Skip to content

Ldap-auth

Logo

Description

Ldap-auth software is for authenticating users who request protected resources from servers proxied by nginx. It includes a daemon (ldap-auth) that communicates with an authentication server, and a webserver daemon that generates an authentication cookie based on the user’s credentials. The daemons are written in Python for use with a Lightweight Directory Access Protocol (LDAP) authentication server (OpenLDAP or Microsoft Windows Active Directory 2003 and 2012).

Image

linuxserver/ldap-auth:latest

Categories

  • Proxyserver

Ports

  • 8888:8888/tcp
  • 9000:9000/tcp

Environment Variables

NameLabelDefaultDescription
TZTZEurope/AmsterdamSpecify a timezone to use for example Europe/Amsterdam
FERNETKEYFERNETKEY``````Optionally define a custom fernet key, has to be base64-encoded 32-byte (only needed if container is frequently recreated, or if using multi-node setups, invalidating previous authentications)
CERTFILECERTFILE``````Point this to a certificate file to enable HTTP over SSL (HTTPS) for the ldap auth daemon
KEYFILEKEYFILE``````Point this to the private key file, matching the certificate file referred to in CERTFILE

Labels

KeyValue
traefik.enabletrue
traefik.http.routers.ldap-auth.ruleHost(`ldap-auth.{$TRAEFIK_INGRESS_DOMAIN}`)
traefik.http.routers.ldap-auth.entrypointshttps
traefik.http.services.ldap-auth.loadbalancer.server.port8888
traefik.http.routers.ldap-auth.tlstrue
traefik.http.routers.ldap-auth.tls.certresolverdefault
traefik.http.routers.ldap-auth.middlewarestraefik-forward-auth
mafl.enabletrue
mafl.titleLdap-auth
mafl.descriptionLdap-auth software is for authenticating users who request protected resources from servers proxied by nginx.
mafl.linkhttps://ldap-auth.{$TRAEFIK_INGRESS_DOMAIN}
mafl.icon.wraptrue
mafl.icon.color#007acc
mafl.status.enabledtrue
mafl.status.interval60
mafl.groupProxyserver
mafl.icon.urlhttps://jumpcloud.com/wp-content/uploads/2016/12/LDAP_Logo-1420591101.jpg

Licensed under the MIT License. Free for all use cases. For enterprise or academic support, please reach out to us.