diff --git a/Configs & Servers/Linux/privacyIDEA.md b/Configs & Servers/Linux/privacyIDEA.md index ed2d8bd..7ca187c 100644 --- a/Configs & Servers/Linux/privacyIDEA.md +++ b/Configs & Servers/Linux/privacyIDEA.md @@ -63,4 +63,22 @@ sudo pi-manage admin add nicole.rappe -e nicole.rappe@bunny-lab.io ``` ## Log into the WebUI -Assuming you created an `A` record in the DNS server pointing to the IP address of the privacyIDEA server, Navigate to https://auth.bunny-lab.io and sign in with your newly-created username and password. (e.g. `nicole.rappe`) \ No newline at end of file +Assuming you created an `A` record in the DNS server pointing to the IP address of the privacyIDEA server, Navigate to https://auth.bunny-lab.io and sign in with your newly-created username and password. (e.g. `nicole.rappe`) + +## Create a LDAP User ID Resolver +This is what will connect privacyIDEA to an LDAP backend to pull-down users for authentication in Active Directory. Begin by navigating to "**Config > Users > New LDAP Resolver**" + +| **Field** | **Value** | +| :--- | :--- | +| Resolver Name | `BunnyLab-LDAP` | +| Server URI | `ldap://bunny-dc-01.bunny-lab.io, ldap://bunny-db-02.bunny.lab.io` | +| Pooling Strategy | `ROUND_ROBIN` | +| StartTLS | `` | +| Base DN | `OU=Users,DC=bunny-lab,DC=io` | +| Scope | `SUBTREE` | +| Bind Type | `Simple` | +| Bind DN | `CN=nicole.rappe,OU=Users,DC=bunny-lab,DC=io` +| Bind Password | `` | + +- Click the "**Preset Active Directory**" button. +- Click the "**Test LDAP Resolver**" button. \ No newline at end of file