Etherpad Lite plugin that provides LDAP-based authentication and authorization. Version 0.4.0 integrates with Etherpad's authentication hooks to allow users to log in using LDAP credentials. It supports both plain LDAP and LDAPS, configurable search filters, group-based access control (admin or read-only), and specific examples for FreeIPA. The plugin is released under GPL-2.0 and is maintained primarily for Etherpad Lite environments. It requires a properly configured settings.json with LDAP server details, search credentials, and group mapping. Notable differentiators: direct integration with Etherpad's auth system, no external dependencies beyond ldapjs, and support for anonymous read-only mode.
npm install ep_ldapauthVerified import paths — ran on the pinned version, not inferred.
Configuration for ep_ldapauth in Etherpad's settings.json, enabling LDAP authentication with admin group mapping.
Set 'groupAttributeIsDN' to true or false without quotes.
Omit or set to false if not needed.
Simply place in node_modules and configure settings.json.
Test connectivity with ldapsearch or similar tool.
Provide valid credentials or ensure LDAP allows anonymous search.
Verify server host/port, firewall, and that LDAP service is up.
Check searchDN and searchPWD values; verify accountPattern matches.
Verify base DNs using ldapsearch or similar tool.
Grant read permissions to the search user on the LDAP tree.