ldap

Configures Vault LDAP auth and secrets engine for OpenLDAP labs in HAL.

29|8|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/hashimiche/hal --skill ldap
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ldap
Source: https://github.com/hashimiche/hal/tree/main/internal/skills/data/vault/ldap
Command: npx skills add https://github.com/hashimiche/hal --skill ldap

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables deploying, validating, and troubleshooting Vault's LDAP authentication and LDAP secrets engine for learning labs with OpenLDAP.

Core Features & Use Cases

  • OpenLDAP-backed Vault LDAP auth and KV secrets integration for centralized identity.
  • Dynamic and static LDAP secrets generation, rotation of root credentials, and policy management.
  • Lab workflows for LDAP login, directory-backed auth, and lab reset scenarios, with verification steps and guidance.

Quick Start

Enable the LDAP lab with hal vault ldap and verify the LDAP config, mounted secrets, and rotation workflow to confirm a working setup.

Frequently Asked Questions about ldap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Vault LDAP authentication with OpenLDAP?

Configure Vault LDAP authentication by provisioning mounts, policies, and roles that connect Vault to an OpenLDAP container. This skill automates directory-backed auth setup, enabling LDAP login workflows for centralized identity management in lab environments.

What is needed to set up the Vault LDAP secrets engine in a local lab?

Setting up the Vault LDAP secrets engine requires Vault running at http://127.0.0.1:8200 with root token access, an OpenLDAP container named hal-openldap, and phpldapadmin UI. These components provision dynamic and static LDAP secrets generation.

Can I generate and rotate dynamic LDAP secrets using Vault?

Yes, dynamic LDAP secrets can be generated and rotated using Vault's LDAP secrets engine. This skill configures rotation routines for root credentials and provisions static and library secrets, ensuring credentials are managed and ready for lab use.

How do I reset an OpenLDAP and Vault LDAP lab configuration?

Reset an OpenLDAP and Vault LDAP lab by running the designated lab reset command provided by the skill. This clears previous mounts, policies, and roles, restoring the environment to a clean state for new directory-backed authentication and secrets testing.

Does Vault LDAP auth work with phpldapadmin for directory management?

Vault LDAP auth works with phpldapadmin by using the directory UI to manage OpenLDAP entries that Vault authenticates against. The skill integrates both tools, ensuring directory-backed authentication and LDAP login scenarios are validated and functional.

What is the best way to troubleshoot Vault LDAP login and directory-backed auth?

The best way to troubleshoot Vault LDAP login and directory-backed auth is to verify mounts, policies, and roles provisioned by the skill. It provides lab workflows with explicit verification steps to confirm OpenLDAP integration and resolve configuration issues.