Files
truecharts/charts/stable/lldap/docs/installation-notes.md
MaverickD650 69e0d372c7 feat(lldap): LLDAP move to stable (#8025)
**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
Moving to stable as Discord users and I have reported successful
installs. I have also personally tested the app functions with Jellyfin
with the upstream guidance and Authelia using the documented guide.

⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [X] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->
Discord users have successfully installed the app and used with
Authelia. I have personally verified that Jellyfin correctly binds to
the ldap directory and retrieves users and groups using the upstream
guidance. This is likewise the case with Authelia and I have
successfully logged in with a test user using the new compiled
documentation. Changes verified by checking the LLDAP logs to ensure the
BindDN which can be changed by the user has been picked up correctly.

**📃 Notes:**
<!-- Please enter any other relevant information here -->
Wanted to keep the docs seperate from the stable move hence the seperate
PRs.

**✔️ Checklist:**

- [X] ⚖️ My code follows the style guidelines of this project
- [X] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [X] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [X] ⬆️ I increased versions for any altered app according to semantic
versioning

** App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🪞 I have opened a PR on
[truecharts/containers](https://github.com/truecharts/containers) adding
the container to TrueCharts mirror repo.
- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._
2023-04-15 12:52:27 +02:00

1.8 KiB

Installation notes

Default Configuration

LLDAP is configured using the default options generated by the application on first run. The exception to this is the 'Base DN for LDAP' option which has been exposed to the user.

By default, LLDAP will use the following options:

  • Admin username: admin
  • Admin password: password
  • Base DN for LDAP: dc=example,dc=org
  • LDAP port: 3890
  • JWT secret: random (generated on first run)

⚠️ WARNING: The default configuration is not secure and should not be used in production. Please change the admin password for LDAP before using LLDAP in production. ⚠️

Usage

LLDAP can be used as the user backend for Authelia and Authentik as well as any other application that supports LDAP e.g. Jellyfin and Nextcloud. A specific guide for Authelia is available in this documentation but other authentication applications can be configured in a similar way.

When setting your bind user you should avoid using the admin user as this is a security risk. Instead, create a new user with the minimum permissions required for your application. LLDAP has a user group lldap_strict_readonly which can be used for this purpose. This group has read-only access to the LDAP database and can be used to create a new user with the minimum permissions required for your application. However, if you want to provide password reset then create a user in the lldap_password_manager group.

Support

  • If you need more details or have a more custom setup the documentation on the upstream is very useful so check the descriptions of the options there including example configs for various apps.
  • You can also reach us using Discord for real-time feedback and support

All Rights Reserved - The TrueCharts Project