FreeIPA

This is a cheatsheet of config for various apps to authenticate against FreeIPA.

Emby

LDAP LDAP server address: 127.0.0.1 LDAP server Port number: 389

Enable SSL SSL certificate thumbprint (SHA1): Example: AAF4C61DDCC5E8A2DABEDE0F3B482CD9AEA9434D. Multiple thumbprints are accepted, comma delimted. Bind DN: uid=svc_emby,cn=users,cn=accounts,dc=ipa,dc=dbb Example: CN=user,OU=branch,DC=contoso,DC=local Bind credentials: Password1 Example: secret_password User search base: cn=users,cn=accounts,dc=ipa,dc=dbb Use to limit the LDAP users that can be imported into Emby. Example: DC=contoso,DC=local User search filter: (&(uid={0})(memberof=cn=emby_users,cn=groups,cn=accounts,dc=ipa,dc=dbb)(objectClass=person)(!(nsAccountLock=TRUE))) Example: (uid={0}) Important: This must contain {0} in order to allow specific user lookups.