NetNXT Logo

JumpCloud LDAP Integration with Synology NAS

November 13, 2025
3 min read
ByNetNXT

Overview

This guide provides a step-by-step procedure for integrating JumpCloud LDAP with Synology NAS (DSM 7.0 or above).

It covers binding users, configuring groups, enabling Samba authentication, and joining the NAS to JumpCloud LDAP for centralized user management and secure access.

Environment and Prerequisites

Before proceeding, ensure:

  • Your Synology NAS is running DSM 7.0 or later.
  • You have admin access to both Synology DSM and JumpCloud.
  • Network connectivity to ldap.jumpcloud.com is available.

Step 1 — Bind Users to JumpCloud LDAP

To allow JumpCloud users to authenticate on your Synology NAS:

  1. Log in to JumpCloud Admin Portal as an administrator.
  2. Go to Users and select the user account.
  3. Under Details → User Security Settings and Permissions, tick Enable as LDAP Bind DN.
  4. Click Save.
  5. Repeat these steps for every user who needs LDAP access to the NAS.

Step 2 — Configure Groups

To create corresponding LDAP-based groups for your Synology NAS:

  1. In JumpCloud, navigate to User Groups.
  2. Select a group that includes the bound LDAP users.
  3. Under Details, tick Create Linux group for this user group.
  4. Enter a Group Name — this will be visible on your Synology NAS.
  5. Assign a Group GID number (recommended: start from 1000000 to avoid DSM local conflicts).
  6. Click Save.
  7. Repeat these steps for all required groups.

Step 3 — Enable Samba Authentication for JumpCloud LDAP

To support SMB file access via JumpCloud LDAP:

  1. In JumpCloud, go to LDAP → JumpCloud LDAP.
  2. Under Details, tick Configure Samba Authentication.
  3. Enter a Workgroup Name.
  4. Find your Synology NAS SID:
  • Connect to the NAS via SSH.

  • Run the command:
net getlocalsid
  • Copy the displayed SID and paste it into the SID field in JumpCloud.
  1. In the Samba Service Account field, select a valid JumpCloud user.
  2. Go to User Groups and select which groups can access NAS via SMB.
  3. From the Samba Authentication dropdown, select Samba Authentication Enabled.
  4. Click Save to apply.

Step 4 — Join Synology NAS to JumpCloud LDAP

Now, connect your NAS directly to JumpCloud LDAP.

  1. Log in to DSM (Synology Admin Panel).
  2. Go to Control Panel → File Services → SMB.
  3. Check Enable SMB service and set the Workgroup name (must match the one entered in JumpCloud).
  4. Click Apply.
  5. Next, go to Control Panel → Domain/LDAP → Domain/LDAP.
  6. Click Join.
  7. Configure the following:
  • Server type: Auto-detect or LDAP
  • Server address: ldap.jumpcloud.com
  • Bind DN or LDAP administrator account: Use the Samba Service Account DN from JumpCloud
  • Password: Enter the service account password
  • Encryption: Choose SSL/TLS or STARTTLS
  • Base DN:
ou=Users,o=<your_organization_ID>,dc=jumpcloud,dc=com
  1. Click Next to initiate the precondition check.
  2. Once verified, the NAS joins JumpCloud LDAP successfully.

Notes and Best Practices

  • To assign Synology NAS admin privileges, set the Group Name to Administrators.
  • Always ensure group GIDs don’t overlap with local groups.
  • Restart SMB service after successful LDAP join for changes to take effect.
  • Use JumpCloud’s audit logs to track user logins and group access for compliance.

Troubleshooting

  • LDAP Bind fails: Verify the Bind DN, password, and SSL/TLS configuration.
  • Users not visible on NAS: Check the group’s Linux mapping in JumpCloud.
  • SMB access issues: Confirm that Samba Authentication is enabled for the user’s group.


Was this article helpful?