Authentik LDAP outpost used to enable LDAP integration on the Authentik IdP
380
ubuntu/authentik-ldap-outpost is a rock for authentik-ldap-outpost maintained by Canonical.
The authentik LDAP outpost is an Identity Provider outpost that allows authentik to act as an LDAP server. It serves as an LDAP interface for your authentik instance, enabling legacy applications that do not support modern protocols like OIDC or SAML to authenticate users.
[Learn more about authentik-ldap-outpost]
NOTE: These tags follow a specific naming convention that respects the concept of channels.
| Tags | Supported until | Version | Base | Architectures |
|---|---|---|---|---|
2026.5-26.04_edge | 09/2026 | 2026.5 | 26.04 | arm64, amd64 |
This rock's entrypoint is Pebble, a container-optimized init process that enables the orchestration of a collection of local service processes as an organized set.
To view the Pebble services and checks defined in this rock:
docker run --rm ubuntu/authentik-ldap-outpost:2026.5-26.04_edge plan
To run this rock, use any of the usual container runtimes, for example, docker:
docker run --name authentik-ldap-outpost-container \
-p 3389:3389 -p 6636:6636 -e AUTHENTIK_HOST=http://authentik-server:9000 -e AUTHENTIK_TOKEN=your-ldap-outpost-token \
ubuntu/authentik-ldap-outpost:2026.5-26.04_edge
The authentik LDAP service is disabled at startup by default. Start it using Pebble:
docker exec authentik-ldap-outpost-container pebble start ldap
Once started, the authentik LDAP outpost serves LDAP on port 3389 and LDAPS on port 6636. Access the LDAP outpost server at ldap://localhost:3389.
To view the logs of the running container, run:
docker exec authentik-ldap-outpost-container pebble logs
Or, for a specific service:
docker exec authentik-ldap-outpost-container pebble logs <service>
Rocks may have predefined health checks that you can list by running:
docker exec authentik-ldap-outpost-container pebble checks
The overall health of your container can be inspected via:
docker exec authentik-ldap-outpost-container pebble health
| Option | Description | Default |
|---|---|---|
| AUTHENTIK_HOST | The URL of the authentik server that the outpost connects to (e.g., https://authentik.company or http://authentik-server:9000). | None |
| AUTHENTIK_TOKEN | The token used to authenticate with the core authentik server. Create an outpost in the authentik Admin UI to generate this token. | None |
| AUTHENTIK_INSECURE | Set to "true" to disable TLS certificate verification when connecting to the authentik server (e.g., when using self-signed certificates). | false |
| AUTHENTIK_LISTEN__LDAP | Internal address and port for the LDAP server to listen on. | [::]:3389 |
| AUTHENTIK_LISTEN__LDAPS | Internal address and port for the LDAPS server to listen on. | [::]:6636 |
| Option | Description | Default |
|---|---|---|
-p <port>:3389 | Expose the LDAP port 3389 on the host's <port>. | None |
-p <port>:6636 | Expose the LDAPS port 6636 on the host's <port>. | None |
Canonical is the provider of this container image. It is the user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within, as well as with Canonical’s IP Policy.
Content type
Image
Digest
sha256:c030ba084…
Size
12.1 MB
Last updated
1 day ago
docker pull ubuntu/authentik-ldap-outpost:2026.5-26.04_edgePulls:
106
Last week