alchen99/test-openldap repository overview

⁠OpenLDAP Docker Image for testing

This fork adds more LDAP groups and more tools to the Docker container.

This image provides an OpenLDAP Server for testing LDAP applications, i.e. unit tests. The server is initialized with the example domain planetexpress.com with data from the Futurama Wiki⁠.

Parts of the image are based on the work from Nick Stenning docker-slapd⁠ and Bertrand Gouny docker-openldap⁠.

The Flask extension flask-ldapconn⁠ use this image for unit tests.

⁠Features

• Initialized with data from Futurama
• Support for TLS (snake oil cert on build)
• memberOf overlay support
• MS-AD Style Groups support
• ~124MB images size (~40MB compressed)

⁠Usage

docker pull alchen99/test-openldap
docker run --privileged -d -p 389:389 alchen99/test-openldap

⁠Exposed ports

• 389
• 636

⁠Exposed volumes

• /etc/ldap/slapd.d
• /etc/ldap/ssl
• /var/lib/ldap
• /run/slapd

⁠LDAP structure

⁠dc=planetexpress,dc=com

⁠ou=people,dc=planetexpress,dc=com

⁠cn=Hubert J. Farnsworth,ou=people,dc=planetexpress,dc=com

⁠cn=Philip J. Fry,ou=people,dc=planetexpress,dc=com

⁠cn=John A. Zoidberg,ou=people,dc=planetexpress,dc=com

⁠cn=Hermes Conrad,ou=people,dc=planetexpress,dc=com

⁠cn=Turanga Leela,ou=people,dc=planetexpress,dc=com

⁠cn=Bender Bending Rodríguez,ou=people,dc=planetexpress,dc=com

⁠cn=Amy Wong+sn=Kroker,ou=people,dc=planetexpress,dc=com

Amy has a multi-valued DN

⁠cn=dir_mgr,ou=people,dc=planetexpress,dc=com

⁠cn=admin,ou=people,dc=planetexpress,dc=com

⁠cn=crew,ou=people,dc=planetexpress,dc=com

⁠cn=intern,ou=people,dc=planetexpress,dc=com

⁠cn=ship,ou=people,dc=planetexpress,dc=com

⁠LDAP Search Tips

• Search for all groups

  ldapsearch -LLL -h localhost -p 389 \
  -D 'cn=admin,dc=planetexpress,dc=com' \
  -w GoodNewsEveryone \
  -b 'ou=people,dc=planetexpress,dc=com' \
  '(&(objectclass=Group))' dn
  

  Copy

• Search for groups a user is a member of

  ldapsearch -LLL -h localhost -p 389 \
  -D 'cn=admin,dc=planetexpress,dc=com' \
  -w GoodNewsEveryone \
  -b 'ou=people,dc=planetexpress,dc=com' \
  '(&(description=Human)(sn=Fry)(objectclass=inetorgperson))' dn memberof
  

  Copy

  Will result in the following:

  dn: cn=Philip J. Fry,ou=people,dc=planetexpress,dc=com
  memberOf: cn=ship_crew,ou=people,dc=planetexpress,dc=com
  memberOf: cn=ship,ou=people,dc=planetexpress,dc=com
  

  Copy

⁠JAAS configuration

In case you want to use this OpenLDAP server for testing with a Java-based application using JAAS and the LdapLoginModule, here's a working configuration file you can use to connect.

other {
  com.sun.security.auth.module.LdapLoginModule REQUIRED
    userProvider="ldap://localhost/ou=people,dc=planetexpress,dc=com"
    userFilter="(&(uid={USERNAME})(objectClass=inetOrgPerson))"
    useSSL=false
    java.naming.security.principal="cn=admin,dc=planetexpress,dc=com"
    java.naming.security.credentials="GoodNewsEveryone"
    debug=true
    ;
};

This config uses the admin credentials to connect to the OpenLDAP server and to submit the search query for the user that enters their credentials. As username the uid attribute of each entry is used.