Contact Us
If you still have questions or prefer to get help directly from an agent, please submit a request.
We’ll get back to you as soon as possible.
Marty Heyman
mheyman@symas.com
0
Article
Last Month
Using OpenLDAP with Mealie
Published June 4th, 2024 by Marty Heyman
Configuration is done solely with environmental variables in the mealie-api docker-compose config: Note LDAP integration in Mealie currently only works with the nightly branch, so hkotel/mealie:api-nightly and hkotel/mealie:frontend-nightly rather than the current “stable” release of v1.0.0beta-5 Configuration The following config should let you log
Using OpenLDAP with jellyfin
Published April 28th, 2024 by Marty Heyman
Replace dc=example,dc=com with your LDAP configured domain. LDAP Bind User uid=admin,ou=people,dc=example,dc=com LDAP Base DN for searches ou=people,dc=example,dc=com LDAP Attributes uid, mail LDAP Name Attribute uid User Filter If you have a media group, you can use: (memberof=cn=media,ou=groups,dc=example,dc=com) Otherwise, just use: (uid=*) Admin
Using OpenLDAP with gitea
Published April 28th, 2024 by Marty Heyman
In Gitea, go to Site Administration > Authentication Sources and click Add Authentication Source Select LDAP (via BindDN) Host: Your ldap server’s ip/hostname Port: Your ldap server’s port (389 by default) Bind DN: uid=admin,ou=people,dc=example,dc=com Bind Password: Your bind user’s password User Search Base: ou=people,dc=example,dc=com User Fil
Using OpenLDAP with Zabbix
Published May 20th, 2024 by Marty Heyman
This example is for the Zabbix Web interface version 6.0, which is the supported LTS version as of August 2023. Later versions have additional options. For the associated 6.0 documentation see here and for the current manual see here. Note that an LDAP user must exist in Zabbix Web as well, however its Zabbix password will not be used. When creating
Using OpenLDAP with Zulip
Published May 20th, 2024 by Marty Heyman
Zulip combines the immediacy of real-time chat with an email threading model. Their ldap-documentation is here: zulip.readthedocs.io Zulip has two installation methods, either by running the recommended installer or by docker/podman compose. The way how the service is configured differs depending on the installation method, so keep in mind you will
Using OpenLDAP with LibreNMS
Published June 4th, 2024 by Marty Heyman
You can either configure LibreNMS from the webui or from the command line. This is a list of the variables that you should set. Essential auth_ldap_uid_attribute uid This sets ‘uid’ as the unique ldap attribute for users. auth_ldap_groupmemberattr member auth_ldap_groups {"nms_admin": {"level": 10}}' or auth_ldap_groups.nms_admin.level: 10 These are
Using OpenLDAP with Wikijs
Published May 20th, 2024 by Marty Heyman
This example is for the Zabbix Web interface version 6.0, which is the supported LTS version as of August 2023. Later versions have additional options. For the associated 6.0 documentation see here and for the current manual see here. Note that an LDAP user must exist in Zabbix Web as well, however its Zabbix password will not be used. When creating
Using OpenLDAP with ZendTo
Published May 20th, 2024 by Marty Heyman
This configuration assumes your OpenLDAP directory uses memberof for automatic group management. As of OpenLDAP 2.5.18 and 2.6.8, an additional overlay, autogroup should also be added to your OpenLDAP configuration (this can be done dynamically on a server running those Release Levels or higher). If you are running OpenLDAP 2.4 or older releases of
Using OpenLDAP with Home Assistant
Published May 3rd, 2024 by Marty Heyman
Home Assistant configures ldap auth via the Command Line Auth Provider. The wiki mentions a script that can be used for LDAP authentication, but it doesn’t work in the container version (it is lacking both ldapsearch and curl ldap protocol support). Thankfully OpenLDAP has a graphql API to save the day! Graphql-based Auth Script The auth script atte
Using OpenLDAP with `dolibarr`
Published April 28th, 2024 by Marty Heyman
This example will help you to create users in dolibarr from your users in your ldap server from a specific group and to login with the password from the ldap server. In Dolibarr, install the LDAP module from Home -> Modules/Applications Go to the configuration of this module and fill it like this: Users and groups synchronization: LDAP -> Doli
Using OpenLDAP with Airsonic Advanced
Published April 18th, 2024 by Marty Heyman
Replace dc=example,dc=com with the suffix used in your OpenLDAP server. LDAP URL ldap://ldap:389/ou=people,dc=example,dc=com LDAP search filter (&(uid={0})(memberof=cn=airsonic,ou=groups,dc=example,dc=com)) LDAP manager DN cn=admin,ou=people,dc=example,dc=com Password admin-password Make sure the box "Automatically create users" in Airsonic is c
Using OpenLDAP with Calibre Web
Published April 22nd, 2024 by Marty Heyman
Adapted from instructions on the Wiki for Calibre-Web (Wiki page) as of 2023-11-16. Installation LDAP can be used as login provider for Calibre-Web. Depending on your distro some packages need to be installed. As further prerequiste you need to install the dependencies listed in optional-requirements.txt in the LDAP section. Configuration After a re
Using OpenLDAP with emby
Published April 28th, 2024 by Marty Heyman
Emby only uses LDAP to create users and validate passwords upon login. Emby administrators are always validated via native emby login. For more details see. Replace dc=example,dc=com with your OpenLDAP configured domain. Bind DN cn=admin,ou=people,dc=example,dc=com Bind Credentials changeme (replace with your password) User search base ou=people,dc=
Using OpenLDAP with Kanboard
Published May 3rd, 2024 by Marty Heyman
Add these to the Kanboard config.php Make sure you adapt the constant LDAP_SERVER to the correct LDAP endpoint. You also might have to change dc=example,dc=com to whatever your OpenLDAP is handling, and maybe change the kanboard_users group name used in LDAP_USER_FILTER to identify users of a valid group of yours. define('LDAP_AUTH', true); define('
Using OpenLDAP with Minio
Published June 4th, 2024 by Marty Heyman
MinIO is a High-Performance Object Storage released under GNU Affero General Public License v3. 0. It is API compatible with the Amazon S3 cloud storage service. This example assists with basic LDAP configuration and policy attachment. LDAP Config Navigation Login to the WebUI as a consoleAdmin user Navigate to Administrator > Identity > LDAP
Using OpenLDAP with ejabberd
Published April 28th, 2024 by Marty Heyman
The main documentation is here. This is a summary. It is intended to help you get a service up using OpenLDAPfor authentication as quickly and simply as possible. For simple user auth add this to main ejabberd.yml: host_config: xmpp.example.org: auth_method: [ldap] ldap_servers: - 127.0.0.1 #IP or hostname of OpenLDAP server ldap_port: 389 ldap_uid
Using OpenLDAP with Authentik
Published April 18th, 2024 by Marty Heyman
Use the following configuration settings. Make sure you replace “dc=example,dc=com” with the root DN for your OpenLDAP service. Name ldap Slug ldap Enabled Sync Users User password writeback Sync groups Connection settings Server URI ldap://<server fully-qualified-domain-name or IP address>:389 Enable StartTLS TLS Verification Certificate ----
Using OpenLDAP with Matrix's Synapse home server software
Published June 4th, 2024 by Marty Heyman
To use OpenLDAP with Matrix’s Synapse homeserver software, you can customize this YAML file to insert in the Synapse configuration file: modules: - module: "ldap_auth_provider.LdapAuthProviderModule" config: enabled: true uri: "ldap://ldap" start_tls: false base: "ou=people,dc=example,dc=com" attributes: uid: "uid" mail: "mail" name: "cn" bind_dn: "
Using OpenLDAP with Wekan
Published May 20th, 2024 by Marty Heyman
WeKan provides quite sophisticated LDAP authentication. Their wiki page is here: https://github.com/wekan/wekan/wiki/LDAP Their Docker Compose file with all possible LDAP configuration values and their explanation is here: https://github.com/wekan/wekan/blob/master/docker-compose.yml Docker Sample Settings Here is a working example for an LDAP confi
Using OpenLDAP with jenkins
Published April 28th, 2024 by Marty Heyman
Jenkins base setup To setup OpenLDAP for Jenkins navigate to Dashboard/Manage Jenkins/Security. Note: Jenkins LDAP plugin has to be installed! Note: “dc=example,dc=com” is default configuration, you should replace it with your base DN. Set Security Realm to LDAP Click Add Server Setup config fields as stated below Config fields Server (This can be r
Using OpenLDAP with Jitsi-Meet
Published May 3rd, 2024 by Marty Heyman
In the .env file ## Enable authentication ENABLE_AUTH=1 ## Enable guest access ENABLE_GUESTS=1 ## Select authentication type AUTH_TYPE=ldap ## LDAP authentication ## LDAP url for connection LDAP_URL=ldap://IP:389 ## LDAP base DN. LDAP_BASE=ou=people,dc=example,dc=com ## LDAP user DN. LDAP_BINDDN=uid=admin,ou=people,dc=example,dc=com ## OpenLDAP admi
Using OpenLDAP with ergo
Published April 28th, 2024 by Marty Heyman
Please see the Main documentation here. This article is a quick-start, the main docs go into greater detail adding more options and capabilities. For simple user auth prepare a ldap-config.yaml with the following settings host: "127.0.0.1" port: 389 timeout: 30s # uncomment for TLS / LDAPS: # use-ssl: true bind-dn: "uid=%s,ou=people,dc=example,dc=or
Using OpenLDAP with VaultWarden
Published May 20th, 2024 by Marty Heyman
Clicking will send an invitation to any member of the group vaultwarden. Replace dc=example,dc=com with your OpenLDAP configured domain. docker-compose.yml to run vaultwarden_ldap version: '3' services: ldap_sync: image: vividboarder/vaultwarden_ldap:0.6-alpine volumes: - ./config.toml:/config.toml:ro environment: CONFIG_PATH: /config.toml RUST_BACK
Using OpenLDAP with Dokuwiki
Published April 16th, 2024 by Marty Heyman
LDAP configuration is in /dokuwiki/conf/local.protected.php: $conf['useacl'] = 1; //enable ACL $conf['authtype'] = 'authldap'; //enable this Auth plugin $conf['superuser'] = 'admin'; $conf['plugin']['authldap']['server'] = ' ldap://ldap_server:389'; #IP of your ldap $conf['plugin']['authldap']['usertree'] = 'ou=
Using Apache Guacamole with OpenLDAP
Published April 22nd, 2024 by Marty Heyman
!! IMPORTANT - LDAP only works with LDAP if using a database authentication. Apache Guacamole does support using LDAP to store its user config but that is not in scope of this article. To setup LDAP Using guacamole.properties Open and edit your Apache Guacamole properties files located at guacamole/guacamole.properties Uncomment and insert the below
Using OpenLDAP with Bookstack
Published April 22nd, 2024 by Marty Heyman
Example Bookstack .env file additions for usin with OpenLDAP ## ADD after values in the existing .env file. ## To keep existing documents, you might need to alter ownership/permission in the bookstack database. # General auth AUTH_METHOD=ldap # The LDAP host, Adding a port is optional LDAP_SERVER=ldap://<fully-qualified-domain-name or IP address&
Using OpenLDAP with Dell IDRAC
Published April 22nd, 2024 by Marty Heyman
iDRAC 9 iDRAC 9 can only be connected to LDAPS, so make sure you have that enabled. The settings then are as follows: Use Distinguished Name to Search Group Membership Enabled LDAP Server Address Your server address fully qualified domain name, IP Address, localhost if appropriate LDAP Server Port Your LDAPS port, eg. 636 Bind DN uid=admin,ou=people
Using OpenLDAP with DEX
Published April 22nd, 2024 by Marty Heyman
# ldap configuration: # OpenLDAP_LDAP_BASE_DN: dc=example,dc=com # ############################## # rest of the Dex options # ############################## connectors: - type: ldap id: ldap name: LDAP config: host: ldap-host # make sure it does not start with `ldap://` port: 389 # or 636 if you have ldaps enabled insecureNoSSL: true # or false if
Using OpenLDAP with NextCloud
Published June 4th, 2024 by Marty Heyman
ldap users & groups This example is using following users & groups in ldap : A technical user (ex: ro_admin), member of ldap_strict_readonly or ldap_password_manager A catch-all group called nextcloud_users. Members of nextcloud_users group will be authorized to log in Nextcloud. Some “application” groups, let’s say friends and family: users
Using OpenLDAP with HedgeDoc in a Docker Container
Published June 4th, 2024 by Marty Heyman
Write your initial question/sentence to troubleshoot Button Text This content will be shown (depending on) when button above is clicked Hedgedoc is a platform to write and share markdown. Using docker variables Any member of the group hedgedoc can log into hedgedoc. - CMD_LDAP_URL=ldap://ldap:389 - CMD_LDAP_BINDDN=uid=admin,ou=people,dc=exam
Using OpenLDAP with KeyCloak
Published May 3rd, 2024 by Marty Heyman
Configuring KeyCloak takes a bit of effort. Once the KeyCloak instance is up and you logged in as admin (see this guide to get started with KeyCloak), you’ll need to configure the LDAP mapping. Keep in mind that OpenLDAP is read-only: that means that if you create some users in KeyCloak, they won’t be reflected to OpenLDAP. Instead, you should creat
Using OpenLDAP with Aperio CAS Server
Published April 22nd, 2024 by Marty Heyman
Replace dc=example,dc=com with your LDAP configured domain, and hostname for your LDAP server. The search-filter provided here requires users to be members of the cas_auth group in LDAP. Configuration to use LDAP in e.g. /etc/cas/config/standalone.yml cas: authn: ldap: - base-dn: dc=example,dc=com bind-credential: password bind-dn: uid=admin,ou=peop
Load More