Authentik - LDAP Generic Setup 

Okay, for everyone who is struggling with `ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)`, and is running Authentik through docker-compose/portainer, here's what I did to fix it: - I mapped the 389 and 636 host ports to the 3389 and 6636 ports on the authentik *server* container (these are the default ports mapped to the ones Authentik actually listens to by default) - I explicitly opened the 389 and 636 ports on my machine through `iptables`. Depending on what you have on your machine, you may need to use a different tool, like `nftables`. It's somewhat easy to look up how to do this once you know what you actually have to do - You have to configure the worker with `user: root` and mapping `docker.sock` in the volumes list (I didn't do it because the official compose file mentioned in a comment that these were optional) and you have to choose Local Docker Integration I'm not sure if all of these are necessary, but it wasn't until after doing all these that my LDAP Outpost started working

Thank you for all the videos you doing on Authentik, the doc's for Authentik are not beginner friendly and your videos help out a lot

Thank you for these authentik videos, they helped me a lot in setting up my kubernetes cluster, already configured authentication for proxmox and now it's synology(oidc) and jellyfin(ldap) turn . Subbed :)

The best tutorial for Athentik LDAP. Thank you!

You are the Man - SPX PCS to the moon! :-)

The radius outpost is in the stable version. Can you post a video how to correctly set that up?

Thanks. Is it safe to assume this is valid for MS Active Directory too?

Hello Cooptonian, I tried the same steps for LDAP configuration. It is still not working for me. I am not sure how to get that done. Can you create one video or help with some article how to configure LDAP with openvpn application using Authentik.

Great video! I have watched all your Authentik videos as a walkthrough for my own deployment of Authentik. Could you possibly do a tutorial on SSO? I am particularly curious about getting it to work with Jellyfin, but I have had some trouble.

Just curious, as I noticed a different approach from the documents. Is there an advantage to creating separate stages and flows specifically for LDAP as opposed to using the default login flow?

@Cooptonian, could you do a JellyFin LDAP guide? It would be great... I am struggling to get authentik on jellyfin...

I really like your videos about Authentik. Could you make a video about how to login with Azure AD and MFA ?

Hi, thanks for the detailed steps. Everything works instead of the LDAP outpost, I can't get it configured (and know too little to solve it). Could you assist me? I use the base docker-compose file which uses the embedded outpost. Do I need to add the LDAP docker image to my stack? If so, how do I configure that with traefik? The point is that when I now setup my LDAP outpost, It says "Not available" under "Health and Version".

Any tips on how to use the ldap over SSL (i.e., port 636, or ldaps://)? Followed your guide, no issues. I just cant figure out how to get SSL working, the authentik documentation quickly mentions support and requiring to add a certificate/domain name, but I cant figure it out

Why i did my ldapsearh return ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) error, i get confused.

when i do ldap search and put thee right credentials in i get ldap_bind: invalid credentials (49), can you help? regards

Thanks for you videos really helpful. did you try the authentik ldap with linux for user authentication. i cant seem to get it setup. i managed to get apps working like proxmox, calibre-web, jellyfin with authentik ldap but with Ubuntu i cant get it working. i read some where authentik is not a full ldap server so maybe its not suppose to work i have no idea maybe you could help point me in the right direction? thanks.

the video didn't cover integrations(aka the networking part) and how to point Authentik to my ldap server

No integration active, why?

By doing this tho is someone finds the URL to the LDAP flow, won't that remove the 2fa which could lead to security issues?

Should this be a service or regular user? The generic docs say regular but some of the integrations like opnsense say service.

ldap says its a unhealthy container can u help?

Great video as always! In the last command, you used 192.168.x.x. What if this is on a VPS that has only a public IP, do you use the IP instead? Wouldn't that make the LDAP publicly accessible by using the public IP? Thanks for feedback.

First of all a massive thank you for your videos they have been awesome. One thing if you don't mind me asking for help. I am on Unraid and I am trying to get it to link up with Jellyfin. if you could help me, i would owe you a mega pint and i would really appreciate it.

Thanks for the video, if LDAP server is a remote machine, and by adding LDAP source and syncing users is enough for user's SSO type login?.