NextCloud : Active Directory Integration2022/07/27

Configure NextCloud with Windows Active Directory Integration to login to NextCloud with AD user accounts.

[1]

Install and run Active Directory in your local network, refer to here.
This example is based on the environment like follows.

Domain Server	: Windows Server 2022
Domain Name	: srv.world
Hostname	: fd3s.srv.world
NetBIOS Name	: FD3S01
Realm	: SRV.WORLD

[2]

Configure NextCloud to access to AD Server from PHP scripts.

[root@dlp ~]#

dnf -y install php-ldap

[root@dlp ~]#

systemctl reload php-fpm

[3]	On Active Directory side, create an AD user for binding from NextCloud Server. It's OK to grant [Domain Users] rights only for it. On this example, it creates [nextcloud] user like follows.

[4]	Login to NextCloud Web with admin account and open [Apps].

[5]	Select [Your apps] on the left pane and Click [Enable] button on [LDAP user and group backend] section.

[6]	After enabling [LDAP user and group backend], open settings again and select [Administration] - [LDAP / AD integration] on the left pane.

[7]

Input AD server's information to connect.
Input AD's hostname or IP address and Base DN, credentials of AD user for binding created in [3], and then click [Save Credentials] button.
Next, Click [Test Base DN] button and if [Configuration OK] message is displayed like follows, that's OK, Click [Continue] to proceed.

[8]	Configure on [Users] tab. It's OK with default setting if you don't have specific requirements. Confirm [Configuration OK] and Click [Continue] to proceed.

[9]	Configure on [Login Attributes] tab. It's OK with default setting if you don't have specific requirements. Confirm [Configuration OK] and Click [Continue] to proceed.

[10]	Configure on [Groups] tab. If you'd like to limit groups they can search AD directory, configure here. But it's OK with default setting if you don't have specific requirements. Confirm [Configuration OK] and finish configuration for admin account.

[11]	Move to Login form and specify an AD user.

[12]	If configuration OK, it's possible to login to NextCloud with AD users like follows.

Matched Content