mirror of
https://github.com/lldap/lldap.git
synced 2026-04-26 00:36:01 +03:00
[GH-ISSUE #780] [FEATURE REQUEST] Add entrydn as an attribute for groups to permit Duo directory synchronisation #280
Labels
No labels
backend
blocked
bug
cleanup
dependencies
docker
documentation
duplicate
enhancement
enhancement
frontend
github_actions
good first issue
help wanted
help wanted
integration
invalid
ldap
pull-request
question
rust
rust
tests
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/lldap-lldap#280
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Alumni1506 on GitHub (Dec 30, 2023).
Original GitHub issue: https://github.com/lldap/lldap/issues/780
Motivation
In order to implement Duo's directory sync via their authentication proxy service, they require the following
Describe the solution you'd like
Implement entrydn as a group attribute plus any from above required to get Duo directory sync to function.
Describe alternatives you've considered
No alternative available as the requirements are specified by Duo
Additional context

Duo's OpenLDAP Synchronization
Duo imports users and administrators via LDAP from OpenLDAP directories. When configuring OpenLDAP sync, you'll need to install the Duo Authentication Proxy application on a server that can connect to your directory server.
The above could potentially allow implementation of 2fa for services like jellyfin without breaking access to the mobile/TV app (example workflow given below). While Authelia can still be used to control/add/delete entries in LLDAP.
@Alumni1506 commented on GitHub (Dec 31, 2023):
Hi,
I've just tested the sync and it is not working. I am using LLDAP version 0.5.0.

The error I'm getting is as per below
Below is the log of the sync process.
@nitnelave commented on GitHub (Dec 31, 2023):
Did you make sure to pull the latest image? Given the request they sent, the response should contain the attribute. You need to be using a "latest" tag (latest-alpine, latest-debian, ...)
The v0.5 tag will not work (no new release containing the change)
@Alumni1506 commented on GitHub (Dec 31, 2023):
Made a mistake, I using the the stable tag. The LDAP is now connected but I am now having another issue with syncing. I've attached a log to see if you may have an idea as to what is wrong
@nitnelave commented on GitHub (Dec 31, 2023):
What is not working? What error are you getting? I see only a correct search query with a correct response, so it's a bit hard to help :/
@Alumni1506 commented on GitHub (Jan 1, 2024):
Sorry, i thought i posted the snippets
The admin page of duo is not helpful
@nitnelave commented on GitHub (Jan 1, 2024):
Hmm, hard to say from the errors. Can you ask some Duo support for help with this? AFAICT, LLDAP is behaving well.
@Alumni1506 commented on GitHub (Jan 1, 2024):
will do, hopefully they come back with something useful
@Alumni1506 commented on GitHub (Jan 3, 2024):
Just an update, I did not manage to Duo's LDAP working with push notification. Tried several mods with no luck
@nitnelave commented on GitHub (Jan 4, 2024):
I'd be curious to see if openLdap replies differently. I can try to match their response.
@Alumni1506 commented on GitHub (Jan 9, 2024):
I'll try to make some time to find a simple openldap docker image to test