Managing users in a growing network can be challenging, especially for businesses relying on Active Directory (AD) or Lightweight Directory Access Protocol (LDAP) for authentication. UniFi simplifies this process by allowing seamless integration with AD/LDAP, ensuring efficient user management and access control.
Why Integrate AD/LDAP with UniFi?
- Centralized User Management: Simplifies user authentication and management.
- Enhanced Security: Leverages existing directory services for secure access.
- Scalability: Easily scales as your organization grows.
Prerequisites
Before starting, ensure you have:
- A functioning UniFi Network Controller.
- AD/LDAP server credentials (hostname/IP, port, admin DN, and password).
- Proper firewall rules allowing communication between UniFi and your AD/LDAP server.
Step-by-Step Guide to Import Users
1. Access the UniFi Network Controller
- Log into your UniFi Network Controller.
- Go to Settings > User Authentication.
2. Enable External Authentication
- Toggle Enable LDAP Authentication.
- Choose Add New LDAP Server.
3. Configure LDAP Server Details
- Server IP/Hostname: Enter your AD/LDAP server’s IP or hostname.
- Port: Use 389 for LDAP or 636 for LDAPS (secure).
- Base DN: Define the root from where the search begins (e.g.,
dc=company,dc=com
). - Bind DN: Enter the distinguished name of the service account (e.g.,
cn=admin,dc=company,dc=com
). - Password: Input the service account’s password.
4. Test the Connection
- Click Test Connection to ensure UniFi can communicate with the AD/LDAP server.
- Resolve any errors before proceeding.
5. Import Users
- Once the connection is successful, select the users/groups you want to import.
- Click Save to complete the process.
Troubleshooting Tips
- Connection Fails: Verify firewall settings and credentials.
- Incorrect User Import: Check Base DN and search filters.
- SSL Errors: Ensure the LDAP certificate is valid if using LDAPS.
Integrating AD/LDAP with UniFi streamlines user management and strengthens network security. By following this guide, you can simplify authentication and improve your network’s efficiency.