example_configs: Add UnifiOS Directory

This commit is contained in:
sdelnevo
2025-05-17 22:34:53 +01:00
committed by GitHub
parent 97bcfd1a99
commit cb9fd38271
2 changed files with 51 additions and 0 deletions
+1
View File
@@ -646,6 +646,7 @@ folder for help with:
- [Syncthing](example_configs/syncthing.md) - [Syncthing](example_configs/syncthing.md)
- [TheLounge](example_configs/thelounge.md) - [TheLounge](example_configs/thelounge.md)
- [Traccar](example_configs/traccar.xml) - [Traccar](example_configs/traccar.xml)
- [UniFi OS](example_configs/udm_identity_end_point.md)
- [Vaultwarden](example_configs/vaultwarden.md) - [Vaultwarden](example_configs/vaultwarden.md)
- [WeKan](example_configs/wekan.md) - [WeKan](example_configs/wekan.md)
- [WG Portal](example_configs/wg_portal.env.example) - [WG Portal](example_configs/wg_portal.env.example)
+50
View File
@@ -0,0 +1,50 @@
# UniFi OS Identity End Point Configuration
Below are the required settings to allow group syncing within UnifiOS Directory Integration, when enabling LDAP user sync
- LDAP Version - OpenLDAP
- LDAP Server - Your LLDAP Server IP Address - <For Example 10.128.20.3> ldap:// is not required in front of the IP address
- Port - Your LLDAP Server Port - (either 6360 or 3890)
- Root DN - Your Root DN - (For Example dc=domain,dc=com)
- Bind DN - Your Bind DN - (For Example uid=ldapbinduser,ou=people,dc=domain,dc=com)
- Password - (Your Bind Password)
- Synced Scope - All
After entering the LLDAP service details click the settings tab (the cog icon in the top right of the LDAP screen) in the UDMs Identity Endpoint setup screen, in the LDAP configuration settings enter
## LDAP Config
LDAP Version - OpenLDAP
Unique Identifier Attribute - entryUUID
### User
- User Search Base - ou=people,dc=domain,dc=com
- User Object Class - person
- User Object Filter - objectClass=person
### Group
- Group Search Base - ou=groups,dc=domain,dc=com
- Group Object Class - groupOfUniqueNames
- Group Object Filter - objectClass=groupOfUniqueNames
Member Attribute
member
Validate Attribute
enter a user e-mail address who has been added in LLDAP , and click test configuration, test show be successful
Advanced
Delegated Authentication = true
Suspend user Sync Feature = True
Sync Scope
Sync Scope - all
You can now go back up to the top of the setup and amend your group mappings as required
Group Mappings
Edit Rule
You can now select the required LLDAP group to sync with the UDM Identity group