Configuring Ezeelogin for authenticating with OpenLDAP or Windows AD server

Overview: This article explains how to set up Ezeelogin to authenticate with OpenLDAP or Windows AD servers. It covers the use of the autocreate feature to automatically create system users, outlines the steps for integrating OpenLDAP and Windows AD, and details the process of importing LDAP users into Ezeelogin for secure authentication, all while preserving existing directory attributes.

while using autocreate feature, the backend SSH authentication would not be using PAM-LDAP, instead, it would create a system user on the server and uses system authentication for the backend access. The advantage of using the autocreate feature is that it eliminates the need to configure LDAP for SSH or modify your existing Active Directory or OpenLDAP attributes.

Do read more about the drawbacks,  since the ssh authentication would not be via LDAP, here

1. Install PHP-LDAP extension on the gateway server.

Step 1(B): For Centos 6 , 7, 8

2. Integration of OpenLdap in ezeelogin jumpserver (Import openldap user to Ezeelogin jumpserver)

Step 2(A): Login to Web-GUI -> open settings -> LDAP

 Step 2(B): Add the details of LDAP configurations. Refer below screenshot

 Step 2(C): Open Settings -> General Settings -> Authentication -> Change webpanel authentication to LDAP

Step 2(D): Open Settings -> General settings -> Security -> Enable Auto Create User

Step 2(E): Navigate to Users -> LDAP and select the LDAP users and import them to Ezeelogin.

Step 2(F): You can confirm the imported LDAP users were listed in the Users tab.