Trick789
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
Thanks again for your time! I'll write-up a piece for HA w/ LDAP this week.
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
ok, I'll keep an eye on that 🙂
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
I've kind of given up on it seeing how many apps lack support for OIDC
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
How do you usually deal with SSO?
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
as long as the app supports the protocol, I'm golden
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
The important bit for me is that I can just have an ldap proxy deal with it
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
true 🙂
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
Yeah, I set the timeout value in the HA script to 30s
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
whatever you define for earch user on the control plane
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
it's either push, or sms, etc.
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
You can set timeouts at practically every step
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
It's amazing. DUO offers up to 10 users for free. That plan allows me to create an application for Authelia for that integration and also an LDAP proxy application. The DUO authentication proxy simply runs on my k8s cluster and whenever a request to authenticate a user comes in, it reaches out to the "Cisco managed control plane" API to check 1) if the user is enrolled, 2) which policy it needs to follow, 3) which devices the user has, etc.
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
(Authelia also goes through DUO before reaching LLDAP for requests coming from non-trusted networks)
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
and for those with LDAP support (Nextcloud, etc.), I'll skip the Authelia step and offer MFA through DUO+LLDAP
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
so now I have my reverse proxy forwardAuth to Authelia + LLDAP for those who offer no direct integration with external identity providers
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
You have services who offer no user management at all (longhorn offers write access! without authentication to the block storage), services who only offer local users (no external identity providers), then those who do but no ldap, then those who offer OIDC I can count on one hand, etc.
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
the authentication & authorization aspect of my homelab is my biggest annoyance with it 😄
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
Works for filters 🙂
added to conf file:
ignored_user_attributes = [ "objectcategory" ] ignored_group_attributes = [ "objectsid" ]
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
I'll add it to the ignore list and will let you know if it does
118 replies
LLLDAP
•Created by Trick789 on 11/28/2023 in #troubleshooting
Trick789 - Hi 🙂 I'm running homeassistant (HA)...
and I have no control over that
118 replies