Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [slapd]

slapd (Standalone LDAP Daemon) is an LDAP server implementation, part of the OpenLDAP open source project.

0
votes
1answer
49 views

OpenLDAP CentOS apply LDIF takes ages

When I apply LDIF scripts through ldap_modify it takes ages on a running multi-master setup before they are applied. I don't see any lead in the logfiles what could cause this issue. I think it has ...
1
vote
1answer
43 views

How to migrate users between two different versions of OpenLDAP?

I need to export and import users between Two different versions of OpenLDAP, Old openldap version is 2.42 and new one has version 2.44. Both the openldap servers are setup on Ubuntu. In this answer ...
0
votes
1answer
90 views

How to increase size of OpenLDAP MDB database? (MDB_MAP_FULL Error Code)

I'm getting this error related to slapd service (OpenLDAP server) in syslog mdb_idl_insert_keys: c_put id failed: MDB_MAP_FULL: Environment mapsize limit reached (-30792) This error comes when ...
1
vote
0answers
59 views

OpenLDAP with LDAPS and N-Way Multi-master replication

We have the following setup: Two OpenLDAP servers - openldap1, openldap2 They are to be set up as N-Way multi-master Certificates are all set up correctly with alternate names etc and trust each ...
0
votes
1answer
82 views

Creating an OpenLdap administrator group on LDAP server

I am trying to create a simple administrator group on my OpenLdap server that is running slapd. There is currently no slapd file, and I have been working with the cn=config format. OS: CentOS Linux ...
1
vote
1answer
291 views

slapd : attribute type undefined

I'm trying to put a config of slapd on the new server. I did it the same way, but it was probably two years ago and in slightly different environnement (I'm on the Debian actually and it was on CentOS ...
0
votes
0answers
26 views

OpenLDAP: Translucent proxy with paging

So, I've managed to set-up openldap to proxy to my company AD, but, I want to additionally add some custom data! Luckily for me, OpenLDAP supports this use case and has the ability to create what's ...
0
votes
1answer
955 views

How to enable OpenLDAP server trust a self-signed certificate from a client?

I am using JNDI to connect to a remote OpenLDAP server via ldaps by the following code: Hashtable env = new Hashtable(); env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap....
-1
votes
2answers
226 views

sldap.d missing after installation

I am following the instructions on http://www.openldap.org/doc/admin24/quickstart.html to install OpenLDAP on RedHat. Everything goes fine until step 9: Import the configuration database You are ...
0
votes
2answers
812 views

(SOLVED) Enable SSL/LDAPS in openLDAP 2.4 on Ubuntu 16.04.5 LTS - ldap_result: Can't contact LDAP server (-1)

I have the following Problem and googled for weeks now. Because I´ve really no clue where the problem is I´m asking my question here with the hope to find some ldap or ssl genius :) I have a working ...
0
votes
1answer
78 views

OpenLDAP slapd as transparent proxy, bind always fails

I have a linux (4.1.12-61.1.34.el6uek.x86_64) box with a slapd service (slapd 2.4.40). What I'm trying to achieve is to transparently proxy all client ldap related traffic through this slapd instance ...
2
votes
1answer
755 views

openldap with macOS Clients

I try to configure the mac clients to use a LDAP to connect to their session (using openLDAP). I have created PosixAccounts with PosixGroups, and tried on ubuntu systems : I can log-in with my users. ...
0
votes
0answers
47 views

Slapd generate SQL by PostgreSQL based syntax

I use openldap slapd 2.4.40 + MySQL5.5 as back-sql on CentoS 6.9 Slapd generate PostgreSQL based syntax SQL Here is the error message for ldapsearch -x -b "dc=example,dc=com" '(objectClass=*)' ...
0
votes
1answer
462 views

LDAP on Ubuntu 16 won't connect

I've installed LDAP on an Ubuntu 16.04 machine, using this command: sudo apt install slapd ldap-utils This is my config file /etc/ldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details #...
0
votes
0answers
91 views

slapd database gets corrupted on service restart

I have set up an openldap server following this guide. Just after this everything works fine. But when I restart the slapd.service or even reboot the computer the LDAP authentication doesn't work ...
1
vote
1answer
266 views

OpenLDAP limit max sessions per user

I have a slapd LDAP server and need to limit the number of active sessions per user. Is there a configuration parameter I can change to achieve this?
0
votes
1answer
2k views

ldap on Ubuntu 16.04 - Invalid credentials (49)

I'm trying to set up a local LDAP instance so I can debug some software that uses LDAP for authentication. I had this working correctly on Ubuntu 14.04 LTS, but trying to upgrade to Ubuntu 16.04 LTS ...
0
votes
0answers
367 views

Debugging slapd error 52 (LDAP_UNAVAILABLE)

I have a server running slapd. When I reboot the server, I am able to perform ldapsearches from the server to itself and receive correct responses for a couple of minutes. But after a couple minutes ...
0
votes
2answers
415 views

OpenLDAP : slapd.conf is no more, so how to edit rights?

I want to modify some rights in my LDAP database, so I noticed that slapd.conf is no more. What I wanted to do is to add the following lines to slapd.conf : access to dn.subtree="ou=contacts,dc=...
0
votes
1answer
246 views

OpenLDAP allow editing only from ldapi interface?

I am working on securing LDAP server. We have a few scripts that help us to manage records in it, and the access (from outside) to the slapd is done over ldap(s) ports (389/636). Management scripts ...
2
votes
2answers
337 views

what names for TLS certificates when using SRV records

When I'm using a SRV DNS record, what name(s) do I put in the TLS certificate? For example, if I'm setting up slapd on two servers (klas1 and klas2), and I define these DNS records (using bind zone ...
1
vote
0answers
629 views

Why does slapd say “bdb_equality_candidates: (objectClass) not indexed” when the indices actually exist?

I have slapd 2.4.31-1+nmu2ubuntu8.3 installed on Ubuntu 14.04 and running as master to a secondary sync. It works well for all things LDAP, but I notice these errors in /var/log/debug every so often: ...
0
votes
0answers
1k views

OpenLDAP syncrepl Not Working

I have two openldap servers.i want to communicate between two servers by using openldap synchronisation in Linux and how to find out it is working or not .this is my code ,is it any problem in my code ...
1
vote
1answer
595 views

OpenLDAP Give Group Write Access

Our openldap has multiple groups: useradmins, agt, ib, iss, itt The "useradmins" group has always had permissions to edit (write) to all of the groups. I recently performed a simple 'yum update' and ...
1
vote
1answer
259 views

Yum Update Now SLAPD Will Not Start

I'll preface with saying I have used *nix, regularly, for >20 years; however, I have minimal experiene with openldap. I had openldap (slapd) running on a server that has been working for years. ...
0
votes
1answer
642 views

Applying ppolicy.ldif in OpenLdap

I just added the ppolicy.ldif schema to ldap by running the following: ldapadd -T EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif I then try to ldapadd my change.ldif file seen below #...
0
votes
2answers
2k views

Cannot run SAMBA (DC) and OpenLDAP, (The port is being used)

I installed samba and made it a simple domain controller, and I intend to set it to make the authentication over OpenLDAP. The problem is I can NOT run both slapd and samba processes at the same time. ...
1
vote
1answer
4k views

Export LDAP schema without data

For testing purposes, I need a copy of our LDAP server without any personal data. What is the best way, to export this from an existing OpenLDAP server? I tried ldapsearch and Apache Directory ...
3
votes
1answer
8k views

ldap_modify: Insufficient access (50) when changing password

I'm trying to modify the LDAP admin password on a fresh OpenLDAP install on CentOS 6.7 (similar to RHEL 6.7). I created a file called change_ldap_password.ldif: # Hash your password: # slappasswd -h ...
1
vote
1answer
57 views

Will adding a new objectClass in ldap get replicated?

I have a ldap setup with one master and two replicas created using this tutorial https://help.ubuntu.com/lts/serverguide/openldap-server.html#openldap-server-replication . If I add a new/custom ...
0
votes
1answer
684 views

what does it mean ? openldap: TLS: no unlocked certificate for certificate '<some certificate subject>'

just spent a lot of time with centos 6.7 and openldap. it was configured with simple certificates and a root-ca in nice little pem files, but after an upgrade from centos 6.4, connecting to the slapd ...
0
votes
1answer
440 views

slapd configuration for back-sql: how to traslate examples from slapd.conf to slapd.d

I'm trying to configure slapd with back-sql (specifically postgresql backend). All documents I found (Postgresq LDAP Howto seems to be more complete) are related to old configuration that use slapd....
1
vote
2answers
362 views

OpenLDAP Server nested Group search string

i got a small problem here regarding OpenLDAP. The problem is to search for the member of nested groups. Lets say i have this construct: dn=domain,dn=local ou=people cn=marvyn (inetOrgPerson) ou=...
0
votes
1answer
754 views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ldap_url_parse_ext(ldap://99.99.99.99)...
0
votes
1answer
281 views

OpenLDAP will not start - Starting OpenLDAP: slapdrm: cannot remove `/var/lib/ldap/alock'

Hope someone can help me out here. I forgot the OpenLDAP admin password on a debian server and in the process, I specified the password in the slapd config file as follows: olcRootPW: {SHA}...
0
votes
1answer
46 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
1
vote
2answers
2k views

Apply changes to PAM changes

Does the server or a specific service needs to be restarted to let changes to pam files (/etc/pam.d/system-auth) take effect? longer version - I'm working on configuring SSSD to connect with LDAP for ...
0
votes
1answer
722 views

Active Directory users authentication on Ubuntu server

I need the simplest way to authenticate Active Directory users on Ubuntu Server (at login). I am trying with libnss-ldap, but it only works with plain LDAP server (like SLAPD) but now Active ...
2
votes
1answer
4k views

Configure Jenkins with LDAP : parameter 'Root DN'

I am installing an LDAP server and configuring Jenkins in order to accept LDAP for authentication. In Jenkins parameters, I have a weird behavior with the parameter Root DN. Documentation says : ...
0
votes
1answer
728 views

OpenLDAP default configuration file is `/etc/ldap/slapd.d` rather than `/etc/ldap/slapd.conf`

My openldap (version 2.4.31) makes directory /etc/ldap/slapd.d as its default configuration files rather than /etc/ldap/slapd.conf as the old version does. I found it becomes more complicated to ...
0
votes
0answers
122 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
1answer
3k views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
2
votes
1answer
702 views

command line alternative to dpkg-reconfigure slapd

Is there a way to reconfigure slapd, providing all configuration options as command-line parameters/arguments? My goal is to be find an alternative to the interactive UI. Thank you
0
votes
0answers
3k views

openLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04

I have installed an ldap server in Ubuntu 12.04 using the tutorial https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-server-installation. First time everything went fine but had ...
0
votes
1answer
814 views

Restore LDAP data from copied files

My server has broken and I had to urgently put it up again. I needed to reinstall the system and, since I was time constrained, I lazily just copied the directories I considered necessary (/etc, /opt, ...
2
votes
1answer
4k views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
1
vote
2answers
1k views

OpenLDAP syncrepl probblem with password policies

Recently I have been working to get slapd syncrepl working using an LDAP backend (push based replication). While I have had fantastic results with syncrepl doing pull based, the push based is killing ...
1
vote
1answer
679 views

Dovecot + OpenLDAP

I am trying to get dovecot 2.0.19 authenticate users via LDAP (OpenLDAP 2.4.28) and using Wireshark to debug the process. It looks like the basic configuration of dovecot is fine, but it doesn't pull ...
12
votes
2answers
18k views

Basic openldap setup using slapd.d configuration

I'm trying to set up a test openldap server, having not worked with openldap before. I'm using the standard openldap-servers package on a redhat based machine (using Oracle Linux). I've installed the ...
0
votes
1answer
2k views

Best / Safest way to stop and start slapd

Im running OpenLDAP: slapd 2.4.25. What is the best way to stop and start it ? I want to copy the LDAP database and have read I need to stop slapd first. Distro used is Ubuntu 11.04.