Applications like phpLDAPadmin tend to have some serious limitations. They are great at managing individual attributes in an ldap directory, but exposing those raw attributes is a bit rough, and cannot be put in everybody's hands. Further more, managing groups can be a chore. Finally, managing multiple directories (or other any form of user databases) is impossible (It's common to have an Active Directory and an OpenLdap directory on most infrastructures, managing them in a unified way could be nice). Not to mention that most of these application are quite old (and ugly).

LdapCherry aims to fix that, it provides simple and nice add/modified form, roles handling (roles are groups aggregate in LdapCherry), user self modification and search. It can handle multiple user back-ends in a unified way, check password policy.

LdapCherry is also highly modular, with the possibility to implement your own plugins for the user back-ends, the authentication and the password policy.

LdapCherry also aims to be as simple as possible to deploy: no crazy dependencies, few configuration files and extensive debug logs.

Screenshot

Screenshots directory

License

LdapCherry is published under the MIT Public License.

Discussion / Help / Updates

IRC: Freenode #ldapcherry channel
Bugtracker: Github

Languages

Python 46.4%

Less 42.6%

JavaScript 8.1%

Shell 1.6%

CSS 1.3%