New answers tagged openldap
0
dn: ...
changetype: modify
add: attributeName
attributeName: xxx
-
delete: attributeName
attributeName: value
-
delete: attributeOther
May also work for you. This allows multiple operations while listing the DN once.
1
If bcrypt is a valid algorithm for the underlying system it should work as part of OpenLDAP's CRYPT password storage scheme.
If for instance your existing password hashes look like $2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy you should be able to set the userPassword attribute OpenLDAP to {CRYPT}$2a$10$...
0
Disable your SELINUX.
Install the required certificates specified in the file:
olcDatabase={2}hdb.ldif
0
In my case, I wanted the crypt salted SHA-512 algorithm hashes from the linux user accounts to be imported. So I found (Answer) What are {CRYPT} passwords and how do I generate them? which has more detail, but basically all you have to do is prepend {CRYPT} before the usual hash that looks like $6$salthere$base64hashhere.
At that link they say to use some ...
1
First, looks like you're sending your password over the wire in clear text. Don't do that. Get some kind of TLS going, either starttls or LDAPS .
Also, dn.base="" and dn.base="cn=Subschema" are generally controlled by a different backend than the one you'll be applying ACLs to, so you might want to check if you even need those lines where ...
Top 50 recent answers are included
Related Tags
openldap × 1325ldap × 614
linux × 189
centos × 84
active-directory × 82
ubuntu × 79
authentication × 77
ssl × 76
slapd × 58
debian × 51
samba × 48
centos7 × 46
kerberos × 44
pam × 39
access-control-list × 35
redhat × 31
sssd × 30
ldif × 29
schema × 26
centos6 × 25
configuration × 24
replication × 24
sasl × 24
mac-osx × 22
pam-ldap × 22