This is a docker image providing openldap, running on Alpine linux. It opens a non-encrypted LDAP socket on port 389.
The following environment variables are provided:
SLAPD_ROOTDN(required) a value such asdc=example,dc=orgSLAPD_ROOTPW(required) the password for the administrative user. Bind DN iscn=manager,dc=example,dc=org
Any other variables should be provided to the Docker container if they are defined as variables in any LDIF files.
This image is intended to be used by extending in your own image. To run the image as-is, you can issue the following command:
docker run -d -p 2389:389 -e SLAPD_ROOTDN="dc=example,dc=org" -e SLAPD_ROOTPW=NotSoSecret petzi/openldap
You can then connect using the bind DN cn=manager,dc=example,dc=org.
This image is intended to be used by extending with your own docker image. Use a Dockerfile and provide two directories with your configuration as LDIF files:
conf/ldif/
A volume is provided for the ldap database. You should create a volume container if you want data to persist across restarts.
/var/lib/openldap/
The entrypoint.sh script provided only does some bootstrapping. setup.sh is the script doing the hard lifting. The script reads ldif files from the following four directories:
/setup/conf.dist/- provided by this image/setup/conf/- user-provided/setup/ldif.dist/- provided by this image/setup/ldif/- user-provided
The conf directory should contain ldif files operating on the cn=config tree.
The ldif directory should contain ldif files operating on your SLAPD_ROOTDN tree.
The file extension in all directories has a meaning:
*.add.ldif- useldapaddto process the file*.mod.ldif- useldapmodifyto process the file
The ldif files can contain variables, they should be surrounded by environment variable quoting, example: ${MYAPP_VAR1}
In order for setup.sh to replace the variable, you should provide the following environment variables when starting the container:
MYAPP_VAR1="my value of var1"
You can use any editor to do developping or bugfixing. The following sequence of Makefile targets will give you a good impression if your changes work:
make clean build test
To run a test server, issue the command docker-compose run. This will run an ldap server with an empty rootdn. To connect from your host using an LDAP browser, use the following information:
- port:
localhost:2389 - user:
cn=manager,dc=example,dc=org - password:
password
If you see something missing in the image or have a bugfix, please submit a pull request. You can also submit an issue, but pull requests will usually be processed faster.