Bitnami OpenLDAP with phpLDAPadmin and Nextcloud - memberOf issue
reddit / selfhosted

----------------------------------------------------------------------
brickflint · 2023-11-27 16:10

Hello

I'm trying to setup a LDAP directory for use in Nextcloud and possible
further services. The Bitnami Image seems to be suited for that expect
that it dosn't feature memberOf.

This results in the following warning in Nextcloud, also this results
in not being able to control which groups can login into Nextcloud:

    The group box was disabled, because the LDAP/AD server does not
support memberOf.

I have tried to implement memberOf support with the help of this
overlay ldif. This works, but just for users created by the
environment variables. If I create a user with phpLDAPadmin it doesn't
have the memberOf parameter. Any idea why?:

[https://github.com/bitnami/containers/issues/982#issuecomment-
1220354408](https://github.com/bitnami/containers/issues/982#issuecomm
ent-1220354408)

----------------------------------------------------------------------
rrrmmmrrrmmm · 2023-11-27 16:36

Not related to your issue but I wouldn't recommend OpenLDAP any more
to anyone, since many moved away from that.

If you want to have a heavy and extensive LDAP implementation use Red
Hat's [389DS](https://hub.docker.com/r/389ds/dirsrv). If you want
something tiny use [LLDAP](https://github.com/lldap/lldap). If you
want something performant that's also capable of doing SSO stuff like
[OpenID Connect for
Nextcloud](https://apps.nextcloud.com/apps/oidc_login) and GitLab use
[KanIDM](https://github.com/kanidm/kanidm).

----------------------------------------------------------------------
assclownsix9 · 2023-11-28 10:14

Thanks for the tip, you just saved me some future headaches.

----------------------------------------------------------------------
rrrmmmrrrmmm · 2023-11-28 12:46

That's what this community is about.
I had to try a few things until I finally KanIDM which checked all the
boxes for me.

Sharing experiences and recommending services or architectures makes
the experience here very nice.