Questions tagged [openldap]
OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project.
97
questions
0
votes
0answers
30 views
slapd does not start after reinstallation
I am fighting the third day with OpenLDAP to add the first organizational unit. I decided to start over and delete all my attempts:
systemctl stop slapd
systemctl disable slapd
yum -y remove openldap-...
0
votes
0answers
27 views
How connect w7 client to Ubuntu 18.04 openLdap server?
I have a Ubuntu 18.04 server and I connected a Ubuntu 18.04 client to this server. Now I want to connect a w7 client to the server, but i have not idea :(
Can someone help me please? Is for my final ...
0
votes
0answers
18 views
getent group correct but id not
How on earth can this be possible?
# getent group mailuser
mailuser:*:37103:admin,pinguin,testuser
# id testuser
uid=46944(testuser) gid=100(users) Gruppen=2399(datas),100(users)
#
Yes, users/groups ...
0
votes
0answers
15 views
Configure secured LDAP client as server
I'm starting to experiment more with LDAP at my office. Our users are currently on GSuite and I have setup an LDAP client on a VPS which is authenticated over a pre-shared certificate TLS endpoint (...
0
votes
1answer
42 views
When I use ldapadd I get a response with possible options. How can I fix this?
sudo ldapadd -x -D cn=Manager, dc=localhost,dc=localdomain -W -f /home/liveuser/basedomain.ldif
Is the code that I type into Fedora31 terminal and the response that I get back is jsut all the ...
0
votes
0answers
209 views
LDAP authentication in Windows Server2019
I have following setup:
1. LDAP Server on RHEL-7
2. Samba 4 Primary Domain Controller(PDC)
3. Windows Server 2019 as Client
I am trying to allow login on windows server 2019 with User Account on ...
0
votes
1answer
420 views
OpenLDAP and PHPLDAPAdmin working together on Docker
I try to integrate 2 openldap related repos (osixia/openldap & osixia/phpldapadmin)
I can access https://0.0.0.0:6443/, but I can't log in with (admin, test) credentials.
This is how I run ...
0
votes
1answer
20 views
How can i set my password in OpenLDAP?
I have installed OpenLDAP in 192.168.0.2(centos), and used LDAP Admin to copy People and Group form another OpenLDAP server(192.168.0.1),
enter image description here
People in 192.168.0.1 have ...
0
votes
0answers
59 views
LDAP password comparison SSHA-512 by Vault Server
I'm running a Hashi-Corp Vault server and want to enable LDAP authentification. The passwords are SSHA-512 hased (i.e. {SSHA512}xxxxxx...xxx+ssss)
This works fine with my freeradius but Vault seems ...
0
votes
0answers
13 views
OpenLDAP Ubuntu Web Access not working
Hello Guys this is my first post on this forum...
I am writing this Question because i ran into a problem with my Ubuntu OpenLDAP Server, which i can't fix.
For school i have to install a OpenLDAP ...
0
votes
2answers
28 views
Samba+LDAP - Diagnosing Problems (Access Denied)
I really need some help because I can't identify what's going on... I'm pretty lost here... =|
PROBLEM:
I have a server "server_a" with a directory "group_a_folder" ("/srv/...
1
vote
0answers
35 views
Migrate debian login from ldap to local login
we have a debian stretch machine on which the users login by ldap. Since we want to shut down our ldap server(not used anymore except by this single machine), i have to search for a way to migrate the ...
-3
votes
1answer
51 views
“cat” results in No Such File or Directory
I'm really flying blind here trying to use both Linux and OpenLDAP for the first time ever.
My ultimate goal here is to connect to an OpenLDAP server from within a C# console app and to authenticate ...
0
votes
0answers
56 views
ldap ppolicy module doesn't seem to load
LDAP version:
openldap-QaSHhB/openldap-2.4.42+dfsg/debian
OS: Ubuntu 16.04.6 LTS
Issue:
1.Configuring ppolicy with slapd.conf
Added the following to slapd.conf
include /etc/ldap/...
0
votes
0answers
16 views
Unable to access few tabs in the openLDAP webui
After logging into the openLDAP WebUI, I am unable to access few of the templates, in the webui they are marked with a cross.
How do I enable them?
1
vote
1answer
24 views
OpenLDAP Integration
I have installed an OpenLDAP server on an AWS EC2 Ubuntu 16.04 instance.
It's working fine while my client machine is connected to the internet, but whenever I am disconnecting internet from client ...
0
votes
1answer
43 views
Dovecot - exclude LDAP locked accounts
I have installed Dovecot with LDAP; everything works fine except that the users I attempted to lock using pwdAccountLockedTime are still able to login.
Here is my ldap.conf.ext file:
hosts = myldap
...
1
vote
0answers
95 views
OpenLDAP slapadd on a translucent overlay
I have an OpenLDAP database which seems to have one or two corrupt records (probably from machine crashes while update in process). Anyway, whenever anyone or anything access these records slapd ...
0
votes
1answer
379 views
Why won't LDAP client authenticate users
I have followed instructions here: https://computingforgeeks.com/install-and-configure-openldap-phpldapadmin-on-ubuntu-18-04-lts/
and Added users as per https://computingforgeeks.com/how-to-install-...
0
votes
1answer
292 views
LDAP setup with two DIT
I am having an openLDAP which is having a database say dc=domain1,dc=com.
Now I am trying to add 1 more, dc=domain2,dc=com.
Below are the steps, we did to achieve this,
[root@host user]# service ...
0
votes
1answer
150 views
How to add new Status attribute to LDAP user objects
I am trying to add a status attribute on LDAP, just like Active directory in Windows, so I can enable or disable user using status attribute.
anyone can help me how it can be possible on LDAP
0
votes
1answer
242 views
Require both LDAP authentication *and* ssh auth
I would like to enable the following:
Linux ec2 instances in AWS that perform LDAP authentication of users who have no home directory currently on the box. I have a working openLDAP in AWS for the ...
0
votes
1answer
2k views
Ldap configuration on gitlab error :Could not authenticate you from Ldapmain because “Invalid credentials for username”
I have an issue when I try to connect my LDAP to Gitlab:
Could not authenticate you from Ldapmain because "Invalid credentials for username.
This is my file conf /etc/gitlab/gitlab.rb :
...
0
votes
0answers
1k views
Mapping Client roles of keycloak on LDAP user
Mapping Client roles of keycloak on LDAP user, like assigning realm-management roles. Can we assign realm-management client roles for users imported from LDAP in Keycloak. Changes needed in the realm....
0
votes
1answer
88 views
How to “Require password change at next login” without resetting password
When you reset an user's password in macOS Server.app's Open Directory (I think it's using slapd), you can also check the option Require password change at next login.
The question: can you also ...
0
votes
0answers
18 views
Deny every action on an organisation unit for a group in phpLDAPadmin (LDAP)
I want to deny every access for a group (group trainees like in my picture) to the organisation unit Ulist in my phpLDAPadmin. How can I do it ?
I don't know how to configure a simple access control ...
0
votes
1answer
2k views
openldap TLS failure — ldap_start_tls: Connect error (-11)
From what I can tell it's a certificate verification issue, but I have no idea why.
~ > ldapsearch -x -ZZ -LLL -H ldap://ldap.dark.kow.is -b dc=dark,dc=kow,dc=is
ldap_start_tls: Connect error (-11)...
0
votes
2answers
80 views
LDAP the right choice?
So I'm looking for a solution for ssh key authorisation access to numerous servers, and have been pointed towards using LDAP. I wanted to present the use case and see if LDAP would be applicable and ...
0
votes
1answer
199 views
prioritize LDAP when using passwd and group
I have several servers, one of which, say S1, is used as LDAP server. Other servers are configured to authenticate against the LDAP server.
When a user is added, I always create a unix user on S1, ...
1
vote
1answer
434 views
OpenLDAP's cn=config add separate user for replication of “olcDatabase={0}config,cn=config”
I hope I'm not asking a dumb question. I'm new to creating my own LDAP service.
For my regular mdb database it's easy to add multiple administrators. Since it contains an olcSuffix attribute it's ...
1
vote
0answers
513 views
How to Set Mac OS X LDAP to Use Remote Home Folder
I have a MacOSX El Capitan machine that uses LDAP for authentication.
This part already works and I can log onto the machine with LDAP accounts.
I set the NFSHomeDirectory as #/Users/$uid$ which ...
2
votes
0answers
468 views
OpenLDAP with TLS AD backend
I'm currently using OpenLDAP as a read-only proxy for an internal Active Directory domain. My main issue is the connection works fine between AD DC and proxy without SSL, it doesn't work with it.
My ...
1
vote
1answer
995 views
“Error(s) encountered” While Using ldapscripts
Below, I show my OpenLDAP configuration. This is a fresh OpenLDAP installation on a fresh Debian Stretch installation.
I am unable to use ldapscripts. Regardless what I do, I get the errors shown at ...
0
votes
1answer
5k views
ldap_modify: No such object (32)
I installed OpenLDAP on Centos 7 and tried to create the admin user. But I got some error on ldap_modify. Below are my steps:
Install OpenLDAP and start it:
sudo yum install openldap openldap-...
0
votes
1answer
1k views
slappasswd: symbol lookup error undefined symbol ber_sockbuf_io_udp
I have CentOS 7 (3.10.0-693.el7.x86_64) from Pivotal Greenplum Sandbox VM.
I tried to install OpenLDAP:
sudo yum install openldap openldap-servers openldap-clients -y
But when I run slappasswd -s ...
0
votes
1answer
204 views
How can I host a file on a LDAP server, specifically Apache Directory Studio?
I am running Apache Directory Studio on mac os. I am a LDAP rookie.
I can't figure out how to host a file on the LDAP server so that when our java service connects to:
ldap://localhost:12321/cn=crl1,...
0
votes
1answer
255 views
OpenLDAP TLS vs SSL
I'm experimenting with OpenLDAP replication. I'm using a Docker image:
https://github.com/osixia/docker-openldap
to spawn a couple of containers that are talking to each other. The default ...
0
votes
1answer
155 views
Single-sign-on in DMZ / OpenLDAP
we have a dmz with several https-based services, which users from internal network use although as users from outside.
To ensure authentification with the active directory user-credentials, we set up ...
0
votes
1answer
287 views
openldap — exclude specific attributes from replication
I have two openldap servers replicating cn=config with syncrepl in a provider-consumer relationship. There are a few attributes that I would like to exclude from replication.
I see that syncrepl has ...
0
votes
1answer
7k views
Get all Ldap User list on client with (getent passwd) command
I have open ldap server and client both on centos6. I need all the list of open ldap user on client side in (/etc/passwd)
1
vote
0answers
699 views
FusionDirectory: OpenLDAP with SSL or TLS
I have looked around and found a lot online about how to set up TLS for OpenLDAP. The basic idea is adding the olcTLS items to include cert, key, cacert in cn=config.
However, with FusionDirectory, ...
1
vote
0answers
1k views
Trying to configure openldap TLSCipherSuite
I have an openldap server, and I'm trying to tune my TLSCipherSuite settings to be as secure as I can have them.
Please do not critique my actual security settings. Please just help me understand ...
2
votes
1answer
146 views
Struggling with OpenLDAP configuration
I've been configurating a LDAP server on a linux instance using AWS EC2.
Up to now, I successfully set up LDAP and phpLDAPadmin to work together.
I've created Users and Groups "Organisation Units". I'...
0
votes
1answer
2k views
Impossible to connect with ldap
I have an open ldap server :
IP : 192.168.0.70 (dell)
DIT :
(seen through ldapphpadmin)
And for patricia duchesne:
dn cn=patricia duchesne,ou=users,dc=memorandum,dc=pro
cn patricia duchesne
...
0
votes
1answer
447 views
How to authenticate linux users against two different directories simultaneously?
I have a few Linux servers using SSSD integrated with Microsoft AD to authenticate AD users.
AD groups are managed by a different department and I'd like to set up another directory to manage my own ...
2
votes
1answer
3k views
Authentication against LDAP on Apache fails with password mismatch
I want to accomplish LDAP authentication on my Linux machine, but can't get it working. Currently, I get the following error in the Apache log: AH01617: user john.doe: authentication failure for "/": ...
0
votes
1answer
333 views
OpenLDAP+Kerberos nightmare
So for the past few weeks I've been configuring an SSO solution for our small company.
Right now I have a server running OpenLDAP 2.4.4 with kerberos (openldap backend).
Users can login and get a ...
0
votes
1answer
2k views
“ShadowLastChange” attribute doesn't work
I installed the following Openldap version on Centos 7 Server:
ldapsearch: @(#) $OpenLDAP: ldapsearch 2.4.40 (Mar 31 2016 15:24:47) $
mockbuild@worker1.bsys.centos.org:/builddir/build/BUILD/...
1
vote
1answer
1k views
OpenLDAP: Converting flat file (slapd.conf) to OLC (slapd.d)…can't access cn=config
I'm attempting to set up OpenLDAP. I was having trouble with the OLC config option, so I went with the slapd.conf style input as I'm a complete noob at LDAP and it was easier to understand.
I now ...
1
vote
0answers
468 views
Import schema into Samba/AD domain?
I have set up a Samba4 domain controller to serve as my Active Directory PDC. It works flawlessly in that respect. My next challenge is to install FusionDirectory to make managing it easier and to ...
