mirror of
https://github.com/lldap/lldap.git
synced 2026-03-31 15:07:48 +01:00
thchha
9021066507
This documents a working (LDAPS) configuration for using lldap in Open WebUI. Environment Variables where directly taken from the logs. The names of the GUI variables are taken from the UI. Version v0.6.26. The two configuration options are then put in a table and a small elaboration + example values are provided. Other then additionally mounting the ca chain into the container (with appropriate rights) there were not additional steps required. The ownership of the ca chain will get changed to `chown 501:`.
1.8 KiB
1.8 KiB
Open-WebUI LDAP configuration
For the GUI settings (recommended) go to:
Admin Panel > General.
There you find the LDAP config.
For the initial activation, restart OpenWebUI to load the LDAP module.
The following configurations have to be provided.
The user binduser has to be member of lldap_strict_readonly.
| environment variable | GUI variable | example value | elaboration |
|---|---|---|---|
ENABLE_LDAP |
LDAP | true |
Toggle |
LDAP_SERVER_LABEL |
Label | any (lldap) |
name |
LDAP_SERVER_HOST |
Host | ldap.example.org |
IP/domain without scheme or port |
LDAP_SERVER_PORT |
Port | 6360 |
When starting Open-WebUI sometimes it only accepts the default LDAP or LDAPS port (only ENV configuration) |
LDAP_ATTRIBUTE_FOR_MAIL |
Attribute for Mail | mail |
default |
LDAP_ATTRIBUTE_FOR_USERNAME |
Attribute for Username | uid |
default |
LDAP_APP_DN |
Application DN | uid=binduser,ou=people,dc=example,dc=org |
Hovering shows: Bind user-dn |
LDAP_APP_PASSWORD |
Application DN Password | <binduser-pw> |
- |
LDAP_SEARCH_BASE |
Search Base | ou=people,dc=example,dc=org |
Who should get access from your instance. |
LDAP_SEARCH_FILTER |
Search Filter | (objectClass=person) or (|(objectClass=person)(memberOf=cn=webui-members,ou=groups,dc=example,dc=org)) |
Query for Open WebUI account names. |
LDAP_USE_TLS |
TLS | true |
Should be true for LDAPS, false for plain LDAP |
LDAP_CA_CERT_FILE |
Certificate Path | /ca-chain.pem |
required when TLS activated |
LDAP_VALIDATE_CERT |
Validate Certificate | true |
Set to false for self-signed certificates |
LDAP_CIPHERS |
Ciphers | ALL | default |
Tested on Open WebUI
v0.6.26 via podman 5.4.2