A lightweight LDAP authentication server with a web UI, designed for simple user management in self-hosted environments.
lldap is a lightweight LDAP implementation designed for authentication and user management. It provides a simplified LDAP interface with a web-based UI, making it easy to set up and manage users and groups for self-hosted services. It solves the complexity of traditional LDAP servers by offering an opinionated, low-resource alternative that integrates seamlessly with many open-source applications.
System administrators and developers who self-host open-source services (like Nextcloud, Airsonic, or media servers) and need a simple, centralized authentication solution without the overhead of full LDAP servers.
Developers choose lldap for its ease of setup, intuitive web UI, and low resource footprint compared to traditional LDAP servers like OpenLDAP. Its focus on simplicity and compatibility with common self-hosted tools makes it a practical choice for lightweight authentication needs.
Light LDAP implementation
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Offers easy setup via Docker, Kubernetes, or package managers, avoiding the complexity of traditional slapd servers as highlighted in the installation docs.
Includes a user-friendly frontend for managing users, groups, and custom attributes, reducing administrative overhead compared to command-line LDAP tools.
Allows users to reset passwords via email and edit their own information, enhancing autonomy when SMTP is configured, as noted in the usage section.
Supports SQLite by default with MySQL/MariaDB or PostgreSQL alternatives, accommodating different scalability needs for self-hosted environments.
Uses a zero-knowledge proof password hashing scheme and supports LDAPS, ensuring strong security practices without exposing password hashes.
Intentionally not a full LDAP server; incompatible with services like Synology and LDAP browsing tools, as admitted in the incompatible services section.
Lacks built-in OAuth/OpenID support, requiring integration with additional components like KeyCloak or Authelia for those features, which adds complexity.
May require creating custom attributes or tweaking settings for some services, as noted in the client configuration guide, increasing setup time.
The project does not offer commercial support contracts, as stated in the FAQ, which could be a risk for business-critical deployments.
LLDAP is an open-source alternative to the following products: