Skip to content

viaacode/docker-openldap

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

docker-openldap

A generic openldap container.

Build Arguments

  • LdapPort: (optional, default 8389) Port on which the slapd daemon listens. Must be unprivilged.

How to use

$ docker run -e LDAP_SUFFIX='dc=example,dc=org' -e LDAP_ROOT_ASSWORD=secret -d %%IMAGE%%

This creates an empty backend for the given suffix with the root DN set to cn=root,<suffix>. The container runs unpriviliged and exposes unpriviliged port 8389. A custom port can be specified during build using the build argument LdapPort.

When LDAP_SUFFIX is not set or empty, no backend will be created. This allows to create a custom backend by dropping an ldif file in /docker-entrypoint-init/ (see below).

The container can be run as any user as long as the user's gid=0.

Customize or extend

For additional initialization, add one or more .ldiffiles under /docker-entrypoint-init/. They will be executed before starting the service. (example)

If the ldif file contains a changetype attribute, it will be executed by ldapmodify, otherwise it will be executed by ldapadd.

When the initialization is complete, the container starts listening on the exposed port.