Questions tagged [slapd]

slapd (Standalone LDAP Daemon) is an LDAP server implementation, part of the OpenLDAP open source project.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

OpenLdap slapd how to query multiple DIT with a single ldapsearch

I have an open ldap server, slapd, serving two DITs first is a completely local tree, ou=People,dc=local,dc=company,dc=org because we have some external users in our department second is a ...
user avatar
  • 1
0 votes
0 answers
18 views

Creating an OpenLdap specific administrator group on LDAP

I'am trying to create a simple specific administrator group on my OpenLdap server that is running slapd. There is currently no slapd file, and I have been working with the cn=config format. I want to ...
user avatar
1 vote
0 answers
87 views

LDAP: Why does slapcat truncate my slapd.log file?

I have an OpenLDAP 2.4 server running on Ubuntu 18.04 LTS. Everytime I run # slapcat -l test.ldif my slapd.log file gets truncated (i. e. previous log messages are deleted and new ones are written at ...
user avatar
0 votes
1 answer
161 views

Migrating OpenLDAP data from 2.4 to 2.5

I have gone through documentation online and on some forums but I am stuck on importing data from ldap 2.4 to 2.5 (Migrating to a new server as well). Here are the steps I did and the error I am ...
user avatar
  • 1
0 votes
1 answer
295 views

openldap / slapd return the error : "daemon: listen(ldap://my.server1.org, 5) failed errno=98 (Address already in use)"

I am trying to set up a master master replication between two openldap servers. To do so, the first steps make me configure theses two files : /etc/hosts, need to contain the DNS of the baseDN of the ...
user avatar
1 vote
1 answer
19 views

Questions about Debian OpenDLAP configuration

I have the slapd/stable,now 2.4.57+dfsg-3 amd64 Debian 11 package. I read the official OpenLDAP documentation and Debian article. But I cannot understand the difference between the multiple ...
user avatar
0 votes
0 answers
60 views

Does the BaseDN need to be different than the olcServerID in openldap/slapd?

I am trying to configure a master master replication between two ldap servers. After configuring the olcServerID of slapd I get the following error : daemon: listen(ldap://my.server1.org, 5) failed ...
user avatar
0 votes
1 answer
44 views

Does packages security patches are backported to older version?

I see on cve.mitre.org that OpenLDAP (slapd) package have plenty of vulnerabilities prior to 2.4.57. If I want to install OpenLDAP from official repositories on my Debian 10, which version is slapd/...
user avatar
0 votes
1 answer
397 views

How to check ldap password storage policy

How do I check how passwords are stored in a local running OpenLDAP server? I would prefer some sort of query that will state the used configuration. Alternatively, accessing the stored passwords to ...
user avatar
  • 317
-1 votes
1 answer
56 views

OPEN LDAP Sync Test

Could someone experienced in open ldap give me answers for these questions please ? I'm looking into a pre configured two open ldap servers that are in mirror sync. What is the best way to identify ...
user avatar
  • 9
1 vote
0 answers
218 views

OpenLDAP migration from old Debian 4 to current Debian 11

I want completely migrate whole database with conf, schema, ( everything ) from very old Debian 4 ( etch ) instance to new Debian 11 ( bullseye ). Source system is running slapd 2.3.30 and destination ...
user avatar
  • 221
0 votes
0 answers
36 views

Access control list for LDAP OU (Organisational Unit) in OpenLDAP

I am new to LDAP (currently using OpenLDAP 2.4) and I am struggling to define a ACL entry using slapd that will manage the various Access Levels for entries that are child entries of an OU. The ...
user avatar
2 votes
0 answers
106 views

OpenLDAP Meta backend to return one result

I have configured OpenLDAP to act as a proxy server via meta backend to do remote queries to two different companies' Active Directory servers. Everything works correctly in terms of pulling ...
user avatar
  • 21
0 votes
1 answer
36 views

What are the numbers for in these LDAP commands ? ldap(3), slapd(8), slapd.conf(5), slurpd(8)

What do the numbers between parentheses stand for in the above commands, found within the LDAP galaxy? I really cannot find anything out there, neither on the documentation, nor could I find any ...
user avatar
1 vote
0 answers
136 views

OpenLDAP authentication stopped working. Where to look for clues if ldapsearch works fine?

Authentication against an LDAP Server stopped on several different web and workstation clients, for which i assume the host is at fault. However ldapsearch -x uid=user -LLL -H ldap://ldap.host.de -b ...
user avatar
0 votes
1 answer
154 views

Learning OpenLDAP, following an "older" tutorial-- hdb vs. mdb update needed, adjusting a step to move forward

http://www.rjsystems.nl/en/2100-d6-kerberos-openldap-provider.php This 2017 tutorial uses the hdb olcDatabase-- modern installations default to mdb. The step I am on is: http://www.rjsystems.nl/en/...
user avatar
2 votes
0 answers
74 views

Can OpenLDAP deliver operational attributes by default?

I have configured OpenLDAP with the memberOf overlay and everything works as expected for me. I can see the group memberships in the operational attributes of an object. Now i am running into the ...
user avatar
1 vote
1 answer
152 views

Debian 10, OpenLDAP, LetsEncrypt, Error 80 trying to add

...I have never had so much trouble enabling secure communications. I believe this to be a valid CA cert chain for Let's Encrypt The contents of /etc/ssl/le/ca-chain.pem -----BEGIN CERTIFICATE----- ...
user avatar
0 votes
0 answers
107 views

Can't run slapd inside an ubuntu docker container

I am trying to create two docker containers, one to act as an ldap server and the other an ldap client. I started by creating the server. I am running on ubuntu 18.04 and using ubuntu image for my ...
user avatar
2 votes
0 answers
182 views

Last login a user in OpenLdap

I am running openldap 2.4.45. Is there anyway I can get the last login time of a user using authtimestamp or any other attribute?
user avatar
0 votes
2 answers
1k views

Use bcrypt password hashing with OpenLDAP (slapd)

I have an OpenLDAP LDAP server on Debian 9 (through the slapd package, v2.4.44). We use crypt for password authentication. Currently the scheme is SHA512: $5$.... The setup is pretty much as described ...
user avatar
  • 183
0 votes
1 answer
138 views

OpenLDAP cn=config database access blocked

I use OpenLDAP 2.4.54 with Alpine. Here is my ldap configuration $ sudo slapcat -n0 dn: olcDatabase={-1}frontend,cn=config objectClass: olcDatabaseConfig objectClass: olcFrontendConfig olcDatabase: {-...
user avatar
  • 165
0 votes
1 answer
830 views

ldapmodify failing implementing TLS certs

I'm probably overlooking a typo, but i cant find it. ~$ /usr/bin/ldapmodify -H ldapi:// -Y EXTERNAL -f /tmp/certs.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=...
user avatar
0 votes
1 answer
489 views

LDAP slapd server not starting -> Modify ldap when server is offline

so im trying to get a LDAP server with ssl certificate running. I need to change the config by changing cn=config with ldapmodify and therefore cannot use a slapd.conf. It was quite hard finding ...
user avatar
0 votes
1 answer
404 views

slapd.conf ACL: ldap_modify: Insufficient access (50)

I am trying to limit write access to users own userPassword attribute. But failing miserably for hours now. Here is what I've done so far: Installed OpenLDAP 2.4 on Arch linux Configured a base DN (...
user avatar
  • 113
0 votes
1 answer
94 views

Specify Keytab Location for Slapd

I need help. How can I set up the ldap keytab location path in order that slapd uses it instead of the system /etc/krb5.keytab? I can't find the configuration in documentation. Thank you so much.
user avatar
  • 25
0 votes
1 answer
2k views

openldap migration - slapd wont start "olcDbDirectory: value #0: invalid path: Permission denied"

i have migrated my old slapd DB to a new server, these are the steps i took: on old server run: slapcat -n 0 -l config.ldif slapcat -n 2 -l data.ldif I had to run slapcat -n 2... because with -n 1 ...
user avatar
  • 101
0 votes
1 answer
590 views

ldapscripts ldapaddgroup fails with "No such object (32)" and "Error adding group ${groupname} to LDAP"

I had some issues and fixed them, but there is no post on stackexchange about it, so I'll post a question and answer too. (EDIT: apparently there is a very related post...which I couldn't find any ...
user avatar
  • 2,536
0 votes
1 answer
1k views

Bind to slapd ldap server using uid instead of cn

I'm trying to connect to an LDAP server running slapd, using the net_ldap ruby gem. I'm able to perform the bind action using the cn of the user, but I need to use the uid. The LDAP server was ...
user avatar
  • 101
2 votes
2 answers
375 views

Creating POSIX group without members in LDAP

I am running OpenLDAP database with activated rfc2307bis schema. I'm trying now to load new groups in my testing instance (Debian) and everything works fine. With the old rfc2307 (NIS) schema, it was ...
user avatar
0 votes
1 answer
300 views

slapd receives unexpected shutdown after CentOS 7.7 upgrade

After upgrading from CentOS 7.6 to 7.7 the slapd process receives a shutdown request a few seconds after its start. Where do I have to enable logging to get more information? I'm using OpenLdap on ...
user avatar
  • 1
2 votes
2 answers
2k views

recover ldap database without log files

A colleague of mine accidentally deleted ldap transaction log files (from /var/lib/ldap) on our ldap 2.4 server running on centos. Now the slapd deamon won't start, when running it with debug flag ...
user avatar
  • 141
0 votes
1 answer
56 views

OpenLDAP CentOS apply LDIF takes ages

When I apply LDIF scripts through ldap_modify it takes ages on a running multi-master setup before they are applied. I don't see any lead in the logfiles what could cause this issue. I think it has ...
user avatar
1 vote
1 answer
697 views

How to migrate users between two different versions of OpenLDAP?

I need to export and import users between Two different versions of OpenLDAP, Old openldap version is 2.42 and new one has version 2.44. Both the openldap servers are setup on Ubuntu. In this answer ...
user avatar
  • 185
1 vote
1 answer
4k views

How to increase size of OpenLDAP MDB database? (MDB_MAP_FULL Error Code)

I'm getting this error related to slapd service (OpenLDAP server) in syslog mdb_idl_insert_keys: c_put id failed: MDB_MAP_FULL: Environment mapsize limit reached (-30792) This error comes when ...
user avatar
  • 185
1 vote
0 answers
429 views

OpenLDAP with LDAPS and N-Way Multi-master replication

We have the following setup: Two OpenLDAP servers - openldap1, openldap2 They are to be set up as N-Way multi-master Certificates are all set up correctly with alternate names etc and trust each ...
user avatar
  • 11
0 votes
2 answers
7k views

Creating an OpenLdap administrator group on LDAP server

I am trying to create a simple administrator group on my OpenLdap server that is running slapd. There is currently no slapd file, and I have been working with the cn=config format. OS: CentOS Linux ...
user avatar
3 votes
1 answer
5k views

slapd : attribute type undefined

I'm trying to put a config of slapd on the new server. I did it the same way, but it was probably two years ago and in slightly different environnement (I'm on the Debian actually and it was on CentOS ...
user avatar
0 votes
1 answer
4k views

How to enable OpenLDAP server trust a self-signed certificate from a client?

I am using JNDI to connect to a remote OpenLDAP server via ldaps by the following code: Hashtable env = new Hashtable(); env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap....
user avatar
  • 143
2 votes
3 answers
2k views

slapd.d missing after installation

I am following the instructions on https://www.openldap.org/doc/admin24/quickstart.html to install OpenLDAP on RedHat. Everything goes fine until step 9: Import the configuration database You are now ...
user avatar
  • 143
0 votes
2 answers
5k views

Enable SSL/LDAPS in openLDAP 2.4 on Ubuntu 16.04.5 LTS - ldap_result: Can't contact LDAP server (-1)

I have the following Problem and googled for weeks now. Because I´ve really no clue where the problem is I´m asking my question here with the hope to find some ldap or ssl genius :) I have a working ...
user avatar
  • 21
0 votes
1 answer
437 views

OpenLDAP slapd as transparent proxy, bind always fails

I have a linux (4.1.12-61.1.34.el6uek.x86_64) box with a slapd service (slapd 2.4.40). What I'm trying to achieve is to transparently proxy all client ldap related traffic through this slapd instance ...
user avatar
  • 101
2 votes
1 answer
2k views

openldap with macOS Clients

I try to configure the mac clients to use a LDAP to connect to their session (using openLDAP). I have created PosixAccounts with PosixGroups, and tried on ubuntu systems : I can log-in with my users. ...
user avatar
  • 133
0 votes
1 answer
2k views

LDAP on Ubuntu 16 won't connect

I've installed LDAP on an Ubuntu 16.04 machine, using this command: sudo apt install slapd ldap-utils This is my config file /etc/ldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details #...
user avatar
  • 188
1 vote
1 answer
987 views

OpenLDAP limit max sessions per user

I have a slapd LDAP server and need to limit the number of active sessions per user. Is there a configuration parameter I can change to achieve this?
user avatar
  • 113
2 votes
1 answer
10k views

ldap on Ubuntu 16.04 - Invalid credentials (49)

I'm trying to set up a local LDAP instance so I can debug some software that uses LDAP for authentication. I had this working correctly on Ubuntu 14.04 LTS, but trying to upgrade to Ubuntu 16.04 LTS ...
user avatar
0 votes
0 answers
1k views

Debugging slapd error 52 (LDAP_UNAVAILABLE)

I have a server running slapd. When I reboot the server, I am able to perform ldapsearches from the server to itself and receive correct responses for a couple of minutes. But after a couple minutes ...
user avatar
0 votes
2 answers
1k views

OpenLDAP : slapd.conf is no more, so how to edit rights?

I want to modify some rights in my LDAP database, so I noticed that slapd.conf is no more. What I wanted to do is to add the following lines to slapd.conf : access to dn.subtree="ou=contacts,dc=...
user avatar
0 votes
1 answer
579 views

OpenLDAP allow editing only from ldapi interface?

I am working on securing LDAP server. We have a few scripts that help us to manage records in it, and the access (from outside) to the slapd is done over ldap(s) ports (389/636). Management scripts ...
user avatar
3 votes
3 answers
1k views

what names for TLS certificates when using SRV records

When I'm using a SRV DNS record, what name(s) do I put in the TLS certificate? For example, if I'm setting up slapd on two servers (klas1 and klas2), and I define these DNS records (using bind zone ...
user avatar