Alternatives to OpenLDAP

Open-source implementation of LDAP, with a directory server, a load balancer, client libraries and tools. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as OpenLDAP.

  • 389 Directory Server

    An open-source LDAP directory server for Linux with multi-supplier replication.

    FreeOpen sourceLinuxSelf-hosted

    389 Directory Server is an open-source Linux LDAP server with multi-supplier replication, proven in very large deployments and released on several branches.

  • FreeIPA

    Open-source identity management for Linux users and hosts, combining LDAP, Kerberos, DNS and certificates.

    FreeOpen sourceLinuxWebSelf-hostedCommand line

    FreeIPA bundles LDAP with Kerberos, DNS and certificates plus a web UI and AD trusts, making it heavier to deploy but more integrated for Linux hosts.

  • Samba

    Open-source SMB file and print server that can also run as an Active Directory domain controller.

    FreeOpen sourceLinuxSelf-hosted

    Samba can act as an Active Directory domain controller, giving Windows clients a compatible directory, though configuration of AD roles can be complex.

  • LLDAP

    A lightweight LDAP server for managing users and groups through a simple web interface.

    FreeOpen sourceLinuxSelf-hosted

    LLDAP is a lightweight LDAP server with a web interface for users and groups, simpler to run but not a full-featured LDAP directory.

  • Kanidm

    An open-source identity management server offering OAuth2, LDAP and passkey login from one place.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Kanidm offers LDAP alongside OAuth2 and passkeys in one server with Unix login integration, but has a smaller ecosystem than long-established directory servers.

  • Univention Corporate Server

    A Linux-based server system providing open-source identity and access management for on-premises networks.

    FreemiumOpen sourceLinuxSelf-hosted

    Univention Corporate Server is a full Linux server OS providing identity and access management, needing a dedicated machine or VM.

  • Zentyal

    An Ubuntu-based Linux server with Active Directory compatibility, mail and network services for small offices.

    PaidProprietaryLinuxSelf-hosted

    Zentyal is a paid Ubuntu-based server offering an Active Directory compatible domain controller with mail and network services in one interface.

  • Microsoft Entra ID

    Microsoft's cloud identity and access management service, formerly Azure Active Directory, with single sign-on support.

    PaidProprietaryWeb

    Microsoft Entra ID is a paid cloud directory tied to Microsoft's platform, replacing a self-run server with a hosted service that includes single sign-on.

Similar software

Related functionality, not a direct replacement.