Questions tagged [slapd]

slapd (Standalone LDAP Daemon) is an LDAP server implementation, part of the OpenLDAP open source project.

Filter by
Sorted by
Tagged with
0
votes
0answers
16 views

OpenLDAP Meta backend to return one result

I have configured OpenLDAP to act as a proxy server via meta backend to do remote queries to two different companies' Active Directory servers. Everything works correctly in terms of pulling ...
0
votes
1answer
27 views

What are the numbers for in these LDAP commands ? ldap(3), slapd(8), slapd.conf(5), slurpd(8)

What do the numbers between parentheses stand for in the above commands, found within the LDAP galaxy? I really cannot find anything out there, neither on the documentation, nor could I find any ...
1
vote
0answers
38 views

OpenLDAP authentication stopped working. Where to look for clues if ldapsearch works fine?

Authentication against an LDAP Server stopped on several different web and workstation clients, for which i assume the host is at fault. However ldapsearch -x uid=user -LLL -H ldap://ldap.host.de -b ...
0
votes
1answer
27 views

Learning OpenLDAP, following an “older” tutorial— hdb vs. mdb update needed, adjusting a step to move forward

http://www.rjsystems.nl/en/2100-d6-kerberos-openldap-provider.php This 2017 tutorial uses the hdb olcDatabase-- modern installations default to mdb. The step I am on is: http://www.rjsystems.nl/en/...
2
votes
0answers
31 views

Can OpenLDAP deliver operational attributes by default?

I have configured OpenLDAP with the memberOf overlay and everything works as expected for me. I can see the group memberships in the operational attributes of an object. Now i am running into the ...
0
votes
1answer
62 views

Debian 10, OpenLDAP, LetsEncrypt, Error 80 trying to add

...I have never had so much trouble enabling secure communications. I believe this to be a valid CA cert chain for Let's Encrypt The contents of /etc/ssl/le/ca-chain.pem -----BEGIN CERTIFICATE----- ...
0
votes
0answers
21 views

Can't run slapd inside an ubuntu docker container

I am trying to create two docker containers, one to act as an ldap server and the other an ldap client. I started by creating the server. I am running on ubuntu 18.04 and using ubuntu image for my ...
2
votes
0answers
70 views

Last login a user in OpenLdap

I am running openldap 2.4.45. Is there anyway I can get the last login time of a user using authtimestamp or any other attribute?
0
votes
1answer
171 views

Use bcrypt password hashing with OpenLDAP (slapd)

I have an OpenLDAP LDAP server on Debian 9 (through the slapd package, v2.4.44). We use crypt for password authentication. Currently the scheme is SHA512: $5$.... The setup is pretty much as described ...
0
votes
0answers
38 views

Using OpenLDAP proxy cache module to cache login credentials

I'm trying to set up an OpenLDAP server for login with local OpenLDAP proxy caches on laptops so that they can use logins they've already seen when they're not connected to the network. The server is ...
0
votes
0answers
38 views

How to connect Nextcloud to a nodomain LDAP server?

The LDAP server is on, and Nextcloud can detect its port (389 for the moment, but will migrate to 636 for TLS) on the LDAP / AP integration tab, but the "Detect Base DN" tells me there's ...
0
votes
1answer
23 views

OpenLDAP cn=config database access blocked

I use OpenLDAP 2.4.54 with Alpine. Here is my ldap configuration $ sudo slapcat -n0 dn: olcDatabase={-1}frontend,cn=config objectClass: olcDatabaseConfig objectClass: olcFrontendConfig olcDatabase: {-...
0
votes
0answers
378 views

OpenLDAP as a Active Directory Proxy

I have a working LDAP Proxy. This proxy querys two ADs. If only one AD config in slapd.conf is enabled, everything works fine, without errors. But if all two AD entries are enabled in slapd.conf i can ...
0
votes
1answer
767 views

ldapmodify failing implementing TLS certs

I'm probably overlooking a typo, but i cant find it. ~$ /usr/bin/ldapmodify -H ldapi:// -Y EXTERNAL -f /tmp/certs.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=...
0
votes
1answer
205 views

LDAP slapd server not starting -> Modify ldap when server is offline

so im trying to get a LDAP server with ssl certificate running. I need to change the config by changing cn=config with ldapmodify and therefore cannot use a slapd.conf. It was quite hard finding ...
0
votes
1answer
206 views

slapd.conf ACL: ldap_modify: Insufficient access (50)

I am trying to limit write access to users own userPassword attribute. But failing miserably for hours now. Here is what I've done so far: Installed OpenLDAP 2.4 on Arch linux Configured a base DN (...
0
votes
1answer
44 views

Specify Keytab Location for Slapd

I need help. How can I set up the ldap keytab location path in order that slapd uses it instead of the system /etc/krb5.keytab? I can't find the configuration in documentation. Thank you so much.
0
votes
1answer
1k views

openldap migration - slapd wont start “olcDbDirectory: value #0: invalid path: Permission denied”

i have migrated my old slapd DB to a new server, these are the steps i took: 1) on old server run: slapcat -n 0 -l config.ldif slapcat -n 2 -l config.ldif i had to run slapcat -n 2... because with ...
0
votes
1answer
181 views

ldapscripts ldapaddgroup fails with “No such object (32)” and “Error adding group ${groupname} to LDAP”

I had some issues and fixed them, but there is no post on stackexchange about it, so I'll post a question and answer too. (EDIT: apparently there is a very related post...which I couldn't find any ...
0
votes
1answer
644 views

Bind to slapd ldap server using uid instead of cn

I'm trying to connect to an LDAP server running slapd, using the net_ldap ruby gem. I'm able to perform the bind action using the cn of the user, but I need to use the uid. The LDAP server was ...
2
votes
2answers
253 views

Creating POSIX group without members in LDAP

I am running OpenLDAP database with activated rfc2307bis schema. I'm trying now to load new groups in my testing instance (Debian) and everything works fine. With the old rfc2307 (NIS) schema, it was ...
0
votes
1answer
236 views

slapd receives unexpected shutdown after CentOS 7.7 upgrade

After upgrading from CentOS 7.6 to 7.7 the slapd process receives a shutdown request a few seconds after its start. Where do I have to enable logging to get more information? I'm using OpenLdap on ...
2
votes
2answers
1k views

recover ldap database without log files

A colleague of mine accidentally deleted ldap transaction log files (from /var/lib/ldap) on our ldap 2.4 server running on centos. Now the slapd deamon won't start, when running it with debug flag ...
0
votes
1answer
55 views

OpenLDAP CentOS apply LDIF takes ages

When I apply LDIF scripts through ldap_modify it takes ages on a running multi-master setup before they are applied. I don't see any lead in the logfiles what could cause this issue. I think it has ...
1
vote
1answer
252 views

How to migrate users between two different versions of OpenLDAP?

I need to export and import users between Two different versions of OpenLDAP, Old openldap version is 2.42 and new one has version 2.44. Both the openldap servers are setup on Ubuntu. In this answer ...
1
vote
1answer
2k views

How to increase size of OpenLDAP MDB database? (MDB_MAP_FULL Error Code)

I'm getting this error related to slapd service (OpenLDAP server) in syslog mdb_idl_insert_keys: c_put id failed: MDB_MAP_FULL: Environment mapsize limit reached (-30792) This error comes when ...
1
vote
0answers
337 views

OpenLDAP with LDAPS and N-Way Multi-master replication

We have the following setup: Two OpenLDAP servers - openldap1, openldap2 They are to be set up as N-Way multi-master Certificates are all set up correctly with alternate names etc and trust each ...
0
votes
1answer
5k views

Creating an OpenLdap administrator group on LDAP server

I am trying to create a simple administrator group on my OpenLdap server that is running slapd. There is currently no slapd file, and I have been working with the cn=config format. OS: CentOS Linux ...
2
votes
1answer
3k views

slapd : attribute type undefined

I'm trying to put a config of slapd on the new server. I did it the same way, but it was probably two years ago and in slightly different environnement (I'm on the Debian actually and it was on CentOS ...
0
votes
1answer
3k views

How to enable OpenLDAP server trust a self-signed certificate from a client?

I am using JNDI to connect to a remote OpenLDAP server via ldaps by the following code: Hashtable env = new Hashtable(); env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap....
0
votes
3answers
1k views

slapd.d missing after installation

I am following the instructions on https://www.openldap.org/doc/admin24/quickstart.html to install OpenLDAP on RedHat. Everything goes fine until step 9: Import the configuration database You are now ...
0
votes
2answers
4k views

Enable SSL/LDAPS in openLDAP 2.4 on Ubuntu 16.04.5 LTS - ldap_result: Can't contact LDAP server (-1)

I have the following Problem and googled for weeks now. Because I´ve really no clue where the problem is I´m asking my question here with the hope to find some ldap or ssl genius :) I have a working ...
0
votes
1answer
315 views

OpenLDAP slapd as transparent proxy, bind always fails

I have a linux (4.1.12-61.1.34.el6uek.x86_64) box with a slapd service (slapd 2.4.40). What I'm trying to achieve is to transparently proxy all client ldap related traffic through this slapd instance ...
2
votes
1answer
2k views

openldap with macOS Clients

I try to configure the mac clients to use a LDAP to connect to their session (using openLDAP). I have created PosixAccounts with PosixGroups, and tried on ubuntu systems : I can log-in with my users. ...
0
votes
1answer
1k views

LDAP on Ubuntu 16 won't connect

I've installed LDAP on an Ubuntu 16.04 machine, using this command: sudo apt install slapd ldap-utils This is my config file /etc/ldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details #...
1
vote
1answer
780 views

OpenLDAP limit max sessions per user

I have a slapd LDAP server and need to limit the number of active sessions per user. Is there a configuration parameter I can change to achieve this?
2
votes
1answer
8k views

ldap on Ubuntu 16.04 - Invalid credentials (49)

I'm trying to set up a local LDAP instance so I can debug some software that uses LDAP for authentication. I had this working correctly on Ubuntu 14.04 LTS, but trying to upgrade to Ubuntu 16.04 LTS ...
0
votes
0answers
781 views

Debugging slapd error 52 (LDAP_UNAVAILABLE)

I have a server running slapd. When I reboot the server, I am able to perform ldapsearches from the server to itself and receive correct responses for a couple of minutes. But after a couple minutes ...
0
votes
2answers
1k views

OpenLDAP : slapd.conf is no more, so how to edit rights?

I want to modify some rights in my LDAP database, so I noticed that slapd.conf is no more. What I wanted to do is to add the following lines to slapd.conf : access to dn.subtree="ou=contacts,dc=...
0
votes
1answer
481 views

OpenLDAP allow editing only from ldapi interface?

I am working on securing LDAP server. We have a few scripts that help us to manage records in it, and the access (from outside) to the slapd is done over ldap(s) ports (389/636). Management scripts ...
3
votes
3answers
1k views

what names for TLS certificates when using SRV records

When I'm using a SRV DNS record, what name(s) do I put in the TLS certificate? For example, if I'm setting up slapd on two servers (klas1 and klas2), and I define these DNS records (using bind zone ...
1
vote
0answers
1k views

Why does slapd say “bdb_equality_candidates: (objectClass) not indexed” when the indices actually exist?

I have slapd 2.4.31-1+nmu2ubuntu8.3 installed on Ubuntu 14.04 and running as master to a secondary sync. It works well for all things LDAP, but I notice these errors in /var/log/debug every so often: ...
0
votes
0answers
2k views

OpenLDAP syncrepl Not Working

I have two openldap servers.i want to communicate between two servers by using openldap synchronisation in Linux and how to find out it is working or not .this is my code ,is it any problem in my code ...
1
vote
1answer
1k views

OpenLDAP Give Group Write Access

Our openldap has multiple groups: useradmins, agt, ib, iss, itt The "useradmins" group has always had permissions to edit (write) to all of the groups. I recently performed a simple 'yum update' and ...
1
vote
1answer
653 views

Yum Update Now SLAPD Will Not Start

I'll preface with saying I have used *nix, regularly, for >20 years; however, I have minimal experiene with openldap. I had openldap (slapd) running on a server that has been working for years. ...
0
votes
1answer
1k views

Applying ppolicy.ldif in OpenLdap

I just added the ppolicy.ldif schema to ldap by running the following: ldapadd -T EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif I then try to ldapadd my change.ldif file seen below #...
0
votes
2answers
2k views

Cannot run SAMBA (DC) and OpenLDAP, (The port is being used)

I installed samba and made it a simple domain controller, and I intend to set it to make the authentication over OpenLDAP. The problem is I can NOT run both slapd and samba processes at the same time. ...
1
vote
1answer
6k views

Export LDAP schema without data

For testing purposes, I need a copy of our LDAP server without any personal data. What is the best way, to export this from an existing OpenLDAP server? I tried ldapsearch and Apache Directory ...
4
votes
1answer
14k views

ldap_modify: Insufficient access (50) when changing password

I'm trying to modify the LDAP admin password on a fresh OpenLDAP install on CentOS 6.7 (similar to RHEL 6.7). I created a file called change_ldap_password.ldif: # Hash your password: # slappasswd -h ...
1
vote
2answers
103 views

Will adding a new objectClass in ldap get replicated?

I have a ldap setup with one master and two replicas created using this tutorial https://help.ubuntu.com/lts/serverguide/openldap-server.html#openldap-server-replication . If I add a new/custom ...