Setting up a LLDAP server - Revision history

Zcrayfish: /* Configure */ Use path template; typo fix.

2024-10-04T02:08:14Z

Configure: Use path template; typo fix.

← Older revision		Revision as of 02:08, 4 October 2024
Line 16:		Line 16:
	{{Cmd\| openssl rand -base64 15 && openssl rand -base64 15}}		{{Cmd\| openssl rand -base64 15 && openssl rand -base64 15}}

	Then we paste the following configuration into /opt/lldap/lldap_config.toml and replace the jwt_secret and key_seed with the random generated value's:		Then we paste the following configuration into {{path\|/opt/lldap/lldap_config.toml}} and replace the jwt_secret and key_seed with the random generated value's:
	{{Cmd\|<nowiki>		{{Cmd\|<nowiki>
	ldap_port = 3890		ldap_port = 3890
Line 49:		Line 49:

	Replace domain.tld with your chose domain name.		Replace domain.tld with your chose domain name.
	Next we need to create an openrc file so we can ~~automaticly~~ start lldap:		Next we need to create an openrc file so we can automatically start lldap:

	{{Cmd\|<nowiki>cat <<EOF > /etc/init.d/lldap		{{Cmd\|<nowiki>cat <<EOF > /etc/init.d/lldap

Jhjacobs81: /* Configure */

2024-10-03T07:54:38Z

Configure

← Older revision		Revision as of 07:54, 3 October 2024
Line 13:		Line 13:

	= Configure =		= Configure =
	To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:		To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot. First we generate 2 random strings to use in the configuration as jwt_secret and key_seed:
			{{Cmd\| openssl rand -base64 15 && openssl rand -base64 15}}

			Then we paste the following configuration into /opt/lldap/lldap_config.toml and replace the jwt_secret and key_seed with the random generated value's:
	{{Cmd\|<nowiki>		{{Cmd\|<nowiki>
	~~cat <<EOF > /opt/lldap/lldap_config.toml~~
	ldap_port = 3890		ldap_port = 3890
	http_port = 17170		http_port = 17170
Line 44:		Line 46:
	## Certificate key file.		## Certificate key file.
	#key_file="/data/key.pem"		#key_file="/data/key.pem"
	~~EOF~~
	</nowiki>}}		</nowiki>}}

Jhjacobs81 at 16:17, 1 October 2024

2024-10-01T16:17:47Z

← Older revision		Revision as of 16:17, 1 October 2024
Line 46:		Line 46:
	EOF		EOF
	</nowiki>}}		</nowiki>}}

	Replace domain.tld with your chose domain name.		Replace domain.tld with your chose domain name.
	Next we need to create an openrc file so we can automaticly start lldap:		Next we need to create an openrc file so we can automaticly start lldap:
Line 68:		Line 69:
	EOF		EOF
	</nowiki>}}		</nowiki>}}

	This is not an extensive file, but it gets you running and ensures lldap starts and works correctly.		This is not an extensive file, but it gets you running and ensures lldap starts and works correctly.
	Now we need to add it to the default runlevel and start the service		Now we need to add it to the default runlevel and start the service

Jhjacobs81 at 16:15, 1 October 2024

2024-10-01T16:15:43Z

← Older revision		Revision as of 16:15, 1 October 2024
Line 9:		Line 9:
	Then we make the directory for LLDAP to live in and install the software:		Then we make the directory for LLDAP to live in and install the software:
	{{Cmd\|mkdir /opt/lldap && cd /opt/lldap}}		{{Cmd\|mkdir /opt/lldap && cd /opt/lldap}}
	{{Cmd\|wget https://github.com/lldap/lldap/releases/download/v0.5.0/amd64-lldap.tar.gz && tar xzf amd64-lldap.tar.gz && mv amd64-lldap/* . && rn -rf amd64-lldap}}		{{Cmd\|wget https://github.com/lldap/lldap/releases/download/v0.5.0/amd64-lldap.tar.gz && tar xzf amd64-lldap.tar.gz && mv amd64-lldap/* . && rm -rf amd64-lldap}}

Jhjacobs81 at 16:14, 1 October 2024

2024-10-01T16:14:48Z

← Older revision		Revision as of 16:14, 1 October 2024
Line 1:		Line 1:
	= General =		= General =
	LLDAP is a small LDAP server designed for directory services without the overhead of a full blown OpenLDAP server. LLDAP server is designed for easy management using a simple web gui. It lacks some of the features found in other directory servers, because its specificly designed for ~~home~~ use.		LLDAP is a small LDAP server designed for directory services without the overhead of a full blown OpenLDAP server. LLDAP server is designed for easy management using a simple web gui. It lacks some of the features found in other directory servers, because its specificly designed for easy use.

	= Install =		= Install =

Jhjacobs81: /* Configure */

2024-10-01T16:13:57Z

Configure

← Older revision		Revision as of 16:13, 1 October 2024
Line 14:		Line 14:
	= Configure =		= Configure =
	To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:		To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:
	<~~code~~>		{{Cmd\|<nowiki>
	cat <<EOF > /opt/lldap/lldap_config.toml		cat <<EOF > /opt/lldap/lldap_config.toml
	ldap_port = 3890		ldap_port = 3890
Line 45:		Line 45:
	#key_file="/data/key.pem"		#key_file="/data/key.pem"
	EOF		EOF
	</~~code~~>		</nowiki>}}
	Replace domain.tld with your chose domain name.		Replace domain.tld with your chose domain name.
	Next we need to create an openrc file so we can automaticly start lldap:		Next we need to create an openrc file so we can automaticly start lldap:

	{{~~Code~~\|cat <<EOF > /etc/init.d/lldap		{{Cmd\|<nowiki>cat <<EOF > /etc/init.d/lldap
	#!/sbin/openrc-run		#!/sbin/openrc-run

Line 66:		Line 66:
	cd /opt/lldap		cd /opt/lldap
	}		}
			EOF
	}}		</nowiki>}}
	This is not an extensive file, but it gets you running and ensures lldap starts and works correctly.		This is not an extensive file, but it gets you running and ensures lldap starts and works correctly.
	Now we need to add it to the default runlevel and start the service		Now we need to add it to the default runlevel and start the service

Jhjacobs81: /* Configure */

2024-10-01T16:11:16Z

Configure

← Older revision		Revision as of 16:11, 1 October 2024
Line 14:		Line 14:
	= Configure =		= Configure =
	To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:		To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:
	~~{{Code\|~~cat <<EOF > /opt/lldap/lldap_config.toml		<code>
			cat <<EOF > /opt/lldap/lldap_config.toml
	ldap_port = 3890		ldap_port = 3890
	http_port = 17170		http_port = 17170
Line 44:		Line 45:
	#key_file="/data/key.pem"		#key_file="/data/key.pem"
	EOF		EOF
	}}		</code>
	Replace domain.tld with your chose domain name.		Replace domain.tld with your chose domain name.
	Next we need to create an openrc file so we can automaticly start lldap:		Next we need to create an openrc file so we can automaticly start lldap:

Jhjacobs81: /* Configure */

2024-10-01T16:08:35Z

Configure

← Older revision		Revision as of 16:08, 1 October 2024
Line 14:		Line 14:
	= Configure =		= Configure =
	To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:		To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:
	{{hc\|cat <<EOF > /opt/lldap/lldap_config.toml		{{Code\|cat <<EOF > /opt/lldap/lldap_config.toml
	ldap_port = 3890		ldap_port = 3890
	http_port = 17170		http_port = 17170
Line 48:		Line 48:
	Next we need to create an openrc file so we can automaticly start lldap:		Next we need to create an openrc file so we can automaticly start lldap:

	{{hc\|cat <<EOF > /etc/init.d/lldap		{{Code\|cat <<EOF > /etc/init.d/lldap
	#!/sbin/openrc-run		#!/sbin/openrc-run

Jhjacobs81: /* Configure */

2024-10-01T16:07:47Z

Configure

← Older revision		Revision as of 16:07, 1 October 2024
Line 14:		Line 14:
	= Configure =		= Configure =
	To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:		To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:
	{{~~Cmd~~\|cat <<EOF > /opt/lldap/lldap_config.toml		{{hc\|cat <<EOF > /opt/lldap/lldap_config.toml
	ldap_port = 3890		ldap_port = 3890
	http_port = 17170		http_port = 17170
Line 48:		Line 48:
	Next we need to create an openrc file so we can automaticly start lldap:		Next we need to create an openrc file so we can automaticly start lldap:

	{{~~Cmd~~\|cat <<EOF > /etc/init.d/lldap		{{hc\|cat <<EOF > /etc/init.d/lldap
	#!/sbin/openrc-run		#!/sbin/openrc-run

Jhjacobs81: Created page with "= General = LLDAP is a small LDAP server designed for directory services without the overhead of a full blown OpenLDAP server. LLDAP server is designed for easy management using a simple web gui. It lacks some of the features found in other directory servers, because its specificly designed for home use. = Install = Installing LLDAP is fairly simple and can be done in less then 5 minutes. start by logging in as root: {{Cmd|doas su -}} Then we make sure the system is up..."

2024-10-01T16:05:06Z

Created page with "= General = LLDAP is a small LDAP server designed for directory services without the overhead of a full blown OpenLDAP server. LLDAP server is designed for easy management using a simple web gui. It lacks some of the features found in other directory servers, because its specificly designed for home use. = Install = Installing LLDAP is fairly simple and can be done in less then 5 minutes. start by logging in as root: {{Cmd|doas su -}} Then we make sure the system is up..."

New page

= General =
LLDAP is a small LDAP server designed for directory services without the overhead of a full blown OpenLDAP server. LLDAP server is designed for easy management using a simple web gui. It lacks some of the features found in other directory servers, because its specificly designed for home use.

= Install =
Installing LLDAP is fairly simple and can be done in less then 5 minutes. start by logging in as root:
{{Cmd|doas su -}}
Then we make sure the system is up to date and install wget:
{{Cmd|apk update && apk upgrade && apk add wget}}
Then we make the directory for LLDAP to live in and install the software:
{{Cmd|mkdir /opt/lldap && cd /opt/lldap}}
{{Cmd|wget https://github.com/lldap/lldap/releases/download/v0.5.0/amd64-lldap.tar.gz && tar xzf amd64-lldap.tar.gz && mv amd64-lldap/* . && rn -rf amd64-lldap}}

= Configure =
To configure LLDAP we have to create a config file, and an rc file to start it automaticly upon boot:
{{Cmd|cat <<EOF > /opt/lldap/lldap_config.toml
ldap_port = 3890
http_port = 17170
http_url = "https://domain.tld"
jwt_secret = "very-long-string"
ldap_base_dn = "dc=domain,dc=tld"
ldap_user_dn = "admin"
ldap_user_email = "admin@domain.tld"
ldap_user_pass = "very-strong-password"
database_url = "sqlite:///opt/lldap/users.db?mode=rwc"
key_seed = "random-string-again"

[smtp_options]
#enable_password_reset=true
#server="smtp.gmail.com"
#port=587
#smtp_encryption = "TLS"
#user="sender@gmail.com"
#password="password"
#from="LLDAP Admin <sender@gmail.com>"
#reply_to="Do not reply <noreply@localhost>"

[ldaps_options]
#enabled=true
#port=6360
## Certificate file.
#cert_file="/data/cert.pem"
## Certificate key file.
#key_file="/data/key.pem"
EOF
}}
Replace domain.tld with your chose domain name.
Next we need to create an openrc file so we can automaticly start lldap:

{{Cmd|cat <<EOF > /etc/init.d/lldap
#!/sbin/openrc-run

name=lldap
command="/opt/lldap/lldap"
command_args="run"
command_background="yes"
pidfile="/run/lldap.pid"

depend() {
need net
}

start_pre()
{
cd /opt/lldap
}

}}
This is not an extensive file, but it gets you running and ensures lldap starts and works correctly.
Now we need to add it to the default runlevel and start the service
{{Cmd|chmod +x /etc/init.d/lldap && rc-update add lldap}}

= Use =
To use LLDAP we can browse to http://<ip>:17170 and login with the credentials we specified in the config file.

This is a basic configuration. You can now connect other services that support ldap logins to LLDAP.

= Troubleshooting =
* Some troubleshooting information

= Resources =
* https://github.com/lldap/lldap

[[Category:Server]]