Which LDAP is recommended to deploy? - eviltoast

Hi,

I would like to deploy LDAP on PVE container.

Tried below but failure to make LDAP connection.

  • OpenLDAP (over Alpine container)
  • LLDAP (docker)

Mainly for Wi-Fi - Fortigate / radius / Duo 2FA authentication use.

May I know any good setup guide or better replacement ?

It’s good if has UI for account management.

Thanks

  • ZaxLofful@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    I use Authentik or keycloak for this stuff, that way I’m not actually running LDAP; just a connector!

  • rrrmmmrrrmmm@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    If you really only want LDAP, take LLDAP. But most people might want more and in that case KanIDM (LDAP, OAuth2, RADIUS and more) might be what you’re looking for.

    Both projects are modern, written in Rust and very lightweight.

  • adamshand@alien.topB
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    I managed OpenLDAP servers professionally for years. You don’t want to use OpenLDAP unless it’s something you want to learn about.

    LLDAP (or GLAuth) does everything you need in a homelab context for a fraction of the effort, complexity, and hassle.

    • mailliwal@alien.topOPB
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      I have tried to install on Alpine, but doesn’t know how to configure (create user / domain, etc.)

      • adamshand@alien.topB
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        You have climbed mountains and gained skills. Congratulations my friend, now bask in the soothing waters.