Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

It is released under its own BSD-style license called the OpenLDAP Public License. The OpenLDAP Project was started in 1998 by Kurt Zeilenga which was initially based on a clone of the LDAP reference implementation from the University of Michigan.

1452 questions
6
votes
2 answers

What's the best OpenLDAP VMWare appliance (VM) that you USED?

What's the best OpenLDAP VMWare appliance (VM) that you USED?
Pub Msu
6
votes
4 answers

Caching OpenLDAP credentials for offline use on laptops

Our clients (Ubuntu 14.04) can login with there LDAP login. As soon as they have no network they cannot login with LDAP. Is there a way to cache those passwords and usernames, so that the laptops can work if they don't have an LDAP connection?
Joeri Feyen
  • 71
  • 1
  • 1
  • 5
6
votes
1 answer

openLDAP how to remove the nis schema from the current configuration

openLDAP 2.4 Ubuntu 14.04 I have found this question dn-based linux groups from ldap. I am trying to include the rfc2307bis schema, but it seems the nis schema must be removed from the configuration before including rfc2307bis. How can I remove this…
lk7777
  • 243
  • 2
  • 10
6
votes
3 answers

Linux console is unusable when LDAP server is down

When our OpenLDAP server lost power the CentOS machines' console became nearly unusable. We were trying to login with a local account, but each command would take minutes to return. Even simple commands like ls were just sitting there. This does…
csexton
  • 487
  • 1
  • 5
  • 12
6
votes
1 answer

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 objectClass: posixGroup objectClass: top dn:…
6
votes
3 answers

How come all LDAP users are shown with getent passwd?

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers. When I type "getent passwd", all users on the entire LDAP Server are shown,…
ujjain
  • 3,983
  • 16
  • 53
  • 91
6
votes
2 answers

Multiple LDAP servers with mod_authn_alias: failover not working when the first LDAP is down?

I've been trying to setup redundant LDAP servers with Apache 2.2.3. /etc/httpd/conf.d/authn_alias.conf AuthLDAPURL ldap://192.168.5.148:389/dc=domain,dc=vn?cn AuthLDAPBindDN…
quanta
  • 51,413
  • 19
  • 159
  • 217
6
votes
2 answers

Is OpenLDAP a viable alternative to Windows LDAP?

Just a simple question; this question is not meant to attack Windows or start a flame war in anyway. I want a viable solution to the way authentication is done in Windows DC environment (LDAP) on *nix. I just want to know if OpenLDAP can be that…
user101130
6
votes
1 answer

openldaps wildcard certificate not accepted

my wildcard certificate doesn't get accepted with ldap 2.4.23. when i try to connect i get the following error: TLS certificate verification: subject: OID.2.5.29.17=DNS:*.domain.com,CN=*.domain.com,OU=LALALA,O=LALALA…
JMW
  • 1,463
  • 4
  • 19
  • 27
6
votes
3 answers

How do I install a new schema for OpenLDAP on Debian 5 with dynamic config=cn backend?

I'm importing an OpenLDAP database from another server and while importing, I got some errors with some users, the problem is that the mozillaAbPersonAlpha is not a valid objectClass. #!ERROR [LDAP Error Code 21 - objectClass: value #3 invalid per…
Noe Nieto
  • 311
  • 1
  • 2
  • 10
6
votes
2 answers

How do I tell if OpenLDAP is installed on CentOS, and test that it's working?

What's the easy way to do this?
blunders
  • 813
  • 7
  • 14
  • 30
5
votes
2 answers

Using meta database backend to combine active directory db and openldap local db

I am trying to use the openldap meta back end to accomplish the following in a single query: query the local openldap database for the account. (I control this resource and only a few accounts will be stored here.) if the account is not found…
J Boyd
  • 71
  • 1
  • 6
5
votes
3 answers

openLDAP ldap_modify: Server is unwilling to perform (53) when trying to delete custom schema

I have created this custom and very basic schema: objectclass ( 2.25.2.2.1 NAME 'myObjectClass' DESC 'myObjectClass objectclass' STRUCTURAL MUST ( cn ) ) I have added it without problem with this myObjectClass.ldif file: dn:…
5
votes
1 answer

SASL auth to LDAP behind HAPROXY with name mismatches

My kerberos domain in MYEXAMPLE.ORG, but servers are located in the dmz-int.example.org dns zone. LDAP server is b1.dmz-int.example.org; its keytab include: udo ktutil -k /etc/krb5.keytab list /etc/krb5.keytab: Vno Type …
473183469
  • 1,360
  • 1
  • 12
  • 23
5
votes
5 answers

Finding closest Domain Controller through LDAP

I am on a Unix host and am looking for a programatic way to determine the closest DC. Microsoft has an excellent article explaining how to perform the DNS lookup, and I am able to find the list of available DCs easily like this: dig -t SRV…
Rob Napier
  • 210
  • 1
  • 3
  • 9