Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

It is released under its own BSD-style license called the OpenLDAP Public License. The OpenLDAP Project was started in 1998 by Kurt Zeilenga which was initially based on a clone of the LDAP reference implementation from the University of Michigan.

1452 questions
4
votes
2 answers

LDAP user authentication on CentOS 7: Permission denied

I configured LDAP on CentOs 7 and now I'm trying to configure external user authentication. Browsing I found this: https://www.centos.org/docs/5/html/Deployment_Guide-en-US/s1-ldap-pam.html that is for CentOS 5. Also in other sites says that you can…
Neil
  • 355
  • 3
  • 9
  • 16
4
votes
2 answers

What is the maximum value for a gid in OpenLDAP

Our company has many individual sites that currently each have their own scheme for Linux authentication. We are looking at redesigning to have one unified scheme with the future plan of porting all the accounts to a single LDAP, likely OpenLDAP. As…
F.lugo2000
  • 43
  • 1
  • 3
4
votes
1 answer

Chasing referrals in Ldap

I'm currently improving a program featuring an ldap integration. This ldap integration is currently not able to handle ldap referrals. I do understand, that i will gen entries back that will hold the URL to the referred domain controller, the port…
Chris
  • 161
  • 6
4
votes
1 answer

How to set a user as RootDN in OpenLDAP

I have installed OpenLDAP and phpLDAPadmin on Ubuntu 14.04. I have a default RootDN which is something like: cn=admin,dc=example,dc=com Then I have created some users and groups organizational units like…
jmlemetayer
  • 223
  • 1
  • 3
  • 8
4
votes
1 answer

OpenLDAP cannot add new schema

I'm trying to add new schema to my OpenLDAP server. The version of slapd is 2.4.23. I'm using Debian 6. If I understood it well, slapd 2.4+ uses OLC configuration with (cn=config) by default for this version and I don't have to modify anything in…
shadox
  • 185
  • 1
  • 7
4
votes
2 answers

smbk5pwd overlay on OpenLDAP 2.4

I have an OpenLDAP server and I want to configure the smbk5pwd overlay to make OpenLDAP update the sambaNTPassword and sambaLMPassword attributes automatically when a change occurs on userPassword. Versions: slapd 2.4.23-7.3 slapd-smbk5pwd…
4
votes
2 answers

OpenLdap: Why slapd tell me there's no DB_CONFIG when there is one

When I run slapcat or restart slapd on Debian 6, OpenLdap 2.4.23-7.32.4.23-7.3, I see this warning: hdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (14). Expect poor performance for suffix "dc=i-tracing,dc=lan". But when…
Coren
  • 171
  • 1
  • 1
  • 8
4
votes
1 answer

When Tried to Do ldapadd got this error ldap_add: No such object (32)

I have Following Entries in my slapd.conf ####################################################################### # ldbm and/or bdb database definitions ####################################################################### #backend …
Pradeep Gupta
  • 387
  • 2
  • 5
  • 18
4
votes
1 answer

systemPossSuperiors - why does AD have it, but not openldap

Having used openldap and now getting to know MS active directory (AD), I realize that in AD there is an attribute called "systemPossSuperiors", which defines which objects are allowed as parent objects. Afaik this is not present in openldap. (How is…
Isaac
  • 1,215
  • 3
  • 26
  • 44
4
votes
1 answer

ldapquery an Active Directory server for users that belongs to a group named X

When I do this at the bash prompt on a CentOS 6.4 ldapsearch -LLL -H ldap://adserver.example.com -x -D someuser@example.com -w somepass -b 'OU=Users,DC=example,DC=com' '(&(objectClass=person)(sAMAccountName=testuser))' I get dn: CN=TestUser…
4
votes
1 answer

Configuring openldap multimaster replication using cn=config

We currently have a single OpenLDAP server using the cn=config backend. We'd like to add a second OpenLDAP server and configure them for multimaster replication. What do we need to do to enable replication on the existing server and initialize the…
Brad Mace
  • 1,024
  • 3
  • 17
  • 32
4
votes
1 answer

Configuring Amazon Linux authenticate to LDAP server

I was wondering if anyone had success in configuring Amazon Linux to authenticate to an LDAP server? EDIT: For more information on what I have done: I disabled anonymous access on my OpenLDAP server, so I am trying to have my openldap client on…
Hank
  • 171
  • 1
  • 6
4
votes
1 answer

Open LDAP and ActiveDirectory synchronization

I have been searching on google for a while to find out the best way to synchronize the user database between OpenLDAP and an ActiveDirectory, but with not a clear results ! What i want to achieve is, have user database in OpenLDAP and then populate…
4
votes
3 answers

LDIF: Modify attr if exists; Add if not exists

Is there a way to do one of the following in an LDIF file? Ignore error (attr not found) when trying to delete an attribute Or: If attribute exists, modify it If it doesn't exist, add it
user1844882
  • 91
  • 1
  • 6
4
votes
2 answers

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 12:52:06 2012 id: cannot find name for group ID…
chandank
  • 847
  • 3
  • 14
  • 31