ldap-auth

3.4.8-ls12

ldap-auth software is for authenticating users who request protected resources from servers proxied by nginx. It includes a daemon (ldap-auth) that communicates with an authentication server, and a webserver daemon that generates an authentication cookie based on the user’s credentials. The daemons are written in Python for use with a Lightweight Directory Access Protocol (LDAP) authentication server (OpenLDAP or Microsoft Windows Active Directory 2003 and 2012).

docker pull lscr.io/linuxserver/ldap-auth:latest

Quick start

Generated from the image's own configuration. Replace the /path/to folders with real paths on your host.

---
services:
  ldap-auth:
    image: lscr.io/linuxserver/ldap-auth:latest
    container_name: ldap-auth
    environment:
      - FERNETKEY= # optional
      - CERTFILE= # optional
      - KEYFILE= # optional
    ports:
      - 8888:8888
      - 9000:9000
    restart: unless-stopped

Parameters

Ports
PortFunctionRequired
8888:8888the port for ldap auth daemonrequired
9000:9000the port for ldap login pagerequired
Environment variables
VariableFunctionRequired
FERNETKEY=Optionally define a custom valid fernet key (only needed if container is frequently recreated, or if using multi-node setups, invalidating previous authentications)optional
CERTFILE=Optionally point this to a certificate file to enable HTTP over SSL (HTTPS) for the ldap auth daemonoptional
KEYFILE=Optionally point this to the private key file, matching the certificate file referred to in CERTFILEoptional

Architectures

Pulling :latest picks the right one for your host automatically.

  • x86_64amd64-latest
  • arm64arm64v8-latest

Tags

  • :latestStable releases

Changelog

  1. Rebase to Alpine 3.24.

  2. Add `legacy-cgi`. Fix fernet key storage.

  3. Rebase to Alpine 3.21. Add support for read-only and non-root.

Related

Browse all

openssh-server

10.3_p1-r1-ls239

openssh-server is a sandboxed environment that allows ssh access without giving keys to the entire server. Giving ssh access via private key often means giving full access to the server. This container creates a limited and sandboxed environment that others can ssh into. The users only have access to the folders mapped and the processes running inside this container.

492K pulls per month613 GitHub starsarm64

fail2ban

1.1.0-r2-ls46

fail2ban is a daemon to ban hosts that cause multiple authentication errors.

181K pulls per month101 GitHub starsarm64

netbox

v4.7.3-ls387

netbox is an IP address management (IPAM) and data center infrastructure management (DCIM) tool. Initially conceived by the network engineering team at DigitalOcean, NetBox was developed specifically to address the needs of network and infrastructure engineers. It is intended to function as a domain-specific source of truth for network operations.

91.8K pulls per month129 GitHub starsarm64

doublecommander

94a19f35-ls329

Double Commander is a free cross platform open source file manager with two panels side by side. It is inspired by Total Commander and features some new ideas.

68.5K pulls per month51 GitHub starsarm64