Questions tagged [opendj]

OpenDJ is an open source, LDAPv3 compliant directory service, built on the Java platform. It has support for LDAPv3, DSMLv2, multi-master replication, access controls, password policies, security and all features you can expect from a modern directory server. But most of all, it's easy to use and of very high performance. OpenDJ is the actively developed fork of the Sun initiated OpenDS project.

OpenDJ is an open source, LDAPv3 compliant directory service, built on the Java platform. It has support for LDAPv3, DSMLv2, multi-master replication, access controls, password policies, security and all features you can expect from a modern directory server. But most of all, it's easy to use and of very high performance. OpenDJ is the actively developed fork of the Sun initiated OpenDS project. For more information about OpenDJ, check https://forgerock.org/opendj/

206 questions
77
votes
6 answers

Easy way to test an LDAP User's Credentials

Is there an easy way to test the credentials of a user against an LDAP instance? I know how to write a Java program that would take the 'User DN' and password, and check it against the LDAP instance. However is there any easier way? Specially a…
user1888243
  • 2,591
  • 9
  • 32
  • 44
9
votes
2 answers

What is the difference between OpenDS, OpenDJ and OpenAM?

Hie Please explain which to use when, OpenDS OpenDJ OpenAM. Thanks.
Santosh Mondal
  • 319
  • 1
  • 6
  • 12
6
votes
3 answers

Is OpenDJ, OpenAM and OpenIAM free software

What has been the experience of folks who have already been using OpenDJ and OpenAM? Older versions seem free to use but the new releases don't seem to be free for use. How do they compare to the existing commercial offerings? They look like a…
R-JANA
  • 1,138
  • 2
  • 14
  • 30
5
votes
5 answers

ldapsearch - truncating the result

I am using ldapsearch for getting radius secret, but it is giving truncated result Command I am using is : ./ldapsearch -p 1545 -Z -X -D "cn=Directory Manager" -w passwd -b "o=platform" "(objectClass=*)" | grep -i secret result produced is…
user579527
  • 53
  • 1
  • 3
3
votes
1 answer

Has anyone used OpenAM/OpenDJ/OpenIDM suite without using ForgeRock's Support plans?

We are looking to implement an open source identity management system and have identified ForgeRock's stack as the best technology to implement. The high cost of ForgeRock support and its per-User pricing model, however, is a potential roadblock.…
The Cline
  • 171
  • 3
  • 9
2
votes
1 answer

Are there any possibilities of upgrading OpenDJ LDAP with minimalistic downtime?

I am planning to update LDAP OpenDJ 2.6.4 version to OpenDJ 4.4.11 version. Is there any recommended way to migrate the data to the new OpenDJ 4.4.11 LDAP server with minimalistic downtime? The expectation is to migrate the data records to OpenDJ…
Asel
  • 33
  • 5
2
votes
1 answer

Forgerock - OpenAM - retrieving all valid sessions for a specific user

How would I retrieve all valid sessions for a specific user? For example, if the user is logged in from multiple devices and decides to change password, or reset password. I need to be able to expire all active sessions and log the user out of all…
Sarah A
  • 1,185
  • 12
  • 27
2
votes
1 answer

How does ldapsearch sortorder work?

With OpenDJ 2.6.0 using the ldapsearch wanted to get sorted data. I made several attempts, but the result was always sorted so the same Simple sort asc ./ldapsearch -b 'ou=people,dc=example,dc=com' -S '+cn' -s sub "objectclass=*" cn dn:…
kawu
  • 487
  • 2
  • 5
  • 18
2
votes
1 answer

What is the LDAP schema syntax to specify list of allowed attribute values?

I am new to OpenDJ and LDAP and I want to know what is the LDAP Schema syntax to specify an attribute can have only one of the few values? For example, an User object has an attribute called status that can have only one of these values: Active,…
Nikki
  • 97
  • 10
2
votes
2 answers

OpenDJ with UnboundId LDAP SDK for Java

I got the following problem. There is working OpenDJ server, connection using UnboundID LDAP SKD for Java. I learned how to search for particular entries, but what is the way to obtain value of "entryUUID" attribute for a given entry? OpenDJ says…
y580user
  • 29
  • 5
1
vote
0 answers

OpenAM reset password email sending to old email id

I am using Forgerock OpenAM 13.0.0 as an identity provider. I have tried email Id change and resetting the password through REST API. But when I tried to reset the password it is sending Email to the old email. I didn't see any reference to old…
Abdul
  • 321
  • 4
  • 22
1
vote
1 answer

Can openldap sync Directory Information Tree data using syncrepl from opendj as provider?

My scenario is that we have a centralized Opendj in cloud and we want to sync(pull) the Directory data from this Opendj to an Openldap instance running in same cloud. I am trying to achieve this by using syncrepl by configuring Openldap slapd.conf…
1
vote
1 answer

LDAP bind response - password expiring overrides force password change

I'm implementing the LDAP feature of forcing password change on first login, when a user is added or when admin is changing user's password. I set ds-cfg-force-change-on-add and ds-cfg-force-change-on-reset to true, and following the spec, which…
Dekel tsairi
  • 117
  • 1
  • 8
1
vote
2 answers

Does limiting an LDAP search by baseDN provide any benefit when the attribute being searched on has an index?

We are designing an LDAP schema (specifically for OpenDJ) and we primarily need to be able to search on the mail attribute. We don't need to do a substring search as the user would provide the whole email address when they log in. We already have an…
Caleb
  • 524
  • 5
  • 18
1
vote
0 answers

Run OpenDJ Cluster on Kubernetes

I would like to run an OpenDJ cluster in my kubernetes cluster. In order to do so I used this procedure I've created a StetefulSet, service and storageclass. In order to initialize the replication, I need to run several commands dsreplication enable…
eazary
  • 131
  • 3
  • 12
1
2 3
13 14