Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project.

0
votes
0answers
6 views

Linux - Openldap - Caching credentials

I'm on Centos7, I'd like to cache last successful login credentials to allow offline use of machines. How could I do it? Right now if credentials provider is off I'm unable to login locally. I'm ...
0
votes
1answer
87 views

Ldap configuration on gitlab error :Could not authenticate you from Ldapmain because “Invalid credentials for username”

I have an issue when I try to connect my LDAP to Gitlab: Could not authenticate you from Ldapmain because "Invalid credentials for username. This is my file conf /etc/gitlab/gitlab.rb : ...
0
votes
0answers
60 views

Mapping Client roles of keycloak on LDAP user

Mapping Client roles of keycloak on LDAP user, like assigning realm-management roles. Can we assign realm-management client roles for users imported from LDAP in Keycloak. Changes needed in the realm....
0
votes
0answers
14 views

OpenLDAP error: config error processing cn={1}core,cn=schema,cn=config

I cannot start my OpenLDAP this morning. I am receiving this error: config error processing cn={1}core,cn=schema,cn=config. I have googled around without any luck. It seems to be a checksum error. Is ...
0
votes
1answer
18 views

How to “Require password change at next login” without resetting password

When you reset an user's password in macOS Server.app's Open Directory (I think it's using slapd), you can also check the option Require password change at next login. The question: can you also ...
0
votes
0answers
12 views

Deny every action on an organisation unit for a group in phpLDAPadmin (LDAP)

I want to deny every access for a group (group trainees like in my picture) to the organisation unit Ulist in my phpLDAPadmin. How can I do it ? I don't know how to configure a simple access control ...
0
votes
1answer
140 views

openldap TLS failure — ldap_start_tls: Connect error (-11)

From what I can tell it's a certificate verification issue, but I have no idea why. ~ > ldapsearch -x -ZZ -LLL -H ldap://ldap.dark.kow.is -b dc=dark,dc=kow,dc=is ldap_start_tls: Connect error (-11)...
0
votes
2answers
70 views

LDAP the right choice?

So I'm looking for a solution for ssh key authorisation access to numerous servers, and have been pointed towards using LDAP. I wanted to present the use case and see if LDAP would be applicable and ...
0
votes
1answer
34 views

prioritize LDAP when using passwd and group

I have several servers, one of which, say S1, is used as LDAP server. Other servers are configured to authenticate against the LDAP server. When a user is added, I always create a unix user on S1, ...
1
vote
1answer
69 views

OpenLDAP's cn=config add separate user for replication of “olcDatabase={0}config,cn=config”

I hope I'm not asking a dumb question. I'm new to creating my own LDAP service. For my regular mdb database it's easy to add multiple administrators. Since it contains an olcSuffix attribute it's ...
0
votes
0answers
29 views

LDAP Authentication with -W (fail) vs. -w (succeed)

I am using the OpenLDAP client utilities with the 389 directory server under CentOS 7.3. In the example below, why does authentication fail when I use -W to specify that I want to be prompted for the ...
1
vote
0answers
256 views

How to Set Mac OS X LDAP to Use Remote Home Folder

I have a MacOSX El Capitan machine that uses LDAP for authentication. This part already works and I can log onto the machine with LDAP accounts. I set the NFSHomeDirectory as #/Users/$uid$ which ...
0
votes
0answers
37 views

Change LDAP server identifier on clients

Some time ago I set up a centralized LDAP authentification for all our servers. Today we changed our network configuration from static IP addresses to DHCP provided ones and of course now no machine ...
2
votes
0answers
253 views

OpenLDAP with TLS AD backend

I'm currently using OpenLDAP as a read-only proxy for an internal Active Directory domain. My main issue is the connection works fine between AD DC and proxy without SSL, it doesn't work with it. My ...
0
votes
1answer
400 views

“Error(s) encountered” While Using ldapscripts

Below, I show my OpenLDAP configuration. This is a fresh OpenLDAP installation on a fresh Debian Stretch installation. I am unable to use ldapscripts. Regardless what I do, I get the errors shown at ...
0
votes
1answer
2k views

ldap_modify: No such object (32)

I installed OpenLDAP on Centos 7 and tried to create the admin user. But I got some error on ldap_modify. Below are my steps: Install OpenLDAP and start it: sudo yum install openldap openldap-...
0
votes
1answer
580 views

slappasswd: symbol lookup error undefined symbol ber_sockbuf_io_udp

I have CentOS 7 (3.10.0-693.el7.x86_64) from Pivotal Greenplum Sandbox VM. I tried to install OpenLDAP: sudo yum install openldap openldap-servers openldap-clients -y But when I run slappasswd -s ...
0
votes
1answer
89 views

How can I host a file on a LDAP server, specifically Apache Directory Studio?

I am running Apache Directory Studio on mac os. I am a LDAP rookie. I can't figure out how to host a file on the LDAP server so that when our java service connects to: ldap://localhost:12321/cn=crl1,...
0
votes
1answer
148 views

OpenLDAP TLS vs SSL

I'm experimenting with OpenLDAP replication. I'm using a Docker image: https://github.com/osixia/docker-openldap to spawn a couple of containers that are talking to each other. The default ...
0
votes
1answer
94 views

Single-sign-on in DMZ / OpenLDAP

we have a dmz with several https-based services, which users from internal network use although as users from outside. To ensure authentification with the active directory user-credentials, we set up ...
0
votes
1answer
119 views

openldap — exclude specific attributes from replication

I have two openldap servers replicating cn=config with syncrepl in a provider-consumer relationship. There are a few attributes that I would like to exclude from replication. I see that syncrepl has ...
0
votes
1answer
4k views

Get all Ldap User list on client with (getent passwd) command

I have open ldap server and client both on centos6. I need all the list of open ldap user on client side in (/etc/passwd)
1
vote
0answers
563 views

FusionDirectory: OpenLDAP with SSL or TLS

I have looked around and found a lot online about how to set up TLS for OpenLDAP. The basic idea is adding the olcTLS items to include cert, key, cacert in cn=config. However, with FusionDirectory, ...
1
vote
0answers
810 views

Trying to configure openldap TLSCipherSuite

I have an openldap server, and I'm trying to tune my TLSCipherSuite settings to be as secure as I can have them. Please do not critique my actual security settings. Please just help me understand ...
2
votes
1answer
101 views

Struggling with OpenLDAP configuration

I've been configurating a LDAP server on a linux instance using AWS EC2. Up to now, I successfully set up LDAP and phpLDAPadmin to work together. I've created Users and Groups "Organisation Units". I'...
0
votes
1answer
1k views

Impossible to connect with ldap

I have an open ldap server : IP : 192.168.0.70 (dell) DIT : (seen through ldapphpadmin) And for patricia duchesne: dn cn=patricia duchesne,ou=users,dc=memorandum,dc=pro cn patricia duchesne ...
0
votes
1answer
402 views

How to authenticate linux users against two different directories simultaneously?

I have a few Linux servers using SSSD integrated with Microsoft AD to authenticate AD users. AD groups are managed by a different department and I'd like to set up another directory to manage my own ...
2
votes
1answer
1k views

Authentication against LDAP on Apache fails with password mismatch

I want to accomplish LDAP authentication on my Linux machine, but can't get it working. Currently, I get the following error in the Apache log: AH01617: user john.doe: authentication failure for "/": ...
0
votes
1answer
184 views

OpenLDAP+Kerberos nightmare

So for the past few weeks I've been configuring an SSO solution for our small company. Right now I have a server running OpenLDAP 2.4.4 with kerberos (openldap backend). Users can login and get a ...
1
vote
1answer
2k views

“ShadowLastChange” attribute doesn't work

I installed the following Openldap version on Centos 7 Server: ldapsearch: @(#) $OpenLDAP: ldapsearch 2.4.40 (Mar 31 2016 15:24:47) $ mockbuild@worker1.bsys.centos.org:/builddir/build/BUILD/...
0
votes
1answer
712 views

OpenLDAP: Converting flat file (slapd.conf) to OLC (slapd.d)…can't access cn=config

I'm attempting to set up OpenLDAP. I was having trouble with the OLC config option, so I went with the slapd.conf style input as I'm a complete noob at LDAP and it was easier to understand. I now ...
1
vote
0answers
391 views

Import schema into Samba/AD domain?

I have set up a Samba4 domain controller to serve as my Active Directory PDC. It works flawlessly in that respect. My next challenge is to install FusionDirectory to make managing it easier and to ...
2
votes
2answers
3k views

No write access to parent

I am facing an issue chen trying to setup an openldap server with chef. Configuration: Ubuntu 15.04 OpenLdap 2.4.31 Chef/OpenLdap 2.7.1 For information, when I run dkpg-reconfigure ...
1
vote
1answer
381 views

OpenLDAP : authentication through “domain\username” or “username@domain”

Is there a way to configure OpenLDAP to use authentication through "domain\username" or "username@domain" instead of (or in addition to) by DN ? I use openLDAP version 2.4.40.
1
vote
0answers
1k views

OpenLDAP TLS negotiation failure ldap_start_tls: Connect error (-11) additional info: A TLS packet with unexpected length was received

I have tried to configure Openldap with TLS. I have an TLS certificates and configured with .ldif file and changed necessary configuration in ldap.conf file. I am using ubuntu 14.04 LTS operating ...
0
votes
1answer
443 views

How do I remove a DIT from an OpenLDAP server?

I have a need to remove a DIT from an OpenLDAP v2.4 installation. Creating a DIT is documented at http://www.openldap.org/doc/admin24/dbtools.html, however removing/deleting the DIT is undocumented. ...
0
votes
0answers
1k views

OpenLDAP and pGina vs Active Directory (Using Samba4 Domain Controller)

Note: I know there are some questions and questions talking about similar topic, but there were all a couple of years old, therefore I prefered to mention my exact situation to get the most proper ...
1
vote
1answer
2k views

Using Samba4 with OpenLDAP on the same server to authenticate Windows clients accounts

I already have OpenLDAP directory with some services doing the authentication against it (OpenVPN, Jabber, Freeradius, redmine, etc...). And What I still need to do is to make my server a domain ...
0
votes
1answer
2k views

Openldap: how to add an acl for cn=config starting by slapd.conf?

I usually configure from 0 openldap servers using slapd.conf and then converting to ldif slaptest -f /etc/openldap/slapd.conf -F /etc/slapd.d Works fine,but i want to add an acl wich must result ...
1
vote
1answer
701 views

Restricting ssh access to server within a kerberos/ldap infrastructure

I have a MIT-Kerberos / OpenLDAP infrastructure. I want to limit the ssh-access for my users, so that only members of a specific group are allowed to ssh to my servers. When I just had OpenLDAP ...
1
vote
1answer
84 views

LDAP - PAM Home Directory Incorrect

I have OpenLDAP setup on Centos 6. LDAP has my account homeDirectory as /home/me but a server that I'm logging into is trying to create my home directory at /users/me. How can I trace down why the ...
-1
votes
1answer
527 views

Use Jenkins plugin in tuleap when Jenkins use LDAP Authentication

I want to use Tuleap(Jenkins/hudson plugin in tuleap) and Jenkins with ldap Authentication by default when i disable Jenkins Authentication every thing work and integration is ok but when i activate ...
0
votes
1answer
306 views

Owncloud 8 and OpenLDAP disable useMemberOfToDetectMembership

I have set up a OpenLDAP server and OwnCloud 8 on raspbian. LDAP itself and OwnCloud are working, but when I try to login to OwnCloud via LDAP I get the following errors: Array to string conversion ...
0
votes
1answer
51 views

How do I add custom SYNTAX to OpenLDAP?

When defining an attribute in OpenLDAP, you have to provide a SYNTAX OID so OpenLDAP knows what kind of string it can accept for that attribute. How can I create a new SYNTAX for OpenLDAP?
1
vote
1answer
1k views

OpenLDAP - possible to search without specifying base?

I am having some issues with OpenLDAP and Spring security, where the latter does a search with the whole path in dn (filter), and an empty base. OpenLDAP does not like this, and the query fails. The ...
-1
votes
1answer
116 views

what is the right ldapsearch version for my linux red-hat machine

I am little confuse about the following I want to install the binary ldapsearch tool on my linux machine In order to use this tool to test LDAP connection on my linux ( linux version 5.8 , i386 ) ...
1
vote
0answers
246 views

LDAP AUTHENTICATION UBUNTU

I have setup an ldap server on Ubuntu, Configuration steps: sudo apt-get install slapd ldap-utils Reconfigure LDAP sudo dpkg-reconfigure slapd DNS name example.com Install PHPldapadmin sudo ...
0
votes
1answer
48 views

Search inside LDAP Server

I was wondering if someone know, when i search an entity over the Ldap server, would i get also it's sub folders and the data inside. for example i have the following: *dn:EPC-SubscriberGroupId=...
1
vote
0answers
31 views

genet group doesn't show the user in the ldap directory

I am running openldap2-2.4.26-0.24.36 server. ON the machine, I use ldapmodify to add a user to the group. Query with ldapsearch can show the correct user being added. However getent group $...
2
votes
0answers
226 views

How can we cache ldap login credentials in mac using opendirectory

In mac using Active Directory we can cache ldap login credentials by checking create mobile account at login. Is there any other way to do same thing in openldap. Please some one share information ...