Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

It is released under its own BSD-style license called the OpenLDAP Public License. The OpenLDAP Project was started in 1998 by Kurt Zeilenga which was initially based on a clone of the LDAP reference implementation from the University of Michigan.

1452 questions
0
votes
1 answer

LDAP sizelimit exceeded despite a high sizelimit

I have the problem "LDAP sizelimit exceeded" (I know it has been discussed here several times). Unfortunately, the previous solutions here and on other sites did not help. I am using Ubuntu 20.04 and the package slapd. I created the file…
vince6e74
  • 1
  • 2
0
votes
0 answers

Openldap granting write access for groups

I want to give an admin group write access cn=admin_group,ou=group,dc=kml,dc=de dn: cn=admin_group,ou=group,dc=kml,dc=de cn: admin_group description: All users member: uid=uf,ou=people,dc=kml,dc=de objectclass: groupOfNames the acl : olcAccess:…
0
votes
1 answer

OpenLDAP cn=config database access blocked

I use OpenLDAP 2.4.54 with Alpine. Here is my ldap configuration $ sudo slapcat -n0 dn: olcDatabase={-1}frontend,cn=config objectClass: olcDatabaseConfig objectClass: olcFrontendConfig olcDatabase: {-1}frontend structuralObjectClass:…
azmeuk
  • 195
  • 1
  • 2
  • 16
0
votes
1 answer

ldapwhoami works but pam_authenticate fails with the same credentials

I'm testing the pam_ldap implementation with a C++ application. I configured ldap and pam_ldap to authenticate against a OpenLDAP server running in the same host. Created a user for testing, ldapwhoami works: ldapwhoami -vvv -D…
third_eye
  • 101
0
votes
0 answers

OpenLDAP in k8s: authentication does not work

I have set up an openldap (osixia/openldap:1.4.0) container in k8s and it runs smoothly. However, when my app wants to connect to it using the default admin/admin creds, it fails. Data: I have this in my manifest file: env: - name:…
0
votes
2 answers

How to start openldap in k8s?

*** CONTAINER_LOG_LEVEL = 3 (info) *** Search service in CONTAINER_SERVICE_DIR = /container/service : *** link /container/service/:ssl-tools/startup.sh to /container/run/startup/:ssl-tools *** link /container/service/slapd/startup.sh to…
0
votes
2 answers

add ldap user to existing openldap server

I try to add a user to an existing and running openldap server. The server was setup by someone else (who is difficult to reach...) and is actively being used. Now I would like to add a new user, but get stuck with insufficient access. The command I…
laolux
  • 121
  • 1
  • 5
0
votes
1 answer

OpenLDAP syncrepl does not recover after network interruption

We have an issue we have discovered where syncrepl does not recover after a network interruption. Environment: Centos 7 replicas OpenLDAP 2.4.44(-21.el7_6) Loglevel set to comm sync (produces nothing useful) synchronization configuration: syncrepl…
Drew
  • 83
  • 6
0
votes
1 answer

ldapmodify failing implementing TLS certs

I'm probably overlooking a typo, but i cant find it. ~$ /usr/bin/ldapmodify -H ldapi:// -Y EXTERNAL -f /tmp/certs.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying…
0
votes
1 answer

Openldap+samba pdb_init_ldapsam: WARNING: Could not get domain info, nor add one to the domain. We cannot work reliably without it

After integration samba with openldap i got this type of error while trying to restart smb.service : juil. 20 13:28:41 ldapmaster smbd[9761]: [2020/07/20 13:28:41.008764, 0] ../../source3/passdb/pdb_ldap.c:6680(pdb_ldapsam_init_common) juil. 20…
Bruce
  • 11
  • 2
0
votes
1 answer

slapd.conf ACL: ldap_modify: Insufficient access (50)

I am trying to limit write access to users own userPassword attribute. But failing miserably for hours now. Here is what I've done so far: Installed OpenLDAP 2.4 on Arch linux Configured a base DN (dc=exmaple,dc=org) and a Manager to modify,add and…
tuna
  • 113
  • 3
0
votes
1 answer

OpenLDAP 'connection lost' error with SSL

I have OpenLDAP 2.4.50 installed on a Alpine 3.8 system, and two Debian 10 clients - let us call them A and B - trying to connect the ldap server. My problem is that the first can and the second cannot. A and B are identical machines, with both…
azmeuk
  • 195
  • 1
  • 2
  • 16
0
votes
1 answer

Openldap backup > restore omits certain attributes

Migrating from Debian Jessie (openldap 2.4.40) to Debian Buster (openldap 2.4.47), I came across a few bumps but the last one is just baffling. First issue: ldapsearch does not return all attributes by default - you have to list them…
zenlord
  • 232
  • 2
  • 9
0
votes
0 answers

OpenLDAP , make test, How can I know it has been successful

I am new-ish to OpenLDAP and performing a "make test" It throws a lot of output. Is there a way to know whether it was successful in a agile manner? I did this: "make test > file1.txt" Thanks in advance.
PaulO
  • 15
  • 8
0
votes
1 answer

what does the ldapadd error: "additional info: objectClass: value #2invalid per syntax mean?

I'am tryin to migrate from active directory windows server to Openldap i found a problem while importing .ldif database exported from AD to my new Openldap ! when i try to do : ldapmodify -Y EXTERNAL -H ldapi:/// -f exportuser.ldf i got…
Bruce
  • 11
  • 2