Questions tagged [openldap]
OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project.
106
questions
1
vote
0
answers
1k
views
FusionDirectory: OpenLDAP with SSL or TLS
I have looked around and found a lot online about how to set up TLS for OpenLDAP. The basic idea is adding the olcTLS items to include cert, key, cacert in cn=config.
However, with FusionDirectory, ...
- 129
3
votes
0
answers
2k
views
Trying to configure openldap TLSCipherSuite
I have an openldap server, and I'm trying to tune my TLSCipherSuite settings to be as secure as I can have them.
Please do not critique my actual security settings. Please just help me understand ...
- 1,266
2
votes
1
answer
206
views
Struggling with OpenLDAP configuration
I've been configurating a LDAP server on a linux instance using AWS EC2.
Up to now, I successfully set up LDAP and phpLDAPadmin to work together.
I've created Users and Groups "Organisation Units". I'...
- 135
0
votes
1
answer
4k
views
Impossible to connect with ldap
I have an open ldap server :
IP : 192.168.0.70 (dell)
DIT :
(seen through ldapphpadmin)
And for patricia duchesne:
dn cn=patricia duchesne,ou=users,dc=memorandum,dc=pro
cn patricia duchesne
...
- 279
0
votes
1
answer
522
views
How to authenticate linux users against two different directories simultaneously?
I have a few Linux servers using SSSD integrated with Microsoft AD to authenticate AD users.
AD groups are managed by a different department and I'd like to set up another directory to manage my own ...
- 21
3
votes
1
answer
6k
views
Authentication against LDAP on Apache fails with password mismatch
I want to accomplish LDAP authentication on my Linux machine, but can't get it working. Currently, I get the following error in the Apache log: AH01617: user john.doe: authentication failure for "/": ...
- 31
0
votes
1
answer
545
views
OpenLDAP+Kerberos nightmare
So for the past few weeks I've been configuring an SSO solution for our small company.
Right now I have a server running OpenLDAP 2.4.4 with kerberos (openldap backend).
Users can login and get a ...
- 182
0
votes
1
answer
3k
views
"ShadowLastChange" attribute doesn't work
I installed the following Openldap version on Centos 7 Server:
ldapsearch: @(#) $OpenLDAP: ldapsearch 2.4.40 (Mar 31 2016 15:24:47) $
[email protected]:/builddir/build/BUILD/...
- 9
2
votes
1
answer
2k
views
OpenLDAP: Converting flat file (slapd.conf) to OLC (slapd.d)...can't access cn=config
I'm attempting to set up OpenLDAP. I was having trouble with the OLC config option, so I went with the slapd.conf style input as I'm a complete noob at LDAP and it was easier to understand.
I now ...
- 193
1
vote
0
answers
656
views
Import schema into Samba/AD domain?
I have set up a Samba4 domain controller to serve as my Active Directory PDC. It works flawlessly in that respect. My next challenge is to install FusionDirectory to make managing it easier and to ...
- 1,007
5
votes
2
answers
11k
views
No write access to parent
I am facing an issue chen trying to setup an openldap server with chef.
Configuration:
Ubuntu 15.04
OpenLdap 2.4.31
Chef/OpenLdap 2.7.1
For information, when I run dkpg-reconfigure ...
- 151
1
vote
1
answer
631
views
OpenLDAP : authentication through "domain\username" or "username@domain"
Is there a way to configure OpenLDAP to use authentication through "domain\username" or "username@domain" instead of (or in addition to) by DN ?
I use openLDAP version 2.4.40.
1
vote
0
answers
3k
views
OpenLDAP TLS negotiation failure ldap_start_tls: Connect error (-11) additional info: A TLS packet with unexpected length was received
I have tried to configure Openldap with TLS. I have an TLS certificates and configured with .ldif file and changed necessary configuration in ldap.conf file. I am using ubuntu 14.04 LTS operating ...
- 21
0
votes
1
answer
1k
views
How do I remove a DIT from an OpenLDAP server?
I have a need to remove a DIT from an OpenLDAP v2.4 installation.
Creating a DIT is documented at http://www.openldap.org/doc/admin24/dbtools.html, however removing/deleting the DIT is undocumented.
...
- 581
0
votes
0
answers
2k
views
OpenLDAP and pGina vs Active Directory (Using Samba4 Domain Controller)
Note: I know there are some questions and questions talking about similar topic, but there were all a couple of years old, therefore I prefered to mention my exact situation to get the most proper ...
- 1,325
1
vote
1
answer
4k
views
Using Samba4 with OpenLDAP on the same server to authenticate Windows clients accounts
I already have OpenLDAP directory with some services doing the authentication against it (OpenVPN, Jabber, Freeradius, redmine, etc...).
And What I still need to do is to make my server a domain ...
- 1,325
0
votes
1
answer
3k
views
Openldap: how to add an acl for cn=config starting by slapd.conf?
I usually configure from 0 openldap servers
using slapd.conf and then converting to ldif
slaptest -f /etc/openldap/slapd.conf -F /etc/slapd.d
Works fine,but i want to add an acl wich must result ...
- 348
1
vote
1
answer
1k
views
Restricting ssh access to server within a kerberos/ldap infrastructure
I have a MIT-Kerberos / OpenLDAP infrastructure. I want to limit the ssh-access for my users, so that only members of a specific group are allowed to ssh to my servers.
When I just had OpenLDAP ...
- 13
1
vote
1
answer
235
views
LDAP - PAM Home Directory Incorrect
I have OpenLDAP setup on Centos 6. LDAP has my account homeDirectory as /home/me but a server that I'm logging into is trying to create my home directory at /users/me.
How can I trace down why the ...
- 433
-1
votes
1
answer
652
views
Use Jenkins plugin in tuleap when Jenkins use LDAP Authentication
I want to use Tuleap(Jenkins/hudson plugin in tuleap) and Jenkins with ldap Authentication
by default when i disable Jenkins Authentication every thing work and integration is ok but
when i activate ...
- 1
0
votes
1
answer
351
views
Owncloud 8 and OpenLDAP disable useMemberOfToDetectMembership
I have set up a OpenLDAP server and OwnCloud 8 on raspbian.
LDAP itself and OwnCloud are working, but when I try to login to OwnCloud via LDAP I get the following errors:
Array to string conversion ...
- 121
0
votes
1
answer
163
views
How do I add custom SYNTAX to OpenLDAP?
When defining an attribute in OpenLDAP, you have to provide a SYNTAX OID so OpenLDAP knows what kind of string it can accept for that attribute.
How can I create a new SYNTAX for OpenLDAP?
- 1,412
2
votes
1
answer
4k
views
OpenLDAP - possible to search without specifying base?
I am having some issues with OpenLDAP and Spring security, where the latter does a search with the whole path in dn (filter), and an empty base. OpenLDAP does not like this, and the query fails. The ...
- 533
-1
votes
1
answer
870
views
what is the right ldapsearch version for my linux red-hat machine
I am little confuse about the following
I want to install the binary ldapsearch tool on my linux machine
In order to use this tool to test LDAP connection on my linux ( linux version 5.8 , i386 ) ...
- 489
1
vote
0
answers
296
views
LDAP AUTHENTICATION UBUNTU
I have setup an ldap server on Ubuntu,
Configuration steps:
sudo apt-get install slapd ldap-utils
Reconfigure LDAP
sudo dpkg-reconfigure slapd
DNS name
example.com
Install PHPldapadmin
sudo ...
- 11
0
votes
1
answer
67
views
Search inside LDAP Server
I was wondering if someone know, when i search an entity over the Ldap server, would i get also it's sub folders and the data inside.
for example i have the following:
*dn:EPC-SubscriberGroupId=...
- 101
1
vote
0
answers
41
views
genet group doesn't show the user in the ldap directory
I am running openldap2-2.4.26-0.24.36 server.
ON the machine, I use ldapmodify to add a user to the group.
Query with ldapsearch can show the correct user being added.
However getent group $...
- 111
2
votes
0
answers
305
views
How can we cache ldap login credentials in mac using opendirectory
In mac using Active Directory we can cache ldap login credentials by checking create mobile account at login. Is there any other way to do same thing in openldap. Please some one share information ...
- 190
0
votes
1
answer
248
views
OpenLDAP parametrized replication of a subset
I have a huge LDAP database and I'd like to make a replica that contains only a subset of that database. My objective is to replicate a few groups, and all members within that group.
So far, I'm ...
-1
votes
1
answer
3k
views
ldap user dose not exist in centos 6.5
Hope everyone doing good.
Let me come to point, i have setup-ed a LDAP server and client machines
Server works perfect, while make a search from client machine it too get the Query from LDAP server, ...
- 119
0
votes
0
answers
1k
views
ACI openldap and phpldapadmin
I have an openldap-2.4.23 working in a debian system. I use phpldapadmin to access the schema and manage it.
I have this schema:
o=us
-cn=admin,o=us
-dc=com,o=us
--dc=example,dc=com,o=us
---cn=...
- 1
1
vote
1
answer
2k
views
TLS negotiation failed on ldaps:// - sslv3 alert bad record mac
We are facing an issue in one of our openldap environments, while enabling secure queries via ldaps:// our integration environment keeps returning the following error to out ldapsearch command:
...
- 11
0
votes
1
answer
78
views
Configuration management and control for OpenLDAP
I have an OpenLDAP server set up with LDIF/OLC configuration (all configuration is done on-line).
What are the best practices to allow versioning this configuration àla git?
- 1,816
0
votes
1
answer
290
views
Can I learn LDAP online? [closed]
Does anyone know of any good online material to learn about LDAP? I'm not looking for how to implement it. I'd like to learn about the protocol itself in depth rather than just a conceptual ...
10
votes
1
answer
10k
views
What does ldapsearch response mean?
I created a ldap directory with a number of users and groups. When I query this directory from a remote server with:
ldapsearch -H ldap://ldap.myserver.net/ -x -vvvvvvv -b dc=myserver,dc=net -D cn=...
- 318
11
votes
1
answer
16k
views
How do I query the available base DNs in an OpenLDAP server?
If I have multiple branches in my directory (e.g. dc=me,dc=org; dc=you,dc=org; dc=them,dc=org) then how can I query the directory to give me a list of these available base DNs?
Is this a question of ...
- 175
1
vote
1
answer
6k
views
How do you add an ldap group to a system user?
The question is basically the same as : serverfault
I am unable to add a ldap group to a system user. This does not work :
usermod -a -G ldapGroup systemUser
The same with gpasswd command.
The ...
- 15
0
votes
1
answer
1k
views
How do you link ldap users with svn?
I need to sync ldap users with the svn service configured on the RHEL 6.2 server I am using. Additionnaly it would be cool to be abble to control who can commit.
The ldap is working and users and ...
- 15
0
votes
1
answer
2k
views
Can't login with KDM and SSSD but the login works fine from the console
I have LDAP authentication set up with SSSD and I can login fine through console and ssh. However when I try to login through KDM it just says authentication failure... More specifically:
Jan 9 10:...
- 99
0
votes
1
answer
1k
views
User privileges LDAP scheme
I needed to create a user (it's already created) in my LDAP schema and want to give privileges of reading/writing to that user like if they were the admin but just for a specific subtree.
The thing ...
- 1
2
votes
2
answers
2k
views
OpenLDAP: slaptest not parsing variable in config
When running the command:
slaptest -f slapd.conf
Against my slapd config file I'm getting this error message
51dfbb3e lt_dlopenext failed: (back_@BACKEND@) file not found
slaptest: bad ...
- 121
2
votes
2
answers
670
views
cannot run tgz file in windows 7 virtualbox
I'm doing a project for school, and I wanted to create an active directory domain on Windows 7 through rktools and other files, but nothing worked, so i'm trying openLDAP. Now, I've downloaded the ...
- 39
1
vote
1
answer
2k
views
how to use MD5 for authentication in OpenLDAP?
I've installed OpenLDAP in AWS, everything was working as expected until I tried to authenticate a user, it asks me for the password and when I provide it, it says Permission denied, please try again. ...
- 904
0
votes
1
answer
2k
views
How to setup an LDAP server in local LAN to create common address book for OSX and Windows computers?
We're using a PC and a MacBook at home which are connected via a local network. We'd like to have a "master" address book for both computer, so that when contact information is changed on one of the ...
- 1,878
2
votes
0
answers
391
views
Authenticate Mac OS X Mountain Lion against EL6 OpenLDAP only succeeds for ssh
I'm having an issue with mountain lion authenticating against a CentOS 6 openldap/krbkdc server. I can ssh into the macs in question and I am issued a ticket and all autofs mounts (like the homedir) ...
- 293
1
vote
0
answers
2k
views
How to uninstall openldap?
How can i uninstall OPENldap from linux? I had problems with the initial configuration of openldap with the domain or how can i change the configuration of the ldap domain?
- 21
0
votes
1
answer
1k
views
Mac OS X behind OpenLDAP and Samba
I have been battling for a week now to get my Mac (Mountain Lion) to authenticate on my home network's OpenLDAP and Samba. From several sources, like the Ubuntu community docs, and other blogs, and ...
- 311
1
vote
1
answer
58
views
Is it possible to store Hashed data in a different field than userPassword in LDAP
I've been asked to store hashed data in a LDAP server. Putting hashed passwords is easy but I'm not sure if LDAP allows to store data like email hashed or even encrypted.
Creating a LDIF file with a ...
- 111
0
votes
1
answer
1k
views
OpenLDAP slapd.conf substitutions - Ubuntu
I was trying to configure the default directory tree on a clean OpenLDAP install on Ubuntu (apt-get install slapd).
I found /usr/share/slapd/slapd.conf and was going to change the suffix setting, ...
- 561
2
votes
1
answer
165
views
Some problems adding data to ldap
I'm trying to add some data to the ldap directory, but i get the following error.
sudo slapadd < ldapdata.txt
slap_sasl_init: auxprop add plugin failed
slapadd: slap_init failed!
Where is the ...
- 23