Axia: an open-source web interface and REST API for Active Directory and OpenLDAP

Description and use

Axia is a self‑hosted web interface and REST API that enables secure, role‑based management of Active Directory, Samba AD, OpenLDAP, and eDirectory, with audit logging and protection against privilege escalation.

Problem

Helpdesk and HR teams need a secure, easy-to-use interface for directory operations without giving them broad admin rights.

Outcome

Axia enables secure, role‑based directory management, reduces risk of privilege escalation, and provides auditability while supporting multiple directory types in a single instance.

Workflow

• 1. Deploy Axia via Docker Compose or install the Windows service. 2. Configure connections to AD, Samba AD, OpenLDAP, or eDirectory. 3. Map directory groups to Axia roles. 4. Use the web UI or REST API to create, edit, or delete users, groups, OUs, and computer accounts. 5. Perform bulk provisioning with login generation and validation. 6. Monitor audit logs for sign‑ins and changes. 7. (Optional) Integrate with scripts for onboarding/offboarding via the OpenAPI.

Evidence

We built Nelsar.Axia for that: a self-hosted web interface and REST API for Active Directory, Samba AD, OpenLDAP and eDirectory.

Source

Axia talks to the directory through one service account with broad rights and decides on its own who may do what.

Source

All you need is Docker with Compose v2: git clone https://github.com/Nelsar/Axia.git cd Axia docker compose up Open http://localhost:8080.

Source