Questions tagged [slapd]

slapd (Standalone LDAP Daemon) is an LDAP server implementation, part of the OpenLDAP open source project.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Failed to configure stats/stats2 log for non debug slapd binary

I have compiled my Openldap library in non debug mode. Now I want to configure stats and stats2 logs(which are only available for non-debug slapd). Since I am not using OLC configuration, I have ...
0
votes
0answers
33 views

Configure OpenLDAP Proxy to view entries managed under Active Directory

I am running slapd 2.4.44 on rhel 7.8 and i'd like to configure Open LDAP proxy to be able to view entries that are managed under Active Directory. All of the documentation I've see online says to ...
0
votes
1answer
85 views

openldap migration - slapd wont start “olcDbDirectory: value #0: invalid path: Permission denied”

i have migrated my old slapd DB to a new server, these are the steps i took: 1) on old server run: slapcat -n 0 -l config.ldif slapcat -n 2 -l config.ldif i had to run slapcat -n 2... because with ...
0
votes
1answer
23 views

ldapscripts ldapaddgroup fails with “No such object (32)” and “Error adding group ${groupname} to LDAP”

I had some issues and fixed them, but there is no post on stackexchange about it, so I'll post a question and answer too. (EDIT: apparently there is a very related post...which I couldn't find any ...
0
votes
1answer
194 views

Bind to slapd ldap server using uid instead of cn

I'm trying to connect to an LDAP server running slapd, using the net_ldap ruby gem. I'm able to perform the bind action using the cn of the user, but I need to use the uid. The LDAP server was ...
2
votes
2answers
144 views

Creating POSIX group without members in LDAP

I am running OpenLDAP database with activated rfc2307bis schema. I'm trying now to load new groups in my testing instance (Debian) and everything works fine. With the old rfc2307 (NIS) schema, it was ...
0
votes
1answer
159 views

slapd receives unexpected shutdown after CentOS 7.7 upgrade

After upgrading from CentOS 7.6 to 7.7 the slapd process receives a shutdown request a few seconds after its start. Where do I have to enable logging to get more information? I'm using OpenLdap on ...
1
vote
1answer
426 views

recover ldap database without log files

A colleague of mine accidentally deleted ldap transaction log files (from /var/lib/ldap) on our ldap 2.4 server running on centos. Now the slapd deamon won't start, when running it with debug flag ...
0
votes
1answer
53 views

OpenLDAP CentOS apply LDIF takes ages

When I apply LDIF scripts through ldap_modify it takes ages on a running multi-master setup before they are applied. I don't see any lead in the logfiles what could cause this issue. I think it has ...
1
vote
1answer
99 views

How to migrate users between two different versions of OpenLDAP?

I need to export and import users between Two different versions of OpenLDAP, Old openldap version is 2.42 and new one has version 2.44. Both the openldap servers are setup on Ubuntu. In this answer ...
0
votes
1answer
1k views

How to increase size of OpenLDAP MDB database? (MDB_MAP_FULL Error Code)

I'm getting this error related to slapd service (OpenLDAP server) in syslog mdb_idl_insert_keys: c_put id failed: MDB_MAP_FULL: Environment mapsize limit reached (-30792) This error comes when ...
1
vote
0answers
228 views

OpenLDAP with LDAPS and N-Way Multi-master replication

We have the following setup: Two OpenLDAP servers - openldap1, openldap2 They are to be set up as N-Way multi-master Certificates are all set up correctly with alternate names etc and trust each ...
0
votes
1answer
2k views

Creating an OpenLdap administrator group on LDAP server

I am trying to create a simple administrator group on my OpenLdap server that is running slapd. There is currently no slapd file, and I have been working with the cn=config format. OS: CentOS Linux ...
1
vote
1answer
2k views

slapd : attribute type undefined

I'm trying to put a config of slapd on the new server. I did it the same way, but it was probably two years ago and in slightly different environnement (I'm on the Debian actually and it was on CentOS ...
0
votes
1answer
2k views

How to enable OpenLDAP server trust a self-signed certificate from a client?

I am using JNDI to connect to a remote OpenLDAP server via ldaps by the following code: Hashtable env = new Hashtable(); env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap....
-1
votes
2answers
809 views

sldap.d missing after installation

I am following the instructions on http://www.openldap.org/doc/admin24/quickstart.html to install OpenLDAP on RedHat. Everything goes fine until step 9: Import the configuration database You are ...
0
votes
2answers
3k views

Enable SSL/LDAPS in openLDAP 2.4 on Ubuntu 16.04.5 LTS - ldap_result: Can't contact LDAP server (-1)

I have the following Problem and googled for weeks now. Because I´ve really no clue where the problem is I´m asking my question here with the hope to find some ldap or ssl genius :) I have a working ...
0
votes
1answer
191 views

OpenLDAP slapd as transparent proxy, bind always fails

I have a linux (4.1.12-61.1.34.el6uek.x86_64) box with a slapd service (slapd 2.4.40). What I'm trying to achieve is to transparently proxy all client ldap related traffic through this slapd instance ...
2
votes
1answer
1k views

openldap with macOS Clients

I try to configure the mac clients to use a LDAP to connect to their session (using openLDAP). I have created PosixAccounts with PosixGroups, and tried on ubuntu systems : I can log-in with my users. ...
0
votes
1answer
911 views

LDAP on Ubuntu 16 won't connect

I've installed LDAP on an Ubuntu 16.04 machine, using this command: sudo apt install slapd ldap-utils This is my config file /etc/ldap/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details #...
1
vote
1answer
533 views

OpenLDAP limit max sessions per user

I have a slapd LDAP server and need to limit the number of active sessions per user. Is there a configuration parameter I can change to achieve this?
1
vote
1answer
5k views

ldap on Ubuntu 16.04 - Invalid credentials (49)

I'm trying to set up a local LDAP instance so I can debug some software that uses LDAP for authentication. I had this working correctly on Ubuntu 14.04 LTS, but trying to upgrade to Ubuntu 16.04 LTS ...
0
votes
0answers
573 views

Debugging slapd error 52 (LDAP_UNAVAILABLE)

I have a server running slapd. When I reboot the server, I am able to perform ldapsearches from the server to itself and receive correct responses for a couple of minutes. But after a couple minutes ...
0
votes
2answers
706 views

OpenLDAP : slapd.conf is no more, so how to edit rights?

I want to modify some rights in my LDAP database, so I noticed that slapd.conf is no more. What I wanted to do is to add the following lines to slapd.conf : access to dn.subtree="ou=contacts,dc=...
0
votes
1answer
374 views

OpenLDAP allow editing only from ldapi interface?

I am working on securing LDAP server. We have a few scripts that help us to manage records in it, and the access (from outside) to the slapd is done over ldap(s) ports (389/636). Management scripts ...
2
votes
3answers
746 views

what names for TLS certificates when using SRV records

When I'm using a SRV DNS record, what name(s) do I put in the TLS certificate? For example, if I'm setting up slapd on two servers (klas1 and klas2), and I define these DNS records (using bind zone ...
1
vote
0answers
894 views

Why does slapd say “bdb_equality_candidates: (objectClass) not indexed” when the indices actually exist?

I have slapd 2.4.31-1+nmu2ubuntu8.3 installed on Ubuntu 14.04 and running as master to a secondary sync. It works well for all things LDAP, but I notice these errors in /var/log/debug every so often: ...
0
votes
0answers
2k views

OpenLDAP syncrepl Not Working

I have two openldap servers.i want to communicate between two servers by using openldap synchronisation in Linux and how to find out it is working or not .this is my code ,is it any problem in my code ...
1
vote
1answer
903 views

OpenLDAP Give Group Write Access

Our openldap has multiple groups: useradmins, agt, ib, iss, itt The "useradmins" group has always had permissions to edit (write) to all of the groups. I recently performed a simple 'yum update' and ...
1
vote
1answer
454 views

Yum Update Now SLAPD Will Not Start

I'll preface with saying I have used *nix, regularly, for >20 years; however, I have minimal experiene with openldap. I had openldap (slapd) running on a server that has been working for years. ...
0
votes
1answer
856 views

Applying ppolicy.ldif in OpenLdap

I just added the ppolicy.ldif schema to ldap by running the following: ldapadd -T EXTERNAL -H ldapi:/// -f /etc/openldap/schema/ppolicy.ldif I then try to ldapadd my change.ldif file seen below #...
0
votes
2answers
2k views

Cannot run SAMBA (DC) and OpenLDAP, (The port is being used)

I installed samba and made it a simple domain controller, and I intend to set it to make the authentication over OpenLDAP. The problem is I can NOT run both slapd and samba processes at the same time. ...
1
vote
1answer
5k views

Export LDAP schema without data

For testing purposes, I need a copy of our LDAP server without any personal data. What is the best way, to export this from an existing OpenLDAP server? I tried ldapsearch and Apache Directory ...
4
votes
1answer
11k views

ldap_modify: Insufficient access (50) when changing password

I'm trying to modify the LDAP admin password on a fresh OpenLDAP install on CentOS 6.7 (similar to RHEL 6.7). I created a file called change_ldap_password.ldif: # Hash your password: # slappasswd -h ...
1
vote
1answer
80 views

Will adding a new objectClass in ldap get replicated?

I have a ldap setup with one master and two replicas created using this tutorial https://help.ubuntu.com/lts/serverguide/openldap-server.html#openldap-server-replication . If I add a new/custom ...
0
votes
1answer
728 views

what does it mean ? openldap: TLS: no unlocked certificate for certificate '<some certificate subject>'

just spent a lot of time with centos 6.7 and openldap. it was configured with simple certificates and a root-ca in nice little pem files, but after an upgrade from centos 6.4, connecting to the slapd ...
1
vote
1answer
494 views

slapd configuration for back-sql: how to traslate examples from slapd.conf to slapd.d

I'm trying to configure slapd with back-sql (specifically postgresql backend). All documents I found (Postgresq LDAP Howto seems to be more complete) are related to old configuration that use slapd....
1
vote
2answers
645 views

OpenLDAP Server nested Group search string

i got a small problem here regarding OpenLDAP. The problem is to search for the member of nested groups. Lets say i have this construct: dn=domain,dn=local ou=people cn=marvyn (inetOrgPerson) ou=...
0
votes
1answer
952 views

slapd running fine and listening on port 389, but still can't contact

Here is my ldapsearch command with debug (I've masked my real IP address): $ sudo /usr/local/bin/ldapsearch -H ldap://99.99.99.99 -b dc=my-domain,dc=com -x -d -1 ldap_url_parse_ext(ldap://99.99.99.99)...
0
votes
1answer
398 views

OpenLDAP will not start - Starting OpenLDAP: slapdrm: cannot remove `/var/lib/ldap/alock'

Hope someone can help me out here. I forgot the OpenLDAP admin password on a debian server and in the process, I specified the password in the slapd config file as follows: olcRootPW: {SHA}...
0
votes
1answer
49 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
2
votes
2answers
4k views

Apply changes to PAM changes

Does the server or a specific service needs to be restarted to let changes to pam files (/etc/pam.d/system-auth) take effect? longer version - I'm working on configuring SSSD to connect with LDAP for ...
0
votes
1answer
802 views

Active Directory users authentication on Ubuntu server

I need the simplest way to authenticate Active Directory users on Ubuntu Server (at login). I am trying with libnss-ldap, but it only works with plain LDAP server (like SLAPD) but now Active ...
2
votes
1answer
4k views

Configure Jenkins with LDAP : parameter 'Root DN'

I am installing an LDAP server and configuring Jenkins in order to accept LDAP for authentication. In Jenkins parameters, I have a weird behavior with the parameter Root DN. Documentation says : Root ...
0
votes
1answer
1k views

OpenLDAP default configuration file is `/etc/ldap/slapd.d` rather than `/etc/ldap/slapd.conf`

My openldap (version 2.4.31) makes directory /etc/ldap/slapd.d as its default configuration files rather than /etc/ldap/slapd.conf as the old version does. I found it becomes more complicated to ...
0
votes
0answers
134 views

slapd wont start after system reboot. Possible BIND issue?

I know this might come across as a low-quality question; but nothing has been changed other than BIND settings which were reverted back (mind you, before restarting nothing was broken. The box can ...
0
votes
1answer
3k views

How can one force Open Directory server to provide its full certificate chain to connecting clients?

The Problem We've created an Open Directory master on OSX 10.10 Yosemite + Server.app v4: $ sudo slapconfig -createldapmasterandadmin admin Administrator 1000 Which generates a root CA, an ...
2
votes
1answer
849 views

command line alternative to dpkg-reconfigure slapd

Is there a way to reconfigure slapd, providing all configuration options as command-line parameters/arguments? My goal is to be find an alternative to the interactive UI. Thank you
0
votes
0answers
3k views

openLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04

I have installed an ldap server in Ubuntu 12.04 using the tutorial https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-server-installation. First time everything went fine but had ...
0
votes
1answer
900 views

Restore LDAP data from copied files

My server has broken and I had to urgently put it up again. I needed to reinstall the system and, since I was time constrained, I lazily just copied the directories I considered necessary (/etc, /opt, ...