OctoPrint LDAP auth Plugin

This plugin allow users to be connected using an LDAP server. This system works

Details

When you try to login, OctoPrint search for user in this local database (users.yaml)

• If it found a user, check if this user exists also on LDAP
• If user exists on LDAP, use LDAP bind() to check login / password
• If user not exists on LDAP, use native password system to check it

======================================

• If it not found a user in local database, try to connect directly on LDAP
• If login on LDAP il OK, a new local user is added with role "user" and a random password (password should never be used)
• User is connected

======================================

• An admin (default user for exemple), could change a user permissions or account state.
• Password of LDAP users can't be changed

Configuration

You could configure LDAP server in plugin config, or manually in config.yaml

accessControl:
  ldap_uri: ldaps://ldap.server.com/
  ldap_tls_reqcert: demand
  ldap_search_base: dc=server,dc=com
  groups: TheGroupName

Groups

• You can list multiple groups via comma seperation: Group1, Group2, Group3.
• Leaving blank will skip a group check.

Installation

You can install it using pip install https://github.com/gillg/OctoPrint-LDAP/archive/master.zip

Or with plugin manager into OctoPrint