SMB

[formal slate]

Is there any way to get Samba or any other Linux SMB server to integrate with Authentik? It looks like Samba does support LDAP but only with SMB 1 which I would like to avoid, it looks like it also supports Kerberos but Authentik doesn't apart from in this PR which appears to be abandoned with the last commit being 10 months ago, is there a way to get a Kerberos server to sync with Authentik or some other way to get modern SMB to work with Authentik? Or is there some other file sharing protocol that works just as well on both Linux and Windows that can more easily work with Authentik?

[rancid wing]

I believe you can use Samba w/ LDAP, but I think you have to configure it in pam or sssd
I always did it in pam with winbind, and I must admit - it was a massive pita, but that's the only solution I could think of

[formal slate]

I thought it could only do that with SMB 1?

[rancid wing]

I’m pretty sure you can have it hook in with pam

[tawny hinge]

You can't, see the github issue.

https://github.com/goauthentik/authentik/issues/6120

I couldn't yet figure out a good solution.

The mentioned PR could be a solution, I'm eager to see it implemented!

[formal slate]

ive ended up settling on computing the NTLM hash in the password change flow and storing it as an attribute that i then query from the api with a python script that ill setup as a cron job though this solution is very hacky and probably not the best but it should be good enough for my use case at least until that pr gets unabandoned or something

[tawny hinge]

Yup, without Kerberos it'll be hacky like so.

Nice job on actually implementing it!