Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

It is released under its own BSD-style license called the OpenLDAP Public License. The OpenLDAP Project was started in 1998 by Kurt Zeilenga which was initially based on a clone of the LDAP reference implementation from the University of Michigan.

1452 questions
0
votes
1 answer

openldap / slapd return the error : "daemon: listen(ldap://my.server1.org, 5) failed errno=98 (Address already in use)"

I am trying to set up a master master replication between two openldap servers. To do so, the first steps make me configure theses two files : /etc/hosts, need to contain the DNS of the baseDN of the servers (itself and the second server)…
user161458
  • 21
  • 5
0
votes
0 answers

OpenLDAP/ds-389 Secure Hardening Guide

I am in the process of setting up an Open Ldap Server (ds-389) however, I cannot find many good resources which define a security or hardening guide which can be applied to the configuration or schema of the directory. Does anyone have any good…
0
votes
0 answers

slapd service is not starting on centos 7

Hi while I was trying to install open-ldap in my centos 7 server, I think I runned yum remove ldap command(I am not sure exactly) and now slap service is not working at all [root@kwephispra28828 etc]# systemctl start slapd Job for slapd.service…
erondem
  • 101
0
votes
1 answer

Dovecot can't connect to ldap server via ldaps

I have an LDAP server that accepts request through ldaps on port 636. I already use it for many of my applications and I want to have my dovecot server use that for authentication as well. dovecot ldap config: uris =…
László Stahorszki
  • 260
  • 1
  • 5
  • 16
0
votes
1 answer

Does packages security patches are backported to older version?

I see on cve.mitre.org that OpenLDAP (slapd) package have plenty of vulnerabilities prior to 2.4.57. If I want to install OpenLDAP from official repositories on my Debian 10, which version is slapd/oldstable,oldstable 2.4.47+dfsg-3+deb10u6 amd64. Do…
Stormrice
  • 63
  • 5
0
votes
1 answer

Remote deployment of a script on linux

We are creating a lab and wanted to setup like 10-15 hosts with ldap. We need to install on each computer some packages that are necessary to run ldap, so my question is - can I somehow run 1 bash script on multiple computers simultaneously? So…
Pakuss
  • 1
0
votes
1 answer

OpenLDAP running on OpenBSD + CARP setup

I'm setting up OpenLDAP on a router/firewall that's running OpenBSD + CARP + pfsync. Curious enough, I'm wondering what's my best approach to making sure the setup stays redundant between the two boxes in the event one goes down. Do I simply set up…
imaginative
  • 1,971
  • 10
  • 32
  • 48
0
votes
0 answers

InspIRCd doesn’t even contact configured LDAP

On Ubuntu 20.04 I've installed InspIRCd (which seems to work fine as-is) and added to its config:
Al Klimov
  • 100
  • 9
0
votes
1 answer

openldap index existing values

I have a ldap database that has been used for some time. naturally it is full on entries. I recently tried to set up an index for uid to help searching, i added the following to my slapd.conf file include …
a.smith
  • 111
  • 1
  • 4
0
votes
1 answer

Enabling an overlay on an OpenLDAP spare

I have two OpenLDAP server, one master and one slave synchronized with syncprov. I would like to enable the memberof overlay on both. I successfully enabled the overlay on the master server, but I cannot manage to do the same on the replica. $ sudo…
azmeuk
  • 195
  • 1
  • 2
  • 16
0
votes
1 answer

I can su as an [open]ldap user on an sssd, but I can't ssh or login directly as the same user, what am I missing?

On sssd client authselect select sssd --force systemctl enable --now sssd [root@ldap-sssd ~]# id adam uid=16859(adam) gid=100(users) groups=100(users) [root@ldap-sssd ~]# su adam bash-4.4$ su adam Password: su: Authentication failure bash-4.4$ If…
thistleknot
  • 161
  • 6
0
votes
1 answer

OpenLDAP memberof overlay error: memberof_value_modify err=32

I enabled the refint and memberof overlay with OpenLDAP 2.4.57, but when I create a groupOfNames I get a memberof_value_modify .. failed err=32 error. I also have syncprov enabled with a spare. What am I doing wrong? group addition $ ldapadd -W -x…
azmeuk
  • 195
  • 1
  • 2
  • 16
0
votes
1 answer

openldap why am I not able to id the user account?

I followed this openldap guide https://kifarunix.com/install-and-setup-openldap-on-rocky-linux-8/ Got it all working up until I try to id the user on the client (following this guide:…
thistleknot
  • 161
  • 6
0
votes
1 answer

OpenLDAP : Confidentiality required for ldapmodify (ldapi://)

I'm asking your help beacause i'm stuck since 2 days about that. After i have setting up TLS and SSL on my OpenLDAP server, it works fine but i can not execute command anymore to edit the configuration. When i try to change the configuration with a…
Thomas Coche
  • 175
  • 1
  • 5
0
votes
1 answer

How to check ldap password storage policy

How do I check how passwords are stored in a local running OpenLDAP server? I would prefer some sort of query that will state the used configuration. Alternatively, accessing the stored passwords to see that they are encrypted would also be…
joaerl
  • 397
  • 1
  • 3
  • 11