Alternatives to 389 Directory Server

An open-source LDAP directory server for Linux with multi-supplier replication. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as 389 Directory Server.

  • OpenLDAP

    Open-source implementation of LDAP, with a directory server, a load balancer, client libraries and tools.

    FreeOpen sourceLinuxSelf-hostedCommand line

    OpenLDAP is also an open-source LDAP server for Linux, adding a built-in load balancer daemon and client tools but shipping no graphical management interface.

  • FreeIPA

    Open-source identity management for Linux users and hosts, combining LDAP, Kerberos, DNS and certificates.

    FreeOpen sourceLinuxWebSelf-hostedCommand line

    FreeIPA wraps an LDAP directory with Kerberos, DNS and certificates plus a web UI and Active Directory trusts, at the cost of a heavier deployment.

  • Samba

    Open-source SMB file and print server that can also run as an Active Directory domain controller.

    FreeOpen sourceLinuxSelf-hosted

    Samba replaces a plain LDAP directory with an Active Directory domain controller on Linux, which suits Windows clients but can be complex to configure.

  • Univention Corporate Server

    A Linux-based server system providing open-source identity and access management for on-premises networks.

    FreemiumOpen sourceLinuxSelf-hosted

    Univention Corporate Server delivers identity management as a full Linux server OS with VM images, so it needs a dedicated machine or VM.

  • Kanidm

    An open-source identity management server offering OAuth2, LDAP and passkey login from one place.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Kanidm combines LDAP with OAuth2 and passkey login in one open-source server, though its ecosystem is smaller than long-established directory servers.

  • LLDAP

    A lightweight LDAP server for managing users and groups through a simple web interface.

    FreeOpen sourceLinuxSelf-hosted

    LLDAP is a much lighter LDAP server with a simple web interface for users and groups, but it is not a full-featured directory.

  • Zentyal

    An Ubuntu-based Linux server with Active Directory compatibility, mail and network services for small offices.

    PaidProprietaryLinuxSelf-hosted

    Zentyal provides an Active Directory compatible domain controller on Ubuntu with mail and network services, and requires a paid licence after the trial.

  • JumpCloud

    A cloud directory platform for managing user identities, access and devices across several operating systems.

    PaidProprietaryWindowsmacOSLinuxAndroidWeb

    JumpCloud moves the directory to a hosted, paid cloud service with SSO, MFA, RADIUS and device management instead of a self-hosted Linux server.

Similar software

Related functionality, not a direct replacement.