nginx-ldap-auth-service
nginx-ldap-auth-service
provides a daemon (nginx-ldap-auth
) that
communicates with an LDAP or Active Directory server to authenticate users with
their username and password, as well as a login form for actually allowing users
to authenticate. You can use this in combination with the nginx module
ngx_http_auth_request_module
to provide authentication for your nginx server.
Features
User authentication
Built for use with the ngx_http_auth_request_module
Provides its own login form and authentication backend
Users login once via the login form, creating a login session that will be used for all subsequent requests to determine that the user is logged in.
Session data can be either in memory or Redis for high availability and session persistence though server restarts.
The same
nginx_ldap_auth_service
server can be used by multiple nginx servers. This allows you to use a single login form for multiple sites (single signon like), or you can configure each nginx server to use different session cookies so that login sessions are not shared between sites.
Other features
Implemented in FastAPI for speed and connection management.
Available a Docker image that can be used as a sidecar container with nginx.