This is a simple but extensible shell script to authenticate users by binding to LDAP. Additional checks, such as requiring group memberships, can easily be configured. The credentials are read from environment variables. In case of a successful authentication, it exits with exit code 0, non-zero otherwise.
ldap-auth-sh is known to work with:
--auth-user-pass-verify
option)command_line
auth provider)However, it's of course not limited to these platforms.
You need:
cat
, grep
and sed
(even
BusyBox will do)a compatible LDAP client, currently one of
curl
(with ldap
protocol support compiled in, verify with
curl --version
)ldapsearch
Just copy the file ldap-auth.sh <ldap-auth.sh>
_ and read the comments
therein.
Sample configurations are shipped in the examples <examples>
_ directory.