support for ldapi://

[andreasschulze]

LDAP server may serve over a unixsocket. To connect to such servers, a LDAP-client uses an 'normal' LDAPURI ldapi://%2Fpath%2Fto%ldap-socket/dc=base,...

• the hostpart doesn't contain any ":port"
• any '/' is encoded as '%2F'
• see man 5 ldap.conf (OPTIONS, URI)

currently I see ony an error message:
http_auth_ldap: invalid host in LDAP hostname "/path/to/ldap-socket" in /path/to/nginx.conf

[andreasschulze]

@kvspb
Hello! Is there anything I could do to assist?

[rseichter]

I ran into the same issue. NGINX and OpenLDAP running on the same host, the latter only providing a Unix domain socket for access, so "ldap:" and "ldaps:" are currently unavailable. Support for the "ldapi:" scheme would be very useful for cases like this.

[davama]

Is this project still maintained?

we switched over to authelia
https://github.com/authelia/authelia
It’s great!

[rseichter]

@davama Thanks a lot for pointing out authelia. It looks very interesting, and given that it is actively maintained, it might be the better choice.