Authelia and Lldap: Authentication, SSO, User Management for Home Networks
1–10 of 29 posts
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#2I want to set up something like this for my home network. The one thing missing that I'd also like is a way for users to log in to windows machines using these credentials. I understand that is also possible via Kerberos, but... Well, it takes some time to understand these things, me not doing a whole lot of sysadmin work
...
It also seems the author has a more recent post about using Samba as an AD controller, and that would be an alternative to this setup right here:
https://helgeklein.com/blog/samba-active-directory-in-a-dock...
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#3I want to set up something like this for my home network. The one thing missing that I'd also like is a way for users to log in to windows machines using these credentials. I understand that is also possible via Kerberos, but... Well, it takes some time to understand these things, me not doing a whole lot of sysadmin work ... It also seems the author has a more recent post about using Samba as an AD controller, and t…
Keycloak has Kerberos+LDAP Federation build in. I wrote a blog post on how to self-host keycloak [1]. If you don't do theming, it is quite quick to setup. Just updated the blog post for version 25.0.1.
[1]: https://du.nkel.dev/blog/2024-02-10_keycloak-docker-compose-...
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#4I want to set up something like this for my home network. The one thing missing that I'd also like is a way for users to log in to windows machines using these credentials. I understand that is also possible via Kerberos, but... Well, it takes some time to understand these things, me not doing a whole lot of sysadmin work ... It also seems the author has a more recent post about using Samba as an AD controller, and t…
FreeIPA (the upstream project for Red Hats IDM) could fit your needs
https://www.freeipa.org/page/Windows_authentication_against_...
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#5This caught my eye and I started reading over it but my eyes glazed over after a couple of sections of setting up various docker containers in various zfs directory structures and editing toml configuration files and zzzz…
Here’s a hint: for 99.999% of potential users, including 99.9% of motivated, technically savvy users, if I need to know the directory structure of your software, then you already failed.
I appreciate that you went through all the pain and learning and effort to figure out how to set all this up AND went to the trouble to write down a how to guide.
I hope someone comes later and bundles it up into a script I can launch that will prompt me for the various config options and then set it all up for me.
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#6I want to set up something like this for my home network. The one thing missing that I'd also like is a way for users to log in to windows machines using these credentials. I understand that is also possible via Kerberos, but... Well, it takes some time to understand these things, me not doing a whole lot of sysadmin work ... It also seems the author has a more recent post about using Samba as an AD controller, and t…
I'd go the Samba Domain Controller route, personally. Of any way to do it I think that would give you the smallest sysadmin "burden". You'll also get Group Policy functionality, which is useful for standardizing configurations across your Windows clients (if that's a thing you need).
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#7Bizarre coincidence. I just ran into lldap for the first time earlier today. I built it on Windows for fun. I'm new to Rust and it was surprisingly easy (and only needed very slight modification).
If I were going to support Windows clients on the hypothetical home network, however, I'd use Samba as a Domain Controller and use the LDAP server there. That gets you SSO to Windows clients too.
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#8This caught my eye and I started reading over it but my eyes glazed over after a couple of sections of setting up various docker containers in various zfs directory structures and editing toml configuration files and zzzz… Here’s a hint: for 99.999% of potential users, including 99.9% of motivated, technically savvy users, if I need to know the directory structure of your software, then you already failed. I apprecia…
I'd love to be wrong, but I suspect that it is quite a narrow niche of users that a) are willing to run their own identity and auth servers but b) aren't so persnickety about their software that they would be cool with some wizard to set it all up automagically.
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#9Getting this stack set up is not as complicated as this post makes it seem... LLDAP is great and the dev was very responsive when I had issues with some early builds.
Plenty of documentation around on getting Authelia set up, and connecting it to LLDAP is also pretty straightforward.
Re: Authelia and Lldap: Authentication, SSO, User Management for Home Networks
#10This caught my eye and I started reading over it but my eyes glazed over after a couple of sections of setting up various docker containers in various zfs directory structures and editing toml configuration files and zzzz… Here’s a hint: for 99.999% of potential users, including 99.9% of motivated, technically savvy users, if I need to know the directory structure of your software, then you already failed. I apprecia…
I disagree, seems like a pretty standard structure of one directorz per app and inside that subfolders for configuration, secrets, opaque various data. Not complicated at all really.