Setting up LDAP auth on inspIRCd
reddit / irc

----------------------------------------------------------------------
ahalliday13 · 2023-09-22 14:13

Hi,

I'm trying to set up a simple IRC server for myself and some friends
as part of my homelab. I already have an Active Directory server that
I use for centralized password management, and I'm looking to use LDAP
to connect with it so that only users with an account can use my IRC
relay. I'm fairly certain that this should be possible, because
inspIRCd has an LDAP module, and Active Directory can be accessed
through LDAP, but I just can't figure out the configuration. I've
recompiled inspIRCd with the m\_ldapauth module, but I can't figure
out the configuration. Here's what I have so far in my
./conf/inspircd.conf (I replaced a few values with redacted just to
not give away too much about my network, but all of these values are
filled with real data in my actual config)





    ####### SERVER CONFIGURATION #######




    ####### ADMIN INFO #######



    ####### PORT CONFIGURATION #######



    ####### ACTIVE DIRECTORY #######





Right now when I try to connect to the server with weechat, I just get
"Access denied." I've tried filling every field labeled username or
password in the weechat settings with a valid username and password,
but nothing seems to work. I know for a fact that the irc server can
reach the Active Directory server, as I can use `ldapsearch` to
contact the server. I was previously getting "no password provided"
when I looked in startup.log on the server, but now I don't get
anything. Any help would be greatly appreciated.

Thanks!

----------------------------------------------------------------------
skizzerz1 · 2023-09-22 14:43

Your nick needs to be your AD username and your AD password goes in
the server password field of your client (not sasl password).

If this still fails, turn on verbose mode and exempt some nick from
ldap, connect with that nick, oper up, umode +s +a, then try again
with a second connection. The opered nick will get more informative
messages as to why ldap is failing.

----------------------------------------------------------------------
ahalliday13 · 2023-09-22 17:12

I'm fairly certain I've got the username and password set up properly
in my client, but it's still not working. Could you please elaborate
on verbose mode? I'm new to this and not familiar with how to do most
of these things. Thanks.

----------------------------------------------------------------------
skizzerz1 · 2023-09-22 17:51

It's all documented in https://docs.inspircd.org/3/modules/ldapauth/

----------------------------------------------------------------------
ahalliday13 · 2023-09-25 18:12

So after a bit of messing with the config, I was able to get it
working. I was reading the docs for v3, and failed to realize that I
am running inspIRCd v2, which has a slightly different config layout.
Here's the block that worked for me in case anyone has this same
issue.




Note that with this config, your username needs to go in the dedicated
username field, not in the nickname.

----------------------------------------------------------------------
ahalliday13 · 2023-09-25 18:14

Figured it out, thanks for your help!