slapd (Standalone LDAP Daemon) is an LDAP server implementation, part of the OpenLDAP open source project.
Questions tagged [slapd]
95 questions
16
votes
2 answers
LDAP: backup with slapcat vs ldapsearch
Used: openldap-servers-2.4.23-34.el6_5.1.x86_64
Task: create script for crontab to create scheduled database full backup.
1) slapcat - create file in in the default format, Berkeley DB.
2) slapcat can be done while slapd running (if bdb/hdb database…
![](../../users/profiles/204214.webp)
setevoy
- 334
- 2
- 4
- 15
15
votes
2 answers
Basic openldap setup using slapd.d configuration
I'm trying to set up a test openldap server, having not worked with openldap before. I'm using the standard openldap-servers package on a redhat based machine (using Oracle Linux). I've installed the packages, and started the server.
I now have no…
![](../../users/profiles/106671.webp)
thecoop
- 287
- 1
- 2
- 7
4
votes
1 answer
ldap_modify: Insufficient access (50) when changing password
I'm trying to modify the LDAP admin password on a fresh OpenLDAP install on CentOS 6.7 (similar to RHEL 6.7).
I created a file called change_ldap_password.ldif:
# Hash your password:
# slappasswd -h {SSHA} -s "my_password"
# I also tried {1}hdb…
![](../../users/profiles/121584.webp)
Leo
- 973
- 6
- 21
- 38
4
votes
2 answers
Apply changes to PAM changes
Does the server or a specific service needs to be restarted to let changes to pam files (/etc/pam.d/system-auth) take effect?
longer version - I'm working on configuring SSSD to connect with LDAP for authentication purposes. The system is RHEL6…
![](../../users/profiles/250189.webp)
omnivir
- 99
- 1
- 1
- 3
3
votes
1 answer
slapd : attribute type undefined
I'm trying to put a config of slapd on the new server.
I did it the same way, but it was probably two years ago and in slightly different environnement (I'm on the Debian actually and it was on CentOS before).
I have a config file in ldif format and…
![](../../users/profiles/352921.webp)
Paul Zakharov
- 141
- 1
- 5
3
votes
3 answers
what names for TLS certificates when using SRV records
When I'm using a SRV DNS record, what name(s) do I put in the TLS certificate? For example, if I'm setting up slapd on two servers (klas1 and klas2), and I define these DNS records (using bind zone file style notation):
_ldap._tcp.example.com. IN …
![](../../users/profiles/185274.webp)
Geoff Crompton
- 151
- 7
3
votes
1 answer
OpenLDAP gives duplicate attributeType error
I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes.
The problem seems to lie in the "gecos" field attribute. when I try to run slapcat or slapadd or…
![](../../users/profiles/237685.webp)
Zachary
- 148
- 1
- 5
3
votes
1 answer
Failed to bind to server ldap:// Error: Can't contact LDAP server
We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also have users stating that they are unable to access…
![](../../users/profiles/208435.webp)
TUadmin
- 31
- 1
- 1
- 2
3
votes
3 answers
How do I renew an expired Ubuntu OpenLDAP SSL Certificate
We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd.
Here are the commands we used:
openssl verify hostname_domain_com_cert.pem
We got back that the certificate…
![](../../users/profiles/142429.webp)
Zhenya
- 31
- 1
- 6
3
votes
2 answers
Can't contact LDAP server remotely from Mac
I'm trying to configure a LDAP server with some basic security parameters, including TLS and required authenticated binding.
I have started the server, and can access it from localhost with the command:
ldapsearch -x -b 'dc=server,dc=com'…
![](../../users/profiles/107842.webp)
Geoffroy
- 218
- 4
- 10
2
votes
2 answers
Creating POSIX group without members in LDAP
I am running OpenLDAP database with activated rfc2307bis schema. I'm trying now to load new groups in my testing instance (Debian) and everything works fine. With the old rfc2307 (NIS) schema, it was not necessary to specify members of a group…
![](../../users/profiles/529448.webp)
Jiří Juřica
- 29
- 7
2
votes
2 answers
recover ldap database without log files
A colleague of mine accidentally deleted ldap transaction log files (from /var/lib/ldap) on our ldap 2.4 server running on centos. Now the slapd deamon won't start, when running it with debug flag here'e what is says:
file id2entry.bdb has LSN…
![](../../users/profiles/540347.webp)
Assil
- 141
- 4
2
votes
3 answers
slapd.d missing after installation
I am following the instructions on https://www.openldap.org/doc/admin24/quickstart.html to install OpenLDAP on RedHat. Everything goes fine until step 9:
Import the configuration database
You are now ready to import your configration database for…
![](../../users/profiles/492905.webp)
zero_yu
- 143
- 2
- 5
2
votes
1 answer
openldap with macOS Clients
I try to configure the mac clients to use a LDAP to connect to their session (using openLDAP).
I have created PosixAccounts with PosixGroups, and tried on ubuntu systems : I can log-in with my users.
But On macOS (tried with Mojave and Sierra) I…
![](../../users/profiles/227350.webp)
d3cima
- 133
- 6
2
votes
1 answer
ldap on Ubuntu 16.04 - Invalid credentials (49)
I'm trying to set up a local LDAP instance so I can debug some software that uses LDAP for authentication. I had this working correctly on Ubuntu 14.04 LTS, but trying to upgrade to Ubuntu 16.04 LTS nuked by box and I reinstalled for scratch Ubunut…
![](../../users/profiles/158071.webp)
Stephen M -on strike-
- 151
- 1
- 2
- 10