Feature Request: Add LDAP Authentication

[rvpool]

📑 I have found these related issues/pull requests

support ldap auth #4751

🏷️ Feature Request Type

Settings

🔖 Feature description

Uptime Kuma currently supports local user authentication, but it lacks the ability to integrate with centralized authentication systems like LDAP. Adding LDAP support would enable organizations to manage user access more efficiently and securely, especially in environments with multiple users and predefined access control systems.

✔️ Solution

Enable LDAP Authentication:

Provide an option to enable LDAP authentication under Settings > Security.
Allow integration with LDAP directories like Active Directory or OpenLDAP.
Configuration Options: Add a configuration interface to set the following:

LDAP Server URL: (e.g., ldap://ldap.example.com or ldaps://ldap.example.com for secure connections).
Bind DN: The Distinguished Name (DN) of the user account used to query the LDAP directory (e.g., cn=admin,dc=example,dc=com).
Bind Password: The password for the Bind DN.
Base DN: The starting point for user searches (e.g., dc=example,dc=com).
User Filter: A customizable filter to find users (e.g., (uid={{username}}) or (sAMAccountName={{username}}) for Active Directory).
Group Membership (Optional):
Allow filtering users based on group membership.
Example: Only users in a specific group (e.g., monitoring-users) should have access.
Access Control:

Optionally map LDAP groups to roles in Uptime Kuma (e.g., Admin, Read-only).
Fallback Authentication:

Allow fallback to local user authentication if LDAP is unavailable or for initial setup.

❓ Alternatives

No response

📝 Additional Context

No response

[Ionys320]

Hello! There is already a WIP PR on this: #4751, and some other issues opened. I agree LDAP would be awesome, but for the moment, we must wait!

[rvpool]

Thanks, looking forward :-)

…

On Mon, Nov 18, 2024 at 4:55 PM Ionys ***@***.***> wrote: Hello! There is already a WIP PR on this: #4751 <#4751>, and some other issues opened. I agree LDAP would be awesome, but for the moment, we must wait! — Reply to this email directly, view it on GitHub <#5359 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BNBJW6FSVWNH5JYLQFFJM6D2BJO3TAVCNFSM6AAAAABSAMVG3WVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIOBUGIYTCMZVGU> . You are receiving this because you authored the thread.Message ID: ***@***.***>