Help with Configuring AD Authentication

I have a Slurm cluster setup and I would like to use Open OnDemand as the front-end interface for people to use. I have installed Open OnDemand 4.0.8 on Debian 12. I am able to reach the Apache placeholder that says that authentication needs to be setup. We have Active Directory authentication that I would like to use but I am struggling in getting it setup or understanding where to start, despite having read the documentation. I have already setup AD authentication on the host itself but I need to get it configured for the login interface. I would appreciate any help!!

Thank you in advance

Hi and welcome!

A quick google search indicates you can use mod_ldap to connect to it. But this is discouraged as it’s a part of the Basic authentication that apache httpd provides. Basic authentication is discouraged because your password is passed directly in the headers.

An Open ID Connect (OIDC) provider or similar is preferred as it provides a token that the client (you) passes to the server, not your password directly. Do you have such a service you could connect to instead?

Thanks for the reply, Jeff!

I do not believe that we have an OIDC. I was hoping that I could use DEX since we have Active Directory and LDAP, however I wasn’t sure from the documentation how to get it configured.

Yea Dex with LDAP should work just fine. You just treat AD as any other LDAP provider.