Hi,

I would like to deploy LDAP on PVE container.

Tried below but failure to make LDAP connection.

  • OpenLDAP (over Alpine container)
  • LLDAP (docker)

Mainly for Wi-Fi - Fortigate / radius / Duo 2FA authentication use.

May I know any good setup guide or better replacement ?

It’s good if has UI for account management.

Thanks

  • rrrmmmrrrmmm@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    10 months ago

    If you really only want LDAP, take LLDAP. But most people might want more and in that case KanIDM (LDAP, OAuth2, RADIUS and more) might be what you’re looking for.

    Both projects are modern, written in Rust and very lightweight.

  • bsmk_@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    10 months ago

    Today I would setup Authentik and use their LDAP outpost, but mostly of my use is SAML so that makes sense for me.

  • adamshand@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    10 months ago

    I managed OpenLDAP servers professionally for years. You don’t want to use OpenLDAP unless it’s something you want to learn about.

    LLDAP (or GLAuth) does everything you need in a homelab context for a fraction of the effort, complexity, and hassle.

      • adamshand@alien.topB
        link
        fedilink
        English
        arrow-up
        1
        ·
        10 months ago

        You have climbed mountains and gained skills. Congratulations my friend, now bask in the soothing waters.

    • mailliwal@alien.topOPB
      link
      fedilink
      English
      arrow-up
      1
      ·
      10 months ago

      I have tried to install on Alpine, but doesn’t know how to configure (create user / domain, etc.)

  • ZaxLofful@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    10 months ago

    I use Authentik or keycloak for this stuff, that way I’m not actually running LDAP; just a connector!