Hello, I’m new to LDAP and need a bit of help. I installed lldap in Docker and got the basic settings configured, but I need some context on how to properly create new accounts and how to secure the server. Does using an Nginx reverse proxy with a Let’s Encrypt certificate help for securing it? I also tried to create an account with: uid=testuser,ou=people,dc=aclab,dc=lan but I get this error:

Error: Error getting user details: Errors: [user:2:3: Entity not found: uid=testuser,ou=people,dc=aclab,dc=lan]

I’d appreciate some help since I can’t find useful information on the internet.

message has been deleted

Welcome! In what sense do you need to 'secure' the server? Were you planning on exposing it to the outside world?

I have used Caddy to provide TLS termination (https) for the frontend, but the port that is used to get data from i dont expose outside of localhost

I’m running this in my homelab, mostly for learning and tinkering. I’ve been playing around with different services, like a mail server I run behind a VPN, Jellyfin, and a couple of others, and I’d like to experiment with using LDAP as a central account system. So it’s not production-critical, just a way to learn how the LDAP protocol works and how to hook multiple services into it.

I then use authelia to connect to lldap and provide oidc to other services

My mail server is publicly reachable, so I need to ensure LDAP traffic is encrypted and safe

That is true, some of them support user headers though that authelia/caddy can provide to identify the user after they have authenticated

Okay so if you want the admin panel exposed to the world, nginx as rev proxy is definitely a good idea. For the ldap ssl setup you can either go with the LLDAP built-in way where you just give the server a cert in the config, or you can go the route of letting nginx terminate the connection, although I'm not entirely sure what you'd need to do for that

Regarding the error, I figured out what I did wrong, I had created the user incorrectly. As for the LDAP admin panel, it’s online and secure. The only problem I have now is LDAPS: I’m not sure whether I need to use a self-signed certificate or if I can use the “Streams” option in NPM to encrypt the outgoing traffic using a Let’s Encrypt certificate. That would be easier to manage.

I think you'd just have to try both ways out🙂

What about the default LDAP search , shown on the GitHub page It’s a bit confusing. Will this filter work: (memberOf=ou=people,dc=example,dc=com)?

memberOf is for groups

I had problems setting things up with a certificate from Let's Encrypt, but it worked with a self-signed certificate. Now I need to figure out how to create groups and set up the LDAP search filter. I also have to test whether the streams over NPM work or not. I want to thank all of you for the support, it has helped me understand it a bit more.

I'm guessing you're setting up jellyfin. Did you check out our configurations guides?

I just found the example_configs directory on GitHub.

You can enable verbose mode in LLDAP and have more useful logs

okay, ill try that after a break