Category: LDAP

This is the forth in a series that documents the Tier 3 / Co-Managed IT work we did to setup a wireless test bed for a Linux based scientific device. The testing environment included two different wireless network hardware types (Ubiquiti and Cisco). There was also a Synology device used for various purposes including hosting the Ubiquiti controller inside a Kubernetes container, providing certificate services, providing LDAP authentication, and providing RADIUS authentication. Each article will detail a separate piece of the project. This article shows the setup Synology LDAP server & certificates.

Setup LDAP Server

1. Login to Synology
2. Open Package Center
3. Install LDAP Server app
4. Open LDAP Server package
   • Enable LDAP Server
   • Create FQDN (something like Test.local)
   • Create password
   • 
   • Change Connection Settings
     1. Disallow anonymous binds
     1. Force clients to use encrypted connections
     1. Change timeout to 10 minutes
     2. Click OK
     3. 
   • Click Apply
   • Click on Manage Groups
     • Click on Create
     • Give the Group a name
     • Click Next
     • Click Done
     • 
   • Click on Manage Users
     • Click on Create
     • Give the User a name
     • Add user email if appropriate
     • Create password
     • Click Next
     • Check mark next to new group previously created
     • Click Next x2
     • Click Done

Connect Synology to LDAP Server

1. Open Control Panel
2. Click on Domain / LDAP on left hand side
3. Click Join
   • Enter IP address of Synology
   • 
   • Enter Admin username / password
   • Choose STARTTLS encryption
   • Copy Base DN from LDAP Server app Settings tab
   • Click Next
   • 
   • Connection parameters will be check (fix any issues)
   • 

Configure LDAP Certificates

1. Open Control Panel
2. Click on External Access
3. Click on DDNS tab
4. Click Add
   • Choose Synology as service provider
   • Add hostname
   • Click Test Connection
   • 
   • Click OK
5. Click on Security on left hand side
6. Click on the Certificate tab
7. Click on Add
   • Add new certificate
   • 
   • Click Next
   • Create description
   • Get a certificate from Let’s Encrypt
   • 
   • Click Next
   • Add needed certificate information
   • 
   • Click Done
8. Click Settings button and choose appropriate LDAP server certificate

If your company has highly customized setup requirements that you need consulting for, then contact us for assistance.