starred/lldap-lldap

Fork 0

mirror of https://github.com/lldap/lldap.git synced 2026-04-25 16:25:55 +03:00

[GH-ISSUE #134] Jellyfin LDAP plugin guide #56

New issue

Closed

opened 2026-02-27 08:14:59 +03:00 by kerem · 5 comments

kerem commented

2026-02-27 08:14:59 +03:00

Owner

Originally created by @strazto on GitHub (Apr 9, 2022).
Original GitHub issue: https://github.com/lldap/lldap/issues/134

In order to use jellyfin with lldap, you'll want to do the following:

LDAP Bind User:

cn=admin,ou=people,dc=example,dc=com

LDAP Base DN for searches:

ou=people,dc=example,dc=com

User Filter:

(memberof=cn=media,ou=groups,dc=example,dc=com)

Admin Filter:

(memberof=cn=media_admin,ou=groups,dc=example,dc=com)

Originally created by @strazto on GitHub (Apr 9, 2022). Original GitHub issue: https://github.com/lldap/lldap/issues/134 In order to use jellyfin with lldap, you'll want to do the following: LDAP Bind User: ``` cn=admin,ou=people,dc=example,dc=com ``` LDAP Base DN for searches: ``` ou=people,dc=example,dc=com ``` User Filter: ``` (memberof=cn=media,ou=groups,dc=example,dc=com) ``` Admin Filter: ``` (memberof=cn=media_admin,ou=groups,dc=example,dc=com) ```

kerem closed this issue

2026-02-27 08:15:00 +03:00

kerem commented

2026-02-27 08:15:00 +03:00

Author

Owner

@nitnelave commented on GitHub (Apr 17, 2022):

Thanks!

@nitnelave commented on GitHub (Apr 17, 2022): Thanks!

kerem commented

2026-02-27 08:15:00 +03:00

Author

Owner

@h-2 commented on GitHub (Jan 15, 2026):

Giving the admin user as bind-user means giving the Jellyfin-instance admin access to LLDAP.

Can I create a user account with fewer privileges for this purpose?

@h-2 commented on GitHub (Jan 15, 2026): Giving the admin user as bind-user means giving the Jellyfin-instance admin access to LLDAP. Can I create a user account with fewer privileges for this purpose?

kerem commented

2026-02-27 08:15:00 +03:00

Author

Owner

@nitnelave commented on GitHub (Jan 15, 2026):

Of course! You can create any user and add it to the lldap_strict_readonly group, and that should be enough. If you want to be able to reset passwords through Jellyfin (I believe it supports that) then you'll need the lldap_password_manager group instead.

@nitnelave commented on GitHub (Jan 15, 2026): Of course! You can create any user and add it to the lldap_strict_readonly group, and that should be enough. If you want to be able to reset passwords through Jellyfin (I believe it supports that) then you'll need the lldap_password_manager group instead.

kerem commented

2026-02-27 08:15:00 +03:00

Author

Owner

@h-2 commented on GitHub (Jan 15, 2026):

Great, thanks for the quick reply! Might be worth adding to the tutorial for other newbies like me?

@h-2 commented on GitHub (Jan 15, 2026): Great, thanks for the quick reply! Might be worth adding to the tutorial for other newbies like me?

kerem commented

2026-02-27 08:15:00 +03:00

Author

Owner

@nitnelave commented on GitHub (Jan 15, 2026):

Which tutorial are you talking about? The Jellyfin one? Sure, you can make a PR for that.

Note that these roles and their use are described in the readme, in the "client configuration > general configuration guide" section.

@nitnelave commented on GitHub (Jan 15, 2026): Which tutorial are you talking about? The Jellyfin one? Sure, you can make a PR for that. Note that these roles and their use are described in the readme, in the "client configuration > general configuration guide" section.

kerem referenced this issue

2026-02-27 08:17:49 +03:00

[PR #56] [MERGED] README: Add more details and a screenshot #515