Questions tagged [openldap]

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

OpenLDAP Software is a free, open source implementation of the Lightweight Directory Access Protocol (LDAP) developed by the OpenLDAP Project. LDAP is a platform-independent protocol for querying and modifying data using directory services running over TCP/IP.

It is released under its own BSD-style license called the OpenLDAP Public License. The OpenLDAP Project was started in 1998 by Kurt Zeilenga which was initially based on a clone of the LDAP reference implementation from the University of Michigan.

1452 questions
0
votes
1 answer

Is there a way display cn=changelog in Directory Tree of OpenLDAP when exploring with and directory explorer like phpldapadmin?

I have configured my changelog to get logged using this procedure :This tutorial I followed to set up changelog Now I have a ldif that is logging the changelog. But the requirement is to be able to see an ou cn=changelog is directory tree which can…
0
votes
1 answer

How to import ldif users into FreeIPA?

Maybe it needs two steps: Add users defined in the ldif file to OpenLDAP(Inside FreeIPA) Migrate those added users from OpenLDAP to IPA Current situation Setup FreeIPA server, initilized an admin user, created a test user by ipa user-add…
rawmain
  • 291
  • 1
  • 7
  • 17
0
votes
0 answers

Modify OpenLDAP hashing algorithm

I have a CentOS7 Server running slapd 2.4.44 and I'd like to modify the default hashing algorithm being used. Instead of using SSHA, i'd like to use SHA-256 or SHA-512. I've been having trouble finding documentation on this and I'd like to ask if…
0
votes
2 answers

Permission denied (publickey) - Troubleshooting sshd pulling public keys from LDAP Server

1. Problem Summary: Hi, recently, in our infrastructure production environment, new users are unable to ssh into a debian jump server. The jumpserver' SSH daemon retrieves the SSH public keys from the LDAP Server. We verified sshd local…
lsambo
  • 103
  • 2
0
votes
1 answer

Single sign on using SSSD against OpenLDAP server with Kerberos SASL/GSSAPI

Authentication against Kerberos and authorization against an LDAP directory is working for me. Now I'm looking for the client setup on Debian Buster using sssd. I started with LDAP authentication with nss-pam-ldapd using SASL Proxy Authorization on…
Ingo
  • 416
  • 5
  • 13
0
votes
1 answer

How to wrap long lines for olcAccess?

I tried to define the access permissions by adding a space at the beginning of a new line. But I get an syntax error, I do not understand: # ldapmodify -Y EXTERNAL -Q -H ldapi:/// dn: olcDatabase={2}hdb,cn=config add: olcAccess olcAccess: to * by…
ceving
  • 534
  • 4
  • 26
0
votes
1 answer

OpenLdap LDAP admin group ALC

I have the following LDIF file to create ldapadmins. dn: ou=Manager,dc=example,dc=org objectClass: organizationalUnit objectClass: top ou: Manager dn: ou=Customers,dc=example,dc=org objectClass: organizationalUnit objectClass: top ou:…
0
votes
0 answers

"ldap_modify: Server is unwilling to perform (53) additional info: shadow context; no update referral" ERROR in my ldap server

Iam trying to do multi master replication on my LDAP server on RHEL 7 but I am getting below error while running command: #ldapmodify -Y EXTERNAL -H ldapi:/// -f ldap01.ldif "ldap_modify: Server is unwilling to perform (53) additional info: shadow…
0
votes
1 answer

Bind to slapd ldap server using uid instead of cn

I'm trying to connect to an LDAP server running slapd, using the net_ldap ruby gem. I'm able to perform the bind action using the cn of the user, but I need to use the uid. The LDAP server was created by ClearOS and is otherwise untouched, standard…
AJFaraday
  • 101
  • 4
0
votes
0 answers

Ldap user authentication failure with invalid Credentials

I have a ldap server which is configured like this: cn=adminuser,dc=compnay,dc=com Then i have ccreate ou=users. I want to add some users to this ou with the intention of authenticating them from my python application. so the tree looks something…
anekix
  • 111
  • 5
0
votes
0 answers

How can I make LDAP bind case-senstive?

We're using Open LDAP for our directory. Apparently it allows case-insensitive bind auth, and this is causing some issues on our systems. I would like for authentication to fail for logins that are not the correct case. Is there a configuration…
Ben Davis
  • 280
  • 1
  • 6
  • 18
0
votes
1 answer

When I use ldapadd I get a response with possible options. How can I fix this?

sudo ldapadd -x -D cn=Manager, dc=localhost,dc=localdomain -W -f /home/liveuser/basedomain.ldif Is the code that I type into Fedora31 terminal and the response that I get back is jsut all the available options to use with ldapp even though I have…
0
votes
1 answer

How to set Base DN from FreeIPA to Crowd OpenLDAP directory?

In the Crowd's directory adding item, it can add OpenLDAP and must set Base DN in it. However, how to find or set Base DN on the FreeIPA server? Crowd: FreeIPA: If don't set the right data corectlly, it will cause this error when add a new group…
rawmain
  • 291
  • 1
  • 7
  • 17
-1
votes
2 answers

Group policy on Open LDAP

Active directory on windows can give us many possibilities to manage out network such as Group policy. In my company, we have Linux systems. My question is: Is there any Linux based application or service that can handle the role of active…
R1w
  • 138
  • 3
  • 11
-1
votes
2 answers

OpenLDAP field values within a list

I have set an openLDAP server and I have created a custom schema with various fields and it's working perfectly fine. However, I have some fields which I would like to only have some values. For example, I have a field called deviceLocation and I…
Slye
  • 33
  • 1
  • 7