1
Which LDAP is recommended to deploy? (alien.top)
submitted 2 years ago by [B] to c/main@selfhosted.forum
8 comments fedilink hide all child comments
 

Hi,

I would like to deploy LDAP on PVE container.

Tried below but failure to make LDAP connection.

  • OpenLDAP (over Alpine container)
  • LLDAP (docker)

Mainly for Wi-Fi - Fortigate / radius / Duo 2FA authentication use.

​

May I know any good setup guide or better replacement ?

It's good if has UI for account management.

Thanks

all 8 comments

sorted by: hot top controversial new old
[–] [B] 1 point 2 years ago

Today I would setup Authentik and use their LDAP outpost, but mostly of my use is SAML so that makes sense for me.

  • permalink
  • fedilink
  • source
    •
    [–] [B] 1 point 2 years ago

    If you have 2gb for a separate VM then go with freeipa

  • permalink
  • fedilink
  • source
    •
    [–] [B] 1 point 2 years ago (3 children)

    I managed OpenLDAP servers professionally for years. You don't want to use OpenLDAP unless it's something you want to learn about.

    LLDAP (or GLAuth) does everything you need in a homelab context for a fraction of the effort, complexity, and hassle.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
    • [–] [B] 1 point 2 years ago

    I use Authentik or keycloak for this stuff, that way I’m not actually running LDAP; just a connector!

  • permalink
  • fedilink
  • source
    •
    [–] [B] 1 point 2 years ago

    If you really only want LDAP, take LLDAP. But most people might want more and in that case KanIDM (LDAP, OAuth2, RADIUS and more) might be what you're looking for.

    Both projects are modern, written in Rust and very lightweight.

  • permalink
  • fedilink
  • source
    •