Questions tagged [opendj]

OpenDJ is an open source, LDAPv3 compliant directory service, built on the Java platform. It has support for LDAPv3, DSMLv2, multi-master replication, access controls, password policies, security and all features you can expect from a modern directory server. But most of all, it's easy to use and of very high performance. OpenDJ is the actively developed fork of the Sun initiated OpenDS project.

OpenDJ is an open source, LDAPv3 compliant directory service, built on the Java platform. It has support for LDAPv3, DSMLv2, multi-master replication, access controls, password policies, security and all features you can expect from a modern directory server. But most of all, it's easy to use and of very high performance. OpenDJ is the actively developed fork of the Sun initiated OpenDS project. For more information about OpenDJ, check https://forgerock.org/opendj/

206 questions
0
votes
1 answer

OpenDJ identity mapper for Simple LDAP Bind?

As I learned from developer guide, SASL supports identity mapper. But I can not find an example of simple bind that uses identity mapper. Does opendj supports that ? An ldapsearch example would be great. Thanks
Feng Xi
  • 1,005
  • 2
  • 11
  • 30
0
votes
1 answer

password history counts current effective password?

LDAP/AD has a password policy which can enforce password history. But does the password history include current effective password as one of history password ? Question: 1. does AD record the current effective password to password history ? 2. As…
Feng Xi
  • 1,005
  • 2
  • 11
  • 30
0
votes
1 answer

Verify Configuration of multiple OpenAM and OpenDJ

I have a solution that uses 2 OpenAMs (v12.0.0) and 2 OpenDJs (v2.6.0). The OpenAMs are behind a load balancer and the OpenDJs are configured so 1 openAM will prefer 1 openDJ and the other OpenAM will prefer the other OpenDJ. Each OpenAM machine has…
user260495
  • 117
  • 2
  • 13
0
votes
1 answer

Customized Password Storage Scheme Type?

I'm customizing the storage Scheme, but seems available storage types are the following: -t, –type {type} The type of Password Storage Scheme which should be created. The value for TYPE can be one of: aes | base64 | bcrypt | blowfish | clear | crypt…
0
votes
1 answer

SSO under Atlassian products using Forgerock OpenAM

I am looking for a current guide to configure single-sign-on (SSO) under Atlassian products like Jira and Confluence with the help of Forgerock OpenAM.
user1791139
  • 606
  • 1
  • 11
  • 27
0
votes
1 answer

How to support pagination for external change log searching to OpenDJ LDAP?

I want to search change log under "cn=changelog". I can search the result normally if the result entries were not a lot. But if there are a lot of entries in the result, the memory will be not enough. So, I want to page the result. How can I define…
Long Cui
  • 1
  • 1
0
votes
1 answer

opendj: is it possible to use subentry based password policy for pass-through?

I know opendj can create a policy of pass-through in cn=config, but cn=config will not be replicated. I'm wondering if it's possible to create such a pass-through policy for sub-entry based ? Thus, replica can work. And my another requirement is…
Feng Xi
  • 1,005
  • 2
  • 11
  • 30
0
votes
1 answer

opendj user a different attribute rather than default ds-pwp-account-disabled to track user's status?

Is there a way to user a different rather than ds-pwp-account-disabled attribute to track user's status ? As I know it's possible to track user's last login time with a customized attribute. I'm wondering is there a similar setting for user status…
Feng Xi
  • 1,005
  • 2
  • 11
  • 30
0
votes
2 answers

SQL Server openDJ integration

I have a requirement where I have to bind MS SQL server users with LDAP (openDJ). Currently I am seeing only option to achieve this is to have AD on SQL server and connect AD with openIDM through LDAP connector. Is there a way this can be achieved…
anshuman
  • 11
  • 3
0
votes
1 answer

Generating OpenAM tokens for a user

Let's say I have two applications, appA and appB. appA has a simple database authentication approach and appB uses ForgeRock's OpenAM. I want a user in appA to be able to SSO into appB. Because the username/password in appA is different then the…
Tyler Wright
  • 795
  • 1
  • 9
  • 28
0
votes
1 answer

Apache LDAP API to Execute a manage-account commad

I m trying to execute OpenDJ's manage-account command through Apache LDAP API. Command: ./manage-account clear-authentication-failure-times -h hostip -p port -D "cn=Directory Manager" -w xxxxxx -b uid=testuser1,ou=users,dc=test,dc=xyz,dc=com -X Does…
Laki
  • 1
  • 1
0
votes
1 answer

replication server with same id in docker/openshift cluster

I'm having problems when setting up replication in openshift/docker cluster. In openshift, each opendj server will have two ips: service ip and pod id. So when I setup two opendj service, two service ip and two pod ip will be there. I want to set…
0
votes
1 answer

opendj EntryNotFoundException

I am new with opendj. Using ConnectionChangeRecordWriter writeChangeRecord() method, I can add an entry into opendj LDAP server with result success . It looks fine. But, immediately after the calling method, I want to search the entry which was…
Long Cui
  • 1
  • 1
0
votes
0 answers

opends:Is there a way for root user account/root Dns to send account notifications based on the password policies?

Description : Enabled SMTP handler and mail properties global configuration via dsconfig, enabled SMTP handler in root user password policy, also configured root user password policy for password expiration notification, created a new root user,…
S R
  • 1
0
votes
1 answer

opendj setup takes 2+ minutes to complete

Is there any reason why my opendj takes more than 2 minutes to complete init setup ? the setup command I'm using is like: setup --cli -p 1389 --baseDN $BASE_DN -h localhost --rootUserDN "${OPENDJ_DIR_MANAGER}" --rootUserPassword…
Feng Xi
  • 1,005
  • 2
  • 11
  • 30