Configuring QNAP for LLDAP LLDAP #troubleshooting

Configuring QNAP for LLDAP

Shadow_8472

08/24/2026, 11:32 PM

OK, here's what I have: - Podman (Container engine) - PostgreSQL container - LLDAP container - LDAP accounts confirmed present in PostgreSQL database - LLDAP's WebUI is behind Caddy (reverse proxy) - Unencrypted LDAP traffic from port 389 is reaching the LDAP server inside LLDAP. - Bare metal reboot tested Now I have a QNAP NAS I'm trying to configure, but I can't seem to get "Domain Users" to show up. Domain Security/LDAP authentication - Select the type of LDAP server: Remote LDAP server - Status: Online / You are not authorized to use this function. - LDAP server host: ldap.mydomain.lan - LDAP security: ldap:// - Base DN: dc=mydomain,dc=lan - RootDN: uid=customadmin,ou=people,dc=mydomain,dc=lan - Password:

Password manager special, copy-pasted as CustomAdmin's password as well

Search scope: Subtree Users base DN: dc=mydomain,dc=lan Group base DN: dc=mydomain,dc=lan Notes: - Omitting the ou's from the Users/Group base DN fields was the idea of my AI agent, citing LLDAP's "flat" structure. - I used TCPDump/Wireshark to examine LLDAP's rejection packets and changed

id

uid

and added

ou=people

. - LDAP appears to be complaining to my NAS about "invalidCredentials:"

LDAP 86 bindResponse(1) invalidCredentials

. So, I guess my big question right now is, which credentials am I supposed to give QNAP?

Answer Overflow

08/24/2026, 11:32 PM

message has been deleted

Shadow_8472

08/26/2026, 10:22 AM

Situation update: Apparently, LLDAP is telling my QNAP that my admin account in the

lldap_admin

group that it doesn't have permission to search.

Shadow_8472

08/27/2026, 11:59 PM

Situation update: LLDAP does not appear suitable for QNAP. After using a simple password (no special characters), I was able to authenticate, but it appears QNAP expects a full POSIX account, which LLDAP doesn't provide by design. It all depends on what parts QNAP insists on. If one cannot be replaced, or if the tweaks are sufficiently involved, the project is a no-go. I expect to hear from QNAP support within an hour or two, based on when I've gotten previous replies. If I haven't given an update in a day, it can be safe to assume this project is a flop by design.

Shadow_8472

08/31/2026, 5:20 AM

Correction: QNAP only appears to allow password length of 64 or less. Special characters DO work.

Shadow_8472

08/31/2026, 5:21 AM

I have a support ticket. I plan on updating with the professional result when I get it.

2 Views