Setting Up LDAP

Lightweight Directory Access Protocol (LDAP) is an open and cross-platform protocol. It is often used to centralize authentication. TrueNAS includes an Open LDAP client for accessing information from an LDAP server. An LDAP server provides directory services for finding network resources. This includes finding users and their associated permissions.

To integrate an LDAP server with TrueNAS, go to Directory Services > LDAP.

Enter any LDAP server host names or IP addresses. Separate entries with an empty space. Entering more than one host name or IP address creates an LDAP failover priority list.

Enter the Base DN. This is the top level of the LDAP directory tree used when searching for resources. For example, dc=test,dc=org.

Enter the Bind DN. This is the administrative account name on the LDAP server. For example, cn=Manager,dc=test,dc=org.

Enter the Bind Password. This is the password associated with the account in Bind DN.

The final basic option is Enable. Clearing the Enable checkbox disables the LDAP configuration without deleting it. Enable it at a later time without reconfiguring the options.

To make further changes to the LDAP configuration, click ADVANCED OPTIONS.

See LDAP Screen for information on basic and advanced option settings.

See Kerberos for more information on using Kerberos.

To configure LDAP certificate-based authentication for the LDAP provider to sign, see Certificate Signing Requests.

Samba 4.13.0 deprecated Samba Schema. Select if SMB shares need LDAP authentication and the LDAP server is already configured with Samba attributes. If selected, specify the type of schema from the Schema dropdown list.