davescodemusings/ldapinator repository overview

⁠ldapinator

A totally small-time LDAP administration tool for your home network

⁠What is it?

ldapinator is a web-based administration tool for small LDAP installations. Think OpenLDAP running on a Linux machine in your basement. It's not for big enterprisey stuff.

The GitHub Repository⁠ has a more detailed description and some lovely screenshots, but here are the basics...

⁠How do I run it?

The easiest way is using Docker Compose. But first, you need to create a config.ini file.

⁠config.ini

[connect]
hostURL = ldap://192.168.0.100:389
useTLS = no                    ; not implemented yet

[bind]
readOnlyDN = "cn=search,dc=home"
readOnlyPassword = redacted
readWriteDN = "cn=Manager,dc=home"
readWritePassword = redacted

[structure]
baseDN = "dc=home"
groupDN = "ou=Groups,dc=home"
userDN = "ou=People,dc=home"

[api]
;port = 3268
;useTLS = no                   ;  uncomment if you don't have TLS certificates
allowAnonymousRead = yes       ; yes or no
allowAnonymousModify = yes     ; yes or no
allowUserPasswordChange = yes  ; yes or no
token = S0m3R4nd0mStr!ng

You'll need to reference config.ini in your Docker Compose file. Just bind mount the directory it's in to /app/config inside the container.

⁠compose.yml

services:
  ldapinator:
    build: .
    image: ldapinator
    container_name: ldapinator
    hostname: ldapinator
    restart: unless-stopped
    ports:
      - "3268:3268"
      - "3269:3269"
    volumes:
      - ./config:/app/config

3268 is the default unencrypted port. 3269 is TLS encrypted.

⁠Certificates

If you want encrypted communications, you'll need a server.cert and matching server.key available in the container's /app/config. It's the same bind-mounted directory where you put config.ini.

⁠Starting it up

Now, do docker-compose up -d and point your web browser to http://your.host:3268⁠ for unencrypted or http://your.host:3269⁠ for TLS encrypted.