Symas Knowledge Base

Using OpenLDAP with jellyfin

Published April 28th, 2024 by Marty Heyman

Jellyfin, the free and open-source media server, offers the ability to centralize media streaming across devices. For organizations or advanced home networks, integrating OpenLDAP with Jellyfin provides centralized user authentication and access control. This guide walks you through configuring Jellyfin to use OpenLDAP for user login, enabling a sea

Using OpenLDAP with emby

Published April 28th, 2024 by Marty Heyman

Emby only uses LDAP to create users and validate passwords upon login. Emby administrators are always validated via native emby login. For more details see. Replace dc=example,dc=com with your OpenLDAP configured domain. Bind DN cn=admin,ou=people,dc=example,dc=com Bind Credentials changeme (replace with your password) User search base ou=people,dc=

Using OpenLDAP with Home Assistant

Published May 3rd, 2024 by Marty Heyman

Home Assistant is an open-source home automation platform that allows users to control and automate their smart home devices from a central interface. It offers a flexible and customizable way to manage a wide range of devices and services, enabling users to create custom rules and automate tasks within their homes. Home Assistant emphasizes local c

Using OpenLDAP with Calibre Web

Published April 22nd, 2024 by Marty Heyman

Adapted from instructions on the Wiki for Calibre-Web (Wiki page) as of 2023-11-16. Installation LDAP can be used as login provider for Calibre-Web. Depending on your distro some packages need to be installed. As further prerequiste you need to install the dependencies listed in optional-requirements.txt in the LDAP section. Configuration After a re

Using OpenLDAP with Dell IDRAC

Published April 22nd, 2024 by Marty Heyman

iDRAC 9 iDRAC 9 can only be connected to LDAPS, so make sure you have that enabled. The settings then are as follows: Use Distinguished Name to Search Group Membership Enabled LDAP Server Address Your server address fully qualified domain name, IP Address, localhost if appropriate LDAP Server Port Your LDAPS port, eg. 636 Bind DN uid=admin,ou=people

Using OpenLDAP with `dolibarr`

Published April 28th, 2024 by Marty Heyman

This example will help you to create users in dolibarr from your users in your ldap server from a specific group and to login with the password from the ldap server. In Dolibarr, install the LDAP module from Home -> Modules/Applications Go to the configuration of this module and fill it like this: Users and groups synchronization: LDAP -> Doli

Using OpenLDAP with Matrix's Synapse home server software

Published June 4th, 2024 by Marty Heyman

Matrix's Synapse is the reference implementation of a Matrix homeserver, written in Python. It allows users to run their own messaging server and participate in the decentralized Matrix network. Think of it as the core software that powers a Matrix server, similar to how an email server works. To use OpenLDAP with Matrix’s Synapse homeserver softwa

Using OpenLDAP with Jitsi Meet

Published July 15th, 2025 by Marty Heyman

Jitsi Meet is a powerful, open-source video conferencing platform, and securing access to your instance is critical—especially in self-hosted environments. One common enterprise-grade authentication solution is OpenLDAP. In this guide, you’ll learn how to integrate OpenLDAP with Jitsi Meet to control who can create or join meetings. Prerequisites Be

Using Apache Guacamole with OpenLDAP

Published April 22nd, 2024 by Marty Heyman

!! IMPORTANT - LDAP only works with LDAP if using a database authentication. Apache Guacamole does support using LDAP to store its user config but that is not in scope of this article. To setup LDAP Using guacamole.properties Open and edit your Apache Guacamole properties files located at guacamole/guacamole.properties Uncomment and insert the below

Using OpenLDAP with NextCloud

Published June 4th, 2024 by Marty Heyman

You would use OpenLDAP with Nextcloud to centralize user management, allowing Nextcloud to authenticate users against an existing OpenLDAP directory, eliminating the need for separate Nextcloud accounts and enabling consistent control over user access and group memberships across multiple applications. This integration leverages OpenLDAP as the prim

Using OpenLDAP with gitea

Published April 28th, 2024 by Marty Heyman

In Gitea, go to Site Administration > Authentication Sources and click Add Authentication Source Select LDAP (via BindDN) Host: Your ldap server’s ip/hostname Port: Your ldap server’s port (389 by default) Bind DN: uid=admin,ou=people,dc=example,dc=com Bind Password: Your bind user’s password User Search Base: ou=people,dc=example,dc=com User Fil

Using OpenLDAP with ZendTo

Published May 20th, 2024 by Marty Heyman

ZendTo is a web-based file transfer and collaboration system, primarily used for secure sharing of files, especially those containing sensitive or confidential data. It allows users to upload and share files with both internal and external recipients, and it is designed for ease of use and security. This configuration assumes your OpenLDAP director

Using OpenLDAP with Bookstack

Published April 22nd, 2024 by Marty Heyman

Example Bookstack .env file additions for usin with OpenLDAP ## ADD after values in the existing .env file. ## To keep existing documents, you might need to alter ownership/permission in the bookstack database. # General auth AUTH_METHOD=ldap # The LDAP host, Adding a port is optional LDAP_SERVER=ldap://<fully-qualified-domain-name or IP address&

Using OpenLDAP with Zabbix

Published May 20th, 2024 by Marty Heyman

Zabbix is a powerful, open-source monitoring solution designed to monitor the performance and availability of various IT components, including networks, servers, virtual machines, and cloud services. It collects and displays metrics, allowing for real-time analysis and alerting based on predefined events. This example is for the Zabbix Web interfac

Using OpenLDAP with Dokuwiki

Published April 16th, 2024 by Marty Heyman

DokuWiki is a popular, open-source, file-based wiki software written in PHP, designed primarily for creating documentation, knowledge bases, and manuals without requiring a database. It is known for being lightweight, easy to maintain, and highly versatile, featuring a simple syntax, built-in access controls, and a vibrant community-supported plugin

Using OpenLDAP with Authentik

Published April 18th, 2024 by Marty Heyman

Authentik is an open-source, self-hosted Identity Provider (IdP) and Single Sign-On (SSO) platform designed to secure, manage, and authenticate users across applications. It functions as a flexible alternative to solutions like Okta or Azure AD, supporting protocols such as OAuth2, SAML, LDAP, and SCIM. Key features include multi-factor authenticati

Using OpenLDAP with KeyCloak

Published May 3rd, 2024 by Marty Heyman

Keycloak is an open-source Identity and Access Management (IAM) solution designed to easily secure modern applications and services using standards like OAuth 2.0, OpenID Connect, and SAML 2.0. It provides features such as single sign-on (SSO), social login, and user federation with LDAP/Active Directory. As a CNCF-incubating project, it is widely u

Using OpenLDAP with Wekan

Published May 20th, 2024 by Marty Heyman

WeKan provides quite sophisticated LDAP authentication. Their wiki page is here. Their Docker Compose file with all possible LDAP configuration values and their explanation is here. Docker Sample Settings Here is a working example for an LDAP configuration via Docker Compose Environment variables: environment: # Other values for your WeKan installat

Using OpenLDAP with Mealie

Published June 4th, 2024 by Marty Heyman

Mealie is an open-source, self-hosted recipe manager and meal planner designed for digitizing family recipes . It features a user-friendly interface that imports recipes via URL, removes ads/unnecessary stories, generates automated shopping lists, and supports multi-user collaboration. It is often used with Docker and integrates with smart home syst

Using OpenLDAP with Zulip

Published May 20th, 2024 by Marty Heyman

Zulip combines the immediacy of real-time chat with an email threading model. Their ldap-documentation is here: zulip.readthedocs.io Zulip has two installation methods, either by running the recommended installer or by docker/podman compose. The way how the service is configured differs depending on the installation method, so keep in mind you will

Using OpenLDAP with Minio

Published June 4th, 2024 by Marty Heyman

MinIO is a High-Performance Object Storage released under GNU Affero General Public License v3. 0. It is API compatible with the Amazon S3 cloud storage service. This example assists with basic LDAP configuration and policy attachment. LDAP Config Navigation Login to the WebUI as a consoleAdmin user Navigate to Administrator > Identity > LDAP

Using OpenLDAP with Airsonic Advanced

Published April 18th, 2024 by Marty Heyman

Replace dc=example,dc=com with the suffix used in your OpenLDAP server. LDAP URL ldap://ldap:389/ou=people,dc=example,dc=com LDAP search filter (&(uid={0})(memberof=cn=airsonic,ou=groups,dc=example,dc=com)) LDAP manager DN cn=admin,ou=people,dc=example,dc=com Password admin-password Make sure the box "Automatically create users" in Airsonic is c

Using OpenLDAP with jenkins

Published April 28th, 2024 by Marty Heyman

Jenkins is an open-source automation server that facilitates continuous integration and continuous delivery (CI/CD) in software development. It automates the process of building, testing, and deploying software, streamlining the development pipeline. Jenkins achieves this by integrating with various tools and systems through its extensive plugin eco

Using OpenLDAP with Kanboard

Published May 3rd, 2024 by Marty Heyman

Kanboard is a free, open-source, self-hosted project management tool designed for minimalism and efficiency using the Kanban methodology. It features a drag-and-drop web interface for visualizing tasks, setting work-in-progress (WIP) limits, and automating workflows. It is lightweight, allows for task, subtask, and comment tracking, and is highly cu

Using OpenLDAP with ejabberd

Published April 28th, 2024 by Marty Heyman

The main documentation is here. This is a summary. It is intended to help you get a service up using OpenLDAPfor authentication as quickly and simply as possible. For simple user auth add this to main ejabberd.yml: host_config: xmpp.example.org: auth_method: [ldap] ldap_servers: - 127.0.0.1 #IP or hostname of OpenLDAP server ldap_port: 389 ldap_uid

Using OpenLDAP with DEX

Published April 22nd, 2024 by Marty Heyman

# ldap configuration: # OpenLDAP_LDAP_BASE_DN: dc=example,dc=com # ############################## # rest of the Dex options # ############################## connectors: - type: ldap id: ldap name: LDAP config: host: ldap-host # make sure it does not start with `ldap://` port: 389 # or 636 if you have ldaps enabled insecureNoSSL: true # or false if

Using OpenLDAP with Wikijs

Published May 20th, 2024 by Marty Heyman

This example is for the Zabbix Web interface version 6.0, which is the supported LTS version as of August 2023. Later versions have additional options. For the associated 6.0 documentation see here, and for the current manual see here. Note that an LDAP user must exist in Zabbix Web as well, however its Zabbix password will not be used. When creatin

Using OpenLDAP with LibreNMS

Published June 4th, 2024 by Marty Heyman

LibreNMS is a fully-featured, open-source network monitoring system written in PHP. It utilizes SNMP to automatically discover and monitor various network devices and services, including routers, switches, servers, and more. LibreNMS offers features like customizable dashboards, alerting, and a comprehensive API for management and data retrieval. Y

Using OpenLDAP with Aperio CAS Server

Published April 22nd, 2024 by Marty Heyman

Replace dc=example,dc=com with your LDAP configured domain, and hostname for your LDAP server. The search-filter provided here requires users to be members of the cas_auth group in LDAP. Configuration to use LDAP in e.g. /etc/cas/config/standalone.yml cas: authn: ldap: - base-dn: dc=example,dc=com bind-credential: password bind-dn: uid=admin,ou=peop

Using OpenLDAP with ergo

Published April 28th, 2024 by Marty Heyman

Please see the Main documentation here. This article is a quick-start, the main docs go into greater detail adding more options and capabilities. For simple user auth prepare a ldap-config.yaml with the following settings host: "127.0.0.1" port: 389 timeout: 30s # uncomment for TLS / LDAPS: # use-ssl: true bind-dn: "uid=%s,ou=people,dc=example,dc=or