Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

It is released under its own BSD-style license called the OpenLDAP Public License. The OpenLDAP Project was started in 1998 by Kurt Zeilenga which was initially based on a clone of the LDAP reference implementation from the University of Michigan.

1452 questions
8
votes
3 answers

"wrong attributetype" when using ldapadd

When attempting to load the following configuration dn: olcDatabase={1}hdb,cn=config changetype: modify add: olcMirrorMode olcMirrorMode: TRUE I get the following error: root@box:~# ldapadd -Y EXTERNAL -H ldapi:/// -f mirrormode.ldif…
seb
  • 361
  • 1
  • 2
  • 7
8
votes
2 answers

Unknown LDAP cn=config admin password

When I installed OpenLDAP I was asked to create a password for an admin user but now I realize there's another admin user for cn=config whose password I don't know. Does anyone know how should I proceed to change or get that admin password? I'm on a…
peris
  • 508
  • 2
  • 9
  • 27
8
votes
2 answers

Can't query AD using Kerberos from Linux host

ldapsearch -H -b -s sub -D -x -w works fine kinit @ ldapsearch -H -b -s sub fails with: text: 000004DC: LdapErr: DSID-0C0906E8, comment: In order to perform this operation a successful bind must…
8
votes
1 answer

Starting openLDAP

I work as a sysadmin in a company and i am required to Deploy openLDAP. I have read a lot of materials but i really can't figure out where to start. First about the company: Services: Email: every user gets an email account such as…
Shoaibi
  • 809
  • 1
  • 10
  • 28
8
votes
2 answers

ldap_add error (80) handler exited with 1

I'm trying to follow this tutorial to setup a basic LDAD server (OpenLDAP) for cleint authentication, but I am stuck on the step where I add the back-end configuration. I've created my backend.ldif file as specified, and I'm attempting to add it…
Nick
  • 4,503
  • 29
  • 69
  • 97
8
votes
4 answers

Active Directory and OpenLDAP synchronization

I have been digging holes on google to find out the best way to synchronize the user database between AD and OpenLDAP. What i want to achieve is, have user database in AD and then propagate these users to OpenLDAP so these users can access all my…
linuxcraft
8
votes
3 answers

ldapadd/ldapmodify: clarifications needed about these commands

The ldapmodify man page states that: The default for ldapmodify is to modify existing entries Yet when I try to import an LDIF file with ldapmodify I get the below error: ldapmodify: modify operation type is missing at line X Q1: Why, which…
Max
  • 3,523
  • 16
  • 53
  • 71
8
votes
2 answers

How do I use ldapdelete to delete an improperly set up olc database?

I've been walking through this tutorial and kept getting errors -- likely because I was typing it in manually -- so I retried, executing it after entering in # Load dynamic backend modules dn: cn=module,cn=config objectClass: olcModuleList cn:…
user29600
  • 419
  • 5
  • 17
  • 30
7
votes
2 answers

how to configure open ldap to work on localhost

From the documentation: Use your favorite editor to edit the provided slapd.conf(5) example (usually installed as /usr/local/etc/openldap/slapd.conf) to contain a BDB database definition of the form: database bdb suffix…
7
votes
1 answer

When is ldapi:// -Y EXTERNAL needed? Apparently, cosine.ldif breaks without it

I'm new to OpenLDAP (but not Microsoft Active Directory) and reading zytrax's openldap guide. I'm using OpenLDAP 2.4.44 on CentOS 7.4, as shown here: @(#) $OpenLDAP: slapd 2.4.44 (Aug 4 2017 14:23:27) $ …
mellow-yellow
  • 441
  • 6
  • 15
7
votes
2 answers

Modify openLDAP cn=config without slapd running

I am trying to setup a Multi-Master openLDAP (PoC) cluster. Somewhere I created bad config and now slapd will not start. Being that the cn=config/olc config is CRC32 tagged, it won't accept manual changes. So, how do I make config changes without…
virullius
  • 1,048
  • 1
  • 9
  • 23
7
votes
1 answer

openldap sizelimit. Can't receive more than 500 entries

I can't receive more than 500 entries, when I query my openldap-server. Although I made the following changes: slapd.conf # This is the main slapd configuration file. See slapd.conf(5) for more # info on the configuration options. …
JMAD2016
  • 73
  • 1
  • 1
  • 3
7
votes
2 answers

How do you set password-hash for OpenLDAP?

I have the following version on Ubuntu 12.04: OpenLDAP: slapd (Sep 19 2013 22:49:31) $ buildd@batsu:/build/buildd/openldap-2.4.28/debian/build/servers/slapd OpenLDAP now offers SSHA as the default hash. I want to use a different hash. Yet, old…
CppLearner
  • 787
  • 3
  • 10
  • 24
7
votes
4 answers

How to add new attribute to an existing LDAP user objects

I want to add mail attribute to the existing ldap users. I think, its possible with using ldapmodify but not sure how. I have done that using phpldapadmin web GUI manually, but I have like more than 100 users and dont want to do that manually for…
Ramesh Kumar
  • 1,770
  • 5
  • 19
  • 29
7
votes
1 answer

How to add a new attribute to an existing LDAP objectclass?

I created a custom LDAP objectClass, but forgot a couple attributes before I added it to my OpenLDAP server. I followed the instructions on this Ubuntu doc page: https://help.ubuntu.com/12.04/serverguide/openldap-server.html I am running Ubuntu…
David R.
  • 627
  • 3
  • 6
  • 18