views

Openldap user login fails when testing with ldapsearch

Using this ldif file: # LDIF Export for cn=sample,dc=example,dc=org # Server: ldap-service (ldap-service) # Search Scope: sub # Search Filter: (objectClass=*) # Total Entries: 3 # # Generated by ...
user avatar
  • 227
0 votes
0 answers
84 views

InspIRCd doesn’t even contact configured LDAP

On Ubuntu 20.04 I've installed InspIRCd (which seems to work fine as-is) and added to its config: <module name="m_ldapauth.so"> <ldapauth baserdn="dc=nodomain" ...
user avatar
0 votes
1 answer
52 views

openldap index existing values

I have a ldap database that has been used for some time. naturally it is full on entries. I recently tried to set up an index for uid to help searching, i added the following to my slapd.conf file ...
user avatar
  • 101
0 votes
1 answer
232 views

What am I missing to setup sudo access with openldap?

I'm using lxd/lxc containers (Oracle Linux 8) to rapidly deploy the environment (so if you have lxd setup, you can modify the ip scheme to match lxd's bridge subnet / DNS and then paste the code into ...
user avatar
1 vote
0 answers
66 views

How can I delete the root node of a LDAP tree?

I would like to restore a LDAP tree with slapadd from a backup generated with slapcat. When I load the backup on a freshly installed OpenLDAP instance, slapadd complains about the root node already ...
user avatar
  • 145
0 votes
1 answer
50 views

Enabling an overlay on an OpenLDAP spare

I have two OpenLDAP server, one master and one slave synchronized with syncprov. I would like to enable the memberof overlay on both. I successfully enabled the overlay on the master server, but I ...
user avatar
  • 145
0 votes
1 answer
177 views

I can su as an [open]ldap user on an sssd, but I can't ssh or login directly as the same user, what am I missing?

On sssd client authselect select sssd --force systemctl enable --now sssd [root@ldap-sssd ~]# id adam uid=16859(adam) gid=100(users) groups=100(users) [root@ldap-sssd ~]# su adam bash-4.4$ su adam ...
user avatar
0 votes
0 answers
57 views

OpenLDAP create new Organization & Organization Unit using Apache Directory Studio LDAP Browser

I have set up an OpenLDAP server via slapd in macOS 10.15.7. I successfully connected to the server in Apache Directory Studio LDAP Browser. However, when I try to add any new entry to the server, the ...
user avatar
  • 971
0 votes
1 answer
256 views

OpenLDAP memberof overlay error: memberof_value_modify err=32

I enabled the refint and memberof overlay with OpenLDAP 2.4.57, but when I create a groupOfNames I get a memberof_value_modify .. failed err=32 error. I also have syncprov enabled with a spare. What ...
user avatar
  • 145
0 votes
1 answer
81 views

openldap why am I not able to id the user account?

I followed this openldap guide https://kifarunix.com/install-and-setup-openldap-on-rocky-linux-8/ Got it all working up until I try to id the user on the client (following this guide: https://...
user avatar
0 votes
1 answer
112 views

OpenLDAP : Confidentiality required for ldapmodify (ldapi://)

I'm asking your help beacause i'm stuck since 2 days about that. After i have setting up TLS and SSL on my OpenLDAP server, it works fine but i can not execute command anymore to edit the ...
user avatar
0 votes
1 answer
243 views

How to check ldap password storage policy

How do I check how passwords are stored in a local running OpenLDAP server? I would prefer some sort of query that will state the used configuration. Alternatively, accessing the stored passwords to ...
user avatar
  • 317

1
2 3 4 5
28