Fork of https://github.com/netauth/ldap containing extensions specific to sigb.us services
Find a file
2024-07-05 17:22:59 -05:00
.github/workflows .github/workflows: Use auto-generated creds 2022-08-27 17:39:56 -05:00
internal Fix the base DN searches 2024-07-05 17:22:59 -05:00
scripts Fix NOTICE generation 2021-03-18 01:16:30 -07:00
.gitignore meta: Add release machinery 2020-08-23 22:46:37 -07:00
.goreleaser.yml Push release to correct repo 2021-03-18 01:27:53 -07:00
Dockerfile Shrink docker container 2020-11-10 22:59:53 -08:00
go.mod go.mod: update netauth client to v0.6.1. 2022-08-27 16:08:56 -05:00
go.sum go.mod: update netauth client to v0.6.1. 2022-08-27 16:08:56 -05:00
LICENSE Initial Commit 2020-08-17 01:22:17 -07:00
main.go internal/ldap: Add option to bind anonmyously 2022-08-27 17:35:45 -05:00
README.md README.md: Update readme 2020-08-23 00:18:54 -07:00

NetAuth LDAP Server

The NetAuth LDAP server acts as a bridge that allows legacy systems that understand LDAP to gain a read-only view of data in the NetAuth server.

It is recommended to install the NetAuth LDAP server on each host that requires this interface and to bind it to the loopback interface.

The format that the LDAP bridge exposes data in is slightly different to that which is presented to an actual NetAuth client. The groups are presented in a flattened format with all expansions processed, and all groups are precented under a special ou=groups path. Similarly, entities are presented under a ou=entities path under the base DN.

Speaking of the base DN, NetAuth doesn't have such a concept, so the LDAP bridge takes this as a seperate configuration item on startup. The provided format must be a valid domain name that will be split on .. Prepended to this will be dc=netauth to clearly signify that the data retrieved is coming from NetAuth.