jgkirschbaum/another-ldap-auth repository overview

⁠Another LDAP authentication

⁠Documentation

Documentation is at https://github.com/jgkirschbaum/another-ldap-auth⁠.

⁠Overview

• LDAP Authentication for Nginx, Nginx ingress controller (Kubernetes), HAProxy (haproxy-auth-request⁠) or any webserver/reverse proxy with authorization based on the result of a subrequest.
• Another LDAP Authentication is an implementation of the ldap-auth-daemon services described in the official blog from Nginx in the following article⁠.
• Another LDAP Authentication is prepared to run inside a Docker container, also you can run the Python script without the Docker container.

⁠Features

• Supports ldap and ldaps.
• Provide a cache for users and groups, you can set the cache expiration in minutes.
• Supports validation by groups, regex in groups are supported.
• Supports TLS.
• Supports ad-hoc TLS via self-signed certificate.
• Supports configuration via headers or via environment variables.
• Supports HTTP response headers such as username and matched groups.
• Adds Gunicorn WSGI HTTP server for production environments.
• Brute force protection.
• Log format in Plain-Text or JSON.

⁠Diagram