Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openldap]

[OpenLDAP Software](http://www.openldap.org/software/) is an [open source](http://www.opensource.org/) implementation of the Lightweight Directory Access Protocol (LDAP).

1
vote
0answers
8 views

OpenLDAP cluster: deletion of an entry is not replicated

We have an OpenLDAP 2.4 cluster of three nodes configured in multi-master and accessed through a VIP in round-robin. The three machines run RHEL7. We noticed that deletion of an entry (done from a ...
-3
votes
0answers
19 views

How to sync OpenLDAP with Active Directory? [duplicate]

I have a project where I need to sync openLDAP with Active Directory. Can anyone help me with some suggestion to sync these two? And what method should I try?
0
votes
1answer
16 views

openldap 2.4.44. error “-D previously specified”

I try to recursively delete our third DIT from our ldap root DSE as it is not needed anymore but I get in our customer's environment the following error: host:~# ldapdelete -x -W -D cn=admin,cn=...
0
votes
0answers
14 views

Setup OpenLdap on Oracle Linux 6

I am currently trying to setup an openldap server on an Oracle Linux 6 VM (VirtualBox). Packagemanager yum installed openldap version 2.4.40-16. Following this setup guide: https://docs.oracle.com/cd/...
0
votes
0answers
15 views

Can't manage user accounts after using LDAP

I've added a ubuntu machine as an LDAP client by following the below steps. But now when trying to access my user accounts from the user accounts app I can't find any user profiles or information as ...
0
votes
1answer
15 views

How to create user and group with specific id in directory389

Since I never worked with 389-ds, I am gonna ask probably stupid question. How can I create group with gid=557, and create user which would have uid=135 that is associated with gid=557? For local is ...
0
votes
0answers
62 views

slapadd error attribute type undefined

I try to add a new node called slave to my ldap server. But slapadd -l slave.ldif return error: 5cd2e848 <= str2entry: str2ad(address): attribute type undefined slapadd: could not parse entry (...
1
vote
1answer
16 views

How I can create accounts with command lines for my OpenLDAP server?

I'm in a Docker, in a VM (Ubuntu Serv). I have created a OpenLDAP server. I want to know simply : how to create groups and users. My DIT tree : dc=company,dc=com ou=group1 ou=group2 ou=group3 ou=...
0
votes
1answer
20 views

Use LDAP Server to log into itself

I have an LDAP server (running 18.04LTS) and a bunch of Linux Ubuntu clients. LDAP works fine and we're just using it to authenticate a couple users. My question is as follows. I'd like to use the ...
-1
votes
2answers
62 views

Start from scratch LDAP server CentOS

I am trying to set up a LDAP authentication server but I have messed too much with it, and I would like to start from scratch its configuration without reinstalling the OS because I have other stuff ...
0
votes
1answer
15 views

LDAP per-user overrides

I'm using openldap + nslcd to connect to a LDAP server for authentication of some users (these users would want their passwords and most of their configuration shared over many devices). I don't ...
0
votes
0answers
43 views

Allow sudo su - only to one user

Allow sudo su - on visudo only to one or some users of a group that access by ldap For example, I have visually defined the following: % dev ALL = (ALL) ALL What I need is that only some users or ...
0
votes
0answers
14 views

Can't connect to OpenLDAP

i have installed iRedMail with OpenLDAP managing the Mail Accounts. So far that works. Now I wan't to connect other applications to that LDAP and I'm trying to use a LDAP Explorer "LDAP Admin" for ...
2
votes
2answers
59 views

Set $PATH as OpenLDAP attribute

I need to set $PATH for OpenLDAP users (CentOS6/7). Not in .profile, not in .bashrc on client machine, but as attribute in LDAP on the LDAP server so it is set whenever the user logs onto any host via ...
2
votes
0answers
52 views

How to tell Kerberos where to find the root certificate for LDAP with TLS?

I run two Debian servers with MIT Kerberos and OpenLDAP backend. I would like to enforce TLS and encrypt replication. So I created and added certificates… dn: cn=config changetype: modify add: ...
2
votes
1answer
1k views

ldap users unable to ssh to the server

I have configured ldap local server running centos 7, using this article: https://www.itzgeek.com/how-tos/linux/centos-how-tos/step-step-openldap-server-configuration-centos-7-rhel-7.html. Now my ...
1
vote
1answer
208 views

How to determine cipher in use when using ldapsearch?

I'm trying to debug an LDAPS connection from Ubuntu 14.04 to some sort of VIP. There are 6 nodes behind the VIP. The connection only succeeds "sometimes". A wireshark log shows the failing connections ...
2
votes
1answer
96 views

openLDAP won't start after including second schema

I have a Mac I have installed openLDAP on (using Macports). I have gotten the system up and am able to create objects. The only schema I have configured in the slapd.conf is core.schema. I am ...
0
votes
1answer
396 views

How to decode base64 text in ldif file in Linux?

I need to decode base64 embedded in ldif (openldap) backups. I found here a way to join lines starting with a blank. Then, based on this question about "How to decode base64 text in xml file in ...
1
vote
1answer
246 views

ssh using OpenLDAP (LDAP) credencials

I have a corporate network with an OpenLDAP installed and functional. I can log in a Linux server in this network using ssh with my profile (user) that is in OpenLDAP. I created a new user with ...
0
votes
1answer
379 views

LDAP ACL to restrict user to only reading their own user attrs

I want to prevent users from accessing anything other than their own data. I've tried implementing the following simple acl (ldif): dn: olcDatabase={1}mdb,cn=config olcAccess: {0}to attrs=...
2
votes
2answers
844 views

OpenLDAP: Deleted user is still listed in the group

I'm currently doing openldap via command line. I added user John and added group devgroup, and I assigned John into devgroup group. When I deleted a user(John) via command line ldapdelete -Y EXTERNAL ...
0
votes
0answers
468 views

Automount LDAP home folders in client machines

I have created couple of users on my ldap, and setup a couple of ubuntu ldap client machines, where users can login with their accounts. I now want to share their home folders and make it centralised ...
0
votes
1answer
568 views

How to create a single Authentication point with multiple LDAP servers?

I'm currently into a process of creating a central service system from where users can connect to VMs. My goal with this is to have a single point of authentication for all possible users. The issue ...
0
votes
2answers
1k views

openLDAP bdb_equality_candidates: (memberOf) not indexed

I have installed an openldap server with memberof function on centos via slapd.conf: needed part of config?: index objectClass eq,pres index ou,cn,surname,givenname eq,...
3
votes
1answer
225 views

sssd or ldap.conf doesn't work without a bindDN and password in RHEL 5, but works in RHEL 6 and 7. Why?

I am trying to use LDAP for authentication. I see it doesn't work with RHEL 5, if we don't provide a bind DN and password, but works in RHEL 6 and 7. From sssd logs, I can understand that it is ...
2
votes
1answer
334 views

OpenLDAP vs Active Directory authentication mechanisms

I am able to log in to an Active Directory using the userPrincipalName attribute of a user objectClass; (e.g. foo@mydomain.com) I have also set up an OpenLDAP server instance to which I can only ...
0
votes
1answer
669 views

How to restrict user based on ip address in openldap

In organization we have setup ldap using openldap, i access it with GUI phpldapadmin. we have one requirement to allow access some user from specific IPAddress. I searched but still not able to get ...
0
votes
5answers
10k views

Failed to start OpenLDAP Server Daemon

Using Centos 7 and following steps for openldap server configurations.i am facing this problem [root@linux1 ~]# systemctl restart slapd Job for slapd.service failed because the control process ...
0
votes
1answer
94 views

OpenLdap 2.4 ACL

can you help me with rights for group OpenLdap 2.4? There is my slapd.conf # Allow LDAPv2 client connections. This is NOT the default. allow bind_v2 #Basic rights for authentication access to ...
2
votes
2answers
1k views

Problems with ldap userCertificate attribute

I'm trying to use the 'userCertificate' attribute to hold a 'der' file. I can happily add my certificate using the ldif: dn: cn=bob,ou=users,dc=home changetype: modify add: userCertificate;...
0
votes
1answer
322 views

Samba integration with existing OpenLDAP, MIT Kerberos and Bind9 services

I have a network domain running OpenLDAP, MIT Kerberos and Bind9. Now I want to enable some MS Windows hosts access to a NAS, in such a way that user credentials stay in my LDAP and Kerberos ...
0
votes
1answer
242 views

OpenLDAP: unknown directive <syncprov-checkpoint> inside backend database definition

Trying to setup the "mirror mode" of 2 OpenLDAP instances on 2 separate servers. But slapd failed to start due to the new added directives. Below is error msg in /var/log/ldap.log: /etc/openldap/...
0
votes
1answer
217 views

how to use ldapmodifyuser from ldapscripts to change a value

I can't find an example of how to use the ldapscripts command ldapmodifyuser and I'm not familiar enough with ldapmodify to figure it out. For example, how can I use ldapmodifyuser to change a user's ...
2
votes
1answer
39 views

OpenDG a Opensource ldap database handling and issues

I recently joined an organization and got privileges to add/remove entries or say attributes to the LDAP (OpenDJ ldap and opensource LINUX base ldap). So far I have added thousand of modification ...
0
votes
1answer
1k views

Not able to connect to openldap server in ldaps mode - CentOS

I have configured my openldap server in ldaps mode. But after configuring I am not able to connect it on 636 port where as I am able to connect on 389 port [root@testldap certs]# ldapsearch -x -LLL -...
3
votes
2answers
1k views

Central user management with multiple servers with SSH keys, LDAP?

the number of my servers and users is growing and I would like to adopt a central database to manage users accounts. I'm thinking about OpenLDAP, but I have a question. Is it possible in LDAP to ...
1
vote
0answers
495 views

ldap.conf simple auth

I am trying to configure ldap.conf for openldap. I am trying to do simple authentication like you can do with the -x in the ldapsearch commad. We currently have a script that uses a complex ldapsearch ...
0
votes
1answer
372 views

SSSD LDAP authentication using two different LDAP servers

I am trying to setup LDAP authentication using SSSD on CentOS 7. Is it possible to set up SSSD in a way that it uses two LDAP servers: one LDAP server is used just for login (basically just to ...
2
votes
1answer
74 views

Unable to import kerberos.schema [closed]

I am trying to import kerberos.schema into OpenLDAP on RHEL7. I create a file with include /etc/ldap/schema/kerberos.schema in it and then run: slapcat -f schema_convert.conf -F /tmp/ldif_output -...
0
votes
1answer
752 views

Is liblber part of openLDAP? What is it's purpose?

I see that liblber is a separate package BUT searching for it, what it is, why it is needed - is never answered. Only lots off questions/comments/etc on OpenLDAP. So, my two questions: is liblber ...
1
vote
1answer
256 views

Sudo for OpenLDAP

I needed to install sudo-ldap support for LDAP enabled server. The question: On which machine (ldap-client or ldap-server) I have to build & install the package I dowloaded from www.sudo.ws ? ...
2
votes
0answers
187 views

openldap integration with MIT kerberos

I am integrating openldap with MIT kerberos and have couple of questions regarding that. I was able to do this integration and kerberos services only starting with ldap_kerberos_container_dn = cn=...
2
votes
0answers
753 views

Getting 48 Inappropriate authentication error in openldap

I have set up openldap on localhost on Windows and trying to do ldap search with following command ldapsearch -x -h localhost -b "dc=mydomain,dc=com" "(objectClass=*)" However I get following error ...
3
votes
1answer
2k views

Samba - use LDAP for authentication only?

I am trying to set up a Samba server to use an LDAP server for authentication only, but pull all account information (user ID etc.) from SSSD, PAM etc. Basically, the server should act as a standalone ...
0
votes
1answer
3k views

How to disable ldap and allow local authentication in debian server?

I have debian server Debian 3.2.81-2 x86_64 GNU/Linux. I want to disable openldap and enable local authentication. I see /etc/ldap/ldap.conf file which has ldap entry. I have ran service slapd stop;...
0
votes
1answer
2k views

Using hashed passwords from openLDAP for authentication in Mikrotik hotspot with intermediate step as FreeRADIUS

lets say I have chain Mikrotik Hotspot-FreeRADIUS0-OpenLDAP and I want authenticate users stored in LDAP directory in Hotspot. Until now I have all passwords in plaintext and eveything works fine, but ...
0
votes
2answers
1k views

OpenLDAP: rfc2307bis instead of nis schema

I'm looking for a way to create an empty LDAP dictionary with the rfc2307bis schema. On Debian when installing slapd or when reconfiguring with dpkg the nis schema is used by default. How do I remove ...
1
vote
2answers
637 views

Using openldap authentication only for some users

I am trying to set up a couple of Linux workstations (RedHat 7), and I am trying to figure out how to set up authentication against an LDAP server with some unusual requirements. I basically know how ...
2
votes
2answers
668 views

Problem with creating own attribute on openldap

I have problem with creating my own attribute (eg. dateOfExpire-generalized time) and then with adding this attribute to own ObjecClass (eg. dormitory) and after that add this attribute with ...