jinkanhq/openldap

By jinkanhq

•Updated about 4 years ago

Out of box OpenLDAP docker image based on Debian Stable

Image

589

Overview Tags

jinkanhq/openldap repository overview

⁠OpenLDAP Docker Image

OpenLDAP Software is an open source implementation of the Lightweight Directory Access Protocol.

Out of box OpenLDAP docker image based on Debian Stable with two releases.

Feature Release: latest
LTS Release: lts

⁠Example

TLS enabled with global ssf=128.

version: '3'

services:
  openldap:
    hostname: openldap
    image: jinkanhq/openldap
    environment:
      - LDAP_TLS_ENABLED=true
      - LDAP_TLS_CA_FILE=/certs/ca.crt
      - LDAP_TLS_CRT_FILE=/certs/server.crt
      - LDAP_TLS_KEY_FILE=/certs/server.pem
      - LDAP_TLS_DHPARAM_FILE=/certs/dhparam
      - LDAP_DOMAIN=jinkan.org
    ports:
      - "636:636"
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro
      - ./certs:/certs:ro
      - ./config:/usr/local/etc/slapd.d
      - ./data:/usr/local/var/openldap-data

Without TLS enabled.

version: '3'

services:
  openldap:
    hostname: openldap
    image: jinkanhq/openldap
    environment:
      - LDAP_TLS_ENABLED=true
      - LDAP_TLS_CA_FILE=/certs/ca.crt
      - LDAP_TLS_CRT_FILE=/certs/server.crt
      - LDAP_TLS_KEY_FILE=/certs/server.pem
      - LDAP_TLS_DHPARAM_FILE=/certs/dhparam
      - LDAP_DOMAIN=jinkan.org
    ports:
      - "389:389"
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - ./config:/usr/local/etc/slapd.d
      - ./data:/usr/local/var/openldap-data

⁠Environment Variables

⁠Basic

Variable	Description	Default
DEBUG	Entrypoint debug mode	`false`
LDAP_ORGANIZATION	Organization name	`Example`
LDAP_DOMAIN	Organization domain	`example.com`
LDAP_ROOT_CN	Root common name	`admin`
LDAP_ROOT_PASSWORD	Root password	`admin`
LDAP_DEBUG_LEVEL	Debug level⁠	`stats`

⁠TLS

Variable	Description	Default
LDAP_TLS_ENABLED	Entrypoint debug mode	`false`
LDAP_TLS_CA_FILE	CA certificate file	`/etc/ssl/certs/ca-certificates.crt`
LDAP_TLS_CRT_FILE	Server certificate file
LDAP_TLS_KEY_FILE	Server private key file
LDAP_TLS_DHPARAM_FILE	DH parameter file	See "Defaults"⁠
LDAP_TLS_CIPHER_SUITE	OpenSSL cipher suite	See "Defaults"⁠
LDAP_TLS_SSF	Security strength factor⁠	`ssf=128`
LDAP_TLS_VERIFY_CLIENT	What checks to perform on client certificates	`never`

⁠TLS Defaults

These defaults follow Mozilla⁠'s recommendations. The Intermediate configuration is chosen as defaults for general purpose.

⁠DH Parameter

https://ssl-config.mozilla.org/ffdhe2048.txt is saved in /usr/local/etc/openldap/dhparam as the default DH parameter.

⁠Cipher Suite

The following is the recommended cipher suite in OpenSSL format.

ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA38

⁠Overlays

Overlays are components that provide hooks to functions analogous to those provided by backends. All official overlays are compiled statically into this image.

⁠Reverse Group Membership Maintenance

The memberOf overlay provides maintenance of the list of groups an entry is a member of. It updates an attribute on entry whenever changes occur to the membership.

Variable	Description	Default
LDAP_MEMBEROF_ENABLED	Enable the `memberOf` overlay	`false`
LDAP_MEMBEROF_GROUP_OC	The `objectClass` of group	`groupOfUniqueNames`
LDAP_MEMBEROF_MEMBER_AD	The attribute name of group contains member names	`uniqueMember`
LDAP_MEMBEROF_MEMBEROF_AD	The attribute name of member entry indicates membership	`Example`
LDAP_MEMBEROF_DN	`modifiersName` for membership modifications	Identical to `LDAP_ROOT_CN`
LDAP_MEMBEROF_DANGLING	Behavior to handle dangling reference	`ignore`
LDAP_MEMBEROF_REFINT	Whether to preserve referential integrity	`FALSE`

For details, see slapo-memberof(5) and OpenLDAP documentation⁠.

⁠Contact

For more detailed documentation see https://github.com/jinkanhq/docker-openldap⁠

Please report issues on https://github.com/jinkanhq/docker-openldap/issues⁠

Included OpenLDAP

Tag summary

Recent tags

Content type

Image

Digest

sha256:283422a9b…

Size

109 MB

Last updated

about 4 years ago

docker pull jinkanhq/openldap