I use authelia with nginx proxy manager talking to it for auth, works well. Haven't externalized the users since I only have a few to deal with, but it's cool having an entire suite of sites protected and provides http headers to grab the logged in user's information.
Authelia and Lldap: Authentication, SSO, User Management for Home Networks
11–20 of 29 posts
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#12Kanidm is another similar tool for user management I've been enjoying. It has a strong focus on safe defaults and supports exposing the users via LDAP ootb. It's fairly simple to set up as well, but I feel like it sometimes expects the users to be fairly technical.
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#13This caught my eye and I started reading over it but my eyes glazed over after a couple of sections of setting up various docker containers in various zfs directory structures and editing toml configuration files and zzzz… Here’s a hint: for 99.999% of potential users, including 99.9% of motivated, technically savvy users, if I need to know the directory structure of your software, then you already failed. I apprecia…
I'd love to be wrong, but I suspect that it is quite a narrow niche of users that a) are willing to run their own identity and auth servers but b) aren't so persnickety about their software that they would be cool with some wizard to set it all up automagically.
Well once you remove the set of users who want Windows Active Directory, then yes, I agree. :)
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#14Those who do not want to choose e-mail as the notification method can take a look at ntfy.sh (https://github.com/binwiederhier/ntfy). You can receive notifications via your smartphone (Android, iOS). A self-hosted server can also be used.
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#15While authelia is quite cool "infra-as-code" tool, since you have your entire configuration in yaml form, for those not willing to spend a few evenings configuring SSO, there is authentik [1] which features management UI.
Offers similar feature set, also self-hostable, but most importantly - simple to set-up. I've spent 8h on authelia deployment, where 30 minutes in authentik would be sufficient. But both are good options, pick what you prefer.
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#16[deleted]
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#17Kanidm is another similar tool for user management I've been enjoying. It has a strong focus on safe defaults and supports exposing the users via LDAP ootb. It's fairly simple to set up as well, but I feel like it sometimes expects the users to be fairly technical.
Kanidm is very cool! LLDAP uses their LDAP library underneath to handle parsing the protocol.
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#18Bizarre coincidence. I just ran into lldap for the first time earlier today. I built it on Windows for fun. I'm new to Rust and it was surprisingly easy (and only needed very slight modification). If I were going to support Windows clients on the hypothetical home network, however, I'd use Samba as a Domain Controller and use the LDAP server there. That gets you SSO to Windows clients too.
I'd be curious to see what you had to change to get LLDAP to work on windows, and whether we can upstream that (I'm the LLDAP dev)
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#19Getting this stack set up is not as complicated as this post makes it seem... LLDAP is great and the dev was very responsive when I had issues with some early builds. Plenty of documentation around on getting Authelia set up, and connecting it to LLDAP is also pretty straightforward.
LLDAP dev here, I'm glad you found the project easy to setup! That was one of the main motivations for creating it, after struggling to set up OpenLDAP
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#20I want to set up something like this for my home network. The one thing missing that I'd also like is a way for users to log in to windows machines using these credentials. I understand that is also possible via Kerberos, but... Well, it takes some time to understand these things, me not doing a whole lot of sysadmin work ... It also seems the author has a more recent post about using Samba as an AD controller, and t…
There's a few people who looked into getting samba to plug into LLDAP. I haven't looked myself, but I seem to remember that the main obstacle was not insurmountable (last modified timestamp for users)