Sync users between Synology's - Setting up an LDAP server on Synology NAS

[@DarianCabot]

Answered most of my Synology/LDAP questions. Awesome tutorial, thanks 👍

[@Neuer_Alias_erstellen]

id love a tutorial for the synology radius server

[@NetEnlade]

Something you might want to do a video on, or explain. My Windows computers are very slow at getting a directory and copying files to the Synology NAS. However, if I disable IPV6 on the NAS and on my Windows computer, the directory pops up immediately and copying files is much faster. Why is that the case?

[@SpaceRexWill]

Strange. I have heard of this before (can’t remember where) I generally disable IPv6

[@Klel103]

Your tutorials are just so great ! Thanks a lot ! It was so simple with your explanations. One thing though, it seems I don't see my "Download Station" application on the LDAP access right panel. Is it normal ?

[@SpaceRexWill]

Hmmm that is interesting. I wonder why that got limited

[@Klel103]

@@SpaceRexWill Yeah very weird. Hey for the next tuto you could make a "SSO Server" one. It'll be a great plus to this one. What do you think ?

[@RicardoBeltran]

Hi, I have 1 nas and want to add a one more nas on remote location for snapshot, ShareSync & Photos, but I don't have a public IP (I'm behind a double NAT) so I can't install Domain/LDAP as server. Theres a work around to get the same user/groups syncs on both of the nas? Maybe with C2 Indentity and SSO?

[@derekkchung]

Will, any video to talk about migrating windows AD to DSM, then decommission the windows server? My windows server is R2012 and domain has just 3 users sharing a folder. We want to replace it with a synology NAS. That means AD, DNS, DHCP etc needs to be migrated and we do not want to create a new domain, meaning users can log in to the same profile and remap the share. There is a "Migrate from a Windows Server Domain" in Synology Knowledge center but not much info about it.

[@devoncrawford4221]

Hi, I run a company and I use Synology Nas to share and receive data. Each customer has their own user name and can access file station using quickconnect. This works very well but my only issue is that I need to manually access each folder to see if there has been an upload. Is it possible to get an alert when a user logs into DSM using quickconnect or a notification when there was been an upload? Thank you

[@tientaochou]

Do you know how to config my Synology NAS as a CAS SSO client? Don't know what's the Server validate URL.

[@luukbvos]

Hi & thanks! Very informative. One question remains, I have a hard time finding the proper "LDAP group search DN"? Any experience with that?

[@MuhammadHussain-qs5gp]

Instead of using ddns can't we setup DNS server on Synology NAS and then setup LDAP ?

[@ajv_2089]

Would this override my current users on the NAS?

[@reyskidude]

just tried... no, they will be separate user profiles

[@SpaceRexWill]

I would recommend switching everyone over to LDAP so you don’t have to type out the full domain name

[@leifkeane2539]

THANKS! This tutorial saved my bacon!

[@htpgutzwiller4700]

Nice video! But if I try to start the LDAP server, I get a message, that a connection is not possible, I should check my networksettings. This doesn't make any sense in my oppinion...

[@MuhammadHussain-qs5gp]

it does work from Synology to Synology. was not able to configure LDAP on a client like a switch.

[@reyskidude]

been thinking of doing this for some time as i have a DS1821+ and DS418... did just now, was surprisingly easy... the 8-bay have the LDAP server, and it also points to itself as a consumer/client... the 4-bay is a client... was able to login to both using the same user from the LDAP., which is convenient as i can drivesync the home folder between them.. then i realised, if the 1821+ goes down, then I don't have an LDAP to validate the login on the 418 anymore... then maybe i should setup the LDAP separately on a raspberry pi

[@SpaceRexWill]

With this method I had in this video the second NAS ends up being a replicated server, meaning that if the primary goes down you can still log in

[@reyskidude]

@@SpaceRexWill thanks for pointing out... i admit i did not get to that of the video when i made the comment hehe... will try out later

[@GutsyGibbon]

Is there a way to make the UID and GID match between a Linux user and the Synology user? so that for instance, file station shows the correct owners and groups for files that were rsynced over from Linux? Seems like a big important topic, but I can't find the answer.

[@SpaceRexWill]

I believe there is a setting in there to offset the UID's. You can uncheck that and see if that works. This is off the top of my head

[@pgotze]

I am thinking about reasons using LDAP server and not using Synology Directory Services (windows based LDAP). What might be the reason use LDAP server only and not Synology Directory Services?

[@SpaceRexWill]

So Directory Services is a windows Domain controller which ends up being a ton more complex and particular then a simple LDAP server. If you don’t need a windows domain controller I would avoid using one as they are rough, and instead use LDAP

[@varmego]

Very well explained video. A tutorial would be interesting where the LDAP connection from an RT6600ax to a Synology NAS is shown. User data stored in the NAS, RouterUsers (example for SynologyVPN) can Connect via vpn and the Login is the same as on the NAS

[@jmebusiness]

Thanks for this nice tutorial. I'm looking forward to programmatically change an user password by using a PHP page. I guess this should be possible the same way you do it with a classic Linux LDAP server. By the way, it is a shame that Synology hasn't included a way of changing a user's password via API. It seems that you really need LDAP or any other SSO service to do this.

[@HiltonT69]

So, what happens if the main LDAP unit goes tits up? How long will the replicated consumer authenticate for? When the dead box is restored from Hyper Backup, I trust it will restore LDAP and the consumers will just re-sync?

[@SpaceRexWill]

Yes it will. If you are also looking for les downtime you can use the second synology as a replicated LDAP server, then use local host for the intigration, that way if the main LDAP goes down it can still hand out creditials

[@anthonycoppet8788]

thx ldap is very cool. Use it now for synology clients ... But really need help ton configure it with ubuntu . I can acces it to ldapsearch ... But not in ubuntu system. Fighting 3 days . Somebody can help me ?? thx

[@jonescamille3555]

perfect

[@Stefanocutelle]

Good 👌