Truenas Nextcloud user sync

[aldar]

Is it possible to sync users and groups from Truenas to Nextcloud.
Creating and deleting users on both sides makes it hard to use for small business environments.

 

[sretalla]

Using an LDAP server/service for both would be the "solution" for that. (or use LDAP to connect to AD from Nextcloud and connect TrueNAS to that same AD)

I doubt anyone would have constructed the code you're asking for specifically to sync TrueNAS user DB with Nextcloud. (but feel free to raise a feature request if you feel strongly enough about it)

 

[anodos]

Using an LDAP server/service for both would be the "solution" for that. (or use LDAP to connect to AD from Nextcloud and connect TrueNAS to that same AD)

I doubt anyone would have constructed the code you're asking for specifically to sync TrueNAS user DB with Nextcloud. (but feel free to raise a feature request if you feel strongly enough about it)

I doubt it could be synced easily since we don't store plaintext passwords in our DB and Nextcloud's REST API expects to receive plaintext password. Probably easier to just create your own simple script that makes rest API calls to TrueNAS and nextcloud when adding or modifying users (or just use a directory service, since this is the sort of problem they are supposed to solve).

 

[aldar]

Using an LDAP server/service for both would be the "solution"

Purchasing separate machine just for authentication would be overkill. But is it Ok to run LDAP on Truenas server as a VM?

 

[sretalla]

Purchasing separate machine just for authentication would be overkill. But is it Ok to run LDAP on Truenas server as a VM?

You could, but it's already there under Directory Services, just turn it on...

 

[aldar]

Under Directory Services we have only connection settings to existing LDAP server. I mean, if I don't have any LDAP. Is it ok to run something like Freeipa or Openldap on Truenas as a VM?

 

[sretalla]

OK, fair point.

I would suggest running it in a jail rather than a VM due to the lower drain on resources.

In a new jail, pkg install openldap26-server

 

[aldar]

OK, fair point.

I would suggest running it in a jail rather than a VM due to the lower drain on resources.

In a new jail, pkg install openldap26-server

Thanks, I didn't know that there is option for manual jail.
Now I need to find LDAP that has GUI.

 

[sretalla]

pkg install phpldapadmin-php82

And then you would need to do the necessary config for the install of whichever webserver you put there to run it, of course.

 

[anodos]

The LDAP users won't be able to use SMB, just FYI.

 

[aldar]

The LDAP users won't be able to use SMB, just FYI.

Then, what's the point of LDAP?

 

[anodos]

Then, what's the point of LDAP?

There is more to the world than just SMB. As a sysadmin you need to know your tools and when / where to use them. Generally if you need to have directory services and provide SMB access, AD is the most sensible choice.