[FEATURE] Add the ability to reset ldap password #839
Description
Is your feature request related to a problem? Please describe.
I was using authelia lldap and traefik forward auth i just migrated to tinyauth and its awsome
Some fonctionality i missing is the ability to reset password with ldap backend
Describe the solution you'd like
Reset password with ldap backend
Describe alternatives you've considered
Reset with lldap
Reacted by Faiz Shukri
Activity
steveiliop56 commentedon May 11, 2026
Not really sure what you mean by reset the password. Tinyauth is not an LDAP frontend and with the recommended configuration it only has read-only access to the LDAP server, thus it's not able to make any modifications.
Can you please provide a bit more details on what you would like to see?
patdelapampa commentedon May 12, 2026
In Authelia with a ldap backend, when you click on the "Forgot your password?" link, an email is sent to the email address associated to your user account (in LLDAP). The message provides a link to a page that enables you to reset your password. I assume this is what yodatak refers to.
This would be a great feature, indeed, to enable the end users to reset their password without any actions from the administrators. So I guess that, at least, the service account would need to have some write permissions on the directory, the administrator should be able to configure the smtp server settings, and tinyauth should be able to generate private links to the reset password page.
(Sorry if I misunderstood the original message)
PS: This project is really awesome!!! :-D
kamzar1 commentedon Nov 2, 2026
Authelia has a worker account, member of lldap group [lldap_password_manager], instead of [lldap_strict_readonly].
Forgot password in Authelia as mentioned by @patdelapampa sends a verification email to kick-off the process of password reset. By having password_manager rights, it can change the password in ldap.
Above procedure must not explicitly be done by a middleware (like Authelia) as LLDAP (given the SMTP parameters are defined in config.toml) has its own routine of changing passwords.
So tinyauth still keeps its [lldap_strict_readonly] and password change is done by lldap.
enable_password_reset=trueadds a 'Forgot your password' link:Now just point
https://tinyauth.web/forgot-passwordtohttps://lldapserver.host/reset-password/step1