[{"_1":2,"_155":-5,"_156":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_134":135},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_125":-5,"_126":11,"_127":17,"_128":11,"_129":-5,"_130":11,"_131":-5,"_132":133},"canonicalUrl","https://hub.docker.com/r/gcavalcante8808/openldap/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","gcavalcante8808","reponame","openldap","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":17,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2017-05-19T18:24:42.137233Z","description","Simple Docker Image of the OpenLDAP LightWeight Directory. ","is_private","last_updated","2018-12-25T13:22:23.838458Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",1803,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","What is OpenLDAP?\n\nOpenLDAP is a lightweight implementation of Lightweight Directory Access Protocol. The version available in this image is the version 2.4.\n\nhttps://wikipedia.org/wiki/OpenLDAP\n\nHow to use this image\n---------------------\n\nStart a openldap instance\n\n```\n docker run --name openldap -e LDAP_SUFFIX dc=mydomain,dc=com -d gcavalcante8808/openldap\n```\n\nThis image includes EXPOSE 389 636 (the ldap and ldaps) ports, so standard container linking\nwill make it automatically available to the linked containers. The default rootdn *cn=admin,dc=example,dc=com* (unless you defined LDAP_ADMIN_PRINCIPAL, check environment variables for more info) will be created with the password *LazyPass*.\n\nYou can check defaults used by the docker-compose on the 'example.env' file. TLS support comes enabled by default using previously created certificates (**which shouldn't use in production environments**).\n\nEnvironment Variables\n---------------------\n\nThe OpenLDAP image uses several environment variables which are easy to miss. While none of them is required,\nthey may significantly help you in the directory configuration task.\n\nLDAP_ADDRESS\n\nThis Environment variable is **NEEDED** to opendldap operate properly and (later) to use replication. Use a FQDN if possible.\n\nLDAP_DOMAIN\n\nThis environment variable is recommended for you to use OpenLDAP Image. This environment variable sets the dc object available by default,\nand have a value like \"example\" if your domain is \"example.com\". The default domain is \"example\".\n\nLDAP_SUFFIX\n\nThis environment variable is recommended for you to use OpenLDAP Image. This environment variable sets the suffix used by LDAP,\nlike \"dc=enterprise,dc=com\". The default suffix is \"dc=example,dc=com\".\n\nLDAP_ADMIN_PRINCIPAL\n\nName of the superuser of the directory, something like \"cn=root,dc=myenterprise,dc=com\". The superuser always have access to the directory.\nThe default value is \"cn=admin,dc=example,dc=com\".\n\nLDAP_ADMIN_PASSWORD\n\nPassword of the superuser. The defaule value is *LazyPass*. \n\n**Note*: Do not use parenthesis to specify the password; a hash will be computed from it and write into the openldap database during the first\nstartup.\n\nLDAP_DEBUG_LEVEL\n\nUsed to define the debug level of the directory. By default it do not print too much messages (as stated in level 32768). For possible codes\ncheck the documentation at: http://www.openldap.org/doc/admin24/runningslapd.html\n\nHow to extend this image\n------------------------\n\nIf you would like to do additional initilization in a image derived from this one, add one or more *.ldif files under */docker-entrypoint-initdb.d*. At the end of entrypoint (before it calls exec to throw slapd) it will verify the existence of the file /.configured; if the file is not present, then the files under the directory will be added using slappd utility.\n\nFor example, to add an additional user and groups OU's that are defined in a custom.ldif file, add the following to /docker-entrypoint-initdb.d/custom.ldif:\n\n```\n dn: ou=users,dc=example,dc=com\n changetype: add\n objectClass: organizationalUnit\n objectClass: top\n ou: users\n\n dn: ou=groups,dc=example,dc=com\n changetype: add\n objectClass: organizationalUnit\n objectClass: top\n ou: groups\n```\n\nThen, create the following DockerFile:\n\n```\n FROM gcavalcante8808/openldap\n COPY custom.ldif /docker-entrypoint-initdb.d/custom.ldif\n```\n\nAnd build it:\n\n```\n docker build -t myopenldap .\n```\n\nDirectory Admin Operations\n--------------------------\n\nIf you want to pull configuration into the directory (everything under cn=config) you can copy your ldif to the container and then use the following shortcut:\n\n```\ndocker cp my.ldif :/my.ldif\ndocker exec /extra/add_config /my.ldif\n```\n\nWhere \"\" is the name or id of the container; in truth, `add_config` is just a ldapadd shortcut with cn=admin,cn=config privileges. Use with caution.\n\nTLS Support\n-----------\n\nIf you want to add TLS Support to your LDAP Server, you can use the add_tls command already present on the image, but before, you need to define the following environment variables:\n\n * LDAP_TLS_CA: path of the public certificate of the ca, eg. \"/certs/ca.crt\";\n * LDAP_TLS_CERT: path of the public certificate of the server, eg. \"/certs/server.crt\";\n * LDAP_TLS_KEY: path of the private key for the server certificate, eg. \"/certs/server.key\";\n\nAll files must be readable by the ldap user (uid 100) and key MUST not have a password. With all environment variables set and the container created, use the following commando to add TLS support:\n\n```\n docker exec /docker-entrypoint.sh add_tls\n```\n\nGroceries\n---------\n\nThere is some sweet resource available for those want to be productive :D\n\nAll resources presented here **are not idempotent**; you just need to activate 'em once. If you try to activate more than once, the ldap server will return errors.\n\nThe Overlays presented here have additional information available at: http://www.openldap.org/doc/admin24/overlays.html.\n\nFor now, we have support to 'activate' the following overlays/configurations using our entrypoint script:\n\n**MemberOf Overlay**\n\nUsefull to discover from what groups a user is a member (its the reverse of the GroupOfNames).\n\nYou can activate the memberof overlay by using the following command:\n\n```\n docker exec /docker-entrypoint.sh add_memberof\n```\n\n\n**RefInt Overlay**\n\nUpdate your groups when a dn is removed or updated automagically.\n\nYou can activate refint overlay by using the following command:\n\n```\n docker exec /docker-entrypoint.sh add_refint\n```\n\n**AuditLog**\n\nSome usefull logs for your config and main databases.\n\nYou can activate auditlog overlay by using the following command:\n\n```\n docker exec /docker-entrypoint.sh add_auditlog\n```\n\nAll logs will be placed at /tmp. In this case, we recommend that you mount a volume into /tmp to avoid storagedriver overcharge and avoid data loss.\n\nReplication Information\n-----------------------\n\nTo prepare your environments to replication through syncrepl, you need to define the following envinroment variables:\n\n * LDAP_ID: LDAP RID of the current openldap instance. Numeric, normally something like 001, 002, etc;\n\nWith this variable defined, use the following command to prepare your openldap to replication:\n\n```\n docker exec /docker-entrypoint.sh prepare_repl\n```\n\nAfter this, to link replication between openldap servers, submit ldif files with information about new servers as normal. LDIF Example (Adding a 2nd server, which address is myserver2.com):\n\nidmapping.ldif\n```\n\tdn: cn=config\n\tchangetype: modify\n\treplace: olcServerID\n\tolcServerID: 001 ldap://myserver1.com/\n\tolcServerID: 002 ldap://myserver2.com/\n```\n\nsyncreplconf.ldif\n```\ndn: olcDatabase={1}mdb,cn=config\nchangetype: modify\nadd: olcSyncrepl\nolcSyncrepl: rid=001 provider=ldap://myserver1.com/ binddn=\"cn=admin,dc=example,dc=com\n \" bindmethod=simple credentials=teste searchbase=\"dc=example,dc=com\" type=ref\n reshAndPersist retry=\"5 5 300 5\" timeout=1 rid=002 provider=ldap://myserver2.com/ bin\n ddn=\"cn=admin,dc=example,dc=com\" bindmethod=simple credentials=teste searchba\n se=\"dc=example,dc=com\" type=refreshAndPersist retry=\"5 5 300 5\" timeout=1\n```\n\n```\ndocker cp example.ldif /tmp/\ndocker exec ldapmodify -x -D cn=admin,cn=root -w ${LDAP_ADMIN_PASSWORD} -f /tmp/idmapping.ldif\ndocker exec ldapmodify -x -D cn=admin,cn=root -w ${LDAP_ADMIN_PASSWORD} -f /tmp/syncreplconf.ldif\n```\n\nCheck the logs to verify if the replication is working. More information at:\n\nhttps://www.openldap.org/doc/admin24/replication.html\n\nK8s Considerations\n------------------\n\nIf you need to use the image with Kubernetes, ensure to declare a pre-init container to use the `copy-to-volume.sh` script to copy openldap files into the target volume:\n\n```\n spec:\n initContainers:\n - name: config-data\n image: gcavalcante8808/openldap\n command: [\"/copy-ldap-data-to-volume.sh\"]\n volumeMounts:\n - mountPath: /data\n name: ldap-conf\n```\n\nThe volume used to hold the openldap data should mounted in the `/data` folder.\n\nChanging Configurations\n-----------------------\n\nTo change configurations from \"cn=config\" OLC, you need to use the DN \"cn=admin,cn=config\" with the same password provided in the LDAP_ADMIN_PASSWORD environment variable.\n\nK8S Support\n-----------\n\nThe K8S folder have an working deployment/service that is roughly mapped the docker-compose.yaml. The `ldap-cm-env.yaml` have the default configuration for the openldap including main admin.\n\nAuthor\n------\n\nAuthor: Gabriel Abdalla Cavalcante Silva (gabriel.cavalcante88@gmail.com)\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",176043181,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},"content_type","creator",637922,"full_size",5322382,"id",11092937,"images",[97],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},"architecture","amd64","digest","sha256:bc344588eb213fa33d3578c8b9c21d5988c6242c3af7e37a5a21442f7f559d92","features","","last_pulled","2026-09-21T16:34:38.235129605Z","last_pushed","2018-12-25T13:22:24Z","os","linux","os_features","os_version","size","variant","2018-12-25T13:22:23.475377Z","last_updater","last_updater_username","media_type","latest","repository",1503353,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":136,"_143":144,"_132":153,"_154":11},{"_36":137,"_38":138,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":139,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":140,"_75":17,"_76":142,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":141},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_145":60,"_146":-5,"_147":-5,"_148":149},"count","next","previous","results",[150],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":151,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},[152],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},[],"canDeleteTags","actionData","errors"]

gcavalcante8808/openldap

Tags for gcavalcante8808/openldap