Skip to main content

Questions tagged [openldap]

For questions about OpenLDAP Software, an open source implementation of the Lightweight Directory Access Protocol (LDAP).

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

How to configure access to `olcPPolicyDefault`?

I'm writing a utility (in Perl) that needs access to attribute olcPPolicyDefault that defines the DN of the default password policy in OpenLDAP. As the utility should not use the Admin or cn=config ...
U. Windl's user avatar
  • 1,493
0 votes
1 answer
218 views

"no such user" - LDAP authentication with sssd

I am struggling with making sssd use LDAP users to login on my Linux-Server (Oracle Linux 8.9, basically identical to RHEL, but free). Goal Using the users (e.g. "John") existing on the LDAP-...
mikro_do's user avatar
1 vote
0 answers
20 views

ldapsearch with mTLS (and selective curves)

I have to request a LDAP-server. It is strictly mutual-TLS secured. If I try TLS with openssl it works. But I have to provide -cert, -key and -curves to openssl s_client to make it work. Without ...
chris01's user avatar
  • 615
1 vote
1 answer
201 views

LDAP migrate from BDB to MDB version 2.4 to 2.6

I have ran into two problems with a ldap migration. As i understand it BDB is not supported on openldap 2.6 so i should move to mdb on my working 2.4 openldap and then migrate to 2.6 (on a new server) ...
a.smith's user avatar
  • 725
0 votes
0 answers
14 views

shibboleth 5 openldap login

My Environment: Shibboleth 5 IdP configured to run inside Jetty 11 servlet (no apache) openldap (on same server) mod_auth_mellon SP on various dev servers I have gotten the IdP itself working. I ...
Christopher Biessener's user avatar
2 votes
0 answers
16 views

add LDAP slave to N-way multimaster system

I have 2 Ubuntu 22.04 LTS servers running Openldap 2.5 in N-way multimaster mode. It works great and has for several years. Now I'd like to add a slave to this system. The two multimaster nodes do ...
Dave Spear's user avatar
0 votes
1 answer
60 views

Understanding risks of setting nscd positive-time-to-live to a longer duration

as I mentioned in another thread, I have an LDAP system supporting two dozen Linux servers. When LDAP server is down for various reasons (firewall rule changes, power outage etc), my rest of the ...
FangQ's user avatar
  • 123
0 votes
0 answers
13 views

OpenLDAP __db.00# file permission reset to root

I have an openLDAP installed on my CentOS 7 VM. The user that is running the openLDAP is ldap:ldap. If the server has an unexpected shutdown, for whatever reason, files listed below get reset from the ...
Stultusaur's user avatar
0 votes
0 answers
462 views

How to implement MemberOf overlay in OpenLDAP?

I need a step by step guide from start to end on how to implement the memberOf overlay in OpenLDAP (version 2.5.13). I have read many guides including the official one. Unfortunately none of them work....
BloodhunterD's user avatar
0 votes
0 answers
28 views

Openldap: is possible to delete this entry?

I have created this entry # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. # CRC32 2c768a98 dn: cn=module{2} objectClass: olcModuleList cn: module{2} olcModulePath: /usr/lib64/openldap ...
elbarna's user avatar
  • 12.8k
0 votes
0 answers
33 views

Missing ldapPublicKey on bitname/openldap

I have an openldap server running from truecharts/openldap, there I have ldapPublicKey: ldapsearch -H ldap://10.1.5.5:389 -x -s base -b "cn=subschema" objectclasses|grep -i ldapPublicKey ...
thoth's user avatar
  • 99
2 votes
1 answer
155 views

Can not administering kerberos for a long time brick it?

I have this strange issue where a kerberos/openldap environment has gotten bricked. I can't add new users, computers, or other things to it, as everything I try results in various variations on ...
aphid's user avatar
  • 189
1 vote
0 answers
158 views

ldapsearch silently fails to connect to an AD LDAPS due to non-authentication of the AD LDAPS server

I have a certificate chain that is coming from a big company AD LDAP, i can check as follows : $ openssl rehash tmp_cert_dir/ $ echo | openssl s_client -showcerts -connect 10.188.1.101:636 2</dev/...
MUY Belgium's user avatar
  • 1,264
0 votes
1 answer
274 views

Red Hat Directory Server and LDAP

So as the title suggests I have a Red Hat Directory Server with OpenLDAP installed. I also have Windows Active Directory (mixed network). I want to script creating new users on the Red Hat Side. Now ...
Neo Trin's user avatar
0 votes
1 answer
157 views

How does kpasswd change password?

When you change password via kpasswd, does it change your password that is stored on the Kerberos server, or does it change your password that is stored in the OpenLDAP server?
JLC's user avatar
  • 317
0 votes
1 answer
40 views

Why does GNU sed prepend/append non matching line content to the command executed with the 'e' modifier

The following, which replaces textual user and group names with UIDs and GIDs, works correctly: echo "uidNumber=root" | sed -E 's/((u|g)idNumber=)([^,+]+)/echo -n \1; id -\2 \3/eg' uidNumber=...
Arran Cudbard-Bell's user avatar
0 votes
0 answers
1k views

How to configure OpenLDAP with SSL as proxy for Active Directory with LDIF method

EDITED: As it seems nobody seems to really know how OpenLDAP works (beside their developers), I finally dropped it in favor of GLAuth, which is quite easier to set up, with a simple configuration file....
malevolent's user avatar
0 votes
1 answer
548 views

Cant login on PhpLdapAdmin using admin user

im trying to configure an LDAP using slapd and PhpLdapAdmin using the non-official version from github on my Ubuntu server. the slapd and phpldapadmin works perfectly but i have a problem while login ...
LM.'s user avatar
  • 3
0 votes
1 answer
2k views

Getting "ldap_add: Server is unwilling to perform (53) additional info: no global superior knowledge" when trying to add new objectClass to openLDAP

I have created new schema which looks like this attributetype ( 2.25.3236588 NAME 'x-candidateNumber' DESC 'Candidate number' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4....
jnd's user avatar
  • 3
0 votes
1 answer
1k views

How to set loglevel in slapd.d?

I have set up openLDAP 2.4 on Debian 11, and I want to change a few parameters, like the loglevel and logfile, which appears to be really simple: # man slapd.conf SLAPD.CONF(5) ...
j4nd3r53n's user avatar
  • 717
1 vote
0 answers
174 views

New LDAP user can't connect to [homes], but older one can?

My system: # cat /etc/*release* PRETTY_NAME="Debian GNU/Linux 11 (bullseye)" NAME="Debian GNU/Linux" VERSION_ID="11" VERSION="11 (bullseye)" VERSION_CODENAME=...
j4nd3r53n's user avatar
  • 717
1 vote
0 answers
65 views

LDAP authentication: why are users still visible on clients after deleting on server?

I have setup OpenLDAP on a Debian 11 server, and configured a number of clients, mostly on Ubuntu 20.04 or 22.04. There are some things I don't understand - well, many, but what I'm concerned about ...
j4nd3r53n's user avatar
  • 717
3 votes
1 answer
1k views

Set a service to run as account in LDAP with credentials

I feel like I am overlooking something obvious. My goal is to run a systemd service with an LDAP service account at system startup. THAT WAY, if I disable the account in LDAP, then the next time the ...
jcolebrand's user avatar
0 votes
0 answers
485 views

What is the best way to make LDAP based TOTP only required in some cases?

I have a 2FA setup on my network for certain kinds of authentication, but not others. The way it currently works is a combination of pam_ldap for passwords, and pam_oath for TOTP. PAM is configured in ...
stribika's user avatar
  • 5,514
1 vote
1 answer
255 views

LDAP Account Manager: Default profile?

I have installed OpenLDAP on Debian 11 as well as LDAP Account Manager 8.2, which seems to work well, but I have a question: On my login page, it says No default profile set. Please set it in the ...
j4nd3r53n's user avatar
  • 717
0 votes
1 answer
505 views

how to re-install LDAP client in Debian?

I have a system with Debian 11, and want to experiment with setting it up as an LDAP client for user authentication, following this: https://linuxhint.com/configure-ldap-client-debian/. However, about ...
j4nd3r53n's user avatar
  • 717
0 votes
1 answer
823 views

File server for Windows & Linux clients with LDAP authentication

I am facing an issue with implementation planning, currently using LDAP server & NFS clients are mixed of windows & Linux, I need to implement a file sharing solution that will cater both ...
csx4's user avatar
  • 371
1 vote
1 answer
218 views

How to add utility ldapsearch to yocto image?

I have successfully added the recipe openldap to my yocto-base Linux distribution, by the instruction: IMAGE_INSTALL += "openldap" After that I've created a path/to/my-layer/recipes-support/...
User051209's user avatar
1 vote
1 answer
173 views

What LDAP server can I install only for test LDAP authentication?

I need to do practice with LDAP so I think that is a good idea to install a LDAP server only for do some test. For client side I'm using a LInux Mint distribution and I have installed all the software ...
User051209's user avatar
0 votes
1 answer
2k views

Installing OpenLDAP on RHEL 8 -- slapd.pid problem

I have compiled the current version of OpenLDAP on a fresh RHEL 8 instance and am setting it up with a signed SSL certificate. When I start slapd, I get unable to open pid file "/var/run/openldap/...
Chanel's user avatar
  • 99
0 votes
1 answer
1k views

Moving OpenLDAP to new server -- getting olcBackend error

I'm finally moving from RHEL 7 to 8. I have a new 8.6 installation and I've compiled OpenLDAP 2.5.13 and done the basic setup. As I'm moving from an existing OpenLDAP instance, I exported my LDAP ...
Chanel's user avatar
  • 99
0 votes
0 answers
737 views

LDAP Entry-Adding/Installation Error "ldap_bind: Invalid credentials (49)"

I am new to LDAP and am trying to install it for a computer cluster. I have been going through this technical guide https://www.openldap.org/doc/admin26/quickstart.html. I have reached step 11 and am ...
Nidhish Sharma's user avatar
0 votes
1 answer
313 views

Trying to install OpenLDAP with TLS

I have OpenLDAP set up with a GoDaddy SSL certificate installed. A non-secure LDAP search works fine. But when I do this: ldapsearch -x -b dc=yln,dc=info -Z, I get this: ldap_start_tls: Connect error (...
Chanel's user avatar
  • 99
0 votes
1 answer
498 views

Supplying multiple names in a single olcRefintAttribute value is unsupported and will be disallowed in a future version

Since a few time with OpenLDAP 2.6.2 on AlpineLinux 3.15, running the slapcat command generates this warning: Supplying multiple names in a single olcRefintAttribute value is unsupported and will be ...
azmeuk's user avatar
  • 139
8 votes
2 answers
2k views

Why does LibreOffice (at least as packaged for Debian) depend on libldap?

The Debian package libreoffice-core (which is described in the Debian repositories as containing " the architecture-dependent core files of LibreOffice," and which is itself a dependency for ...
Chris Henry's user avatar
1 vote
0 answers
81 views

Freebsd Common User Access Management (tried with OpenLDAP, not working) (Open to other suggestions)

What I have are a large number of servers (all freebsd). I need to build a common user access management for it (as new developers are joining, want to add their access details on 1 server, and no ...
Gaurav Bansal's user avatar
0 votes
1 answer
61 views

smbldap-useradd: what are the different addresses for?

smbldap-useradd has some parameters to specify addresses for the user: # smbldap-useradd --help | grep -i addr -M e-mail address (comma separated) -O localMailAddress (comma separated) -T ...
Joril's user avatar
  • 565
2 votes
1 answer
70 views

LDAP client mixing up credentials

I have installed openLDAP using this https://www.techrepublic.com/article/how-to-install-openldap-and-phpldapadmin-on-ubuntu-server-20-04/on a Ubuntu 20.04 Serverand Ubuntu 20.04 Desktop has a client ...
BrianGNU's user avatar
0 votes
1 answer
214 views

baseDN on ldapsearch vs ldapadd

I am learning to use OpenLDAP and I can not understand why you need to specify a base dn to search in the ldap tree but you do not need it in order to add stuff ldapsearch -x -b "dc=foo,dc=local&...
ptor's user avatar
  • 21
0 votes
1 answer
843 views

How it comes that ldapsearch output can't be piped

ldapsearch always outputs an authentication message with every query at the beginning: SASL/GSS-SPNEGO authentication started SASL username: [email protected] SASL SSF: 56 SASL data security ...
Stefan's user avatar
  • 1
0 votes
1 answer
476 views

Weird linking issue with libldap using cmake

I am trying to build SimGear from the FlightGear project using the download_an_compile.sh script (which uses CMake to build the binaries). The build went fine so far, but when the script tried linking ...
TheEagle's user avatar
0 votes
1 answer
593 views

symbol lookup error: ldapdelete: undefined symbol: ldap_pvt_conf_option

I'am trying to delete an entry from my LDAP database and it works fine, but for some reason after Linux update I am getting the below error; symbol lookup error: ldapdelete: undefined symbol: ...
tarek's user avatar
  • 1
0 votes
1 answer
319 views

Where to find reference of all/common ObjectClasses of ldap using their English names not OID numbers?

I know the following questions could be naive, but I an ldap beginner and tried searching but i didn't find what am looking for exactly I am trying to get a reference about ldap object classes and ...
AbdAllah Talaat's user avatar
0 votes
1 answer
455 views

I have Some Problem retrieving information from ldap

I have installed openldap from symas on centos 8, I modified /etc/openldap/slapd.d/cn=config/olcDatabase={2}mdb.ldif by adding the following olcRootPW: {SSHA}......etc line to make a password ...
AbdAllah Talaat's user avatar
0 votes
0 answers
174 views

Does google authenticator supports time step more than 30sec?

I have generated a QR from here https://freeotp.github.io/qrcode.html defining a time period of 60sec and while scanning QR-Code through google authenticator app it uses the default time step of only ...
BDN's user avatar
  • 341
1 vote
0 answers
478 views

CentOS 8, SSSD, LDAP and yubikey PIV authentication problem

Trying to set up the following Authentication with Yubikey (PIV) with LDAP. Already got the authentication with Yubikey and local users working with SSSD. Also got the LDAP working with SSSD but not ...
C. Hermansson's user avatar
3 votes
1 answer
1k views

openldap: is possible to force the starttls from a client?

I don't explain how to configure tls-ldap on server, on google there is a lot of stuff to configure it(create tls certs, create ldif, import ldif, try ldapsearch -ZZ, etc..). Is also easy to force the ...
elbarna's user avatar
  • 12.8k
0 votes
1 answer
335 views

SOGo use users name for identity from LDAP

I would like to make SOGo use the users full name instead of the username as the identity. User authentication is done via the pam-ldapd module through a remote server. But somehow I can't figure out, ...
Richard Rosner's user avatar
1 vote
1 answer
676 views

Sync OpenLDAP - Active Directory

Today, we have an OpenLDAP that works very well. We would like to create a Domain & AD (Windows) that would be populated and synchronized by OpenLDAP. I could read some topics for reverse ...
Aldamova's user avatar
0 votes
2 answers
322 views

Restrict ldap and linux users to only use ssh?

I have a RHEL 7 server that we are using as a jumpbox to authenticate to all servers. Typically users will login to jumpserver(rhel 7) from local machine and then login to their respective virtual ...
kick07's user avatar
  • 101

1
2 3 4 5