support for ldapi:// - Githubissues

kvspb / nginx-auth-ldap

LDAP authentication module for nginx

BSD 2-Clause "Simplified" License

731 stars 251 forks source link

support for ldapi:// #229

Open andreasschulze opened 4 years ago

andreasschulze commented 4 years ago

LDAP server may serve over a unixsocket. To connect to such servers, a LDAP-client uses an 'normal' LDAPURI ldapi://%2Fpath%2Fto%ldap-socket/dc=base,...

the hostpart doesn't contain any ":port"
any '/' is encoded as '%2F'
see man 5 ldap.conf (OPTIONS, URI)

currently I see ony an error message: http_auth_ldap: invalid host in LDAP hostname "/path/to/ldap-socket" in /path/to/nginx.conf

andreasschulze commented 3 years ago

@kvspb Hello! Is there anything I could do to assist?

rseichter commented 2 years ago

I ran into the same issue. NGINX and OpenLDAP running on the same host, the latter only providing a Unix domain socket for access, so "ldap:" and "ldaps:" are currently unavailable. Support for the "ldapi:" scheme would be very useful for cases like this.

davama commented 2 years ago

Is this project still maintained?

we switched over to authelia https://github.com/authelia/authelia It’s great!

rseichter commented 2 years ago

@davama Thanks a lot for pointing out authelia. It looks very interesting, and given that it is actively maintained, it might be the better choice.