Questions tagged [openldap]
OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project.
0
votes
0answers
6 views
Linux - Openldap - Caching credentials
I'm on Centos7, I'd like to cache last successful login credentials to allow offline use of machines. How could I do it?
Right now if credentials provider is off I'm unable to login locally.
I'm ...
0
votes
1answer
87 views
Ldap configuration on gitlab error :Could not authenticate you from Ldapmain because “Invalid credentials for username”
I have an issue when I try to connect my LDAP to Gitlab:
Could not authenticate you from Ldapmain because "Invalid credentials for username.
This is my file conf /etc/gitlab/gitlab.rb :
...
0
votes
0answers
60 views
Mapping Client roles of keycloak on LDAP user
Mapping Client roles of keycloak on LDAP user, like assigning realm-management roles. Can we assign realm-management client roles for users imported from LDAP in Keycloak. Changes needed in the realm....
0
votes
0answers
14 views
OpenLDAP error: config error processing cn={1}core,cn=schema,cn=config
I cannot start my OpenLDAP this morning. I am receiving this error: config error processing cn={1}core,cn=schema,cn=config. I have googled around without any luck. It seems to be a checksum error. Is ...
0
votes
1answer
18 views
How to “Require password change at next login” without resetting password
When you reset an user's password in macOS Server.app's Open Directory (I think it's using slapd), you can also check the option Require password change at next login.
The question: can you also ...
0
votes
0answers
12 views
Deny every action on an organisation unit for a group in phpLDAPadmin (LDAP)
I want to deny every access for a group (group trainees like in my picture) to the organisation unit Ulist in my phpLDAPadmin. How can I do it ?
I don't know how to configure a simple access control ...
0
votes
1answer
140 views
openldap TLS failure — ldap_start_tls: Connect error (-11)
From what I can tell it's a certificate verification issue, but I have no idea why.
~ > ldapsearch -x -ZZ -LLL -H ldap://ldap.dark.kow.is -b dc=dark,dc=kow,dc=is
ldap_start_tls: Connect error (-11)...
0
votes
2answers
70 views
LDAP the right choice?
So I'm looking for a solution for ssh key authorisation access to numerous servers, and have been pointed towards using LDAP. I wanted to present the use case and see if LDAP would be applicable and ...
0
votes
1answer
34 views
prioritize LDAP when using passwd and group
I have several servers, one of which, say S1, is used as LDAP server. Other servers are configured to authenticate against the LDAP server.
When a user is added, I always create a unix user on S1, ...
1
vote
1answer
69 views
OpenLDAP's cn=config add separate user for replication of “olcDatabase={0}config,cn=config”
I hope I'm not asking a dumb question. I'm new to creating my own LDAP service.
For my regular mdb database it's easy to add multiple administrators. Since it contains an olcSuffix attribute it's ...
0
votes
0answers
29 views
LDAP Authentication with -W (fail) vs. -w (succeed)
I am using the OpenLDAP client utilities with the 389 directory server under CentOS 7.3. In the example below, why does authentication fail when I use -W to specify that I want to be prompted for the ...
1
vote
0answers
256 views
How to Set Mac OS X LDAP to Use Remote Home Folder
I have a MacOSX El Capitan machine that uses LDAP for authentication.
This part already works and I can log onto the machine with LDAP accounts.
I set the NFSHomeDirectory as #/Users/$uid$ which ...
0
votes
0answers
37 views
Change LDAP server identifier on clients
Some time ago I set up a centralized LDAP authentification for all our servers. Today we changed our network configuration from static IP addresses to DHCP provided ones and of course now no machine ...
2
votes
0answers
253 views
OpenLDAP with TLS AD backend
I'm currently using OpenLDAP as a read-only proxy for an internal Active Directory domain. My main issue is the connection works fine between AD DC and proxy without SSL, it doesn't work with it.
My ...
0
votes
1answer
400 views
“Error(s) encountered” While Using ldapscripts
Below, I show my OpenLDAP configuration. This is a fresh OpenLDAP installation on a fresh Debian Stretch installation.
I am unable to use ldapscripts. Regardless what I do, I get the errors shown at ...
0
votes
1answer
2k views
ldap_modify: No such object (32)
I installed OpenLDAP on Centos 7 and tried to create the admin user. But I got some error on ldap_modify. Below are my steps:
Install OpenLDAP and start it:
sudo yum install openldap openldap-...
0
votes
1answer
580 views
slappasswd: symbol lookup error undefined symbol ber_sockbuf_io_udp
I have CentOS 7 (3.10.0-693.el7.x86_64) from Pivotal Greenplum Sandbox VM.
I tried to install OpenLDAP:
sudo yum install openldap openldap-servers openldap-clients -y
But when I run slappasswd -s ...
0
votes
1answer
89 views
How can I host a file on a LDAP server, specifically Apache Directory Studio?
I am running Apache Directory Studio on mac os. I am a LDAP rookie.
I can't figure out how to host a file on the LDAP server so that when our java service connects to:
ldap://localhost:12321/cn=crl1,...
0
votes
1answer
148 views
OpenLDAP TLS vs SSL
I'm experimenting with OpenLDAP replication. I'm using a Docker image:
https://github.com/osixia/docker-openldap
to spawn a couple of containers that are talking to each other. The default ...
0
votes
1answer
94 views
Single-sign-on in DMZ / OpenLDAP
we have a dmz with several https-based services, which users from internal network use although as users from outside.
To ensure authentification with the active directory user-credentials, we set up ...
0
votes
1answer
119 views
openldap — exclude specific attributes from replication
I have two openldap servers replicating cn=config with syncrepl in a provider-consumer relationship. There are a few attributes that I would like to exclude from replication.
I see that syncrepl has ...
0
votes
1answer
4k views
Get all Ldap User list on client with (getent passwd) command
I have open ldap server and client both on centos6. I need all the list of open ldap user on client side in (/etc/passwd)
1
vote
0answers
563 views
FusionDirectory: OpenLDAP with SSL or TLS
I have looked around and found a lot online about how to set up TLS for OpenLDAP. The basic idea is adding the olcTLS items to include cert, key, cacert in cn=config.
However, with FusionDirectory, ...
1
vote
0answers
810 views
Trying to configure openldap TLSCipherSuite
I have an openldap server, and I'm trying to tune my TLSCipherSuite settings to be as secure as I can have them.
Please do not critique my actual security settings. Please just help me understand ...
2
votes
1answer
101 views
Struggling with OpenLDAP configuration
I've been configurating a LDAP server on a linux instance using AWS EC2.
Up to now, I successfully set up LDAP and phpLDAPadmin to work together.
I've created Users and Groups "Organisation Units". I'...
0
votes
1answer
1k views
Impossible to connect with ldap
I have an open ldap server :
IP : 192.168.0.70 (dell)
DIT :
(seen through ldapphpadmin)
And for patricia duchesne:
dn cn=patricia duchesne,ou=users,dc=memorandum,dc=pro
cn patricia duchesne
...
0
votes
1answer
402 views
How to authenticate linux users against two different directories simultaneously?
I have a few Linux servers using SSSD integrated with Microsoft AD to authenticate AD users.
AD groups are managed by a different department and I'd like to set up another directory to manage my own ...
2
votes
1answer
1k views
Authentication against LDAP on Apache fails with password mismatch
I want to accomplish LDAP authentication on my Linux machine, but can't get it working. Currently, I get the following error in the Apache log: AH01617: user john.doe: authentication failure for "/": ...
0
votes
1answer
184 views
OpenLDAP+Kerberos nightmare
So for the past few weeks I've been configuring an SSO solution for our small company.
Right now I have a server running OpenLDAP 2.4.4 with kerberos (openldap backend).
Users can login and get a ...
1
vote
1answer
2k views
“ShadowLastChange” attribute doesn't work
I installed the following Openldap version on Centos 7 Server:
ldapsearch: @(#) $OpenLDAP: ldapsearch 2.4.40 (Mar 31 2016 15:24:47) $
mockbuild@worker1.bsys.centos.org:/builddir/build/BUILD/...
0
votes
1answer
712 views
OpenLDAP: Converting flat file (slapd.conf) to OLC (slapd.d)…can't access cn=config
I'm attempting to set up OpenLDAP. I was having trouble with the OLC config option, so I went with the slapd.conf style input as I'm a complete noob at LDAP and it was easier to understand.
I now ...
1
vote
0answers
391 views
Import schema into Samba/AD domain?
I have set up a Samba4 domain controller to serve as my Active Directory PDC. It works flawlessly in that respect. My next challenge is to install FusionDirectory to make managing it easier and to ...
2
votes
2answers
3k views
No write access to parent
I am facing an issue chen trying to setup an openldap server with chef.
Configuration:
Ubuntu 15.04
OpenLdap 2.4.31
Chef/OpenLdap 2.7.1
For information, when I run dkpg-reconfigure ...
1
vote
1answer
381 views
OpenLDAP : authentication through “domain\username” or “username@domain”
Is there a way to configure OpenLDAP to use authentication through "domain\username" or "username@domain" instead of (or in addition to) by DN ?
I use openLDAP version 2.4.40.
1
vote
0answers
1k views
OpenLDAP TLS negotiation failure ldap_start_tls: Connect error (-11) additional info: A TLS packet with unexpected length was received
I have tried to configure Openldap with TLS. I have an TLS certificates and configured with .ldif file and changed necessary configuration in ldap.conf file. I am using ubuntu 14.04 LTS operating ...
0
votes
1answer
443 views
How do I remove a DIT from an OpenLDAP server?
I have a need to remove a DIT from an OpenLDAP v2.4 installation.
Creating a DIT is documented at http://www.openldap.org/doc/admin24/dbtools.html, however removing/deleting the DIT is undocumented.
...
0
votes
0answers
1k views
OpenLDAP and pGina vs Active Directory (Using Samba4 Domain Controller)
Note: I know there are some questions and questions talking about similar topic, but there were all a couple of years old, therefore I prefered to mention my exact situation to get the most proper ...
1
vote
1answer
2k views
Using Samba4 with OpenLDAP on the same server to authenticate Windows clients accounts
I already have OpenLDAP directory with some services doing the authentication against it (OpenVPN, Jabber, Freeradius, redmine, etc...).
And What I still need to do is to make my server a domain ...
0
votes
1answer
2k views
Openldap: how to add an acl for cn=config starting by slapd.conf?
I usually configure from 0 openldap servers
using slapd.conf and then converting to ldif
slaptest -f /etc/openldap/slapd.conf -F /etc/slapd.d
Works fine,but i want to add an acl wich must result ...
1
vote
1answer
701 views
Restricting ssh access to server within a kerberos/ldap infrastructure
I have a MIT-Kerberos / OpenLDAP infrastructure. I want to limit the ssh-access for my users, so that only members of a specific group are allowed to ssh to my servers.
When I just had OpenLDAP ...
1
vote
1answer
84 views
LDAP - PAM Home Directory Incorrect
I have OpenLDAP setup on Centos 6. LDAP has my account homeDirectory as /home/me but a server that I'm logging into is trying to create my home directory at /users/me.
How can I trace down why the ...
-1
votes
1answer
527 views
Use Jenkins plugin in tuleap when Jenkins use LDAP Authentication
I want to use Tuleap(Jenkins/hudson plugin in tuleap) and Jenkins with ldap Authentication
by default when i disable Jenkins Authentication every thing work and integration is ok but
when i activate ...
0
votes
1answer
306 views
Owncloud 8 and OpenLDAP disable useMemberOfToDetectMembership
I have set up a OpenLDAP server and OwnCloud 8 on raspbian.
LDAP itself and OwnCloud are working, but when I try to login to OwnCloud via LDAP I get the following errors:
Array to string conversion ...
0
votes
1answer
51 views
How do I add custom SYNTAX to OpenLDAP?
When defining an attribute in OpenLDAP, you have to provide a SYNTAX OID so OpenLDAP knows what kind of string it can accept for that attribute.
How can I create a new SYNTAX for OpenLDAP?
1
vote
1answer
1k views
OpenLDAP - possible to search without specifying base?
I am having some issues with OpenLDAP and Spring security, where the latter does a search with the whole path in dn (filter), and an empty base. OpenLDAP does not like this, and the query fails. The ...
-1
votes
1answer
116 views
what is the right ldapsearch version for my linux red-hat machine
I am little confuse about the following
I want to install the binary ldapsearch tool on my linux machine
In order to use this tool to test LDAP connection on my linux ( linux version 5.8 , i386 ) ...
1
vote
0answers
246 views
LDAP AUTHENTICATION UBUNTU
I have setup an ldap server on Ubuntu,
Configuration steps:
sudo apt-get install slapd ldap-utils
Reconfigure LDAP
sudo dpkg-reconfigure slapd
DNS name
example.com
Install PHPldapadmin
sudo ...
0
votes
1answer
48 views
Search inside LDAP Server
I was wondering if someone know, when i search an entity over the Ldap server, would i get also it's sub folders and the data inside.
for example i have the following:
*dn:EPC-SubscriberGroupId=...
1
vote
0answers
31 views
genet group doesn't show the user in the ldap directory
I am running openldap2-2.4.26-0.24.36 server.
ON the machine, I use ldapmodify to add a user to the group.
Query with ldapsearch can show the correct user being added.
However getent group $...
2
votes
0answers
226 views
How can we cache ldap login credentials in mac using opendirectory
In mac using Active Directory we can cache ldap login credentials by checking create mobile account at login. Is there any other way to do same thing in openldap. Please some one share information ...
