dev/nisse
2
1 Fork 0
Code Issues 23 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Docs: identity is Samba AD with Authelia, not LLDAP

Browse Source 
LLDAP was retired on 2026-10-20 (infra/identity#3); agents' accounts are in
Samba AD, still signed in through Authelia.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012qTZm2xcsS8SGngGQ9369K
This commit is contained in:
bot-claudeandClaude Opus 5.5 authored and Don Garrett committed 2026-10-20 23:11:35 +00:00
1 parent bd05acb89d
commit cf6058544f
2 files changed
+4 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/Architecture.md
+2 -2
View File
@@ -555,7 +555,7 @@ can do rather than trying to prevent steering.
- **Only credentials are secrets;** every other setting is reviewable - **Only credentials are secrets;** every other setting is reviewable
configuration. configuration.
**Identity:** each agent is its own LLDAP principal in a tightly scoped Authelia **Identity:** each agent is its own Samba AD principal in a tightly scoped Authelia
group, never the operator's account, with its own account and token in each group, never the operator's account, with its own account and token in each
service it uses (X5). service it uses (X5).
@@ -1131,7 +1131,7 @@ so every upstream action traces to one agent.
### X5. Supporting services ### X5. Supporting services
All self-hosted: Matrix (Synapse), Gitea, LiteLLM, the local inference host, All self-hosted: Matrix (Synapse), Gitea, LiteLLM, the local inference host,
Vaultwarden, LLDAP with Authelia, and SilverBullet for the operator's view of Vaultwarden, Samba AD with Authelia, and SilverBullet for the operator's view of
the vault. Each agent has its own account, token and room in each; nothing is the vault. Each agent has its own account, token and room in each; nothing is
shared between agents. shared between agents.
docs/Development-Plan.md
+2 -2
View File
@@ -47,7 +47,7 @@ Only `nisse-dev` has real code; `nisse-core` and `nisse-ops` are placeholders.
## 2. The environment today ## 2. The environment today
- **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, LLDAP with - **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, Samba AD with
Authelia. The infrastructure repository exists in Gitea. Authelia. The infrastructure repository exists in Gitea.
- **Local inference:** llama-swap on an RTX 4090 host (320 W cap). The benchmark - **Local inference:** llama-swap on an RTX 4090 host (320 W cap). The benchmark
(PR #55) chose `qwen3.8-27b` for local work. (PR #55) chose `qwen3.8-27b` for local work.
@@ -572,7 +572,7 @@ SilverBullet so far (M5.4).
(D7, X2), collection when idle. (D7, X2), collection when idle.
**M6.3 Secrets and identity.** *Pre-approved.* Per-agent secret sets on the host, **M6.3 Secrets and identity.** *Pre-approved.* Per-agent secret sets on the host,
LLDAP principal (L12). Samba AD principal (L12; LLDAP until 2026-10-20).
**M6.4 Delivery.** *Pre-approved.* Watchtower, restarts gated on an idle flag (X4). **M6.4 Delivery.** *Pre-approved.* Watchtower, restarts gated on an idle flag (X4).