Skip to content

Reference

Architecture

graph LR
    A["Administrators · any browser"] -->|"HTTP :3000"| B["EasyDC (Rust / Axum)"]
    B -->|"LDAP / LDAPS"| C[("Samba AD DC")]
    B -->|"LDAP / LDAPS"| D[("Samba AD DC")]
    B --> E[("SQLite: logins · servers · audit log")]

EasyDC is a web application and an LDAP client in one binary. Each request opens an LDAP connection to the chosen domain controller, binds as that server's bind account, and reads or writes the directory directly. Nothing runs on the domain controllers themselves.

Requirements

Category Supported
Directory Samba Active Directory domain controller, reachable over LDAP (389) or LDAPS (636)
Bind account Read/write access to the partitions you manage; Domain Admins for full use
EasyDC host Linux x86_64 or arm64
Browser Any current browser

Files and ports
Web UI HTTP on 0.0.0.0:3000
Database easydc.db in the working directory (/var/lib/easydc under the systemd unit)
Outbound LDAP / LDAPS to each domain controller you add

Security notes

  • Bind passwords for the servers you add are stored in the EasyDC database. Restrict the file to the service user.
  • Admin passwords are stored as bcrypt hashes. Sessions use an HttpOnly, SameSite=Strict cookie.
  • The web UI is plain HTTP; publish it through a TLS reverse proxy (see Installation).
  • Password writes require LDAPS; Samba refuses them over plain LDAP.

Technology

Component Library
Web framework Axum
Async runtime Tokio
Database SQLite via sqlx
Templates Tera, compiled into the binary
LDAP client ldap3
Password hashing bcrypt
UI Bootstrap 5 + Bootstrap Icons