Language: Deutsch · English
LDAP configuration
Connect LDAP/Active Directory – authentication, synchronization, filters and attribute mapping.
HOW-TO ADMINISTRATOR UPDATED: JUL 2026 APPLIES TO NUCLOS 4.2026.X
On this page
Menu Administration → LDAP configuration. An LDAP (e.g. Microsoft Active Directory) is a hierarchical directory service for central management of resources such as users. Nuclos uses LDAP for authentication and a simple synchronization (LDAP → Nuclos); authorization remains in Nuclos.
Authentication
- Users found via the authentication filter are checked against the LDAP – the Nuclos password is ignored.
- Users not found cannot log in (exception: super users – the Nuclos password is also tried for them if the LDAP is unavailable).
- The test authentication button verifies a user/password combination.
Create users
Users must be created manually in Nuclos with the same user name and assigned to a group with the system start right. Synchronization neither creates nor deletes users.
Synchronization
With an active LDAP configuration a synchronization icon appears in the user detail view. It copies first name, last name and e-mail from the configured LDAP attributes.
Configuration fields
| Field | Description | Example |
|---|---|---|
| Name | Name of the LDAP connection | yourdc |
| URL | Connection string with IP/port | ldap://192.168.1.1:389 |
| Base DN | Base DN with the user data | DC=yourdomain,DC=de |
| Search Scope | Suchtiefe | SUBTREE |
| Manager DN | Access user (create your own) | yourdomain\manager or CN=manager,OU=Users,DC=yourdomain,DC=de |
| Manager Passwort | Password of the manager user | – |
| Filter (authentication) | Filter for login | (sAMAccountName={0}) |
| Alternative filter (auth.) | Restrict login to an AD group | (&(objectClass=user)(sAMAccountName={0})(memberof=CN=Gruppe,OU=Users,DC=yourdomain,DC=de)) |
| Filter (synchronization) | Filter for synchronization | (objectClass=user) |
Attribute mapping (mandatory)
| Nuclos attribute | Description | LDAP attribute |
|---|---|---|
| name | Benutzername | sAMAccountName |
| firstname | Vorname | givenName |
| lastname | Nachname | sn |
| E-Mail-Adresse |
Tools
Tools such as JXplorer, Apache Directory Studio or Microsoft's AD Explorer help determine the base DN/manager DN and the tree structure.
Related pages
Überblick
Inhalte