{ "componentChunkName": "component---src-templates-issues-tsx", "path": "/issues/188", "result": {"data":{"issuesJson":{"id":"1b5da84f-9d11-52f6-a207-ed41c2d96e88","title":"glauth/glauth: 基于 golang 实现的类 ldap 功能的系统，支持本地，S3，原有 ldap，以及 MySQL 等存储方式。使用习惯上与 ldap 略有差异","number":188,"bodyHTML":"
\n



\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Reposglauth/glauth
Views\"views\"
Stars\"stars\"
Forks\"forks\"
License\"license\"
UpdatedAt\"last-commit\"
CreatedAt\"create-at\"
\n\n

\"\"

\n\n
\n

GLAuth: LDAP authentication server for developers

\n

Go-lang LDAP Authentication (GLAuth) is a secure, easy-to-use, LDAP server w/ configurable backends.

\n

\"Gitter\"
\n\"Matrix\"

\n

\"GitHub
\n\"Docker

\n

\"GitHub
\n\"Code

\n\n

Use it to centralize account management across your Linux servers, your OSX machines, and your support applications (Jenkins, Apache/Nginx, Graylog2, and many more!).

\n

Contributing

\n\n

Quickstart

\n

This quickstart is a great way to try out GLAuth in a non-production environment. Be warned that you should take the extra steps to setup SSL (TLS) for production use!

\n
    \n
  1. Download a precompiled binary from the releases page.
    2. \n
  2. Download the example config file.
    3. \n
  3. Start the GLAuth server, referencing the path to the desired config file with -c.\n\n
    4. \n
  4. Test with traditional LDAP tools\n\n
    5. \n
\n

Make Commands

\n

Note - makefile uses git data to inject build-time variables. For best results, run in the context of the git repo.

\n

Documentation

\n

👉 The latest version of GLauth's documentation is available at https://glauth.github.io/ 👈

\n
\n

Quickstart

\n

Get started in three short steps

\n

Usage:

\n
glauth: securely expose your LDAP for external auth\n\nUsage:\n  glauth [options] -c <file|s3url>\n  glauth -h --help\n  glauth --version\n\nOptions:\n  -c, --config <file>       Config file.\n  -K <aws_key_id>           AWS Key ID.\n  -S <aws_secret_key>       AWS Secret Key.\n  -r <aws_region>           AWS Region [default: us-east-1].\n  --ldap <address>          Listen address for the LDAP server.\n  --ldaps <address>         Listen address for the LDAPS server.\n  --ldaps-cert <cert-file>  Path to cert file for the LDAPS server.\n  --ldaps-key <key-file>    Path to key file for the LDAPS server.\n  -h, --help                Show this screen.\n  --version                 Show version.\n
\n

Configuration:

\n

GLAuth can be deployed as a single server using only a local configuration file. This is great for testing, or for production if you use a tool like Puppet/Chef/Ansible:

\n
glauth -c glauth.cfg\n
\n

Here's a sample config wth hardcoded users and groups:

\n
[backend]\n  datastore = \"config\"\n  baseDN = \"dc=glauth,dc=com\"\n[[users]]\n  name = \"hackers\"\n  uidnumber = 5001\n  primarygroup = 5501\n  passsha256 = \"6478579e37aff45f013e14eeb30b3cc56c72ccdc310123bcdf53e0333e3f416a\"   # dogood\n  sshkeys = [ \"ssh-dss AAAAB3...\" ]\n[[users]]\n  name = \"uberhackers\"\n  uidnumber = 5006\n  primarygroup = 5501\n  passbcrypt = \"243261243130244B62463462656F7265504F762E794F324957746D656541326B4B46596275674A79336A476845764B616D65446169784E41384F4432\"   # dogood\n[[groups]]\n  name = \"superheros\"\n  gidnumber = 5501
\n

More configuration options are documented here and in this sample file

\n

Backends:

\n

For advanced users, GLAuth supports pluggable backends. Currently, it can use a local file, S3 or an existing LDAP infrastructure. Through the use of optional plugins, you can connect SQL databases, PAM, and other datastores.

\n
[backend]\n  datastore = \"ldap\"\n  servers = [ \"ldaps://server1:636\", \"ldaps://server2:636\" ]
\n

Stargazers over time

\n

\"Stargazers

","updatedAt":"2025-05-21T15:59:09Z","upvoteCount":null,"author":{"login":"eryajf","avatarUrl":"https://avatars.githubusercontent.com/u/33259379?u=e4a4090a38ac2473aaed4ef9945233636776c6c3&v=4","url":"https://github.com/eryajf"},"category":null,"labels":{"edges":[{"node":{"name":"更多","color":"25B472"}},{"node":{"name":"OpenLDAP","color":"508193"}},{"node":{"name":"glauth","color":"28bdab"}}]},"comments":{"edges":[]}}},"pageContext":{"number":188,"previous":{"title":"nicolargo/glances: 一款开源的跨平台系统监控工具。它可以实时监控系统的各个方面，例如 CPU、内存、磁盘、网络使用情况等。","number":187},"next":{"title":"charmbracelet/glow: Glow 是一款基于终端的 Markdown 阅读器，从头开始设计，旨在展现 CLI 的美丽和强大功能。","number":189}}}, "staticQueryHashes": ["151096407","2861350382"]}