Enable LDAP User SSH to Synology NAS

PUBLISHED ON 12 JULY 2021 — TAGS:  DEVOPS, LDAP, SECURITY, SSH, SYNOLOGY

Users created with Synology’s LDAP Server have their login shell set to /sbin/nologin. Add the following to the end of /usr/syno/etc/nslcd.conf if you want to enable SSH logins to your NAS for your LDAP users:

map passwd loginShell "/bin/sh"

Then run the following command:

$ synoservice --restart nslcd

Your LDAP users should now be able to SSH into the Synology NAS, in this case using a password-less SSH key:

$ ssh ldaptest@synology
ldaptest@synology:~$ exit
logout
Connection to synology closed.