Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project.

Filter by
Sorted by
Tagged with
1 vote
0 answers
8 views

Need help in creating custom objectclasses and attributetypes in openldap

I am trying to create an custom attribute in openldap. For which i am suppose to create an objectclasses. Here my ldif file below. Ldif File Content dn: cn=schema,cn=config changetype: modify add: ...
user avatar
0 votes
1 answer
18 views

Cannot load database overlay due to permissions in OpenLDAP

I am having a hard time to configure OpenLDAP with MemberOf overlay. I have compiled openldap 2.5.16 from scratch, with --with-memberof option. Somehow it works: sys# sbin/slapcat -F config/slapd.d -n ...
Smok's user avatar
  • 3
0 votes
1 answer
97 views

LDAP proxy to ActiveDirectory not working

I installed openldap as a proxy to ActiveDirectory and it's working if I use a full DN. The problem is that AD supports query with the following syntax but OpenLdap does not. ldapsearch -v -H ldap://...
frhack's user avatar
  • 101
0 votes
0 answers
81 views

Maping a Linux Drive on Windows 2016

I have a Red Hat Linux 8.7 server (87server) with an exported disk (bigdata). On my Linux network, I can mount the drive with no problems: mount /mnt/bigdata 87server:/bigdata The access to the ...
Scottie H's user avatar
  • 318
1 vote
0 answers
360 views

How to add a password policy on OpenLDAP 2.4.11?

I have a server with OpenLDAP 2.4.11 installed. I'm trying to add a password policy for all my users. So, I enable ppolicy module : bash# grep ppolicy /etc/ldap/slapd.conf include /etc/ldap/...
user2178964's user avatar
0 votes
0 answers
63 views

Use ldapclient in Local as test

I am studying about LDAP Currently, I setup ldap server and check. My setting is like this below $ldapsearch -x -LLL -b "dc=myexample,dc=com" dn: dc=myexample,dc=com objectClass: top ...
whitebear's user avatar
  • 705
0 votes
0 answers
391 views

Is it possible to replicate OpenLDAP from FreeIPA?

Has anyone tried or even succeeded with having an OpenLDAP server (could be slave replication) to a FreeIPA server? I have been trying with osixia's Docker OpenLDAP but replication never seems to grab ...
darkcape's user avatar
0 votes
0 answers
143 views

Secondary Kerberos KDC not starting

I have configured Kerberos using a LDAP backend with this guide: https://ubuntu.com/server/docs/service-kerberos-with-openldap-backend However, my secondary KDC is not starting; journalctl reports: ...
philipp's user avatar
1 vote
1 answer
172 views

ldapmodifyuser replace with base64

I'd like to modify some entries in our LDAP. In the field gecos currently some users only have their user name which I would like to replace by their full name. In general this isn't a problem, but I ...
Richard Rosner's user avatar
1 vote
0 answers
328 views

Ldapsearch through ssh tunell

I have four machines A, B, C, D and I would like to use ldapsearch on the first machine through an ssh tunnel over to C with a jump from B to C. Currently ldapsearch on C contacts the ldap server on D,...
aziis98's user avatar
  • 11
1 vote
1 answer
1k views

OpenLDAP complains that the fields are not indexed

I am using OpenLDAP (slapd) v2.4.47 on Debian. It complains in the following manner in the logfile (/var/log/debug) slapd[1142]: conn=1508 op=4 SRCH base="cn=persons,cn=internal" scope=2 ...
dma_k's user avatar
  • 386
0 votes
2 answers
1k views

How can make simple bind the default for ldapsearch?

I have the following in my ~/.ldaprc: uri ldaps://my.corporate.ldap.server.com base DC=corp,DC=companyname,DC=com bindn CN=Ruben,OU=Users,OU=companyname,OU=SE,OU=Resources,DC=corp,DC=companyname,DC=...
RubenLaguna's user avatar
3 votes
1 answer
6k views

ldapmodify insufficient access (50)

I'm trying to enable logging in an openldap (slapd) server. So I tried to execute: $ ldapmodify -D cn=admin,dc=domain,dc=tld -W -H ldap:/// <<EOF > dn: cn=config > changetype:modify &...
gxor's user avatar
  • 188
0 votes
1 answer
706 views

Modify user in openLdap via bash script

Can you please help me put this command into if statement (bash scripting): $ ldapmodify -D -h password: [enter password] dn: cn=vipb,ou=groups,dc=example,dc=com changetype: modify add: memberUid ...
Belphegor's user avatar
0 votes
0 answers
660 views

OPENLDAP - ldapwhoami not working binding securely, but other applications does

I tried adding TLS hard in slapd.conf but it says unknown directive inside backend database definition. Tying by CLI the command ldapwhoami.exe -H ldap://myldap.company.com -v -D "uid=dds,ou=...
DDS's user avatar
  • 701
0 votes
2 answers
2k views

How to get second value of multi value ldap attribute

We have ldap attribute name "mail" , which have multiple values like mail: [email protected] mail: [email protected] Now I am looking for the query which will return result only second ...
Sunil Bhoi's user avatar
0 votes
1 answer
1k views

How to remove a OpenLDAP ACL?

I accidentally created a bad ACL. I’m aware of the manner in which to update the ACL but the truth is I don’t need it any more. When updating it looks like I accidentally created new ACLs vs modifying ...
Subtubes's user avatar
  • 101
1 vote
0 answers
161 views

phpldapadmin not authenticating ldap service

I am getting the above error message I pretty sure I am giving correct Login DN and password I want to know how can I troubleshoot and inspect what is going wrong where both the containers are ...
Ciasto piekarz's user avatar
0 votes
0 answers
165 views

slapd does not start after reinstallation

I am fighting the third day with OpenLDAP to add the first organizational unit. I decided to start over and delete all my attempts: systemctl stop slapd systemctl disable slapd yum -y remove openldap-...
Leos Literak's user avatar
0 votes
0 answers
630 views

getent group correct but id not

How on earth can this be possible? # getent group mailuser mailuser:*:37103:admin,pinguin,testuser # id testuser uid=46944(testuser) gid=100(users) Gruppen=2399(datas),100(users) # Yes, users/groups ...
divB's user avatar
  • 587
0 votes
1 answer
67 views

When I use ldapadd I get a response with possible options. How can I fix this?

sudo ldapadd -x -D cn=Manager, dc=localhost,dc=localdomain -W -f /home/liveuser/basedomain.ldif Is the code that I type into Fedora31 terminal and the response that I get back is jsut all the ...
adilisi's user avatar
0 votes
1 answer
53 views

How can I set my password in OpenLDAP?

I have installed OpenLDAP in 192.168.0.2 (CentOS), and used LDAP Admin to copy People and Group form another OpenLDAP server (192.168.0.1), People in 192.168.0.1 has a password, but in 192.168.0.2, ...
user1111762's user avatar
0 votes
2 answers
70 views

Samba+LDAP - Diagnosing Problems (Access Denied)

I really need some help because I can't identify what's going on... I'm pretty lost here... =| PROBLEM: I have a server "server_a" with a directory "group_a_folder" ("/srv/...
Eduardo Lucio's user avatar
1 vote
0 answers
102 views

Migrate debian login from ldap to local login

we have a debian stretch machine on which the users login by ldap. Since we want to shut down our ldap server(not used anymore except by this single machine), i have to search for a way to migrate the ...
saintzero's user avatar
-3 votes
1 answer
2k views

"cat" results in No Such File or Directory

I'm really flying blind here trying to use both Linux and OpenLDAP for the first time ever. My ultimate goal here is to connect to an OpenLDAP server from within a C# console app and to authenticate ...
Casey Crookston's user avatar
0 votes
0 answers
27 views

Unable to access few tabs in the openLDAP webui

After logging into the openLDAP WebUI, I am unable to access few of the templates, in the webui they are marked with a cross. How do I enable them?
user3837415's user avatar
1 vote
1 answer
33 views

OpenLDAP Integration

I have installed an OpenLDAP server on an AWS EC2 Ubuntu 16.04 instance. It's working fine while my client machine is connected to the internet, but whenever I am disconnecting internet from client ...
Harsh's user avatar
  • 11
0 votes
1 answer
242 views

Dovecot - exclude LDAP locked accounts

I have installed Dovecot with LDAP; everything works fine except that the users I attempted to lock using pwdAccountLockedTime are still able to login. Here is my ldap.conf.ext file: hosts = myldap ...
user10978230's user avatar
1 vote
0 answers
308 views

OpenLDAP slapadd on a translucent overlay

I have an OpenLDAP database which seems to have one or two corrupt records (probably from machine crashes while update in process). Anyway, whenever anyone or anything access these records slapd ...
Philip Lewis's user avatar
1 vote
1 answer
1k views

Why won't LDAP client authenticate users

I have followed instructions here: https://computingforgeeks.com/install-and-configure-openldap-phpldapadmin-on-ubuntu-18-04-lts/ and Added users as per https://computingforgeeks.com/how-to-install-...
ca55idy's user avatar
  • 11
1 vote
1 answer
1k views

LDAP setup with two DIT

I am having an openLDAP which is having a database say dc=domain1,dc=com. Now I am trying to add 1 more, dc=domain2,dc=com. Below are the steps, we did to achieve this, [root@host user]# service ...
Vijayasundhar Nanjundan's user avatar
0 votes
1 answer
446 views

How to add new Status attribute to LDAP user objects

I am trying to add a status attribute on LDAP, just like Active directory in Windows, so I can enable or disable user using status attribute. anyone can help me how it can be possible on LDAP
Ankit Kumar's user avatar
0 votes
1 answer
814 views

Require both LDAP authentication *and* ssh auth

I would like to enable the following: Linux ec2 instances in AWS that perform LDAP authentication of users who have no home directory currently on the box. I have a working openLDAP in AWS for the ...
Spangen's user avatar
  • 103
0 votes
1 answer
8k views

Ldap configuration on gitlab error :Could not authenticate you from Ldapmain because "Invalid credentials for username"

I have an issue when I try to connect my LDAP to Gitlab: Could not authenticate you from Ldapmain because "Invalid credentials for username. This is my file conf /etc/gitlab/gitlab.rb : ...
cocobiño's user avatar
0 votes
1 answer
835 views

How to "Require password change at next login" without resetting password

When you reset an user's password in macOS Server.app's Open Directory (I think it's using slapd), you can also check the option Require password change at next login. The question: can you also ...
doekman's user avatar
  • 301
0 votes
0 answers
33 views

Deny every action on an organisation unit for a group in phpLDAPadmin (LDAP)

I want to deny every access for a group (group trainees like in my picture) to the organisation unit Ulist in my phpLDAPadmin. How can I do it ? I don't know how to configure a simple access control ...
Jean Ooo's user avatar
1 vote
1 answer
8k views

openldap TLS failure -- ldap_start_tls: Connect error (-11)

From what I can tell it's a certificate verification issue, but I have no idea why. ~ > ldapsearch -x -ZZ -LLL -H ldap://ldap.dark.kow.is -b dc=dark,dc=kow,dc=is ldap_start_tls: Connect error (-11)...
BeepDog's user avatar
  • 131
0 votes
2 answers
1k views

LDAP the right choice?

So I'm looking for a solution for ssh key authorisation access to numerous servers, and have been pointed towards using LDAP. I wanted to present the use case and see if LDAP would be applicable and ...
ghost3h's user avatar
0 votes
1 answer
696 views

prioritize LDAP when using passwd and group

I have several servers, one of which, say S1, is used as LDAP server. Other servers are configured to authenticate against the LDAP server. When a user is added, I always create a unix user on S1, ...
Rankaba's user avatar
  • 25
1 vote
1 answer
1k views

OpenLDAP's cn=config add separate user for replication of “olcDatabase={0}config,cn=config”

I hope I'm not asking a dumb question. I'm new to creating my own LDAP service. For my regular mdb database it's easy to add multiple administrators. Since it contains an olcSuffix attribute it's ...
elysch's user avatar
  • 133
1 vote
0 answers
862 views

How to Set Mac OS X LDAP to Use Remote Home Folder

I have a MacOSX El Capitan machine that uses LDAP for authentication. This part already works and I can log onto the machine with LDAP accounts. I set the NFSHomeDirectory as #/Users/$uid$ which ...
jimbob's user avatar
  • 111
2 votes
0 answers
665 views

OpenLDAP with TLS AD backend

I'm currently using OpenLDAP as a read-only proxy for an internal Active Directory domain. My main issue is the connection works fine between AD DC and proxy without SSL, it doesn't work with it. My ...
Hakujou's user avatar
  • 51
1 vote
1 answer
2k views

"Error(s) encountered" While Using ldapscripts

Below, I show my OpenLDAP configuration. This is a fresh OpenLDAP installation on a fresh Debian Stretch installation. I am unable to use ldapscripts. Regardless what I do, I get the errors shown at ...
Dave's user avatar
  • 1,019
0 votes
1 answer
9k views

ldap_modify: No such object (32)

I installed OpenLDAP on Centos 7 and tried to create the admin user. But I got some error on ldap_modify. Below are my steps: Install OpenLDAP and start it: sudo yum install openldap openldap-...
HP.'s user avatar
  • 133
0 votes
1 answer
2k views

slappasswd: symbol lookup error undefined symbol ber_sockbuf_io_udp

I have CentOS 7 (3.10.0-693.el7.x86_64) from Pivotal Greenplum Sandbox VM. I tried to install OpenLDAP: sudo yum install openldap openldap-servers openldap-clients -y But when I run slappasswd -s ...
HP.'s user avatar
  • 133
0 votes
1 answer
678 views

How can I host a file on a LDAP server, specifically Apache Directory Studio?

I am running Apache Directory Studio on mac os. I am a LDAP rookie. I can't figure out how to host a file on the LDAP server so that when our java service connects to: ldap://localhost:12321/cn=crl1,...
user674669's user avatar
0 votes
1 answer
359 views

OpenLDAP TLS vs SSL

I'm experimenting with OpenLDAP replication. I'm using a Docker image: https://github.com/osixia/docker-openldap to spawn a couple of containers that are talking to each other. The default ...
Ken J's user avatar
  • 433
0 votes
1 answer
243 views

Single-sign-on in DMZ / OpenLDAP

we have a dmz with several https-based services, which users from internal network use although as users from outside. To ensure authentification with the active directory user-credentials, we set up ...
Skullbone's user avatar
2 votes
1 answer
679 views

openldap -- exclude specific attributes from replication

I have two openldap servers replicating cn=config with syncrepl in a provider-consumer relationship. There are a few attributes that I would like to exclude from replication. I see that syncrepl has ...
hymie's user avatar
  • 1,266
0 votes
1 answer
12k views

Get all Ldap User list on client with (getent passwd) command

I have open ldap server and client both on centos6. I need all the list of open ldap user on client side in (/etc/passwd)
Abhishek's user avatar