diff --git a/src/ldap.js b/src/ldap.js
new file mode 100644
index 000000000..2ca354022
--- /dev/null
+++ b/src/ldap.js
@@ -0,0 +1,73 @@
+'use strict';
+
+var assert = require('assert'),
+    debug = require('debug')('box:ldap'),
+    user = require('./user.js'),
+    UserError = user.UserError,
+    ldap = require('ldapjs');
+
+var PORT = 5000;
+var gServer = null;
+
+exports = module.exports = {
+    startServer: startServer
+};
+
+function startServer(callback) {
+    assert(typeof callback === 'function');
+
+    gServer = ldap.createServer();
+
+    gServer.search('dc=cloudron', function(req, res, next) {
+
+        debug('--- Search ---');
+        debug('dn:     ', req.dn.toString());
+        debug('scope:  ', req.scope);
+        debug('filter: ', req.filter.toString());
+
+        user.list(function (error, result){
+            if (error) return next(new ldap.OperationsError(error.toString()));
+
+            result.forEach(function (entry) {
+                var tmp = {
+                    dn: 'dc=cloudron,dn=' + entry.id,
+                    attributes: {
+                        objectclass: ['user'],
+                        uid: entry.id,
+                        mail: entry.email,
+                        displayname: entry.username,
+                        username: entry.username
+                    }
+                };
+
+                if (req.filter.matches(tmp.attributes)) {
+                    debug('Send', tmp);
+                    res.send(tmp);
+                }
+            });
+
+            debug('');
+            res.end();
+        });
+    });
+
+    gServer.bind('dc=cloudron', function(req, res, next) {
+        debug('bind DN: ' + req.dn.toString());
+        debug('bind PW: ' + req.credentials);
+
+        debug(req.dn, req.dn.rdns[0].dn);
+
+        user.verify(req.dn.rdns[0].dn, req.credentials, function (error, result) {
+            if (error && error.reason === UserError.NOT_FOUND) return next(new ldap.NoSuchObjectError(req.dn.toString()));
+            if (error && error.reason === UserError.WRONG_PASSWORD) return next(new ldap.InvalidCredentialsError(req.dn.toString()));
+            if (error) return next(new ldap.OperationsError(error));
+
+            debug('login ok', result);
+
+            res.end();
+        });
+
+    });
+
+    gServer.listen(PORT, callback);
+}