Getting started on central user management
reddit / selfhosted

----------------------------------------------------------------------
JohnBeePowel · 2023-11-22 08:26

Hello everyone,

I'm looking into a centralized user management for my services to use.
Right now I only have Jellyfin but I plan to add a recipe service to
the mix for my family.

I've been reading on this and I'm really overwhelmed by the different
services.

So far, I'm gathering that I'd need an LDAP server to get started, but
if I want to enable my users to password reset themselves, I'll need
another service like Authelia.

Are there any guides to help get started ? I'm really going to have
only 5 users or less normally.

----------------------------------------------------------------------
ElevenNotes · 2023-11-22 08:39

I prefer Microsoft AD for LDAP, you can then add anything you like for
OICD or SAML like Authelia, Authentik or KeyCloack. Why MS AD? Because
I have lots of Windows clients, so it’s a no brainer. If you don’t
have Windows clients you can use LLDAP or similar.

----------------------------------------------------------------------
JohnBeePowel · 2023-11-22 08:48

AD is the gold standard but I'd rather host on docker over a VM. Also
I'm working on AD so if I could use something else I'd appreciate
haha.

But I don't plan on enrolling clients on it, only for authentication
on websites.

----------------------------------------------------------------------
ElevenNotes · 2023-11-22 08:53

As I said: LLDAP.

----------------------------------------------------------------------
jmadden912 · 2023-11-22 09:09

Authentik will manage users/groups provide an ldap server and do all
single factor and multi factor auth. Cooptonian has great guides on
youtube.

----------------------------------------------------------------------
JohnBeePowel · 2023-11-22 10:00

I'll look into this one, thanks. I'm definitely looking for a shop
does all kind of solution.

----------------------------------------------------------------------
-eschguy- · 2023-11-22 15:30

I use LLDAP for mine. Works great!

----------------------------------------------------------------------
JohnBeePowel · 2023-11-22 16:01

Can your users reset their own passwords ?

----------------------------------------------------------------------
JohnBeePowel · 2023-11-22 16:01

Can your users reset their own passwords ?

----------------------------------------------------------------------
jogai-san · 2023-11-22 16:05

Maybe look into this:
r/selfhosted/comments/1804cr2/pomerium_v024_update/

----------------------------------------------------------------------
JohnBeePowel · 2023-11-22 16:19

Your link doesn't work,, can you share the original post ?

----------------------------------------------------------------------
jogai-san · 2023-11-22 16:22

https://github.com/pomerium/pomerium

----------------------------------------------------------------------
-eschguy- · 2023-11-22 17:03

Yeah, there's two ways:

1. The service supports it (Jellyfin, for example) and uses a bind
account that has the permission to make the change
1. The LLDAP portal is accessible to the users, and they log in and
make the changes there.