Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openldap]

[OpenLDAP Software](http://www.openldap.org/software/) is an [open source](http://www.opensource.org/) implementation of the Lightweight Directory Access Protocol (LDAP).

0
votes
0answers
11 views

Failed to start Slapd service [on hold]

Just trying to install openLDAP server , while starting the SLAPD service shows below error. service slapd status Redirecting to /bin/systemctl status slapd.service ● slapd.service - OpenLDAP Server ...
0
votes
0answers
10 views

Delete a value of an attribute in different cn

I have the following config in ldap Inside each of the files I have the attribute st with value = .... I want to remove all st attributes that contain the value ECN-9427-10 and ECT-9427-10 using ...
0
votes
1answer
19 views

Use LDAP Server to log into itself

I have an LDAP server (running 18.04LTS) and a bunch of Linux Ubuntu clients. LDAP works fine and we're just using it to authenticate a couple users. My question is as follows. I'd like to use the ...
-1
votes
2answers
57 views

Start from scratch LDAP server CentOS

I am trying to set up a LDAP authentication server but I have messed too much with it, and I would like to start from scratch its configuration without reinstalling the OS because I have other stuff ...
0
votes
1answer
11 views

LDAP per-user overrides

I'm using openldap + nslcd to connect to a LDAP server for authentication of some users (these users would want their passwords and most of their configuration shared over many devices). I don't ...
0
votes
0answers
31 views

Allow sudo su - only to one user

Allow sudo su - on visudo only to one or some users of a group that access by ldap For example, I have visually defined the following: % dev ALL = (ALL) ALL What I need is that only some users or ...
0
votes
0answers
12 views

Can't connect to OpenLDAP

i have installed iRedMail with OpenLDAP managing the Mail Accounts. So far that works. Now I wan't to connect other applications to that LDAP and I'm trying to use a LDAP Explorer "LDAP Admin" for ...
2
votes
2answers
58 views

Set $PATH as OpenLDAP attribute

I need to set $PATH for OpenLDAP users (CentOS6/7). Not in .profile, not in .bashrc on client machine, but as attribute in LDAP on the LDAP server so it is set whenever the user logs onto any host via ...
2
votes
0answers
40 views

How to tell Kerberos where to find the root certificate for LDAP with TLS?

I run two Debian servers with MIT Kerberos and OpenLDAP backend. I would like to enforce TLS and encrypt replication. So I created and added certificates… dn: cn=config changetype: modify add: ...
2
votes
1answer
947 views

ldap users unable to ssh to the server

I have configured ldap local server running centos 7, using this article: https://www.itzgeek.com/how-tos/linux/centos-how-tos/step-step-openldap-server-configuration-centos-7-rhel-7.html. Now my ...
1
vote
1answer
136 views

How to determine cipher in use when using ldapsearch?

I'm trying to debug an LDAPS connection from Ubuntu 14.04 to some sort of VIP. There are 6 nodes behind the VIP. The connection only succeeds "sometimes". A wireshark log shows the failing connections ...
2
votes
1answer
80 views

openLDAP won't start after including second schema

I have a Mac I have installed openLDAP on (using Macports). I have gotten the system up and am able to create objects. The only schema I have configured in the slapd.conf is core.schema. I am ...
0
votes
1answer
336 views

How to decode base64 text in ldif file in Linux?

I need to decode base64 embedded in ldif (openldap) backups. I found here a way to join lines starting with a blank. Then, based on this question about "How to decode base64 text in xml file in ...
1
vote
1answer
151 views

ssh using OpenLDAP (LDAP) credencials

I have a corporate network with an OpenLDAP installed and functional. I can log in a Linux server in this network using ssh with my profile (user) that is in OpenLDAP. I created a new user with ...
0
votes
1answer
321 views

LDAP ACL to restrict user to only reading their own user attrs

I want to prevent users from accessing anything other than their own data. I've tried implementing the following simple acl (ldif): dn: olcDatabase={1}mdb,cn=config olcAccess: {0}to attrs=...
2
votes
2answers
623 views

OpenLDAP: Deleted user is still listed in the group

I'm currently doing openldap via command line. I added user John and added group devgroup, and I assigned John into devgroup group. When I deleted a user(John) via command line ldapdelete -Y EXTERNAL ...
0
votes
0answers
418 views

Automount LDAP home folders in client machines

I have created couple of users on my ldap, and setup a couple of ubuntu ldap client machines, where users can login with their accounts. I now want to share their home folders and make it centralised ...
0
votes
1answer
411 views

How to create a single Authentication point with multiple LDAP servers?

I'm currently into a process of creating a central service system from where users can connect to VMs. My goal with this is to have a single point of authentication for all possible users. The issue ...
0
votes
2answers
1k views

openLDAP bdb_equality_candidates: (memberOf) not indexed

I have installed an openldap server with memberof function on centos via slapd.conf: needed part of config?: index objectClass eq,pres index ou,cn,surname,givenname eq,...
3
votes
1answer
210 views

sssd or ldap.conf doesn't work without a bindDN and password in RHEL 5, but works in RHEL 6 and 7. Why?

I am trying to use LDAP for authentication. I see it doesn't work with RHEL 5, if we don't provide a bind DN and password, but works in RHEL 6 and 7. From sssd logs, I can understand that it is ...
2
votes
1answer
273 views

OpenLDAP vs Active Directory authentication mechanisms

I am able to log in to an Active Directory using the userPrincipalName attribute of a user objectClass; (e.g. foo@mydomain.com) I have also set up an OpenLDAP server instance to which I can only ...
0
votes
0answers
65 views

File read permission to LDAP user

I have install openldap server with LAM6.0. Created two users and two groups. And configured ldapclient in another system. I'm able to take ssh client system with LDAP authentication. I want to give ...
0
votes
1answer
521 views

How to restrict user based on ip address in openldap

In organization we have setup ldap using openldap, i access it with GUI phpldapadmin. we have one requirement to allow access some user from specific IPAddress. I searched but still not able to get ...
0
votes
5answers
9k views

Failed to start OpenLDAP Server Daemon

Using Centos 7 and following steps for openldap server configurations.i am facing this problem [root@linux1 ~]# systemctl restart slapd Job for slapd.service failed because the control process ...
0
votes
1answer
76 views

OpenLdap 2.4 ACL

can you help me with rights for group OpenLdap 2.4? There is my slapd.conf # Allow LDAPv2 client connections. This is NOT the default. allow bind_v2 #Basic rights for authentication access to ...
2
votes
2answers
995 views

Problems with ldap userCertificate attribute

I'm trying to use the 'userCertificate' attribute to hold a 'der' file. I can happily add my certificate using the ldif: dn: cn=bob,ou=users,dc=home changetype: modify add: userCertificate;...
0
votes
1answer
298 views

Samba integration with existing OpenLDAP, MIT Kerberos and Bind9 services

I have a network domain running OpenLDAP, MIT Kerberos and Bind9. Now I want to enable some MS Windows hosts access to a NAS, in such a way that user credentials stay in my LDAP and Kerberos ...
0
votes
1answer
218 views

OpenLDAP: unknown directive <syncprov-checkpoint> inside backend database definition

Trying to setup the "mirror mode" of 2 OpenLDAP instances on 2 separate servers. But slapd failed to start due to the new added directives. Below is error msg in /var/log/ldap.log: /etc/openldap/...
0
votes
1answer
181 views

how to use ldapmodifyuser from ldapscripts to change a value

I can't find an example of how to use the ldapscripts command ldapmodifyuser and I'm not familiar enough with ldapmodify to figure it out. For example, how can I use ldapmodifyuser to change a user's ...
2
votes
1answer
39 views

OpenDG a Opensource ldap database handling and issues

I recently joined an organization and got privileges to add/remove entries or say attributes to the LDAP (OpenDJ ldap and opensource LINUX base ldap). So far I have added thousand of modification ...
0
votes
1answer
1k views

Not able to connect to openldap server in ldaps mode - CentOS

I have configured my openldap server in ldaps mode. But after configuring I am not able to connect it on 636 port where as I am able to connect on 389 port [root@testldap certs]# ldapsearch -x -LLL -...
3
votes
2answers
1k views

Central user management with multiple servers with SSH keys, LDAP?

the number of my servers and users is growing and I would like to adopt a central database to manage users accounts. I'm thinking about OpenLDAP, but I have a question. Is it possible in LDAP to ...
1
vote
0answers
473 views

ldap.conf simple auth

I am trying to configure ldap.conf for openldap. I am trying to do simple authentication like you can do with the -x in the ldapsearch commad. We currently have a script that uses a complex ldapsearch ...
0
votes
1answer
343 views

SSSD LDAP authentication using two different LDAP servers

I am trying to setup LDAP authentication using SSSD on CentOS 7. Is it possible to set up SSSD in a way that it uses two LDAP servers: one LDAP server is used just for login (basically just to ...
2
votes
1answer
69 views

Unable to import kerberos.schema [closed]

I am trying to import kerberos.schema into OpenLDAP on RHEL7. I create a file with include /etc/ldap/schema/kerberos.schema in it and then run: slapcat -f schema_convert.conf -F /tmp/ldif_output -...
0
votes
1answer
687 views

Is liblber part of openLDAP? What is it's purpose?

I see that liblber is a separate package BUT searching for it, what it is, why it is needed - is never answered. Only lots off questions/comments/etc on OpenLDAP. So, my two questions: is liblber ...
1
vote
1answer
246 views

Sudo for OpenLDAP

I needed to install sudo-ldap support for LDAP enabled server. The question: On which machine (ldap-client or ldap-server) I have to build & install the package I dowloaded from www.sudo.ws ? ...
2
votes
0answers
181 views

openldap integration with MIT kerberos

I am integrating openldap with MIT kerberos and have couple of questions regarding that. I was able to do this integration and kerberos services only starting with ldap_kerberos_container_dn = cn=...
2
votes
0answers
696 views

Getting 48 Inappropriate authentication error in openldap

I have set up openldap on localhost on Windows and trying to do ldap search with following command ldapsearch -x -h localhost -b "dc=mydomain,dc=com" "(objectClass=*)" However I get following error ...
3
votes
1answer
2k views

Samba - use LDAP for authentication only?

I am trying to set up a Samba server to use an LDAP server for authentication only, but pull all account information (user ID etc.) from SSSD, PAM etc. Basically, the server should act as a standalone ...
0
votes
0answers
671 views

OpenLDAP, Could not bind to LDAP server

I've installed and configured all the necessary packages to run a SOGo mail client. Unfortunately all my attempts of logging in were denied. I tried logging in with sogo@sogo.vixada.com. results of ...
0
votes
1answer
3k views

How to disable ldap and allow local authentication in debian server?

I have debian server Debian 3.2.81-2 x86_64 GNU/Linux. I want to disable openldap and enable local authentication. I see /etc/ldap/ldap.conf file which has ldap entry. I have ran service slapd stop;...
0
votes
1answer
2k views

Using hashed passwords from openLDAP for authentication in Mikrotik hotspot with intermediate step as FreeRADIUS

lets say I have chain Mikrotik Hotspot-FreeRADIUS0-OpenLDAP and I want authenticate users stored in LDAP directory in Hotspot. Until now I have all passwords in plaintext and eveything works fine, but ...
0
votes
2answers
1k views

OpenLDAP: rfc2307bis instead of nis schema

I'm looking for a way to create an empty LDAP dictionary with the rfc2307bis schema. On Debian when installing slapd or when reconfiguring with dpkg the nis schema is used by default. How do I remove ...
1
vote
2answers
590 views

Using openldap authentication only for some users

I am trying to set up a couple of Linux workstations (RedHat 7), and I am trying to figure out how to set up authentication against an LDAP server with some unusual requirements. I basically know how ...
3
votes
2answers
564 views

Problem with creating own attribute on openldap

I have problem with creating my own attribute (eg. dateOfExpire-generalized time) and then with adding this attribute to own ObjecClass (eg. dormitory) and after that add this attribute with ...
2
votes
1answer
396 views

SSSD: Why does setting ldap_group_nesting_level to “0” improve the performance greatly?

What is the default value for this parameter if I don't mention it in the configuration file? In a hundred of people enterprise environment, multiple tools - CDH Hadoop, analytics tool, Tableau, ...
3
votes
0answers
446 views

getent hosts not using DNS

I'm using Ubuntu workstation (14.04), using OpenLDAP for authentication. The /etc/nsswitch.conf files on these look like this so that to get a host it should try files, then LDAP and then go on to ...
3
votes
0answers
374 views

How to handle duplicate AD usernames from different domain for authentication using ldap proxy + nslcd

I have scenario in which there is one ubuntu machine which serves as ldap proxy using ldap as backend and i have two windows machine 2008 r2 having active directory each with different domains let say ...
0
votes
1answer
247 views

slapd doesn't start automatically despite rc.conf entry

I can successfully start slapd on FreeBSD 11 perfectly fine, but it won't run on startup. Here is what I put in my rc.conf: slapd_enable="YES" slapd_flags="-h "ldap://1.2.3.4/ ldapi://%2fvar%2frun%...