Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Authelia and Lldap: Authentication, SSO, User Management for Home Networks

helgeklein.com

Post reply on HN
Print view View original

21–29 of 29 posts

Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks

#21

Post by detourdog »

hamandcheese wrote: post #8
efitz wrote: post #5

This caught my eye and I started reading over it but my eyes glazed over after a couple of sections of setting up various docker containers in various zfs directory structures and editing toml configuration files and zzzz… Here’s a hint: for 99.999% of potential users, including 99.9% of motivated, technically savvy users, if I need to know the directory structure of your software, then you already failed. I apprecia…

I'd love to be wrong, but I suspect that it is quite a narrow niche of users that a) are willing to run their own identity and auth servers but b) aren't so persnickety about their software that they would be cool with some wizard to set it all up automagically.

I very much think everyone should a person should have a personal identity server. I think it should be buried enough that the user is managing “friend” objects transparently.

Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks

#22

Post by nitnelave »

LLDAP dev here! I'm happy to see it on the front page :) I made LLDAP specifically because it was very complicated to get OpenLDAP up and running, and it was resource heavy for a handful of users on a self-hosted server. If you have any questions, AMA!

Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks

#23

Post by methou »

I've been using freeipa[1] in the past, it wasn't specifically easy to setup, but is well designed, documented, and supported. Plus, it's able to manage certificates. But to use more "modern" techs, like OpenID, Keycloak will be needed.

-- [1] https://www.freeipa.org/

Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks

#24

Post by Vaslo »

BonusPlay wrote: post #15

While authelia is quite cool "infra-as-code" tool, since you have your entire configuration in yaml form, for those not willing to spend a few evenings configuring SSO, there is authentik [1] which features management UI. Offers similar feature set, also self-hostable, but most importantly - simple to set-up. I've spent 8h on authelia deployment, where 30 minutes in authentik would be sufficient. But both are good op…

A second for authentik. Much easier to setup though still tricky when certain programs require things like webhooks, etc.

Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks

#25

Post by efitz »

hamandcheese wrote: post #8
efitz wrote: post #5

This caught my eye and I started reading over it but my eyes glazed over after a couple of sections of setting up various docker containers in various zfs directory structures and editing toml configuration files and zzzz… Here’s a hint: for 99.999% of potential users, including 99.9% of motivated, technically savvy users, if I need to know the directory structure of your software, then you already failed. I apprecia…

I'd love to be wrong, but I suspect that it is quite a narrow niche of users that a) are willing to run their own identity and auth servers but b) aren't so persnickety about their software that they would be cool with some wizard to set it all up automagically.

Microsoft sold (maybe still sells) Home Server and Small Business Server which were turnkey solutions that included directory services, file & print sharing, and other stuff.

Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks

#26

Post by oriettaxx »

Vaslo wrote: post #24
BonusPlay wrote: post #15

While authelia is quite cool "infra-as-code" tool, since you have your entire configuration in yaml form, for those not willing to spend a few evenings configuring SSO, there is authentik [1] which features management UI. Offers similar feature set, also self-hostable, but most importantly - simple to set-up. I've spent 8h on authelia deployment, where 30 minutes in authentik would be sufficient. But both are good op…

A second for authentik. Much easier to setup though still tricky when certain programs require things like webhooks, etc.

> "a second" ?

what do you mean?

> Much easier to setup

do you mean authentik is much easier to setup?

Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks

#28

Post by blooalien »

oriettaxx wrote: post #26
Vaslo wrote: post #24

Earlier quoted context omitted.

A second for authentik. Much easier to setup though still tricky when certain programs require things like webhooks, etc.

> "a second" ? what do you mean? > Much easier to setup do you mean authentik is much easier to setup?

> "a second" ?

In more "formal" discussion environments than an Internet discussion thread, sometimes a "proposal" or statement made by someone will be met by someone else giving their support of said statement by stating "I second that", meaning they're the second person in the room to support the statement verbally aloud.

TLDR; They're throwing their support of the OP's statement into the ring.

> "do you mean authentik is much easier to setup?"

I do believe from the context of the rest of their comment that's exactly what they mean to say.

Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks

#29

Post by EvanAnderson »

nitnelave wrote: post #18
EvanAnderson wrote: post #7

Bizarre coincidence. I just ran into lldap for the first time earlier today. I built it on Windows for fun. I'm new to Rust and it was surprisingly easy (and only needed very slight modification). If I were going to support Windows clients on the hypothetical home network, however, I'd use Samba as a Domain Controller and use the LDAP server there. That gets you SSO to Windows clients too.

I'd be curious to see what you had to change to get LLDAP to work on windows, and whether we can upstream that (I'm the LLDAP dev)

I'm a complete Rust neophyte. I don't know any of the practices for writing portable Rust code. I'm at the point w/ Rust where I'm just acting like a cargo cult script kiddie (typing commands and hoping they work).

Doing a 'cargo build' on Windows 10 x64 running Rust 1.79 x86_64-pc-windows-msvc gives me an error "error[E0433]: failed to resolve: could not find `unix` in `os`" referencing "server\src\infra\configuration.rs:239:22". That, in turn, causes compilaton of line 240 to bomb out.

So, in true skiddie mode, I just commented out lines 239 - 242. Then it builds and runs fine.

Edit: I'll log an issue on Github, too.

Post reply on HN