I’d like to set up my identity and authentication service for my self hosted applications but it is not a beginner friendly subject.
I’m aware of the various tools available; authentik, authelia, LLDAP, keycloak, etc and see lots of useful discussions on them which is great.
But I can’t seem to find a beginner friendly introduction to setting up one or more of these tools that helps me understand the core concepts at the same time. Does such a thing exist?
I’d like to try out LLDAP and Authelia on my home lab and then possibly roll this out to my production services.
But every tutorial I’ve come across seems to assume a fair amount of knowledge that I don’t think I have.
For instance if I deploy LLDAP what should I use as my base DN? And how can I seperate a homelab directory from a seperate production directory?
Any pointers gratefully received.
Hint: you don’t have to use ldap to use authelia (I haven’t bothered). It’s a bit awkward to use though, I’d only recommend it for single-user setups (I wish they would just add support for SQLite, they already use it for 2fa and stuff)
what should I use as my base DN?
I posted this a while ago about LDAP basics: https://lemmy.world/comment/1539633
The base DN is usually the DN under which your user accounts (
inetOrgPerson
s) can be found. In my case it isou=users,dc=example,dc=org
.I use nforwardauth and caddy for authentication, I think it is one of the simplest solutions https://github.com/nosduco/nforwardauth